4 * Builtin 'trace' command:
6 * Display a continuously updated trace of any workload, CPU, specific PID,
7 * system wide, etc. Default format is loosely strace like, but any other
8 * event may be specified using --event.
10 * Copyright (C) 2012, 2013, 2014, 2015 Red Hat Inc, Arnaldo Carvalho de Melo <acme@redhat.com>
12 * Initially based on the 'trace' prototype by Thomas Gleixner:
14 * http://lwn.net/Articles/415728/ ("Announcing a new utility: 'trace'")
16 * Released under the GPL v2. (and only v2, not any later version)
19 #include <traceevent/event-parse.h>
20 #include <api/fs/tracing_path.h>
22 #include "util/color.h"
23 #include "util/debug.h"
24 #include "util/evlist.h"
25 #include <subcmd/exec-cmd.h>
26 #include "util/machine.h"
27 #include "util/session.h"
28 #include "util/thread.h"
29 #include <subcmd/parse-options.h>
30 #include "util/strlist.h"
31 #include "util/intlist.h"
32 #include "util/thread_map.h"
33 #include "util/stat.h"
34 #include "trace-event.h"
35 #include "util/parse-events.h"
36 #include "util/bpf-loader.h"
37 #include "callchain.h"
38 #include "syscalltbl.h"
39 #include "rb_resort.h"
41 #include <libaudit.h> /* FIXME: Still needed for audit_errno_to_name */
43 #include <linux/err.h>
44 #include <linux/filter.h>
45 #include <linux/audit.h>
46 #include <sys/ptrace.h>
47 #include <linux/random.h>
48 #include <linux/stringify.h>
51 # define O_CLOEXEC 02000000
55 struct perf_tool tool;
56 struct syscalltbl *sctbl;
59 struct syscall *table;
61 struct perf_evsel *sys_enter,
65 struct record_opts opts;
66 struct perf_evlist *evlist;
68 struct thread *current;
71 unsigned long nr_events;
72 struct strlist *ev_qualifier;
77 struct intlist *tid_list;
78 struct intlist *pid_list;
83 double duration_filter;
89 unsigned int max_stack;
90 unsigned int min_stack;
91 bool not_ev_qualifier;
95 bool multiple_threads;
101 bool kernel_syscallchains;
111 u64 (*integer)(struct tp_field *field, struct perf_sample *sample);
112 void *(*pointer)(struct tp_field *field, struct perf_sample *sample);
116 #define TP_UINT_FIELD(bits) \
117 static u64 tp_field__u##bits(struct tp_field *field, struct perf_sample *sample) \
120 memcpy(&value, sample->raw_data + field->offset, sizeof(value)); \
129 #define TP_UINT_FIELD__SWAPPED(bits) \
130 static u64 tp_field__swapped_u##bits(struct tp_field *field, struct perf_sample *sample) \
133 memcpy(&value, sample->raw_data + field->offset, sizeof(value)); \
134 return bswap_##bits(value);\
137 TP_UINT_FIELD__SWAPPED(16);
138 TP_UINT_FIELD__SWAPPED(32);
139 TP_UINT_FIELD__SWAPPED(64);
141 static int tp_field__init_uint(struct tp_field *field,
142 struct format_field *format_field,
145 field->offset = format_field->offset;
147 switch (format_field->size) {
149 field->integer = tp_field__u8;
152 field->integer = needs_swap ? tp_field__swapped_u16 : tp_field__u16;
155 field->integer = needs_swap ? tp_field__swapped_u32 : tp_field__u32;
158 field->integer = needs_swap ? tp_field__swapped_u64 : tp_field__u64;
167 static void *tp_field__ptr(struct tp_field *field, struct perf_sample *sample)
169 return sample->raw_data + field->offset;
172 static int tp_field__init_ptr(struct tp_field *field, struct format_field *format_field)
174 field->offset = format_field->offset;
175 field->pointer = tp_field__ptr;
182 struct tp_field args, ret;
186 static int perf_evsel__init_tp_uint_field(struct perf_evsel *evsel,
187 struct tp_field *field,
190 struct format_field *format_field = perf_evsel__field(evsel, name);
192 if (format_field == NULL)
195 return tp_field__init_uint(field, format_field, evsel->needs_swap);
198 #define perf_evsel__init_sc_tp_uint_field(evsel, name) \
199 ({ struct syscall_tp *sc = evsel->priv;\
200 perf_evsel__init_tp_uint_field(evsel, &sc->name, #name); })
202 static int perf_evsel__init_tp_ptr_field(struct perf_evsel *evsel,
203 struct tp_field *field,
206 struct format_field *format_field = perf_evsel__field(evsel, name);
208 if (format_field == NULL)
211 return tp_field__init_ptr(field, format_field);
214 #define perf_evsel__init_sc_tp_ptr_field(evsel, name) \
215 ({ struct syscall_tp *sc = evsel->priv;\
216 perf_evsel__init_tp_ptr_field(evsel, &sc->name, #name); })
218 static void perf_evsel__delete_priv(struct perf_evsel *evsel)
221 perf_evsel__delete(evsel);
224 static int perf_evsel__init_syscall_tp(struct perf_evsel *evsel, void *handler)
226 evsel->priv = malloc(sizeof(struct syscall_tp));
227 if (evsel->priv != NULL) {
228 if (perf_evsel__init_sc_tp_uint_field(evsel, id))
231 evsel->handler = handler;
242 static struct perf_evsel *perf_evsel__syscall_newtp(const char *direction, void *handler)
244 struct perf_evsel *evsel = perf_evsel__newtp("raw_syscalls", direction);
246 /* older kernel (e.g., RHEL6) use syscalls:{enter,exit} */
248 evsel = perf_evsel__newtp("syscalls", direction);
253 if (perf_evsel__init_syscall_tp(evsel, handler))
259 perf_evsel__delete_priv(evsel);
263 #define perf_evsel__sc_tp_uint(evsel, name, sample) \
264 ({ struct syscall_tp *fields = evsel->priv; \
265 fields->name.integer(&fields->name, sample); })
267 #define perf_evsel__sc_tp_ptr(evsel, name, sample) \
268 ({ struct syscall_tp *fields = evsel->priv; \
269 fields->name.pointer(&fields->name, sample); })
273 struct thread *thread;
283 const char **entries;
286 #define DEFINE_STRARRAY(array) struct strarray strarray__##array = { \
287 .nr_entries = ARRAY_SIZE(array), \
291 #define DEFINE_STRARRAY_OFFSET(array, off) struct strarray strarray__##array = { \
293 .nr_entries = ARRAY_SIZE(array), \
297 static size_t __syscall_arg__scnprintf_strarray(char *bf, size_t size,
299 struct syscall_arg *arg)
301 struct strarray *sa = arg->parm;
302 int idx = arg->val - sa->offset;
304 if (idx < 0 || idx >= sa->nr_entries)
305 return scnprintf(bf, size, intfmt, arg->val);
307 return scnprintf(bf, size, "%s", sa->entries[idx]);
310 static size_t syscall_arg__scnprintf_strarray(char *bf, size_t size,
311 struct syscall_arg *arg)
313 return __syscall_arg__scnprintf_strarray(bf, size, "%d", arg);
316 #define SCA_STRARRAY syscall_arg__scnprintf_strarray
318 #if defined(__i386__) || defined(__x86_64__)
320 * FIXME: Make this available to all arches as soon as the ioctl beautifier
321 * gets rewritten to support all arches.
323 static size_t syscall_arg__scnprintf_strhexarray(char *bf, size_t size,
324 struct syscall_arg *arg)
326 return __syscall_arg__scnprintf_strarray(bf, size, "%#x", arg);
329 #define SCA_STRHEXARRAY syscall_arg__scnprintf_strhexarray
330 #endif /* defined(__i386__) || defined(__x86_64__) */
332 static size_t syscall_arg__scnprintf_fd(char *bf, size_t size,
333 struct syscall_arg *arg);
335 #define SCA_FD syscall_arg__scnprintf_fd
337 static size_t syscall_arg__scnprintf_fd_at(char *bf, size_t size,
338 struct syscall_arg *arg)
343 return scnprintf(bf, size, "CWD");
345 return syscall_arg__scnprintf_fd(bf, size, arg);
348 #define SCA_FDAT syscall_arg__scnprintf_fd_at
350 static size_t syscall_arg__scnprintf_close_fd(char *bf, size_t size,
351 struct syscall_arg *arg);
353 #define SCA_CLOSE_FD syscall_arg__scnprintf_close_fd
355 static size_t syscall_arg__scnprintf_hex(char *bf, size_t size,
356 struct syscall_arg *arg)
358 return scnprintf(bf, size, "%#lx", arg->val);
361 #define SCA_HEX syscall_arg__scnprintf_hex
363 static size_t syscall_arg__scnprintf_int(char *bf, size_t size,
364 struct syscall_arg *arg)
366 return scnprintf(bf, size, "%d", arg->val);
369 #define SCA_INT syscall_arg__scnprintf_int
371 static const char *bpf_cmd[] = {
372 "MAP_CREATE", "MAP_LOOKUP_ELEM", "MAP_UPDATE_ELEM", "MAP_DELETE_ELEM",
373 "MAP_GET_NEXT_KEY", "PROG_LOAD",
375 static DEFINE_STRARRAY(bpf_cmd);
377 static const char *epoll_ctl_ops[] = { "ADD", "DEL", "MOD", };
378 static DEFINE_STRARRAY_OFFSET(epoll_ctl_ops, 1);
380 static const char *itimers[] = { "REAL", "VIRTUAL", "PROF", };
381 static DEFINE_STRARRAY(itimers);
383 static const char *keyctl_options[] = {
384 "GET_KEYRING_ID", "JOIN_SESSION_KEYRING", "UPDATE", "REVOKE", "CHOWN",
385 "SETPERM", "DESCRIBE", "CLEAR", "LINK", "UNLINK", "SEARCH", "READ",
386 "INSTANTIATE", "NEGATE", "SET_REQKEY_KEYRING", "SET_TIMEOUT",
387 "ASSUME_AUTHORITY", "GET_SECURITY", "SESSION_TO_PARENT", "REJECT",
388 "INSTANTIATE_IOV", "INVALIDATE", "GET_PERSISTENT",
390 static DEFINE_STRARRAY(keyctl_options);
392 static const char *whences[] = { "SET", "CUR", "END",
400 static DEFINE_STRARRAY(whences);
402 static const char *fcntl_cmds[] = {
403 "DUPFD", "GETFD", "SETFD", "GETFL", "SETFL", "GETLK", "SETLK",
404 "SETLKW", "SETOWN", "GETOWN", "SETSIG", "GETSIG", "F_GETLK64",
405 "F_SETLK64", "F_SETLKW64", "F_SETOWN_EX", "F_GETOWN_EX",
408 static DEFINE_STRARRAY(fcntl_cmds);
410 static const char *rlimit_resources[] = {
411 "CPU", "FSIZE", "DATA", "STACK", "CORE", "RSS", "NPROC", "NOFILE",
412 "MEMLOCK", "AS", "LOCKS", "SIGPENDING", "MSGQUEUE", "NICE", "RTPRIO",
415 static DEFINE_STRARRAY(rlimit_resources);
417 static const char *sighow[] = { "BLOCK", "UNBLOCK", "SETMASK", };
418 static DEFINE_STRARRAY(sighow);
420 static const char *clockid[] = {
421 "REALTIME", "MONOTONIC", "PROCESS_CPUTIME_ID", "THREAD_CPUTIME_ID",
422 "MONOTONIC_RAW", "REALTIME_COARSE", "MONOTONIC_COARSE", "BOOTTIME",
423 "REALTIME_ALARM", "BOOTTIME_ALARM", "SGI_CYCLE", "TAI"
425 static DEFINE_STRARRAY(clockid);
427 static const char *socket_families[] = {
428 "UNSPEC", "LOCAL", "INET", "AX25", "IPX", "APPLETALK", "NETROM",
429 "BRIDGE", "ATMPVC", "X25", "INET6", "ROSE", "DECnet", "NETBEUI",
430 "SECURITY", "KEY", "NETLINK", "PACKET", "ASH", "ECONET", "ATMSVC",
431 "RDS", "SNA", "IRDA", "PPPOX", "WANPIPE", "LLC", "IB", "CAN", "TIPC",
432 "BLUETOOTH", "IUCV", "RXRPC", "ISDN", "PHONET", "IEEE802154", "CAIF",
433 "ALG", "NFC", "VSOCK",
435 static DEFINE_STRARRAY(socket_families);
437 static size_t syscall_arg__scnprintf_access_mode(char *bf, size_t size,
438 struct syscall_arg *arg)
443 if (mode == F_OK) /* 0 */
444 return scnprintf(bf, size, "F");
446 if (mode & n##_OK) { \
447 printed += scnprintf(bf + printed, size - printed, "%s", #n); \
457 printed += scnprintf(bf + printed, size - printed, "|%#x", mode);
462 #define SCA_ACCMODE syscall_arg__scnprintf_access_mode
464 static size_t syscall_arg__scnprintf_filename(char *bf, size_t size,
465 struct syscall_arg *arg);
467 #define SCA_FILENAME syscall_arg__scnprintf_filename
469 static size_t syscall_arg__scnprintf_pipe_flags(char *bf, size_t size,
470 struct syscall_arg *arg)
472 int printed = 0, flags = arg->val;
475 if (flags & O_##n) { \
476 printed += scnprintf(bf + printed, size - printed, "%s%s", printed ? "|" : "", #n); \
485 printed += scnprintf(bf + printed, size - printed, "%s%#x", printed ? "|" : "", flags);
490 #define SCA_PIPE_FLAGS syscall_arg__scnprintf_pipe_flags
492 #if defined(__i386__) || defined(__x86_64__)
494 * FIXME: Make this available to all arches.
