From: "Jose E. Marchesi" <jose.marchesi@oracle.com>
To: James Hilliard <james.hilliard1@gmail.com>
Cc: Andrii Nakryiko <andrii.nakryiko@gmail.com>,
bpf <bpf@vger.kernel.org>,
david.faust@oracle.com
Subject: Re: bpftool gen object doesn't handle GCC built BPF ELF files
Date: Sun, 10 Jul 2022 22:22:10 +0200 [thread overview]
Message-ID: <87bktwvhu5.fsf@oracle.com> (raw)
In-Reply-To: <87fsj8vjcy.fsf@oracle.com> (Jose E. Marchesi's message of "Sun, 10 Jul 2022 21:49:17 +0200")
>>> On Sun, Jul 10, 2022 at 3:38 AM Jose E. Marchesi
>>> <jose.marchesi@oracle.com> wrote:
>>>>
>>>>
>>>> > On Sat, Jul 9, 2022 at 4:41 PM Jose E. Marchesi
>>>> > <jose.marchesi@oracle.com> wrote:
>>>> >>
>>>> >>
>>>> >> > On Sat, Jul 9, 2022 at 2:32 PM James Hilliard <james.hilliard1@gmail.com> wrote:
>>>> >> >>
>>>> >> >> On Sat, Jul 9, 2022 at 2:21 PM Jose E. Marchesi
>>>> >> >> <jose.marchesi@oracle.com> wrote:
>>>> >> >> >
>>>> >> >> >
>>>> >> >> > > On Sat, Jul 9, 2022 at 11:24 AM Jose E. Marchesi
>>>> >> >> > > <jose.marchesi@oracle.com> wrote:
>>>> >> >> > >>
>>>> >> >> > >>
>>>> >> >> > >> > On Fri, Jul 8, 2022 at 12:33 PM Jose E. Marchesi
>>>> >> >> > >> > <jose.marchesi@oracle.com> wrote:
>>>> >> >> > >> >>
>>>> >> >> > >> >>
>>>> >> >> > >> >> >> On Wed, Jul 6, 2022 at 10:13 AM James Hilliard
>>>> >> >> > >> >> >> <james.hilliard1@gmail.com> wrote:
>>>> >> >> > >> >> >>>
>>>> >> >> > >> >> >>> Note I'm testing with the following patches:
>>>> >> >> > >> >> >>>
>> https://lore.kernel.org/bpf/20220706111839.1247911-1-james.hilliard1@gmail.com/
>>>> >> >> > >> >> >>>
>> https://lore.kernel.org/bpf/20220706140623.2917858-1-james.hilliard1@gmail.com/
>>>> >> >> > >> >> >>>
>>>> >> >> > >> >> >>> It would appear there's some compatibility issues with bpftool gen and
>>>> >> >> > >> >> >>> GCC, not sure what side though is wrong here:
>>>> >> >> > >> >> >>> /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> >> >> > >> >> >>> gen object src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>>> >> >> > >> >> >>> src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.unstripped.o
>>>> >> >> > >> >> >>> libbpf: failed to find BTF info for global/extern symbol 'sd_restrictif_i'
>>>> >> >> > >> >> >>> Error: failed to link
>>>> >> >> > >> >> >>> 'src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.unstripped.o':
>>>> >> >> > >> >> >>> Unknown error -2 (-2)
>>>> >> >> > >> >> >>>
>>>> >> >> > >> >> >>> Relevant difference seems to be this:
>>>> >> >> > >> >> >>> GCC:
>>>> >> >> > >> >> >>> [55] FUNC 'sd_restrictif_i' type_id=47 linkage=static
>>>> >> >> > >> >> >>> Clang:
>>>> >> >> > >> >> >>> [27] FUNC 'sd_restrictif_i' type_id=26 linkage=global
>>>> >> >> > >> >> >
>>>> >> >> > >> >> > For functions GCC generates a BTF_KIND_FUNC entry, which has no linkage
>>>> >> >> > >> >> > information, or so we thought: I just looked at bpftool/btf.c and I
>>>> >> >> > >> >> > found the linkage info for function types is expected to be encoded in
>>>> >> >> > >> >> > the vlen field of BTF_KIND_FUNC entries (why not adding a btf_func
>>>> >> >> > >> >> > instead???) which is surprising to say the least.
