iovisor / iovisor/bcc

filesslower crashes on kernel 5.8.0: cannot attach kprobe, probe entry may not exist

Open
#3,045 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
22.7k
Forks
4.1k
Avg merge
10d 4h
Merged PRs (30d)
3

Description

Somewhat similar to #3023

kernel-5.8.0-1.fc33.x86_64
bcc-tools-0.15.0-6.fc33.x86_64

```
# /usr/share/bcc/tools/fileslower
cannot attach kprobe, probe entry may not exist
Traceback (most recent call last):
File "/usr/share/bcc/tools/fileslower", line 202, in
b.attach_kprobe(event="__vfs_read", fn_name="trace_read_entry")
File "/usr/lib/python3.9/site-packages/bcc/__init__.py", line 676, in attach_kprobe
raise Exception("Failed to attach BPF program %s to kprobe %s" %
Exception: Failed to attach BPF program b'trace_read_entry' to kprobe b'__vfs_read'

# grep vfs_read /proc/kallsyms
ffffffff83323770 T vfs_read
ffffffff83324580 T vfs_readv
ffffffff83336e60 T vfs_readlink
ffffffff844caf40 r __ksymtab_vfs_readlink
ffffffff844e3462 r __kstrtabns_vfs_readlink
ffffffff844e65f7 r __kstrtab_vfs_readlink
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.