496 #define TCGETS 0x5401
498 static const char *tioctls[] = {
499 "TCGETS", "TCSETS", "TCSETSW", "TCSETSF", "TCGETA", "TCSETA", "TCSETAW",
500 "TCSETAF", "TCSBRK", "TCXONC", "TCFLSH", "TIOCEXCL", "TIOCNXCL",
501 "TIOCSCTTY", "TIOCGPGRP", "TIOCSPGRP", "TIOCOUTQ", "TIOCSTI",
502 "TIOCGWINSZ", "TIOCSWINSZ", "TIOCMGET", "TIOCMBIS", "TIOCMBIC",
503 "TIOCMSET", "TIOCGSOFTCAR", "TIOCSSOFTCAR", "FIONREAD", "TIOCLINUX",
504 "TIOCCONS", "TIOCGSERIAL", "TIOCSSERIAL", "TIOCPKT", "FIONBIO",
505 "TIOCNOTTY", "TIOCSETD", "TIOCGETD", "TCSBRKP", [0x27] = "TIOCSBRK",
506 "TIOCCBRK", "TIOCGSID", "TCGETS2", "TCSETS2", "TCSETSW2", "TCSETSF2",
507 "TIOCGRS485", "TIOCSRS485", "TIOCGPTN", "TIOCSPTLCK",
508 "TIOCGDEV||TCGETX", "TCSETX", "TCSETXF", "TCSETXW", "TIOCSIG",
509 "TIOCVHANGUP", "TIOCGPKT", "TIOCGPTLCK", "TIOCGEXCL",
510 [0x50] = "FIONCLEX", "FIOCLEX", "FIOASYNC", "TIOCSERCONFIG",
511 "TIOCSERGWILD", "TIOCSERSWILD", "TIOCGLCKTRMIOS", "TIOCSLCKTRMIOS",
512 "TIOCSERGSTRUCT", "TIOCSERGETLSR", "TIOCSERGETMULTI", "TIOCSERSETMULTI",
513 "TIOCMIWAIT", "TIOCGICOUNT", [0x60] = "FIOQSIZE",
516 static DEFINE_STRARRAY_OFFSET(tioctls, 0x5401);
517 #endif /* defined(__i386__) || defined(__x86_64__) */
519 #ifndef GRND_NONBLOCK
520 #define GRND_NONBLOCK 0x0001
523 #define GRND_RANDOM 0x0002
526 static size_t syscall_arg__scnprintf_getrandom_flags(char *bf, size_t size,
527 struct syscall_arg *arg)
529 int printed = 0, flags = arg->val;
532 if (flags & GRND_##n) { \
533 printed += scnprintf(bf + printed, size - printed, "%s%s", printed ? "|" : "", #n); \
534 flags &= ~GRND_##n; \
542 printed += scnprintf(bf + printed, size - printed, "%s%#x", printed ? "|" : "", flags);
547 #define SCA_GETRANDOM_FLAGS syscall_arg__scnprintf_getrandom_flags
549 #define STRARRAY(arg, name, array) \
550 .arg_scnprintf = { [arg] = SCA_STRARRAY, }, \
551 .arg_parm = { [arg] = &strarray__##array, }
553 #include "trace/beauty/eventfd.c"
554 #include "trace/beauty/flock.c"
555 #include "trace/beauty/futex_op.c"
556 #include "trace/beauty/mmap.c"
557 #include "trace/beauty/mode_t.c"
558 #include "trace/beauty/msg_flags.c"
559 #include "trace/beauty/open_flags.c"
560 #include "trace/beauty/perf_event_open.c"
561 #include "trace/beauty/pid.c"
562 #include "trace/beauty/sched_policy.c"
563 #include "trace/beauty/seccomp.c"
564 #include "trace/beauty/signum.c"
565 #include "trace/beauty/socket_type.c"
566 #include "trace/beauty/waitid_options.c"
568 static struct syscall_fmt {
571 size_t (*arg_scnprintf[6])(char *bf, size_t size, struct syscall_arg *arg);
578 { .name = "access", .errmsg = true,
579 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */
580 [1] = SCA_ACCMODE, /* mode */ }, },
581 { .name = "arch_prctl", .errmsg = true, .alias = "prctl", },
582 { .name = "bpf", .errmsg = true, STRARRAY(0, cmd, bpf_cmd), },
583 { .name = "brk", .hexret = true,
584 .arg_scnprintf = { [0] = SCA_HEX, /* brk */ }, },
585 { .name = "chdir", .errmsg = true,
586 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
587 { .name = "chmod", .errmsg = true,
588 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
589 { .name = "chroot", .errmsg = true,
590 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
591 { .name = "clock_gettime", .errmsg = true, STRARRAY(0, clk_id, clockid), },
592 { .name = "clone", .errpid = true, },
593 { .name = "close", .errmsg = true,
594 .arg_scnprintf = { [0] = SCA_CLOSE_FD, /* fd */ }, },
595 { .name = "connect", .errmsg = true, },
596 { .name = "creat", .errmsg = true,
597 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
598 { .name = "dup", .errmsg = true,
599 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
600 { .name = "dup2", .errmsg = true,
601 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
602 { .name = "dup3", .errmsg = true,
603 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
604 { .name = "epoll_ctl", .errmsg = true, STRARRAY(1, op, epoll_ctl_ops), },
605 { .name = "eventfd2", .errmsg = true,
606 .arg_scnprintf = { [1] = SCA_EFD_FLAGS, /* flags */ }, },
607 { .name = "faccessat", .errmsg = true,
608 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */
609 [1] = SCA_FILENAME, /* filename */ }, },
610 { .name = "fadvise64", .errmsg = true,
611 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
612 { .name = "fallocate", .errmsg = true,
613 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
614 { .name = "fchdir", .errmsg = true,
615 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
616 { .name = "fchmod", .errmsg = true,
617 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
618 { .name = "fchmodat", .errmsg = true,
619 .arg_scnprintf = { [0] = SCA_FDAT, /* fd */
620 [1] = SCA_FILENAME, /* filename */ }, },
621 { .name = "fchown", .errmsg = true,
622 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
623 { .name = "fchownat", .errmsg = true,
624 .arg_scnprintf = { [0] = SCA_FDAT, /* fd */
625 [1] = SCA_FILENAME, /* filename */ }, },
626 { .name = "fcntl", .errmsg = true,
627 .arg_scnprintf = { [0] = SCA_FD, /* fd */
628 [1] = SCA_STRARRAY, /* cmd */ },
629 .arg_parm = { [1] = &strarray__fcntl_cmds, /* cmd */ }, },
630 { .name = "fdatasync", .errmsg = true,
631 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
632 { .name = "flock", .errmsg = true,
633 .arg_scnprintf = { [0] = SCA_FD, /* fd */
634 [1] = SCA_FLOCK, /* cmd */ }, },
635 { .name = "fsetxattr", .errmsg = true,
636 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
637 { .name = "fstat", .errmsg = true, .alias = "newfstat",
638 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
639 { .name = "fstatat", .errmsg = true, .alias = "newfstatat",
640 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */
641 [1] = SCA_FILENAME, /* filename */ }, },
642 { .name = "fstatfs", .errmsg = true,
643 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
644 { .name = "fsync", .errmsg = true,
645 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
646 { .name = "ftruncate", .errmsg = true,
647 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
648 { .name = "futex", .errmsg = true,
649 .arg_scnprintf = { [1] = SCA_FUTEX_OP, /* op */ }, },
650 { .name = "futimesat", .errmsg = true,
651 .arg_scnprintf = { [0] = SCA_FDAT, /* fd */
652 [1] = SCA_FILENAME, /* filename */ }, },
653 { .name = "getdents", .errmsg = true,
654 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
655 { .name = "getdents64", .errmsg = true,
656 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
657 { .name = "getitimer", .errmsg = true, STRARRAY(0, which, itimers), },
658 { .name = "getpid", .errpid = true, },
659 { .name = "getpgid", .errpid = true, },
660 { .name = "getppid", .errpid = true, },
661 { .name = "getrandom", .errmsg = true,
662 .arg_scnprintf = { [2] = SCA_GETRANDOM_FLAGS, /* flags */ }, },
663 { .name = "getrlimit", .errmsg = true, STRARRAY(0, resource, rlimit_resources), },
664 { .name = "getxattr", .errmsg = true,
665 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
666 { .name = "inotify_add_watch", .errmsg = true,
667 .arg_scnprintf = { [1] = SCA_FILENAME, /* pathname */ }, },
668 { .name = "ioctl", .errmsg = true,
669 .arg_scnprintf = { [0] = SCA_FD, /* fd */
670 #if defined(__i386__) || defined(__x86_64__)
672 * FIXME: Make this available to all arches.