>>>> >> >> > >> >> >
>>>> >> >> > >> >> > We are changing GCC to encode the linkage info in vlen for these types.
>>>> >> >> > >> >> > Thanks for reporting this.
>>>> >> >> > >> >>
>>>> >> >> > >> >> Patch sent to GCC upstream:
>>>> >> >> > >> >> https://gcc.gnu.org/pipermail/gcc-patches/2022-July/598090.html
>>>> >> >> > >> >
>>>> >> >> > >> > I applied that patch on top of GCC 12.1.0 and it appears to fix the
>>>> >> >> > >> > bpftool gen object bug.
>>>> >> >> > >> >
>>>> >> >> > >> > I am however now hitting a different error during skeleton generation:
>>>> >> >> > >> > /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> >> >> > >> > gen skeleton src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>>> >> >> > >> > libbpf: elf: skipping unrecognized data section(9) .comment
>>>> >> >> > >> > libbpf: failed to alloc map 'restrict.bss' content buffer: -22
>>>> >> >> > >> > Error: failed to open BPF object file: Invalid argument
>>>> >> >> > >>
>>>> >> >> > >> What is the size of the .bss section in the object file? Try with:
>>>> >> >> > >>
>>>> >> >> > >> $ size restrict-ifaces.bpf.o
>>>> >> >> > >
>>>> >> >> > > $ size
>>>> >> > output/build/systemd-custom/build/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>>> >> >> > > text data bss dec hex filename
>>>> >> >> > > 386 25 0 411 19b
>>>> >> >> > >
>> output/build/systemd-custom/build/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>>> >> >> >
>>>> >> >> > Right, so the .bss section is empty. I see a `const volatile unsigned
>>>> >> >> > char is_allow_list = 0;' in restrict-ifaces.bpf.c, but that goes to
>>>> >> >> > .data and not to .bss, as expected.
>>>> >> >> >
>>>> >> >> > If you build restrict-ifaces.bpf.o with LLVM, is the bss still empty? I
>>>> >> >> > don't think the code in libbpf.c even checks for this eventuality...
>>>> >> >>
>>>> >> >> LLVM version(which skeleton generation works with):
>>>> >> >> $ size restrict-ifaces.bpf.o
>>>> >> >> text data bss dec hex filename
>>>> >> >> 323 24 0 347 15b restrict-ifaces.bpf.o
>>>> >> >>
>>>> >> >> $ /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> >> >> btf dump file restrict-ifaces.bpf.o format raw
>>>> >> >> [1] PTR '(anon)' type_id=3
>>>> >> >> [2] INT 'int' size=4 bits_offset=0 nr_bits=32 encoding=SIGNED
>>>> >> >> [3] ARRAY '(anon)' type_id=2 index_type_id=4 nr_elems=1
>>>> >> >> [4] INT '__ARRAY_SIZE_TYPE__' size=4 bits_offset=0 nr_bits=32 encoding=(none)
>>>> >> >> [5] PTR '(anon)' type_id=6
>>>> >> >> [6] TYPEDEF '__u32' type_id=7
>>>> >> >> [7] INT 'unsigned int' size=4 bits_offset=0 nr_bits=32 encoding=(none)
>>>> >> >> [8] PTR '(anon)' type_id=9
>>>> >> >> [9] TYPEDEF '__u8' type_id=10
>>>> >> >> [10] INT 'unsigned char' size=1 bits_offset=0 nr_bits=8 encoding=(none)
