libbpf-tools: 'mount_entry': failed to attach to perf_event FD 12: Permission denied

Hi team,

I'm trying to run mountsnoop on arm64 target, but failed as below,

```
root@tegra-ubuntu:/ota/test# ./mountsnoop -v
libbpf: loading object 'mountsnoop_bpf' from buffer
libbpf: elf: section(1) .text, size 960, link 0, flags 6, type=1
libbpf: sec '.text': found program 'probe_exit' at insn offset 0 (0 bytes), code size 120 insns (960 bytes)
libbpf: elf: section(2) tracepoint/syscalls/sys_enter_mount, size 352, link 0, flags 6, type=1
libbpf: sec 'tracepoint/syscalls/sys_enter_mount': found program 'mount_entry' at insn offset 0 (0 bytes), code size 44 insns (352 bytes)
libbpf: elf: section(3) tracepoint/syscalls/sys_exit_mount, size 32, link 0, flags 6, type=1
libbpf: sec 'tracepoint/syscalls/sys_exit_mount': found program 'mount_exit' at insn offset 0 (0 bytes), code size 4 insns (32 bytes)
libbpf: elf: section(4) tracepoint/syscalls/sys_enter_umount, size 304, link 0, flags 6, type=1
libbpf: sec 'tracepoint/syscalls/sys_enter_umount': found program 'umount_entry' at insn offset 0 (0 bytes), code size 38 insns (304 bytes)
libbpf: elf: section(5) tracepoint/syscalls/sys_exit_umount, size 32, link 0, flags 6, type=1
libbpf: sec 'tracepoint/syscalls/sys_exit_umount': found program 'umount_exit' at insn offset 0 (0 bytes), code size 4 insns (32 bytes)
libbpf: elf: section(6) .rodata, size 4, link 0, flags 2, type=1
libbpf: elf: section(7) license, size 13, link 0, flags 3, type=1
libbpf: license of mountsnoop_bpf is Dual BSD/GPL
libbpf: elf: section(8) .maps, size 88, link 0, flags 3, type=1
libbpf: elf: section(9) .BTF, size 26557, link 0, flags 0, type=1
libbpf: elf: section(10) .BTF.ext, size 2076, link 0, flags 0, type=1
libbpf: elf: section(11) .symtab, size 720, link 20, flags 0, type=2
libbpf: elf: section(12) .rel.text, size 64, link 11, flags 0, type=9
libbpf: elf: section(13) .reltracepoint/syscalls/sys_enter_mount, size 32, link 11, flags 0, type=9
libbpf: elf: section(14) .reltracepoint/syscalls/sys_exit_mount, size 16, link 11, flags 0, type=9
libbpf: elf: section(15) .reltracepoint/syscalls/sys_enter_umount, size 32, link 11, flags 0, type=9
libbpf: elf: section(16) .reltracepoint/syscalls/sys_exit_umount, size 16, link 11, flags 0, type=9
libbpf: looking for externs among 30 symbols...
libbpf: collected 0 externs total
libbpf: map 'args': at sec_idx 8, offset 0.
libbpf: map 'args': found type = 1.
libbpf: map 'args': found key [9], sz = 4.
libbpf: map 'args': found value [12], sz = 56.
libbpf: map 'args': found max_entries = 10240.
libbpf: map 'heap': at sec_idx 8, offset 32.
libbpf: map 'heap': found type = 6.
libbpf: map 'heap': found key [3], sz = 4.
libbpf: map 'heap': found value [25], sz = 8768.
libbpf: map 'heap': found max_entries = 1.
libbpf: map 'events': at sec_idx 8, offset 64.
libbpf: map 'events': found type = 4.
libbpf: map 'events': found key_size = 4.
libbpf: map 'events': found value_size = 4.
libbpf: map 'mountsno.rodata' (global data): at sec_idx 6, offset 0, flags 480.
libbpf: map 3 is "mountsno.rodata"
libbpf: sec '.rel.text': collecting relocation for section(1) '.text'
libbpf: sec '.rel.text': relo #0: insn #9 against 'args'
libbpf: prog 'probe_exit': found map 0 (args, sec 8, off 0) for insn #9
libbpf: sec '.rel.text': relo #1: insn #16 against 'heap'
libbpf: prog 'probe_exit': found map 1 (heap, sec 8, off 32) for insn #16
libbpf: sec '.rel.text': relo #2: insn #107 against 'events'
libbpf: prog 'probe_exit': found map 2 (events, sec 8, off 64) for insn #107
libbpf: sec '.rel.text': relo #3: insn #116 against 'args'
libbpf: prog 'probe_exit': found map 0 (args, sec 8, off 0) for insn #116