674 [1] = SCA_STRHEXARRAY, /* cmd */
675 [2] = SCA_HEX, /* arg */ },
676 .arg_parm = { [1] = &strarray__tioctls, /* cmd */ }, },
678 [2] = SCA_HEX, /* arg */ }, },
680 { .name = "keyctl", .errmsg = true, STRARRAY(0, option, keyctl_options), },
681 { .name = "kill", .errmsg = true,
682 .arg_scnprintf = { [1] = SCA_SIGNUM, /* sig */ }, },
683 { .name = "lchown", .errmsg = true,
684 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
685 { .name = "lgetxattr", .errmsg = true,
686 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
687 { .name = "linkat", .errmsg = true,
688 .arg_scnprintf = { [0] = SCA_FDAT, /* fd */ }, },
689 { .name = "listxattr", .errmsg = true,
690 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
691 { .name = "llistxattr", .errmsg = true,
692 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
693 { .name = "lremovexattr", .errmsg = true,
694 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
695 { .name = "lseek", .errmsg = true,
696 .arg_scnprintf = { [0] = SCA_FD, /* fd */
697 [2] = SCA_STRARRAY, /* whence */ },
698 .arg_parm = { [2] = &strarray__whences, /* whence */ }, },
699 { .name = "lsetxattr", .errmsg = true,
700 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
701 { .name = "lstat", .errmsg = true, .alias = "newlstat",
702 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
703 { .name = "lsxattr", .errmsg = true,
704 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
705 { .name = "madvise", .errmsg = true,
706 .arg_scnprintf = { [0] = SCA_HEX, /* start */
707 [2] = SCA_MADV_BHV, /* behavior */ }, },
708 { .name = "mkdir", .errmsg = true,
709 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
710 { .name = "mkdirat", .errmsg = true,
711 .arg_scnprintf = { [0] = SCA_FDAT, /* fd */
712 [1] = SCA_FILENAME, /* pathname */ }, },
713 { .name = "mknod", .errmsg = true,
714 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
715 { .name = "mknodat", .errmsg = true,
716 .arg_scnprintf = { [0] = SCA_FDAT, /* fd */
717 [1] = SCA_FILENAME, /* filename */ }, },
718 { .name = "mlock", .errmsg = true,
719 .arg_scnprintf = { [0] = SCA_HEX, /* addr */ }, },
720 { .name = "mlockall", .errmsg = true,
721 .arg_scnprintf = { [0] = SCA_HEX, /* addr */ }, },
722 { .name = "mmap", .hexret = true,
723 .arg_scnprintf = { [0] = SCA_HEX, /* addr */
724 [2] = SCA_MMAP_PROT, /* prot */
725 [3] = SCA_MMAP_FLAGS, /* flags */
726 [4] = SCA_FD, /* fd */ }, },
727 { .name = "mprotect", .errmsg = true,
728 .arg_scnprintf = { [0] = SCA_HEX, /* start */
729 [2] = SCA_MMAP_PROT, /* prot */ }, },
730 { .name = "mq_unlink", .errmsg = true,
731 .arg_scnprintf = { [0] = SCA_FILENAME, /* u_name */ }, },
732 { .name = "mremap", .hexret = true,
733 .arg_scnprintf = { [0] = SCA_HEX, /* addr */
734 [3] = SCA_MREMAP_FLAGS, /* flags */
735 [4] = SCA_HEX, /* new_addr */ }, },
736 { .name = "munlock", .errmsg = true,
737 .arg_scnprintf = { [0] = SCA_HEX, /* addr */ }, },
738 { .name = "munmap", .errmsg = true,
739 .arg_scnprintf = { [0] = SCA_HEX, /* addr */ }, },
740 { .name = "name_to_handle_at", .errmsg = true,
741 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */ }, },
742 { .name = "newfstatat", .errmsg = true,
743 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */
744 [1] = SCA_FILENAME, /* filename */ }, },
745 { .name = "open", .errmsg = true,
746 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */
747 [1] = SCA_OPEN_FLAGS, /* flags */ }, },
748 { .name = "open_by_handle_at", .errmsg = true,
749 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */
750 [2] = SCA_OPEN_FLAGS, /* flags */ }, },
751 { .name = "openat", .errmsg = true,
752 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */
753 [1] = SCA_FILENAME, /* filename */
754 [2] = SCA_OPEN_FLAGS, /* flags */ }, },
755 { .name = "perf_event_open", .errmsg = true,
756 .arg_scnprintf = { [2] = SCA_INT, /* cpu */
757 [3] = SCA_FD, /* group_fd */
758 [4] = SCA_PERF_FLAGS, /* flags */ }, },
759 { .name = "pipe2", .errmsg = true,
760 .arg_scnprintf = { [1] = SCA_PIPE_FLAGS, /* flags */ }, },
761 { .name = "poll", .errmsg = true, .timeout = true, },
762 { .name = "ppoll", .errmsg = true, .timeout = true, },
763 { .name = "pread", .errmsg = true, .alias = "pread64",
764 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
765 { .name = "preadv", .errmsg = true, .alias = "pread",
766 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
767 { .name = "prlimit64", .errmsg = true, STRARRAY(1, resource, rlimit_resources), },
768 { .name = "pwrite", .errmsg = true, .alias = "pwrite64",
769 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
770 { .name = "pwritev", .errmsg = true,
771 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
772 { .name = "read", .errmsg = true,
773 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
774 { .name = "readlink", .errmsg = true,
775 .arg_scnprintf = { [0] = SCA_FILENAME, /* path */ }, },
776 { .name = "readlinkat", .errmsg = true,
777 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */
778 [1] = SCA_FILENAME, /* pathname */ }, },
779 { .name = "readv", .errmsg = true,
780 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
781 { .name = "recvfrom", .errmsg = true,
782 .arg_scnprintf = { [0] = SCA_FD, /* fd */
783 [3] = SCA_MSG_FLAGS, /* flags */ }, },
784 { .name = "recvmmsg", .errmsg = true,
785 .arg_scnprintf = { [0] = SCA_FD, /* fd */
786 [3] = SCA_MSG_FLAGS, /* flags */ }, },
787 { .name = "recvmsg", .errmsg = true,
788 .arg_scnprintf = { [0] = SCA_FD, /* fd */
789 [2] = SCA_MSG_FLAGS, /* flags */ }, },
790 { .name = "removexattr", .errmsg = true,
791 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
792 { .name = "renameat", .errmsg = true,
793 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */ }, },
794 { .name = "rmdir", .errmsg = true,
795 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
796 { .name = "rt_sigaction", .errmsg = true,
797 .arg_scnprintf = { [0] = SCA_SIGNUM, /* sig */ }, },
798 { .name = "rt_sigprocmask", .errmsg = true, STRARRAY(0, how, sighow), },
799 { .name = "rt_sigqueueinfo", .errmsg = true,
800 .arg_scnprintf = { [1] = SCA_SIGNUM, /* sig */ }, },
801 { .name = "rt_tgsigqueueinfo", .errmsg = true,
802 .arg_scnprintf = { [2] = SCA_SIGNUM, /* sig */ }, },
803 { .name = "sched_setscheduler", .errmsg = true,
804 .arg_scnprintf = { [1] = SCA_SCHED_POLICY, /* policy */ }, },
805 { .name = "seccomp", .errmsg = true,
806 .arg_scnprintf = { [0] = SCA_SECCOMP_OP, /* op */
807 [1] = SCA_SECCOMP_FLAGS, /* flags */ }, },
808 { .name = "select", .errmsg = true, .timeout = true, },
809 { .name = "sendmmsg", .errmsg = true,
810 .arg_scnprintf = { [0] = SCA_FD, /* fd */
811 [3] = SCA_MSG_FLAGS, /* flags */ }, },
812 { .name = "sendmsg", .errmsg = true,
813 .arg_scnprintf = { [0] = SCA_FD, /* fd */
814 [2] = SCA_MSG_FLAGS, /* flags */ }, },
815 { .name = "sendto", .errmsg = true,
816 .arg_scnprintf = { [0] = SCA_FD, /* fd */
817 [3] = SCA_MSG_FLAGS, /* flags */ }, },
818 { .name = "set_tid_address", .errpid = true, },
819 { .name = "setitimer", .errmsg = true, STRARRAY(0, which, itimers), },
820 { .name = "setpgid", .errmsg = true, },
821 { .name = "setrlimit", .errmsg = true, STRARRAY(0, resource, rlimit_resources), },
822 { .name = "setxattr", .errmsg = true,
823 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
824 { .name = "shutdown", .errmsg = true,
825 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
826 { .name = "socket", .errmsg = true,
827 .arg_scnprintf = { [0] = SCA_STRARRAY, /* family */
828 [1] = SCA_SK_TYPE, /* type */ },
829 .arg_parm = { [0] = &strarray__socket_families, /* family */ }, },
830 { .name = "socketpair", .errmsg = true,
831 .arg_scnprintf = { [0] = SCA_STRARRAY, /* family */
832 [1] = SCA_SK_TYPE, /* type */ },
833 .arg_parm = { [0] = &strarray__socket_families, /* family */ }, },
834 { .name = "stat", .errmsg = true, .alias = "newstat",
835 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
836 { .name = "statfs", .errmsg = true,
837 .arg_scnprintf = { [0] = SCA_FILENAME, /* pathname */ }, },
838 { .name = "swapoff", .errmsg = true,
839 .arg_scnprintf = { [0] = SCA_FILENAME, /* specialfile */ }, },
840 { .name = "swapon", .errmsg = true,
841 .arg_scnprintf = { [0] = SCA_FILENAME, /* specialfile */ }, },
842 { .name = "symlinkat", .errmsg = true,
843 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */ }, },
844 { .name = "tgkill", .errmsg = true,
845 .arg_scnprintf = { [2] = SCA_SIGNUM, /* sig */ }, },
846 { .name = "tkill", .errmsg = true,
847 .arg_scnprintf = { [1] = SCA_SIGNUM, /* sig */ }, },
848 { .name = "truncate", .errmsg = true,
849 .arg_scnprintf = { [0] = SCA_FILENAME, /* path */ }, },
850 { .name = "uname", .errmsg = true, .alias = "newuname", },
851 { .name = "unlinkat", .errmsg = true,
852 .arg_scnprintf = { [0] = SCA_FDAT, /* dfd */
853 [1] = SCA_FILENAME, /* pathname */ }, },
854 { .name = "utime", .errmsg = true,
855 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
856 { .name = "utimensat", .errmsg = true,
857 .arg_scnprintf = { [0] = SCA_FDAT, /* dirfd */
858 [1] = SCA_FILENAME, /* filename */ }, },
859 { .name = "utimes", .errmsg = true,
860 .arg_scnprintf = { [0] = SCA_FILENAME, /* filename */ }, },
861 { .name = "vmsplice", .errmsg = true,
862 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
863 { .name = "wait4", .errpid = true,
864 .arg_scnprintf = { [2] = SCA_WAITID_OPTIONS, /* options */ }, },
865 { .name = "waitid", .errpid = true,
866 .arg_scnprintf = { [3] = SCA_WAITID_OPTIONS, /* options */ }, },
867 { .name = "write", .errmsg = true,
868 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
869 { .name = "writev", .errmsg = true,
870 .arg_scnprintf = { [0] = SCA_FD, /* fd */ }, },
873 static int syscall_fmt__cmp(const void *name, const void *fmtp)
875 const struct syscall_fmt *fmt = fmtp;
876 return strcmp(name, fmt->name);
879 static struct syscall_fmt *syscall_fmt__find(const char *name)
881 const int nmemb = ARRAY_SIZE(syscall_fmts);
882 return bsearch(name, syscall_fmts, nmemb, sizeof(struct syscall_fmt), syscall_fmt__cmp);
886 struct event_format *tp_format;
888 struct format_field *args;
891 struct syscall_fmt *fmt;
892 size_t (**arg_scnprintf)(char *bf, size_t size, struct syscall_arg *arg);
896 static size_t fprintf_duration(unsigned long t, FILE *fp)
898 double duration = (double)t / NSEC_PER_MSEC;
899 size_t printed = fprintf(fp, "(");
902 printed += color_fprintf(fp, PERF_COLOR_RED, "%6.3f ms", duration);
903 else if (duration >= 0.01)
904 printed += color_fprintf(fp, PERF_COLOR_YELLOW, "%6.3f ms", duration);
906 printed += color_fprintf(fp, PERF_COLOR_NORMAL, "%6.3f ms", duration);
907 return printed + fprintf(fp, "): ");
911 * filename.ptr: The filename char pointer that will be vfs_getname'd
912 * filename.entry_str_pos: Where to insert the string translated from
913 * filename.ptr by the vfs_getname tracepoint/kprobe.