>>>> >> >> [11] STRUCT '(anon)' size=24 vlen=3
>>>> >> >> 'type' type_id=1 bits_offset=0
>>>> >> >> 'key' type_id=5 bits_offset=64
>>>> >> >> 'value' type_id=8 bits_offset=128
>>>> >> >> [12] VAR 'sd_restrictif' type_id=11, linkage=global
>>>> >> >> [13] PTR '(anon)' type_id=14
>>>> >> >> [14] CONST '(anon)' type_id=15
>>>> >> >> [15] STRUCT '__sk_buff' size=192 vlen=33
>>>> >> >> 'len' type_id=6 bits_offset=0
>>>> >> >> 'pkt_type' type_id=6 bits_offset=32
>>>> >> >> 'mark' type_id=6 bits_offset=64
>>>> >> >> 'queue_mapping' type_id=6 bits_offset=96
>>>> >> >> 'protocol' type_id=6 bits_offset=128
>>>> >> >> 'vlan_present' type_id=6 bits_offset=160
>>>> >> >> 'vlan_tci' type_id=6 bits_offset=192
>>>> >> >> 'vlan_proto' type_id=6 bits_offset=224
>>>> >> >> 'priority' type_id=6 bits_offset=256
>>>> >> >> 'ingress_ifindex' type_id=6 bits_offset=288
>>>> >> >> 'ifindex' type_id=6 bits_offset=320
>>>> >> >> 'tc_index' type_id=6 bits_offset=352
>>>> >> >> 'cb' type_id=16 bits_offset=384
>>>> >> >> 'hash' type_id=6 bits_offset=544
>>>> >> >> 'tc_classid' type_id=6 bits_offset=576
>>>> >> >> 'data' type_id=6 bits_offset=608
>>>> >> >> 'data_end' type_id=6 bits_offset=640
>>>> >> >> 'napi_id' type_id=6 bits_offset=672
>>>> >> >> 'family' type_id=6 bits_offset=704
>>>> >> >> 'remote_ip4' type_id=6 bits_offset=736
>>>> >> >> 'local_ip4' type_id=6 bits_offset=768
>>>> >> >> 'remote_ip6' type_id=17 bits_offset=800
>>>> >> >> 'local_ip6' type_id=17 bits_offset=928
>>>> >> >> 'remote_port' type_id=6 bits_offset=1056
>>>> >> >> 'local_port' type_id=6 bits_offset=1088
>>>> >> >> 'data_meta' type_id=6 bits_offset=1120
>>>> >> >> '(anon)' type_id=18 bits_offset=1152
>>>> >> >> 'tstamp' type_id=20 bits_offset=1216
>>>> >> >> 'wire_len' type_id=6 bits_offset=1280
>>>> >> >> 'gso_segs' type_id=6 bits_offset=1312
>>>> >> >> '(anon)' type_id=22 bits_offset=1344
>>>> >> >> 'gso_size' type_id=6 bits_offset=1408
>>>> >> >> 'hwtstamp' type_id=20 bits_offset=1472
>>>> >> >> [16] ARRAY '(anon)' type_id=6 index_type_id=4 nr_elems=5
>>>> >> >> [17] ARRAY '(anon)' type_id=6 index_type_id=4 nr_elems=4
>>>> >> >> [18] UNION '(anon)' size=8 vlen=1
>>>> >> >> 'flow_keys' type_id=19 bits_offset=0
>>>> >> >> [19] PTR '(anon)' type_id=34
>>>> >> >> [20] TYPEDEF '__u64' type_id=21
>>>> >> >> [21] INT 'unsigned long long' size=8 bits_offset=0 nr_bits=64 encoding=(none)
>>>> >> >> [22] UNION '(anon)' size=8 vlen=1
>>>> >> >> 'sk' type_id=23 bits_offset=0
>>>> >> >> [23] PTR '(anon)' type_id=35
>>>> >> >> [24] FUNC_PROTO '(anon)' ret_type_id=2 vlen=1
>>>> >> >> 'sk' type_id=13
>>>> >> >> [25] FUNC 'sd_restrictif_e' type_id=24 linkage=global
>>>> >> >> [26] FUNC 'sd_restrictif_i' type_id=24 linkage=global
>>>> >> >> [27] CONST '(anon)' type_id=28