libbpf: sec '.reltracepoint/syscalls/sys_enter_mount': collecting relocation for section(2) 'tracepoint/syscalls/sys_enter_mount'
libbpf: sec '.reltracepoint/syscalls/sys_enter_mount': relo #0: insn #17 against 'target_pid'
libbpf: prog 'mount_entry': found data map 3 (mountsno.rodata, sec 6, off 0) for insn 17
libbpf: sec '.reltracepoint/syscalls/sys_enter_mount': relo #1: insn #38 against 'args'
libbpf: prog 'mount_entry': found map 0 (args, sec 8, off 0) for insn #38
libbpf: sec '.reltracepoint/syscalls/sys_exit_mount': collecting relocation for section(3) 'tracepoint/syscalls/sys_exit_mount'
libbpf: sec '.reltracepoint/syscalls/sys_exit_mount': relo #0: insn #1 against '.text'
libbpf: sec '.reltracepoint/syscalls/sys_enter_umount': collecting relocation for section(4) 'tracepoint/syscalls/sys_enter_umount'
libbpf: sec '.reltracepoint/syscalls/sys_enter_umount': relo #0: insn #12 against 'target_pid'
libbpf: prog 'umount_entry': found data map 3 (mountsno.rodata, sec 6, off 0) for insn 12
libbpf: sec '.reltracepoint/syscalls/sys_enter_umount': relo #1: insn #32 against 'args'
libbpf: prog 'umount_entry': found map 0 (args, sec 8, off 0) for insn #32
libbpf: sec '.reltracepoint/syscalls/sys_exit_umount': collecting relocation for section(5) 'tracepoint/syscalls/sys_exit_umount'
libbpf: sec '.reltracepoint/syscalls/sys_exit_umount': relo #0: insn #1 against '.text'
libbpf: loading kernel BTF '/sys/kernel/btf/vmlinux': 0
libbpf: map 'args': created successfully, fd=4
libbpf: map 'heap': created successfully, fd=5
libbpf: map 'events': setting size to 11
libbpf: map 'events': created successfully, fd=6
libbpf: map 'mountsno.rodata': created successfully, fd=7
libbpf: sec 'tracepoint/syscalls/sys_enter_mount': found 5 CO-RE relocations
libbpf: CO-RE relocating [36] struct trace_event_raw_sys_enter: found target candidate [5156] struct trace_event_raw_sys_enter in [vmlinux]
libbpf: prog 'mount_entry': relo #0: [36] struct trace_event_raw_sys_enter.args[4] (0:2:4 @ offset 48)
libbpf: prog 'mount_entry': relo #0: matching candidate #0 [5156] struct trace_event_raw_sys_enter.args[4] (0:2:4 @ offset 56)
libbpf: prog 'mount_entry': relo #0: patched insn #0 (LDX/ST/STX) off 48 -> 56
libbpf: prog 'mount_entry': relo #1: [36] struct trace_event_raw_sys_enter.args[3] (0:2:3 @ offset 40)
libbpf: prog 'mount_entry': relo #1: matching candidate #0 [5156] struct trace_event_raw_sys_enter.args[3] (0:2:3 @ offset 48)
libbpf: prog 'mount_entry': relo #1: patched insn #2 (LDX/ST/STX) off 40 -> 48
libbpf: prog 'mount_entry': relo #2: [36] struct trace_event_raw_sys_enter.args[2] (0:2:2 @ offset 32)
libbpf: prog 'mount_entry': relo #2: matching candidate #0 [5156] struct trace_event_raw_sys_enter.args[2] (0:2:2 @ offset 40)
libbpf: prog 'mount_entry': relo #2: patched insn #4 (LDX/ST/STX) off 32 -> 40
libbpf: prog 'mount_entry': relo #3: [36] struct trace_event_raw_sys_enter.args[1] (0:2:1 @ offset 24)
libbpf: prog 'mount_entry': relo #3: matching candidate #0 [5156] struct trace_event_raw_sys_enter.args[1] (0:2:1 @ offset 32)
libbpf: prog 'mount_entry': relo #3: patched insn #5 (LDX/ST/STX) off 24 -> 32
libbpf: prog 'mount_entry': relo #4: [36] struct trace_event_raw_sys_enter.args[0] (0:2:0 @ offset 16)
libbpf: prog 'mount_entry': relo #4: matching candidate #0 [5156] struct trace_event_raw_sys_enter.args[0] (0:2:0 @ offset 24)
libbpf: prog 'mount_entry': relo #4: patched insn #6 (LDX/ST/STX) off 16 -> 24
libbpf: sec 'tracepoint/syscalls/sys_exit_mount': found 1 CO-RE relocations
libbpf: CO-RE relocating [47] struct trace_event_raw_sys_exit: found target candidate [5157] struct trace_event_raw_sys_exit in [vmlinux]