915 struct thread_trace {
919 unsigned long nr_events;
920 unsigned long pfmaj, pfmin;
925 short int entry_str_pos;
927 unsigned int namelen;
935 struct intlist *syscall_stats;
938 static struct thread_trace *thread_trace__new(void)
940 struct thread_trace *ttrace = zalloc(sizeof(struct thread_trace));
943 ttrace->paths.max = -1;
945 ttrace->syscall_stats = intlist__new(NULL);
950 static struct thread_trace *thread__trace(struct thread *thread, FILE *fp)
952 struct thread_trace *ttrace;
957 if (thread__priv(thread) == NULL)
958 thread__set_priv(thread, thread_trace__new());
960 if (thread__priv(thread) == NULL)
963 ttrace = thread__priv(thread);
968 color_fprintf(fp, PERF_COLOR_RED,
969 "WARNING: not enough memory, dropping samples!\n");
973 #define TRACE_PFMAJ (1 << 0)
974 #define TRACE_PFMIN (1 << 1)
976 static const size_t trace__entry_str_size = 2048;
978 static int trace__set_fd_pathname(struct thread *thread, int fd, const char *pathname)
980 struct thread_trace *ttrace = thread__priv(thread);
982 if (fd > ttrace->paths.max) {
983 char **npath = realloc(ttrace->paths.table, (fd + 1) * sizeof(char *));
988 if (ttrace->paths.max != -1) {
989 memset(npath + ttrace->paths.max + 1, 0,
990 (fd - ttrace->paths.max) * sizeof(char *));
992 memset(npath, 0, (fd + 1) * sizeof(char *));
995 ttrace->paths.table = npath;
996 ttrace->paths.max = fd;
999 ttrace->paths.table[fd] = strdup(pathname);
1001 return ttrace->paths.table[fd] != NULL ? 0 : -1;
1004 static int thread__read_fd_path(struct thread *thread, int fd)
1006 char linkname[PATH_MAX], pathname[PATH_MAX];
1010 if (thread->pid_ == thread->tid) {
1011 scnprintf(linkname, sizeof(linkname),
1012 "/proc/%d/fd/%d", thread->pid_, fd);
1014 scnprintf(linkname, sizeof(linkname),
1015 "/proc/%d/task/%d/fd/%d", thread->pid_, thread->tid, fd);
1018 if (lstat(linkname, &st) < 0 || st.st_size + 1 > (off_t)sizeof(pathname))
1021 ret = readlink(linkname, pathname, sizeof(pathname));
1023 if (ret < 0 || ret > st.st_size)
1026 pathname[ret] = '\0';
1027 return trace__set_fd_pathname(thread, fd, pathname);
1030 static const char *thread__fd_path(struct thread *thread, int fd,
1031 struct trace *trace)
1033 struct thread_trace *ttrace = thread__priv(thread);
1041 if ((fd > ttrace->paths.max || ttrace->paths.table[fd] == NULL)) {
1044 ++trace->stats.proc_getname;
1045 if (thread__read_fd_path(thread, fd))
1049 return ttrace->paths.table[fd];
1052 static size_t syscall_arg__scnprintf_fd(char *bf, size_t size,
1053 struct syscall_arg *arg)
1056 size_t printed = scnprintf(bf, size, "%d", fd);
1057 const char *path = thread__fd_path(arg->thread, fd, arg->trace);
1060 printed += scnprintf(bf + printed, size - printed, "<%s>", path);
1065 static size_t syscall_arg__scnprintf_close_fd(char *bf, size_t size,
1066 struct syscall_arg *arg)
1069 size_t printed = syscall_arg__scnprintf_fd(bf, size, arg);
1070 struct thread_trace *ttrace = thread__priv(arg->thread);
1072 if (ttrace && fd >= 0 && fd <= ttrace->paths.max)
1073 zfree(&ttrace->paths.table[fd]);
1078 static void thread__set_filename_pos(struct thread *thread, const char *bf,
1081 struct thread_trace *ttrace = thread__priv(thread);
1083 ttrace->filename.ptr = ptr;
1084 ttrace->filename.entry_str_pos = bf - ttrace->entry_str;
1087 static size_t syscall_arg__scnprintf_filename(char *bf, size_t size,
1088 struct syscall_arg *arg)
1090 unsigned long ptr = arg->val;
1092 if (!arg->trace->vfs_getname)
1093 return scnprintf(bf, size, "%#x", ptr);
1095 thread__set_filename_pos(arg->thread, bf, ptr);
1099 static bool trace__filter_duration(struct trace *trace, double t)
1101 return t < (trace->duration_filter * NSEC_PER_MSEC);
1104 static size_t trace__fprintf_tstamp(struct trace *trace, u64 tstamp, FILE *fp)
1106 double ts = (double)(tstamp - trace->base_time) / NSEC_PER_MSEC;
1108 return fprintf(fp, "%10.3f ", ts);
1111 static bool done = false;
1112 static bool interrupted = false;
1114 static void sig_handler(int sig)
1117 interrupted = sig == SIGINT;
1120 static size_t trace__fprintf_entry_head(struct trace *trace, struct thread *thread,
1121 u64 duration, u64 tstamp, FILE *fp)
1123 size_t printed = trace__fprintf_tstamp(trace, tstamp, fp);
1124 printed += fprintf_duration(duration, fp);
1126 if (trace->multiple_threads) {
1127 if (trace->show_comm)
1128 printed += fprintf(fp, "%.14s/", thread__comm_str(thread));
1129 printed += fprintf(fp, "%d ", thread->tid);
1135 static int trace__process_event(struct trace *trace, struct machine *machine,
1136 union perf_event *event, struct perf_sample *sample)
1140 switch (event->header.type) {
1141 case PERF_RECORD_LOST:
1142 color_fprintf(trace->output, PERF_COLOR_RED,
1143 "LOST %" PRIu64 " events!\n", event->lost.lost);
1144 ret = machine__process_lost_event(machine, event, sample);
1147 ret = machine__process_event(machine, event, sample);
1154 static int trace__tool_process(struct perf_tool *tool,
1155 union perf_event *event,
1156 struct perf_sample *sample,
1157 struct machine *machine)
1159 struct trace *trace = container_of(tool, struct trace, tool);
1160 return trace__process_event(trace, machine, event, sample);
1163 static char *trace__machine__resolve_kernel_addr(void *vmachine, unsigned long long *addrp, char **modp)
1165 struct machine *machine = vmachine;
1167 if (machine->kptr_restrict_warned)
1170 if (symbol_conf.kptr_restrict) {
1171 pr_warning("Kernel address maps (/proc/{kallsyms,modules}) are restricted.\n\n"
1172 "Check /proc/sys/kernel/kptr_restrict.\n\n"
1173 "Kernel samples will not be resolved.\n");
1174 machine->kptr_restrict_warned = true;
1178 return machine__resolve_kernel_addr(vmachine, addrp, modp);
1181 static int trace__symbols_init(struct trace *trace, struct perf_evlist *evlist)
1183 int err = symbol__init(NULL);
1188 trace->host = machine__new_host();
1189 if (trace->host == NULL)
1192 if (trace_event__register_resolver(trace->host, trace__machine__resolve_kernel_addr) < 0)
1195 err = __machine__synthesize_threads(trace->host, &trace->tool, &trace->opts.target,
1196 evlist->threads, trace__tool_process, false,
1197 trace->opts.proc_map_timeout);
1204 static int syscall__set_arg_fmts(struct syscall *sc)
1206 struct format_field *field;
1209 sc->arg_scnprintf = calloc(sc->nr_args, sizeof(void *));
1210 if (sc->arg_scnprintf == NULL)
1214 sc->arg_parm = sc->fmt->arg_parm;
1216 for (field = sc->args; field; field = field->next) {
1217 if (sc->fmt && sc->fmt->arg_scnprintf[idx])
1218 sc->arg_scnprintf[idx] = sc->fmt->arg_scnprintf[idx];
1219 else if (field->flags & FIELD_IS_POINTER)
1220 sc->arg_scnprintf[idx] = syscall_arg__scnprintf_hex;
1221 else if (strcmp(field->type, "pid_t") == 0)
1222 sc->arg_scnprintf[idx] = SCA_PID;
1223 else if (strcmp(field->type, "umode_t") == 0)
1224 sc->arg_scnprintf[idx] = SCA_MODE_T;
1231 static int trace__read_syscall_info(struct trace *trace, int id)
1235 const char *name = syscalltbl__name(trace->sctbl, id);
1240 if (id > trace->syscalls.max) {
1241 struct syscall *nsyscalls = realloc(trace->syscalls.table, (id + 1) * sizeof(*sc));
1243 if (nsyscalls == NULL)
1246 if (trace->syscalls.max != -1) {
1247 memset(nsyscalls + trace->syscalls.max + 1, 0,
1248 (id - trace->syscalls.max) * sizeof(*sc));
1250 memset(nsyscalls, 0, (id + 1) * sizeof(*sc));
1253 trace->syscalls.table = nsyscalls;
1254 trace->syscalls.max = id;
1257 sc = trace->syscalls.table + id;
1260 sc->fmt = syscall_fmt__find(sc->name);
1262 snprintf(tp_name, sizeof(tp_name), "sys_enter_%s", sc->name);
1263 sc->tp_format = trace_event__tp_format("syscalls", tp_name);
1265 if (IS_ERR(sc->tp_format) && sc->fmt && sc->fmt->alias) {
1266 snprintf(tp_name, sizeof(tp_name), "sys_enter_%s", sc->fmt->alias);
1267 sc->tp_format = trace_event__tp_format("syscalls", tp_name);
1270 if (IS_ERR(sc->tp_format))
1273 sc->args = sc->tp_format->format.fields;
1274 sc->nr_args = sc->tp_format->format.nr_fields;
1276 * We need to check and discard the first variable '__syscall_nr'
1277 * or 'nr' that mean the syscall number. It is needless here.
1278 * So drop '__syscall_nr' or 'nr' field but does not exist on older kernels.
1280 if (sc->args && (!strcmp(sc->args->name, "__syscall_nr") || !strcmp(sc->args->name, "nr"))) {
1281 sc->args = sc->args->next;
1285 sc->is_exit = !strcmp(name, "exit_group") || !strcmp(name, "exit");
1287 return syscall__set_arg_fmts(sc);
1290 static int trace__validate_ev_qualifier(struct trace *trace)
1293 struct str_node *pos;
1295 trace->ev_qualifier_ids.nr = strlist__nr_entries(trace->ev_qualifier);
1296 trace->ev_qualifier_ids.entries = malloc(trace->ev_qualifier_ids.nr *
1297 sizeof(trace->ev_qualifier_ids.entries[0]));
1299 if (trace->ev_qualifier_ids.entries == NULL) {
1300 fputs("Error:\tNot enough memory for allocating events qualifier ids\n",
1308 strlist__for_each(pos, trace->ev_qualifier) {
1309 const char *sc = pos->s;
1310 int id = syscalltbl__id(trace->sctbl, sc);
1314 fputs("Error:\tInvalid syscall ", trace->output);
1317 fputs(", ", trace->output);
1320 fputs(sc, trace->output);
1323 trace->ev_qualifier_ids.entries[i++] = id;
1327 fputs("\nHint:\ttry 'perf list syscalls:sys_enter_*'"
1328 "\nHint:\tand: 'man syscalls'\n", trace->output);
1329 zfree(&trace->ev_qualifier_ids.entries);
1330 trace->ev_qualifier_ids.nr = 0;
1337 * args is to be interpreted as a series of longs but we need to handle
1338 * 8-byte unaligned accesses. args points to raw_data within the event
1339 * and raw_data is guaranteed to be 8-byte unaligned because it is
1340 * preceded by raw_size which is a u32. So we need to copy args to a temp
1341 * variable to read it. Most notably this avoids extended load instructions
1342 * on unaligned addresses
1345 static size_t syscall__scnprintf_args(struct syscall *sc, char *bf, size_t size,
1346 unsigned char *args, struct trace *trace,
1347 struct thread *thread)
1353 if (sc->args != NULL) {
1354 struct format_field *field;
1356 struct syscall_arg arg = {
1363 for (field = sc->args; field;
1364 field = field->next, ++arg.idx, bit <<= 1) {
1368 /* special care for unaligned accesses */
1369 p = args + sizeof(unsigned long) * arg.idx;
1370 memcpy(&val, p, sizeof(val));
1373 * Suppress this argument if its value is zero and
1374 * and we don't have a string associated in an
1378 !(sc->arg_scnprintf &&
1379 sc->arg_scnprintf[arg.idx] == SCA_STRARRAY &&
1380 sc->arg_parm[arg.idx]))
1383 printed += scnprintf(bf + printed, size - printed,
1384 "%s%s: ", printed ? ", " : "", field->name);
1385 if (sc->arg_scnprintf && sc->arg_scnprintf[arg.idx]) {
1388 arg.parm = sc->arg_parm[arg.idx];
1389 printed += sc->arg_scnprintf[arg.idx](bf + printed,
1390 size - printed, &arg);
1392 printed += scnprintf(bf + printed, size - printed,
1396 } else if (IS_ERR(sc->tp_format)) {
1398 * If we managed to read the tracepoint /format file, then we
1399 * may end up not having any args, like with gettid(), so only
1400 * print the raw args when we didn't manage to read it.
1405 /* special care for unaligned accesses */
1406 p = args + sizeof(unsigned long) * i;
1407 memcpy(&val, p, sizeof(val));
1408 printed += scnprintf(bf + printed, size - printed,
1410 printed ? ", " : "", i, val);
1418 typedef int (*tracepoint_handler)(struct trace *trace, struct perf_evsel *evsel,
1419 union perf_event *event,
1420 struct perf_sample *sample);
1422 static struct syscall *trace__syscall_info(struct trace *trace,
1423 struct perf_evsel *evsel, int id)
1429 * XXX: Noticed on x86_64, reproduced as far back as 3.0.36, haven't tried
1430 * before that, leaving at a higher verbosity level till that is
1431 * explained. Reproduced with plain ftrace with:
1433 * echo 1 > /t/events/raw_syscalls/sys_exit/enable
1434 * grep "NR -1 " /t/trace_pipe
1436 * After generating some load on the machine.
