1 // SPDX-License-Identifier: GPL-2.0
2 // Copyright (c) 2022 Jingxiang Zeng
3 #include <vmlinux.h>
4 #include <bpf/bpf_helpers.h>
5 #include <bpf/bpf_core_read.h>
6 #include <bpf/bpf_tracing.h>
7
8 #include "oomkill.h"
9
10 struct {
11 __uint(type, BPF_MAP_TYPE_PERF_EVENT_ARRAY);
12 __uint(key_size, sizeof(u32));
13 __uint(value_size, sizeof(u32));
14 } events SEC(".maps");
15
16 SEC("kprobe/oom_kill_process")
BPF_KPROBE(oom_kill_process,struct oom_control * oc,const char * message)17 int BPF_KPROBE(oom_kill_process, struct oom_control *oc, const char *message)
18 {
19 struct data_t data;
20
21 data.fpid = bpf_get_current_pid_tgid() >> 32;
22 data.tpid = BPF_CORE_READ(oc, chosen, tgid);
23 data.pages = BPF_CORE_READ(oc, totalpages);
24 bpf_get_current_comm(&data.fcomm, sizeof(data.fcomm));
25 bpf_probe_read_kernel(&data.tcomm, sizeof(data.tcomm), BPF_CORE_READ(oc, chosen, comm));
26 bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, &data, sizeof(data));
27 return 0;
28 }
29
30 char LICENSE[] SEC("license") = "GPL";
31