kernel/kprobes.c

File Facts

System

Linux kernel

Corpus path

kernel/kprobes.c

Extension

.c

Size

77423 bytes

Lines

3076

Domain

Core OS

Bucket

Scheduler, Processes, Timers, Sync, And Syscalls

Inferred role

Core OS: operation-table or driver-model contract

Status

pattern implementation candidate

Why This File Exists

Core operating-system implementation surface: boot, tasks, memory, VFS, syscall-facing interfaces, synchronization, credentials, and isolation.

• Core operating-system implementation surface: boot, tasks, memory, VFS, syscall-facing interfaces, synchronization, credentials, and isolation.
• Defines an operation table; this is where Linux turns generic core objects into subsystem-specific behavior.
• Uses kernel synchronization; read lock ordering, sleepability, and interrupt context assumptions before translating.
• Allocates kernel memory; connect allocation flags and lifetime to context constraints.
• Defines or uses C structs; map object ownership, embedded links, reference counts, and lock ownership.

Dependency Surface

• linux/kprobes.h
• linux/hash.h
• linux/init.h
• linux/slab.h
• linux/stddef.h
• linux/export.h
• linux/kallsyms.h
• linux/freezer.h
• linux/seq_file.h
• linux/debugfs.h
• linux/sysctl.h
• linux/kdebug.h
• linux/kthread.h
• linux/memory.h
• linux/ftrace.h
• linux/cpu.h
• linux/jump_label.h
• linux/static_call.h
• linux/perf_event.h
• linux/execmem.h
• linux/cleanup.h
• linux/wait.h
• asm/sections.h
• asm/cacheflush.h
• asm/errno.h
• linux/uaccess.h

Detected Declarations

• struct kprobe_insn_page
• enum kprobe_slot_state
• function kprobe_lookup_name
• function slots_per_page
• function free_insn_page
• function list_for_each_entry_rcu
• function collect_one_slot
• function collect_garbage_slots
• function list_for_each_entry_safe
• function __find_insn_page
• function __free_insn_slot
• function __is_insn_slot_addr
• function kprobe_cache_get_kallsym
• function free_optinsn_page
• function set_kprobe_instance
• function reset_kprobe_instance
• function lockdep_is_held
• function kprobe_aggrprobe
• function kprobe_unused
• function copy_kprobe
• function opt_pre_handler
• function list_for_each_entry_rcu
• function free_aggr_kprobe
• function kprobe_optready
• function kprobe_disarmed
• function kprobe_queued
• function Optimize
• function Unoptimize
• function do_free_cleaned_kprobes
• function list_for_each_entry_safe
• function kprobe_optimizer
• function scoped_guard
• function kprobe_optimizer_thread
• function kick_kprobe_optimizer
• function wait_for_kprobe_optimizer_locked
• function wait_for_kprobe_optimizer
• function optprobe_queued_unopt
• function list_for_each_entry
• function optimize_kprobe
• function force_unoptimize_kprobe
• function unoptimize_kprobe
• function reuse_unused_kprobe
• function kill_optimized_kprobe
• function __prepare_optimized_kprobe
• function prepare_optimized_kprobe
• function try_to_optimize_kprobe
• function optimize_all_kprobes
• function unoptimize_all_kprobes

Annotated Snippet

static const struct file_operations fops_kp = {
	.read =         read_enabled_file_bool,
	.write =        write_enabled_file_bool,
	.llseek =	default_llseek,
};

static int __init debugfs_kprobe_init(void)
{
	struct dentry *dir;

	dir = debugfs_create_dir("kprobes", NULL);

	debugfs_create_file("list", 0400, dir, NULL, &kprobes_fops);

	debugfs_create_file("enabled", 0600, dir, NULL, &fops_kp);

	debugfs_create_file("blacklist", 0400, dir, NULL,
			    &kprobe_blacklist_fops);

	return 0;
}

late_initcall(debugfs_kprobe_init);
#endif /* CONFIG_DEBUG_FS */

Annotation

• Immediate include surface: `linux/kprobes.h`, `linux/hash.h`, `linux/init.h`, `linux/slab.h`, `linux/stddef.h`, `linux/export.h`, `linux/kallsyms.h`, `linux/freezer.h`.
• Detected declarations: `struct kprobe_insn_page`, `enum kprobe_slot_state`, `function kprobe_lookup_name`, `function slots_per_page`, `function free_insn_page`, `function list_for_each_entry_rcu`, `function collect_one_slot`, `function collect_garbage_slots`, `function list_for_each_entry_safe`, `function __find_insn_page`.
• Atlas domain: Core OS / Scheduler, Processes, Timers, Sync, And Syscalls.
• Implementation status: pattern implementation candidate.
• Synchronization appears in or near this file; preserve lock ordering, sleepability, and interrupt-context constraints.

Implementation Notes

• This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
• Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
• Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.