1440 fprintf(trace->output, "Invalid syscall %d id, skipping (%s, %" PRIu64 ") ...\n",
1441 id, perf_evsel__name(evsel), ++n);
1446 if ((id > trace->syscalls.max || trace->syscalls.table[id].name == NULL) &&
1447 trace__read_syscall_info(trace, id))
1450 if ((id > trace->syscalls.max || trace->syscalls.table[id].name == NULL))
1453 return &trace->syscalls.table[id];
1457 fprintf(trace->output, "Problems reading syscall %d", id);
1458 if (id <= trace->syscalls.max && trace->syscalls.table[id].name != NULL)
1459 fprintf(trace->output, "(%s)", trace->syscalls.table[id].name);
1460 fputs(" information\n", trace->output);
1465 static void thread__update_stats(struct thread_trace *ttrace,
1466 int id, struct perf_sample *sample)
1468 struct int_node *inode;
1469 struct stats *stats;
1472 inode = intlist__findnew(ttrace->syscall_stats, id);
1476 stats = inode->priv;
1477 if (stats == NULL) {
1478 stats = malloc(sizeof(struct stats));
1482 inode->priv = stats;
1485 if (ttrace->entry_time && sample->time > ttrace->entry_time)
1486 duration = sample->time - ttrace->entry_time;
1488 update_stats(stats, duration);
1491 static int trace__printf_interrupted_entry(struct trace *trace, struct perf_sample *sample)
1493 struct thread_trace *ttrace;
1497 if (trace->current == NULL)
1500 ttrace = thread__priv(trace->current);
1502 if (!ttrace->entry_pending)
1505 duration = sample->time - ttrace->entry_time;
1507 printed = trace__fprintf_entry_head(trace, trace->current, duration, sample->time, trace->output);
1508 printed += fprintf(trace->output, "%-70s) ...\n", ttrace->entry_str);
1509 ttrace->entry_pending = false;
1514 static int trace__sys_enter(struct trace *trace, struct perf_evsel *evsel,
1515 union perf_event *event __maybe_unused,
1516 struct perf_sample *sample)
1521 struct thread *thread;
1522 int id = perf_evsel__sc_tp_uint(evsel, id, sample), err = -1;
1523 struct syscall *sc = trace__syscall_info(trace, evsel, id);
1524 struct thread_trace *ttrace;
1529 thread = machine__findnew_thread(trace->host, sample->pid, sample->tid);
1530 ttrace = thread__trace(thread, trace->output);
1534 args = perf_evsel__sc_tp_ptr(evsel, args, sample);
1536 if (ttrace->entry_str == NULL) {
1537 ttrace->entry_str = malloc(trace__entry_str_size);
1538 if (!ttrace->entry_str)
1542 if (!(trace->duration_filter || trace->summary_only || trace->min_stack))
1543 trace__printf_interrupted_entry(trace, sample);
1545 ttrace->entry_time = sample->time;
1546 msg = ttrace->entry_str;
1547 printed += scnprintf(msg + printed, trace__entry_str_size - printed, "%s(", sc->name);
1549 printed += syscall__scnprintf_args(sc, msg + printed, trace__entry_str_size - printed,
1550 args, trace, thread);
1553 if (!(trace->duration_filter || trace->summary_only || trace->min_stack)) {
1554 trace__fprintf_entry_head(trace, thread, 1, sample->time, trace->output);
1555 fprintf(trace->output, "%-70s)\n", ttrace->entry_str);
1558 ttrace->entry_pending = true;
1559 /* See trace__vfs_getname & trace__sys_exit */
1560 ttrace->filename.pending_open = false;
1563 if (trace->current != thread) {
1564 thread__put(trace->current);
1565 trace->current = thread__get(thread);
1569 thread__put(thread);
1573 static int trace__resolve_callchain(struct trace *trace, struct perf_evsel *evsel,
1574 struct perf_sample *sample,
1575 struct callchain_cursor *cursor)
1577 struct addr_location al;
1579 if (machine__resolve(trace->host, &al, sample) < 0 ||
1580 thread__resolve_callchain(al.thread, cursor, evsel, sample, NULL, NULL, trace->max_stack))
1586 static int trace__fprintf_callchain(struct trace *trace, struct perf_sample *sample)
1588 /* TODO: user-configurable print_opts */
1589 const unsigned int print_opts = EVSEL__PRINT_SYM |
1591 EVSEL__PRINT_UNKNOWN_AS_ADDR;
1593 return sample__fprintf_callchain(sample, 38, print_opts, &callchain_cursor, trace->output);
1596 static int trace__sys_exit(struct trace *trace, struct perf_evsel *evsel,
1597 union perf_event *event __maybe_unused,
1598 struct perf_sample *sample)
1602 struct thread *thread;
1603 int id = perf_evsel__sc_tp_uint(evsel, id, sample), err = -1, callchain_ret = 0;
1604 struct syscall *sc = trace__syscall_info(trace, evsel, id);
1605 struct thread_trace *ttrace;
1610 thread = machine__findnew_thread(trace->host, sample->pid, sample->tid);
1611 ttrace = thread__trace(thread, trace->output);
1616 thread__update_stats(ttrace, id, sample);
1618 ret = perf_evsel__sc_tp_uint(evsel, ret, sample);
1620 if (id == trace->open_id && ret >= 0 && ttrace->filename.pending_open) {
1621 trace__set_fd_pathname(thread, ret, ttrace->filename.name);
1622 ttrace->filename.pending_open = false;
1623 ++trace->stats.vfs_getname;
1626 ttrace->exit_time = sample->time;
1628 if (ttrace->entry_time) {
1629 duration = sample->time - ttrace->entry_time;
1630 if (trace__filter_duration(trace, duration))
1632 } else if (trace->duration_filter)
1635 if (sample->callchain) {
1636 callchain_ret = trace__resolve_callchain(trace, evsel, sample, &callchain_cursor);
1637 if (callchain_ret == 0) {
1638 if (callchain_cursor.nr < trace->min_stack)
1644 if (trace->summary_only)
1647 trace__fprintf_entry_head(trace, thread, duration, sample->time, trace->output);
1649 if (ttrace->entry_pending) {
1650 fprintf(trace->output, "%-70s", ttrace->entry_str);
1652 fprintf(trace->output, " ... [");
1653 color_fprintf(trace->output, PERF_COLOR_YELLOW, "continued");
1654 fprintf(trace->output, "]: %s()", sc->name);
1657 if (sc->fmt == NULL) {
1659 fprintf(trace->output, ") = %ld", ret);
1660 } else if (ret < 0 && (sc->fmt->errmsg || sc->fmt->errpid)) {
1661 char bf[STRERR_BUFSIZE];
1662 const char *emsg = strerror_r(-ret, bf, sizeof(bf)),
1663 *e = audit_errno_to_name(-ret);
1665 fprintf(trace->output, ") = -1 %s %s", e, emsg);
1666 } else if (ret == 0 && sc->fmt->timeout)
1667 fprintf(trace->output, ") = 0 Timeout");
1668 else if (sc->fmt->hexret)
1669 fprintf(trace->output, ") = %#lx", ret);
1670 else if (sc->fmt->errpid) {
1671 struct thread *child = machine__find_thread(trace->host, ret, ret);
1673 if (child != NULL) {
1674 fprintf(trace->output, ") = %ld", ret);
1675 if (child->comm_set)
1676 fprintf(trace->output, " (%s)", thread__comm_str(child));
1682 fputc('\n', trace->output);
1684 if (callchain_ret > 0)
1685 trace__fprintf_callchain(trace, sample);
1686 else if (callchain_ret < 0)
1687 pr_err("Problem processing %s callchain, skipping...\n", perf_evsel__name(evsel));
1689 ttrace->entry_pending = false;
1692 thread__put(thread);
1696 static int trace__vfs_getname(struct trace *trace, struct perf_evsel *evsel,
1697 union perf_event *event __maybe_unused,
1698 struct perf_sample *sample)
1700 struct thread *thread = machine__findnew_thread(trace->host, sample->pid, sample->tid);
1701 struct thread_trace *ttrace;
1702 size_t filename_len, entry_str_len, to_move;
1703 ssize_t remaining_space;
1705 const char *filename = perf_evsel__rawptr(evsel, sample, "pathname");
1710 ttrace = thread__priv(thread);
1714 filename_len = strlen(filename);
1716 if (ttrace->filename.namelen < filename_len) {
1717 char *f = realloc(ttrace->filename.name, filename_len + 1);
1722 ttrace->filename.namelen = filename_len;
1723 ttrace->filename.name = f;
1726 strcpy(ttrace->filename.name, filename);
1727 ttrace->filename.pending_open = true;
1729 if (!ttrace->filename.ptr)
1732 entry_str_len = strlen(ttrace->entry_str);
1733 remaining_space = trace__entry_str_size - entry_str_len - 1; /* \0 */
1734 if (remaining_space <= 0)
1737 if (filename_len > (size_t)remaining_space) {
1738 filename += filename_len - remaining_space;
1739 filename_len = remaining_space;
1742 to_move = entry_str_len - ttrace->filename.entry_str_pos + 1; /* \0 */
1743 pos = ttrace->entry_str + ttrace->filename.entry_str_pos;
1744 memmove(pos + filename_len, pos, to_move);
1745 memcpy(pos, filename, filename_len);
1747 ttrace->filename.ptr = 0;
1748 ttrace->filename.entry_str_pos = 0;
1753 static int trace__sched_stat_runtime(struct trace *trace, struct perf_evsel *evsel,
1754 union perf_event *event __maybe_unused,
1755 struct perf_sample *sample)
1757 u64 runtime = perf_evsel__intval(evsel, sample, "runtime");
1758 double runtime_ms = (double)runtime / NSEC_PER_MSEC;
1759 struct thread *thread = machine__findnew_thread(trace->host,
1762 struct thread_trace *ttrace = thread__trace(thread, trace->output);
1767 ttrace->runtime_ms += runtime_ms;
1768 trace->runtime_ms += runtime_ms;
1769 thread__put(thread);
1773 fprintf(trace->output, "%s: comm=%s,pid=%u,runtime=%" PRIu64 ",vruntime=%" PRIu64 ")\n",
1775 perf_evsel__strval(evsel, sample, "comm"),
1776 (pid_t)perf_evsel__intval(evsel, sample, "pid"),
1778 perf_evsel__intval(evsel, sample, "vruntime"));
1779 thread__put(thread);
1783 static void bpf_output__printer(enum binary_printer_ops op,
1784 unsigned int val, void *extra)
1786 FILE *output = extra;
1787 unsigned char ch = (unsigned char)val;
1790 case BINARY_PRINT_CHAR_DATA:
1791 fprintf(output, "%c", isprint(ch) ? ch : '.');
1793 case BINARY_PRINT_DATA_BEGIN:
1794 case BINARY_PRINT_LINE_BEGIN:
1795 case BINARY_PRINT_ADDR:
1796 case BINARY_PRINT_NUM_DATA:
1797 case BINARY_PRINT_NUM_PAD:
1798 case BINARY_PRINT_SEP:
1799 case BINARY_PRINT_CHAR_PAD:
1800 case BINARY_PRINT_LINE_END:
1801 case BINARY_PRINT_DATA_END:
1807 static void bpf_output__fprintf(struct trace *trace,
1808 struct perf_sample *sample)
1810 print_binary(sample->raw_data, sample->raw_size, 8,
1811 bpf_output__printer, trace->output);
1814 static int trace__event_handler(struct trace *trace, struct perf_evsel *evsel,
1815 union perf_event *event __maybe_unused,
1816 struct perf_sample *sample)
1818 int callchain_ret = 0;
1820 if (sample->callchain) {
1821 callchain_ret = trace__resolve_callchain(trace, evsel, sample, &callchain_cursor);
1822 if (callchain_ret == 0) {
1823 if (callchain_cursor.nr < trace->min_stack)
1829 trace__printf_interrupted_entry(trace, sample);
1830 trace__fprintf_tstamp(trace, sample->time, trace->output);
1832 if (trace->trace_syscalls)
1833 fprintf(trace->output, "( ): ");
1835 fprintf(trace->output, "%s:", evsel->name);
1837 if (perf_evsel__is_bpf_output(evsel)) {
1838 bpf_output__fprintf(trace, sample);
1839 } else if (evsel->tp_format) {
1840 event_format__fprintf(evsel->tp_format, sample->cpu,
1841 sample->raw_data, sample->raw_size,
1845 fprintf(trace->output, ")\n");
1847 if (callchain_ret > 0)
1848 trace__fprintf_callchain(trace, sample);
1849 else if (callchain_ret < 0)
1850 pr_err("Problem processing %s callchain, skipping...\n", perf_evsel__name(evsel));
1855 static void print_location(FILE *f, struct perf_sample *sample,
1856 struct addr_location *al,
1857 bool print_dso, bool print_sym)
1860 if ((verbose || print_dso) && al->map)
1861 fprintf(f, "%s@", al->map->dso->long_name);
1863 if ((verbose || print_sym) && al->sym)
1864 fprintf(f, "%s+0x%" PRIx64, al->sym->name,
1865 al->addr - al->sym->start);
1867 fprintf(f, "0x%" PRIx64, al->addr);
1869 fprintf(f, "0x%" PRIx64, sample->addr);
1872 static int trace__pgfault(struct trace *trace,
1873 struct perf_evsel *evsel,
1874 union perf_event *event __maybe_unused,
1875 struct perf_sample *sample)
1877 struct thread *thread;
1878 struct addr_location al;
1879 char map_type = 'd';
1880 struct thread_trace *ttrace;
1882 int callchain_ret = 0;
1884 thread = machine__findnew_thread(trace->host, sample->pid, sample->tid);
1886 if (sample->callchain) {
1887 callchain_ret = trace__resolve_callchain(trace, evsel, sample, &callchain_cursor);
1888 if (callchain_ret == 0) {
1889 if (callchain_cursor.nr < trace->min_stack)
1895 ttrace = thread__trace(thread, trace->output);
1899 if (evsel->attr.config == PERF_COUNT_SW_PAGE_FAULTS_MAJ)
1904 if (trace->summary_only)
1907 thread__find_addr_location(thread, sample->cpumode, MAP__FUNCTION,
1910 trace__fprintf_entry_head(trace, thread, 0, sample->time, trace->output);
1912 fprintf(trace->output, "%sfault [",
1913 evsel->attr.config == PERF_COUNT_SW_PAGE_FAULTS_MAJ ?
