bpf/progs/profiler.inc.h

192 		parent = BPF_CORE_READ(parent, real_parent);
195 		ppid = BPF_CORE_READ(parent, tgid);
200 			BPF_CORE_READ(parent, self_exec_id);
202 			BPF_CORE_READ(parent, start_time);
221 						  BPF_CORE_READ(cgroup_node, name));
229 		cgroup_node = BPF_CORE_READ(cgroup_node, parent);
240 		return BPF_CORE_READ(node52, id.ino);
243 		return (u64)BPF_CORE_READ(node, id);
257 		BPF_CORE_READ(task, nsproxy, cgroup_ns, root_cset, dfl_cgrp, kn);
258 	struct kernfs_node* proc_kernfs = BPF_CORE_READ(task, cgroups, dfl_cgrp, kn);
269 				BPF_CORE_READ(task, cgroups, subsys[i]);
271 				int subsys_id = BPF_CORE_READ(subsys, ss, id);
273 					proc_kernfs = BPF_CORE_READ(subsys, cgroup, kn);
274 					root_kernfs = BPF_CORE_READ(subsys, ss, root, kf_root, kn);
287 			BPF_CORE_READ(root_kernfs, iattr, ia_mtime.tv_nsec);
289 			BPF_CORE_READ(proc_kernfs, iattr, ia_mtime.tv_nsec);
292 			(struct kernfs_iattrs___52*)BPF_CORE_READ(root_kernfs, iattr);
294 			BPF_CORE_READ(root_iattr, ia_iattr.ia_mtime.tv_nsec);
297 			(struct kernfs_iattrs___52*)BPF_CORE_READ(proc_kernfs, iattr);
299 			BPF_CORE_READ(proc_iattr, ia_iattr.ia_mtime.tv_nsec);
308 					  BPF_CORE_READ(root_kernfs, name));
316 					  BPF_CORE_READ(proc_kernfs, name));
342 	metadata->exec_id = BPF_CORE_READ(task, self_exec_id);
343 	metadata->start_time = BPF_CORE_READ(task, start_time);
491 						  BPF_CORE_READ(filp_dentry, d_name.name));
498 		parent_dentry = BPF_CORE_READ(filp_dentry, d_parent);
515 		u64 dir_ino = BPF_CORE_READ(filp_dentry, d_inode, i_ino);
520 		parent_dentry = BPF_CORE_READ(filp_dentry, d_parent);
532 	u32 dev_id = BPF_CORE_READ(file_dentry, d_sb, s_dev);
539 	u64 ino = BPF_CORE_READ(file_dentry, d_inode, i_ino);
544 		if (!is_ancestor_in_allowed_inodes(BPF_CORE_READ(file_dentry, d_parent)))
583 					  BPF_CORE_READ(filp, f_path.dentry,
630 	struct kernfs_node* proc_kernfs = BPF_CORE_READ(task, cgroups, dfl_cgrp, kn);
659 							  BPF_CORE_READ(proc_kernfs, name));
686 	u64 inode = BPF_CORE_READ(bprm, file, f_inode, i_ino);
711 	struct task_struct* parent_task = BPF_CORE_READ(task, real_parent);
712 	proc_exec_data->parent_pid = BPF_CORE_READ(parent_task, tgid);
713 	proc_exec_data->parent_uid = BPF_CORE_READ(parent_task, real_cred, uid.val);
714 	proc_exec_data->parent_exec_id = BPF_CORE_READ(parent_task, self_exec_id);
715 	proc_exec_data->parent_start_time = BPF_CORE_READ(parent_task, start_time);
717 	const char* filename = BPF_CORE_READ(bprm, filename);
725 	void* arg_start = (void*)BPF_CORE_READ(task, mm, arg_start);
726 	void* arg_end = (void*)BPF_CORE_READ(task, mm, arg_end);
736 		void* env_start = (void*)BPF_CORE_READ(task, mm, env_start);
737 		void* env_end = (void*)BPF_CORE_READ(task, mm, env_end);
767 	unsigned int flags = BPF_CORE_READ(filp, f_flags);
772 	struct inode* file_inode = BPF_CORE_READ(filp, f_inode);
773 	umode_t mode = BPF_CORE_READ(file_inode, i_mode);
778 	struct dentry* filp_dentry = BPF_CORE_READ(filp, f_path.dentry);
950 					      BPF_CORE_READ(child, pid), fork_data->payload);
951 	fork_data->parent_pid = BPF_CORE_READ(parent, pid);
952 	fork_data->parent_exec_id = BPF_CORE_READ(parent, self_exec_id);
953 	fork_data->parent_start_time = BPF_CORE_READ(parent, start_time);