libbpf: prog 'mount_exit': relo #0: [47] struct trace_event_raw_sys_exit.ret (0:2 @ offset 16)
libbpf: prog 'mount_exit': relo #0: matching candidate #0 [5157] struct trace_event_raw_sys_exit.ret (0:2 @ offset 24)
libbpf: prog 'mount_exit': relo #0: patched insn #0 (LDX/ST/STX) off 16 -> 24
libbpf: sec '.text': found 3 CO-RE relocations
libbpf: CO-RE relocating [53] struct task_struct: found target candidate [148] struct task_struct in [vmlinux]
libbpf: prog 'probe_exit': relo #0: [53] struct task_struct.nsproxy (0:92 @ offset 1672)
libbpf: prog 'probe_exit': relo #0: matching candidate #0 [148] struct task_struct.nsproxy (0:115 @ offset 1856)
libbpf: prog 'probe_exit': relo #0: patched insn #36 (ALU/ALU64) imm 1672 -> 1856
libbpf: CO-RE relocating [315] struct nsproxy: found target candidate [453] struct nsproxy in [vmlinux]
libbpf: prog 'probe_exit': relo #1: [315] struct nsproxy.mnt_ns (0:3 @ offset 24)
libbpf: prog 'probe_exit': relo #1: matching candidate #0 [453] struct nsproxy.mnt_ns (0:3 @ offset 24)
libbpf: prog 'probe_exit': relo #1: patched insn #46 (ALU/ALU64) imm 24 -> 24
libbpf: CO-RE relocating [321] struct mnt_namespace: found target candidate [27773] struct mnt_namespace in [vmlinux]
libbpf: prog 'probe_exit': relo #2: [321] struct mnt_namespace.ns.inum (0:1:2 @ offset 24)
libbpf: prog 'probe_exit': relo #2: matching candidate #0 [27773] struct mnt_namespace.ns.inum (0:1:2 @ offset 24)
libbpf: prog 'probe_exit': relo #2: patched insn #52 (ALU/ALU64) imm 24 -> 24
libbpf: sec 'tracepoint/syscalls/sys_enter_umount': found 2 CO-RE relocations
libbpf: prog 'umount_entry': relo #0: [36] struct trace_event_raw_sys_enter.args[1] (0:2:1 @ offset 24)
libbpf: prog 'umount_entry': relo #0: matching candidate #0 [5156] struct trace_event_raw_sys_enter.args[1] (0:2:1 @ offset 32)
libbpf: prog 'umount_entry': relo #0: patched insn #0 (LDX/ST/STX) off 24 -> 32
libbpf: prog 'umount_entry': relo #1: [36] struct trace_event_raw_sys_enter.args[0] (0:2:0 @ offset 16)
libbpf: prog 'umount_entry': relo #1: matching candidate #0 [5156] struct trace_event_raw_sys_enter.args[0] (0:2:0 @ offset 24)
libbpf: prog 'umount_entry': relo #1: patched insn #1 (LDX/ST/STX) off 16 -> 24
libbpf: sec 'tracepoint/syscalls/sys_exit_umount': found 1 CO-RE relocations
libbpf: prog 'umount_exit': relo #0: [47] struct trace_event_raw_sys_exit.ret (0:2 @ offset 16)
libbpf: prog 'umount_exit': relo #0: matching candidate #0 [5157] struct trace_event_raw_sys_exit.ret (0:2 @ offset 24)
libbpf: prog 'umount_exit': relo #0: patched insn #0 (LDX/ST/STX) off 16 -> 24
libbpf: prog 'mount_exit': added 120 insns from sub-prog 'probe_exit'
libbpf: prog 'mount_exit': insn #1 relocated, imm 2 points to subprog 'probe_exit' (now at 4 offset)
libbpf: prog 'umount_exit': added 120 insns from sub-prog 'probe_exit'
libbpf: prog 'umount_exit': insn #1 relocated, imm 2 points to subprog 'probe_exit' (now at 4 offset)
libbpf: prog 'mount_entry': failed to attach to perf_event FD 12: Permission denied
libbpf: prog 'mount_entry': failed to attach to tracepoint 'syscalls/sys_enter_mount': Permission denied
libbpf: prog 'mount_entry': failed to auto-attach: -13
failed to attach BPF programs: -13

```

How should I get start with this error? Thanks.

Start with the reported `./mountsnoop -v` output on the arm64 target, focusing on the `mount_entry` tracepoint attach failure and permission error. Determine the environment or privilege condition that prevents the BPF programs from attaching, then document a reproducible resolution for running mountsnoop successfully.

Written by the indexing model from the issue text.