1916 print_location(trace->output, sample, &al, false, true);
1918 fprintf(trace->output, "] => ");
1920 thread__find_addr_location(thread, sample->cpumode, MAP__VARIABLE,
1924 thread__find_addr_location(thread, sample->cpumode,
1925 MAP__FUNCTION, sample->addr, &al);
1933 print_location(trace->output, sample, &al, true, false);
1935 fprintf(trace->output, " (%c%c)\n", map_type, al.level);
1937 if (callchain_ret > 0)
1938 trace__fprintf_callchain(trace, sample);
1939 else if (callchain_ret < 0)
1940 pr_err("Problem processing %s callchain, skipping...\n", perf_evsel__name(evsel));
1944 thread__put(thread);
1948 static bool skip_sample(struct trace *trace, struct perf_sample *sample)
1950 if ((trace->pid_list && intlist__find(trace->pid_list, sample->pid)) ||
1951 (trace->tid_list && intlist__find(trace->tid_list, sample->tid)))
1954 if (trace->pid_list || trace->tid_list)
1960 static void trace__set_base_time(struct trace *trace,
1961 struct perf_evsel *evsel,
1962 struct perf_sample *sample)
1965 * BPF events were not setting PERF_SAMPLE_TIME, so be more robust
1966 * and don't use sample->time unconditionally, we may end up having
1967 * some other event in the future without PERF_SAMPLE_TIME for good
1968 * reason, i.e. we may not be interested in its timestamps, just in
1969 * it taking place, picking some piece of information when it
1970 * appears in our event stream (vfs_getname comes to mind).
1972 if (trace->base_time == 0 && !trace->full_time &&
1973 (evsel->attr.sample_type & PERF_SAMPLE_TIME))
1974 trace->base_time = sample->time;
1977 static int trace__process_sample(struct perf_tool *tool,
1978 union perf_event *event,
1979 struct perf_sample *sample,
1980 struct perf_evsel *evsel,
1981 struct machine *machine __maybe_unused)
1983 struct trace *trace = container_of(tool, struct trace, tool);
1986 tracepoint_handler handler = evsel->handler;
1988 if (skip_sample(trace, sample))
1991 trace__set_base_time(trace, evsel, sample);
1995 handler(trace, evsel, event, sample);
2001 static int parse_target_str(struct trace *trace)
2003 if (trace->opts.target.pid) {
2004 trace->pid_list = intlist__new(trace->opts.target.pid);
2005 if (trace->pid_list == NULL) {
2006 pr_err("Error parsing process id string\n");
2011 if (trace->opts.target.tid) {
2012 trace->tid_list = intlist__new(trace->opts.target.tid);
2013 if (trace->tid_list == NULL) {
2014 pr_err("Error parsing thread id string\n");
2022 static int trace__record(struct trace *trace, int argc, const char **argv)
2024 unsigned int rec_argc, i, j;
2025 const char **rec_argv;
2026 const char * const record_args[] = {
2033 const char * const sc_args[] = { "-e", };
2034 unsigned int sc_args_nr = ARRAY_SIZE(sc_args);
2035 const char * const majpf_args[] = { "-e", "major-faults" };
2036 unsigned int majpf_args_nr = ARRAY_SIZE(majpf_args);
2037 const char * const minpf_args[] = { "-e", "minor-faults" };
2038 unsigned int minpf_args_nr = ARRAY_SIZE(minpf_args);
2040 /* +1 is for the event string below */
2041 rec_argc = ARRAY_SIZE(record_args) + sc_args_nr + 1 +
2042 majpf_args_nr + minpf_args_nr + argc;
2043 rec_argv = calloc(rec_argc + 1, sizeof(char *));
2045 if (rec_argv == NULL)
2049 for (i = 0; i < ARRAY_SIZE(record_args); i++)
2050 rec_argv[j++] = record_args[i];
2052 if (trace->trace_syscalls) {
2053 for (i = 0; i < sc_args_nr; i++)
2054 rec_argv[j++] = sc_args[i];
2056 /* event string may be different for older kernels - e.g., RHEL6 */
2057 if (is_valid_tracepoint("raw_syscalls:sys_enter"))
2058 rec_argv[j++] = "raw_syscalls:sys_enter,raw_syscalls:sys_exit";
2059 else if (is_valid_tracepoint("syscalls:sys_enter"))
2060 rec_argv[j++] = "syscalls:sys_enter,syscalls:sys_exit";
2062 pr_err("Neither raw_syscalls nor syscalls events exist.\n");
2067 if (trace->trace_pgfaults & TRACE_PFMAJ)
2068 for (i = 0; i < majpf_args_nr; i++)
2069 rec_argv[j++] = majpf_args[i];
2071 if (trace->trace_pgfaults & TRACE_PFMIN)
2072 for (i = 0; i < minpf_args_nr; i++)
2073 rec_argv[j++] = minpf_args[i];
2075 for (i = 0; i < (unsigned int)argc; i++)
2076 rec_argv[j++] = argv[i];
2078 return cmd_record(j, rec_argv, NULL);
2081 static size_t trace__fprintf_thread_summary(struct trace *trace, FILE *fp);
2083 static bool perf_evlist__add_vfs_getname(struct perf_evlist *evlist)
2085 struct perf_evsel *evsel = perf_evsel__newtp("probe", "vfs_getname");
2090 if (perf_evsel__field(evsel, "pathname") == NULL) {
2091 perf_evsel__delete(evsel);
2095 evsel->handler = trace__vfs_getname;
2096 perf_evlist__add(evlist, evsel);
2100 static struct perf_evsel *perf_evsel__new_pgfault(u64 config)
2102 struct perf_evsel *evsel;
2103 struct perf_event_attr attr = {
2104 .type = PERF_TYPE_SOFTWARE,
2108 attr.config = config;
2109 attr.sample_period = 1;
2111 event_attr_init(&attr);
2113 evsel = perf_evsel__new(&attr);
2115 evsel->handler = trace__pgfault;
2120 static void trace__handle_event(struct trace *trace, union perf_event *event, struct perf_sample *sample)
2122 const u32 type = event->header.type;
2123 struct perf_evsel *evsel;
2125 if (type != PERF_RECORD_SAMPLE) {
2126 trace__process_event(trace, trace->host, event, sample);
2130 evsel = perf_evlist__id2evsel(trace->evlist, sample->id);
2131 if (evsel == NULL) {
2132 fprintf(trace->output, "Unknown tp ID %" PRIu64 ", skipping...\n", sample->id);
2136 trace__set_base_time(trace, evsel, sample);
2138 if (evsel->attr.type == PERF_TYPE_TRACEPOINT &&
2139 sample->raw_data == NULL) {
2140 fprintf(trace->output, "%s sample with no payload for tid: %d, cpu %d, raw_size=%d, skipping...\n",
2141 perf_evsel__name(evsel), sample->tid,
2142 sample->cpu, sample->raw_size);
2144 tracepoint_handler handler = evsel->handler;
2145 handler(trace, evsel, event, sample);
2149 static int trace__add_syscall_newtp(struct trace *trace)
2152 struct perf_evlist *evlist = trace->evlist;
2153 struct perf_evsel *sys_enter, *sys_exit;
2155 sys_enter = perf_evsel__syscall_newtp("sys_enter", trace__sys_enter);
2156 if (sys_enter == NULL)
2159 if (perf_evsel__init_sc_tp_ptr_field(sys_enter, args))
2160 goto out_delete_sys_enter;
2162 sys_exit = perf_evsel__syscall_newtp("sys_exit", trace__sys_exit);
2163 if (sys_exit == NULL)
2164 goto out_delete_sys_enter;
2166 if (perf_evsel__init_sc_tp_uint_field(sys_exit, ret))
2167 goto out_delete_sys_exit;
2169 perf_evlist__add(evlist, sys_enter);
2170 perf_evlist__add(evlist, sys_exit);
2172 if (callchain_param.enabled && !trace->kernel_syscallchains) {
2174 * We're interested only in the user space callchain
2175 * leading to the syscall, allow overriding that for
2176 * debugging reasons using --kernel_syscall_callchains
2178 sys_exit->attr.exclude_callchain_kernel = 1;
2181 trace->syscalls.events.sys_enter = sys_enter;
2182 trace->syscalls.events.sys_exit = sys_exit;
2188 out_delete_sys_exit:
2189 perf_evsel__delete_priv(sys_exit);
2190 out_delete_sys_enter:
2191 perf_evsel__delete_priv(sys_enter);
2195 static int trace__set_ev_qualifier_filter(struct trace *trace)
2198 char *filter = asprintf_expr_inout_ints("id", !trace->not_ev_qualifier,
2199 trace->ev_qualifier_ids.nr,
2200 trace->ev_qualifier_ids.entries);
2205 if (!perf_evsel__append_filter(trace->syscalls.events.sys_enter, "&&", filter))
2206 err = perf_evsel__append_filter(trace->syscalls.events.sys_exit, "&&", filter);
2216 static int trace__run(struct trace *trace, int argc, const char **argv)
2218 struct perf_evlist *evlist = trace->evlist;
2219 struct perf_evsel *evsel, *pgfault_maj = NULL, *pgfault_min = NULL;
2221 unsigned long before;
2222 const bool forks = argc > 0;
2223 bool draining = false;
2227 if (trace->trace_syscalls && trace__add_syscall_newtp(trace))
2228 goto out_error_raw_syscalls;
2230 if (trace->trace_syscalls)
2231 trace->vfs_getname = perf_evlist__add_vfs_getname(evlist);
2233 if ((trace->trace_pgfaults & TRACE_PFMAJ)) {
2234 pgfault_maj = perf_evsel__new_pgfault(PERF_COUNT_SW_PAGE_FAULTS_MAJ);
2235 if (pgfault_maj == NULL)
2237 perf_evlist__add(evlist, pgfault_maj);
2240 if ((trace->trace_pgfaults & TRACE_PFMIN)) {
2241 pgfault_min = perf_evsel__new_pgfault(PERF_COUNT_SW_PAGE_FAULTS_MIN);
2242 if (pgfault_min == NULL)
2244 perf_evlist__add(evlist, pgfault_min);
2248 perf_evlist__add_newtp(evlist, "sched", "sched_stat_runtime",
2249 trace__sched_stat_runtime))
2250 goto out_error_sched_stat_runtime;
2252 err = perf_evlist__create_maps(evlist, &trace->opts.target);
2254 fprintf(trace->output, "Problems parsing the target to trace, check your options!\n");
2255 goto out_delete_evlist;
2258 err = trace__symbols_init(trace, evlist);
2260 fprintf(trace->output, "Problems initializing symbol libraries!\n");
2261 goto out_delete_evlist;
2264 perf_evlist__config(evlist, &trace->opts, NULL);
2266 if (callchain_param.enabled) {
2267 bool use_identifier = false;
2269 if (trace->syscalls.events.sys_exit) {
2270 perf_evsel__config_callchain(trace->syscalls.events.sys_exit,
2271 &trace->opts, &callchain_param);
2272 use_identifier = true;
2276 perf_evsel__config_callchain(pgfault_maj, &trace->opts, &callchain_param);
2277 use_identifier = true;
2281 perf_evsel__config_callchain(pgfault_min, &trace->opts, &callchain_param);
2282 use_identifier = true;
2285 if (use_identifier) {
2287 * Now we have evsels with different sample_ids, use
2288 * PERF_SAMPLE_IDENTIFIER to map from sample to evsel
2289 * from a fixed position in each ring buffer record.
2291 * As of this the changeset introducing this comment, this
2292 * isn't strictly needed, as the fields that can come before
2293 * PERF_SAMPLE_ID are all used, but we'll probably disable
2294 * some of those for things like copying the payload of
2295 * pointer syscall arguments, and for vfs_getname we don't
2296 * need PERF_SAMPLE_ADDR and PERF_SAMPLE_IP, so do this
2297 * here as a warning we need to use PERF_SAMPLE_IDENTIFIER.
2299 perf_evlist__set_sample_bit(evlist, IDENTIFIER);
2300 perf_evlist__reset_sample_bit(evlist, ID);
2304 signal(SIGCHLD, sig_handler);
2305 signal(SIGINT, sig_handler);
2308 err = perf_evlist__prepare_workload(evlist, &trace->opts.target,
2311 fprintf(trace->output, "Couldn't run the workload!\n");
2312 goto out_delete_evlist;
2316 err = perf_evlist__open(evlist);
2318 goto out_error_open;
2320 err = bpf__apply_obj_config();
2322 char errbuf[BUFSIZ];
2324 bpf__strerror_apply_obj_config(err, errbuf, sizeof(errbuf));
2325 pr_err("ERROR: Apply config to BPF failed: %s\n",
2327 goto out_error_open;
2331 * Better not use !target__has_task() here because we need to cover the
2332 * case where no threads were specified in the command line, but a
2333 * workload was, and in that case we will fill in the thread_map when
2334 * we fork the workload in perf_evlist__prepare_workload.
2336 if (trace->filter_pids.nr > 0)
2337 err = perf_evlist__set_filter_pids(evlist, trace->filter_pids.nr, trace->filter_pids.entries);
2338 else if (thread_map__pid(evlist->threads, 0) == -1)
2339 err = perf_evlist__set_filter_pid(evlist, getpid());
2344 if (trace->ev_qualifier_ids.nr > 0) {
2345 err = trace__set_ev_qualifier_filter(trace);
2349 pr_debug("event qualifier tracepoint filter: %s\n",
2350 trace->syscalls.events.sys_exit->filter);
2353 err = perf_evlist__apply_filters(evlist, &evsel);
2355 goto out_error_apply_filters;
2357 err = perf_evlist__mmap(evlist, trace->opts.mmap_pages, false);
2359 goto out_error_mmap;
2361 if (!target__none(&trace->opts.target))
2362 perf_evlist__enable(evlist);
2365 perf_evlist__start_workload(evlist);
2367 trace->multiple_threads = thread_map__pid(evlist->threads, 0) == -1 ||
2368 evlist->threads->nr > 1 ||
2369 perf_evlist__first(evlist)->attr.inherit;
2371 before = trace->nr_events;
2373 for (i = 0; i < evlist->nr_mmaps; i++) {
2374 union perf_event *event;
2376 while ((event = perf_evlist__mmap_read(evlist, i)) != NULL) {
2377 struct perf_sample sample;
2381 err = perf_evlist__parse_sample(evlist, event, &sample);
2383 fprintf(trace->output, "Can't parse sample, err = %d, skipping...\n", err);
2387 trace__handle_event(trace, event, &sample);
2389 perf_evlist__mmap_consume(evlist, i);
2394 if (done && !draining) {
2395 perf_evlist__disable(evlist);
2401 if (trace->nr_events == before) {
2402 int timeout = done ? 100 : -1;
2404 if (!draining && perf_evlist__poll(evlist, timeout) > 0) {
2405 if (perf_evlist__filter_pollfd(evlist, POLLERR | POLLHUP) == 0)
2415 thread__zput(trace->current);
2417 perf_evlist__disable(evlist);
2421 trace__fprintf_thread_summary(trace, trace->output);
2423 if (trace->show_tool_stats) {
2424 fprintf(trace->output, "Stats:\n "
2425 " vfs_getname : %" PRIu64 "\n"
2426 " proc_getname: %" PRIu64 "\n",
2427 trace->stats.vfs_getname,
2428 trace->stats.proc_getname);
2433 perf_evlist__delete(evlist);
2434 trace->evlist = NULL;
2435 trace->live = false;
2438 char errbuf[BUFSIZ];
2440 out_error_sched_stat_runtime:
2441 tracing_path__strerror_open_tp(errno, errbuf, sizeof(errbuf), "sched", "sched_stat_runtime");
2444 out_error_raw_syscalls:
2445 tracing_path__strerror_open_tp(errno, errbuf, sizeof(errbuf), "raw_syscalls", "sys_(enter|exit)");
2449 perf_evlist__strerror_mmap(evlist, errno, errbuf, sizeof(errbuf));
2453 perf_evlist__strerror_open(evlist, errno, errbuf, sizeof(errbuf));
2456 fprintf(trace->output, "%s\n", errbuf);
2457 goto out_delete_evlist;
2459 out_error_apply_filters:
2460 fprintf(trace->output,
2461 "Failed to set filter \"%s\" on event %s with %d (%s)\n",
2462 evsel->filter, perf_evsel__name(evsel), errno,
2463 strerror_r(errno, errbuf, sizeof(errbuf)));
2464 goto out_delete_evlist;
2467 fprintf(trace->output, "Not enough memory to run!\n");
2468 goto out_delete_evlist;
2471 fprintf(trace->output, "errno=%d,%s\n", errno, strerror(errno));
2472 goto out_delete_evlist;
2475 static int trace__replay(struct trace *trace)
2477 const struct perf_evsel_str_handler handlers[] = {
2478 { "probe:vfs_getname", trace__vfs_getname, },
2480 struct perf_data_file file = {
2482 .mode = PERF_DATA_MODE_READ,
2483 .force = trace->force,
2485 struct perf_session *session;
2486 struct perf_evsel *evsel;
2489 trace->tool.sample = trace__process_sample;
2490 trace->tool.mmap = perf_event__process_mmap;
2491 trace->tool.mmap2 = perf_event__process_mmap2;
2492 trace->tool.comm = perf_event__process_comm;
2493 trace->tool.exit = perf_event__process_exit;
2494 trace->tool.fork = perf_event__process_fork;
2495 trace->tool.attr = perf_event__process_attr;
2496 trace->tool.tracing_data = perf_event__process_tracing_data;
2497 trace->tool.build_id = perf_event__process_build_id;
2499 trace->tool.ordered_events = true;
2500 trace->tool.ordering_requires_timestamps = true;
2502 /* add tid to output */
2503 trace->multiple_threads = true;
2505 session = perf_session__new(&file, false, &trace->tool);
2506 if (session == NULL)
2509 if (symbol__init(&session->header.env) < 0)
2512 trace->host = &session->machines.host;
2514 err = perf_session__set_tracepoints_handlers(session, handlers);
2518 evsel = perf_evlist__find_tracepoint_by_name(session->evlist,
2519 "raw_syscalls:sys_enter");
2520 /* older kernels have syscalls tp versus raw_syscalls */
2522 evsel = perf_evlist__find_tracepoint_by_name(session->evlist,
2523 "syscalls:sys_enter");
2526 (perf_evsel__init_syscall_tp(evsel, trace__sys_enter) < 0 ||
2527 perf_evsel__init_sc_tp_ptr_field(evsel, args))) {
2528 pr_err("Error during initialize raw_syscalls:sys_enter event\n");
2532 evsel = perf_evlist__find_tracepoint_by_name(session->evlist,
2533 "raw_syscalls:sys_exit");
2535 evsel = perf_evlist__find_tracepoint_by_name(session->evlist,
2536 "syscalls:sys_exit");
2538 (perf_evsel__init_syscall_tp(evsel, trace__sys_exit) < 0 ||
2539 perf_evsel__init_sc_tp_uint_field(evsel, ret))) {
2540 pr_err("Error during initialize raw_syscalls:sys_exit event\n");
2544 evlist__for_each(session->evlist, evsel) {
2545 if (evsel->attr.type == PERF_TYPE_SOFTWARE &&
2546 (evsel->attr.config == PERF_COUNT_SW_PAGE_FAULTS_MAJ ||
2547 evsel->attr.config == PERF_COUNT_SW_PAGE_FAULTS_MIN ||
2548 evsel->attr.config == PERF_COUNT_SW_PAGE_FAULTS))
2549 evsel->handler = trace__pgfault;
2552 err = parse_target_str(trace);
2558 err = perf_session__process_events(session);
2560 pr_err("Failed to process events, error %d", err);
2562 else if (trace->summary)
2563 trace__fprintf_thread_summary(trace, trace->output);
2566 perf_session__delete(session);
2571 static size_t trace__fprintf_threads_header(FILE *fp)
2575 printed = fprintf(fp, "\n Summary of events:\n\n");
2580 DEFINE_RESORT_RB(syscall_stats, a->msecs > b->msecs,
2581 struct stats *stats;
2586 struct int_node *source = rb_entry(nd, struct int_node, rb_node);
2587 struct stats *stats = source->priv;
2589 entry->syscall = source->i;
2590 entry->stats = stats;
2591 entry->msecs = stats ? (u64)stats->n * (avg_stats(stats) / NSEC_PER_MSEC) : 0;
2594 static size_t thread__dump_stats(struct thread_trace *ttrace,
2595 struct trace *trace, FILE *fp)
2600 DECLARE_RESORT_RB_INTLIST(syscall_stats, ttrace->syscall_stats);
2602 if (syscall_stats == NULL)
2605 printed += fprintf(fp, "\n");
2607 printed += fprintf(fp, " syscall calls total min avg max stddev\n");
2608 printed += fprintf(fp, " (msec) (msec) (msec) (msec) (%%)\n");
2609 printed += fprintf(fp, " --------------- -------- --------- --------- --------- --------- ------\n");
2611 resort_rb__for_each(nd, syscall_stats) {
2612 struct stats *stats = syscall_stats_entry->stats;
2614 double min = (double)(stats->min) / NSEC_PER_MSEC;
2615 double max = (double)(stats->max) / NSEC_PER_MSEC;
2616 double avg = avg_stats(stats);
2618 u64 n = (u64) stats->n;
2620 pct = avg ? 100.0 * stddev_stats(stats)/avg : 0.0;
2621 avg /= NSEC_PER_MSEC;
2623 sc = &trace->syscalls.table[syscall_stats_entry->syscall];
2624 printed += fprintf(fp, " %-15s", sc->name);
2625 printed += fprintf(fp, " %8" PRIu64 " %9.3f %9.3f %9.3f",
2626 n, syscall_stats_entry->msecs, min, avg);
2627 printed += fprintf(fp, " %9.3f %9.2f%%\n", max, pct);
2631 resort_rb__delete(syscall_stats);
2632 printed += fprintf(fp, "\n\n");
2637 static size_t trace__fprintf_thread(FILE *fp, struct thread *thread, struct trace *trace)
2640 struct thread_trace *ttrace = thread__priv(thread);
2646 ratio = (double)ttrace->nr_events / trace->nr_events * 100.0;
2648 printed += fprintf(fp, " %s (%d), ", thread__comm_str(thread), thread->tid);
2649 printed += fprintf(fp, "%lu events, ", ttrace->nr_events);
2650 printed += fprintf(fp, "%.1f%%", ratio);
2652 printed += fprintf(fp, ", %lu majfaults", ttrace->pfmaj);
2654 printed += fprintf(fp, ", %lu minfaults", ttrace->pfmin);
2656 printed += fprintf(fp, ", %.3f msec\n", ttrace->runtime_ms);
2657 else if (fputc('\n', fp) != EOF)
2660 printed += thread__dump_stats(ttrace, trace, fp);
2665 static unsigned long thread__nr_events(struct thread_trace *ttrace)
2667 return ttrace ? ttrace->nr_events : 0;
2670 DEFINE_RESORT_RB(threads, (thread__nr_events(a->thread->priv) < thread__nr_events(b->thread->priv)),
2671 struct thread *thread;
2674 entry->thread = rb_entry(nd, struct thread, rb_node);
2677 static size_t trace__fprintf_thread_summary(struct trace *trace, FILE *fp)
2679 DECLARE_RESORT_RB_MACHINE_THREADS(threads, trace->host);
2680 size_t printed = trace__fprintf_threads_header(fp);
2683 if (threads == NULL) {
2684 fprintf(fp, "%s", "Error sorting output by nr_events!\n");
2688 resort_rb__for_each(nd, threads)
2689 printed += trace__fprintf_thread(fp, threads_entry->thread, trace);
2691 resort_rb__delete(threads);
2696 static int trace__set_duration(const struct option *opt, const char *str,
2697 int unset __maybe_unused)
2699 struct trace *trace = opt->value;
2701 trace->duration_filter = atof(str);
2705 static int trace__set_filter_pids(const struct option *opt, const char *str,
2706 int unset __maybe_unused)
2710 struct trace *trace = opt->value;
2712 * FIXME: introduce a intarray class, plain parse csv and create a
2713 * { int nr, int entries[] } struct...
2715 struct intlist *list = intlist__new(str);
2720 i = trace->filter_pids.nr = intlist__nr_entries(list) + 1;
2721 trace->filter_pids.entries = calloc(i, sizeof(pid_t));
2723 if (trace->filter_pids.entries == NULL)
2726 trace->filter_pids.entries[0] = getpid();
2728 for (i = 1; i < trace->filter_pids.nr; ++i)
2729 trace->filter_pids.entries[i] = intlist__entry(list, i - 1)->i;
2731 intlist__delete(list);
2737 static int trace__open_output(struct trace *trace, const char *filename)
2741 if (!stat(filename, &st) && st.st_size) {
2742 char oldname[PATH_MAX];
2744 scnprintf(oldname, sizeof(oldname), "%s.old", filename);
2746 rename(filename, oldname);
2749 trace->output = fopen(filename, "w");
2751 return trace->output == NULL ? -errno : 0;
2754 static int parse_pagefaults(const struct option *opt, const char *str,
2755 int unset __maybe_unused)
2757 int *trace_pgfaults = opt->value;
2759 if (strcmp(str, "all") == 0)
2760 *trace_pgfaults |= TRACE_PFMAJ | TRACE_PFMIN;
2761 else if (strcmp(str, "maj") == 0)
2762 *trace_pgfaults |= TRACE_PFMAJ;
2763 else if (strcmp(str, "min") == 0)
2764 *trace_pgfaults |= TRACE_PFMIN;
2771 static void evlist__set_evsel_handler(struct perf_evlist *evlist, void *handler)
2773 struct perf_evsel *evsel;
2775 evlist__for_each(evlist, evsel)
2776 evsel->handler = handler;
2779 int cmd_trace(int argc, const char **argv, const char *prefix __maybe_unused)
2781 const char *trace_usage[] = {
2782 "perf trace [<options>] [<command>]",
2783 "perf trace [<options>] -- <command> [<options>]",
2784 "perf trace record [<options>] [<command>]",
2785 "perf trace record [<options>] -- <command> [<options>]",
2788 struct trace trace = {
2797 .user_freq = UINT_MAX,
2798 .user_interval = ULLONG_MAX,
2799 .no_buffering = true,
2800 .mmap_pages = UINT_MAX,
2801 .proc_map_timeout = 500,
2805 .trace_syscalls = true,
2806 .kernel_syscallchains = false,
2807 .max_stack = UINT_MAX,
2809 const char *output_name = NULL;
2810 const char *ev_qualifier_str = NULL;
2811 const struct option trace_options[] = {
2812 OPT_CALLBACK(0, "event", &trace.evlist, "event",
2813 "event selector. use 'perf list' to list available events",
2814 parse_events_option),
2815 OPT_BOOLEAN(0, "comm", &trace.show_comm,
2816 "show the thread COMM next to its id"),
2817 OPT_BOOLEAN(0, "tool_stats", &trace.show_tool_stats, "show tool stats"),
2818 OPT_STRING('e', "expr", &ev_qualifier_str, "expr", "list of syscalls to trace"),
2819 OPT_STRING('o', "output", &output_name, "file", "output file name"),
2820 OPT_STRING('i', "input", &input_name, "file", "Analyze events in file"),
2821 OPT_STRING('p', "pid", &trace.opts.target.pid, "pid",
2822 "trace events on existing process id"),
2823 OPT_STRING('t', "tid", &trace.opts.target.tid, "tid",
2824 "trace events on existing thread id"),
2825 OPT_CALLBACK(0, "filter-pids", &trace, "CSV list of pids",
2826 "pids to filter (by the kernel)", trace__set_filter_pids),
2827 OPT_BOOLEAN('a', "all-cpus", &trace.opts.target.system_wide,
2828 "system-wide collection from all CPUs"),
2829 OPT_STRING('C', "cpu", &trace.opts.target.cpu_list, "cpu",
2830 "list of cpus to monitor"),
2831 OPT_BOOLEAN(0, "no-inherit", &trace.opts.no_inherit,
2832 "child tasks do not inherit counters"),
2833 OPT_CALLBACK('m', "mmap-pages", &trace.opts.mmap_pages, "pages",
2834 "number of mmap data pages",
2835 perf_evlist__parse_mmap_pages),
2836 OPT_STRING('u', "uid", &trace.opts.target.uid_str, "user",
2838 OPT_CALLBACK(0, "duration", &trace, "float",
2839 "show only events with duration > N.M ms",
2840 trace__set_duration),
2841 OPT_BOOLEAN(0, "sched", &trace.sched, "show blocking scheduler events"),
2842 OPT_INCR('v', "verbose", &verbose, "be more verbose"),
2843 OPT_BOOLEAN('T', "time", &trace.full_time,
2844 "Show full timestamp, not time relative to first start"),
2845 OPT_BOOLEAN('s', "summary", &trace.summary_only,
2846 "Show only syscall summary with statistics"),
2847 OPT_BOOLEAN('S', "with-summary", &trace.summary,
2848 "Show all syscalls and summary with statistics"),
2849 OPT_CALLBACK_DEFAULT('F', "pf", &trace.trace_pgfaults, "all|maj|min",
2850 "Trace pagefaults", parse_pagefaults, "maj"),
2851 OPT_BOOLEAN(0, "syscalls", &trace.trace_syscalls, "Trace syscalls"),
2852 OPT_BOOLEAN('f', "force", &trace.force, "don't complain, do it"),
2853 OPT_CALLBACK(0, "call-graph", &trace.opts,
2854 "record_mode[,record_size]", record_callchain_help,
2855 &record_parse_callchain_opt),
2856 OPT_BOOLEAN(0, "kernel-syscall-graph", &trace.kernel_syscallchains,
2857 "Show the kernel callchains on the syscall exit path"),
2858 OPT_UINTEGER(0, "min-stack", &trace.min_stack,
2859 "Set the minimum stack depth when parsing the callchain, "
2860 "anything below the specified depth will be ignored."),
2861 OPT_UINTEGER(0, "max-stack", &trace.max_stack,
2862 "Set the maximum stack depth when parsing the callchain, "
2863 "anything beyond the specified depth will be ignored. "
2864 "Default: kernel.perf_event_max_stack or " __stringify(PERF_MAX_STACK_DEPTH)),
2865 OPT_UINTEGER(0, "proc-map-timeout", &trace.opts.proc_map_timeout,
2866 "per thread proc mmap processing timeout in ms"),
2869 bool __maybe_unused max_stack_user_set = true;
2870 bool mmap_pages_user_set = true;
2871 const char * const trace_subcommands[] = { "record", NULL };
2875 signal(SIGSEGV, sighandler_dump_stack);
2876 signal(SIGFPE, sighandler_dump_stack);
2878 trace.evlist = perf_evlist__new();
2879 trace.sctbl = syscalltbl__new();
2881 if (trace.evlist == NULL || trace.sctbl == NULL) {
2882 pr_err("Not enough memory to run!\n");
2887 argc = parse_options_subcommand(argc, argv, trace_options, trace_subcommands,
2888 trace_usage, PARSE_OPT_STOP_AT_NON_OPTION);
2890 err = bpf__setup_stdout(trace.evlist);
2892 bpf__strerror_setup_stdout(trace.evlist, err, bf, sizeof(bf));
2893 pr_err("ERROR: Setup BPF stdout failed: %s\n", bf);
2899 if (trace.trace_pgfaults) {
2900 trace.opts.sample_address = true;
2901 trace.opts.sample_time = true;
2904 if (trace.opts.mmap_pages == UINT_MAX)
2905 mmap_pages_user_set = false;
2907 if (trace.max_stack == UINT_MAX) {
2908 trace.max_stack = input_name ? PERF_MAX_STACK_DEPTH : sysctl_perf_event_max_stack;
2909 max_stack_user_set = false;
2912 #ifdef HAVE_DWARF_UNWIND_SUPPORT
2913 if ((trace.min_stack || max_stack_user_set) && !callchain_param.enabled)
2914 record_opts__parse_callchain(&trace.opts, &callchain_param, "dwarf", false);
2917 if (callchain_param.enabled) {
2918 if (!mmap_pages_user_set && geteuid() == 0)
2919 trace.opts.mmap_pages = perf_event_mlock_kb_in_pages() * 4;
2921 symbol_conf.use_callchain = true;
2924 if (trace.evlist->nr_entries > 0)
2925 evlist__set_evsel_handler(trace.evlist, trace__event_handler);
2927 if ((argc >= 1) && (strcmp(argv[0], "record") == 0))
2928 return trace__record(&trace, argc-1, &argv[1]);
2930 /* summary_only implies summary option, but don't overwrite summary if set */
2931 if (trace.summary_only)
2932 trace.summary = trace.summary_only;
2934 if (!trace.trace_syscalls && !trace.trace_pgfaults &&
2935 trace.evlist->nr_entries == 0 /* Was --events used? */) {
2936 pr_err("Please specify something to trace.\n");
2940 if (!trace.trace_syscalls && ev_qualifier_str) {
2941 pr_err("The -e option can't be used with --no-syscalls.\n");
2945 if (output_name != NULL) {
2946 err = trace__open_output(&trace, output_name);
2948 perror("failed to create output file");
2953 trace.open_id = syscalltbl__id(trace.sctbl, "open");
2955 if (ev_qualifier_str != NULL) {
2956 const char *s = ev_qualifier_str;
2957 struct strlist_config slist_config = {
2958 .dirname = system_path(STRACE_GROUPS_DIR),
2961 trace.not_ev_qualifier = *s == '!';
2962 if (trace.not_ev_qualifier)
2964 trace.ev_qualifier = strlist__new(s, &slist_config);
2965 if (trace.ev_qualifier == NULL) {
2966 fputs("Not enough memory to parse event qualifier",
2972 err = trace__validate_ev_qualifier(&trace);
2977 err = target__validate(&trace.opts.target);
2979 target__strerror(&trace.opts.target, err, bf, sizeof(bf));
2980 fprintf(trace.output, "%s", bf);
2984 err = target__parse_uid(&trace.opts.target);
2986 target__strerror(&trace.opts.target, err, bf, sizeof(bf));
2987 fprintf(trace.output, "%s", bf);
2991 if (!argc && target__none(&trace.opts.target))
2992 trace.opts.target.system_wide = true;
2995 err = trace__replay(&trace);
2997 err = trace__run(&trace, argc, argv);
3000 if (output_name != NULL)
3001 fclose(trace.output);