>>>> >> >> [28] VOLATILE '(anon)' type_id=9
>>>> >> >> [29] VAR 'is_allow_list' type_id=27, linkage=global
>>>> >> >> [30] CONST '(anon)' type_id=31
>>>> >> >> [31] INT 'char' size=1 bits_offset=0 nr_bits=8 encoding=SIGNED
>>>> >> >> [32] ARRAY '(anon)' type_id=30 index_type_id=4 nr_elems=18
>>>> >> >> [33] VAR '_license' type_id=32, linkage=static
>>>> >> >> [34] FWD 'bpf_flow_keys' fwd_kind=struct
>>>> >> >> [35] FWD 'bpf_sock' fwd_kind=struct
>>>> >> >> [36] DATASEC '.rodata' size=1 vlen=1
>>>> >> >> type_id=29 offset=0 size=1 (VAR 'is_allow_list')
>>>> >> >> [37] DATASEC 'license' size=18 vlen=1
>>>> >> >> type_id=33 offset=0 size=18 (VAR '_license')
>>>> >> >> [38] DATASEC '.maps' size=24 vlen=1
>>>> >> >> type_id=12 offset=0 size=24 (VAR 'sd_restrictif')
>>>> >> >>
>>>> >> >
>>>> >> > Skeleton generation debug output for GCC(failing) and LLVM(working)
>>>> >> > which may be helpful:
>>>> >>
>>>> >> Indeed it was helpful :)
>>>> >>
>>>> >> The GNU assembler generates an empty .bss section. This is a well
>>>> >> established behavior in GAS that happens in all supported targets.
>>>> >>
>>>> >> The LLVM assembler doesn't generate an empty .bss section.
>>>> >>
>>>> >> bpftool chokes on the empty .bss section.
>>>> >>
>>>> >> In this case I would suggest to fix bpf_object__init_global_data_maps in
>>>> >> order to skip empty sections.
>>>> >>
>>>> >> Something like this:
>>>> >
>>>> > Hmm, that seems to segfault:
>>>>
>>>> Yes, I see in bpf_object__elf_collect that sec_desc->data is not
>>>> initialized when a section is not recognized. In this case, this
>>>> happens with .comment.
>>>>
>>>> All right then:
>>>>
>>>> diff --git a/tools/lib/bpf/libbpf.c b/tools/lib/bpf/libbpf.c
>>>> index e89cc9c885b3..887b78780099 100644
>>>> --- a/tools/lib/bpf/libbpf.c
>>>> +++ b/tools/lib/bpf/libbpf.c
>>>> @@ -1591,6 +1591,10 @@ static int bpf_object__init_global_data_maps(struct bpf_object *obj)
>>>> for (sec_idx = 1; sec_idx < obj->efile.sec_cnt; sec_idx++) {
>>>> sec_desc = &obj->efile.secs[sec_idx];
>>>>
>>>> + /* Skip recognized sections with size 0. */
>>>> + if (sec_desc->data && sec_desc->data->d_size == 0)
>>>> + continue;
>>>> +
>>>> switch (sec_desc->sec_type) {
>>>> case SEC_DATA:
>>>> sec_name = elf_sec_name(obj, elf_sec_by_idx(obj, sec_idx));
>>>
>>> Ok, skeleton is now getting generated successfully, however it differs from the
>>> clang version so there's a build error when we include/use the header:
>>> ../src/core/restrict-ifaces.c: In function ‘prepare_restrict_ifaces_bpf’:
>>> ../src/core/restrict-ifaces.c:45:14: error: ‘struct
>>> restrict_ifaces_bpf’ has no member named ‘rodata’; did you mean
>>> ‘data’?
>>> 45 | obj->rodata->is_allow_list = is_allow_list;
>>> | ^~~~~~
>>> | data
>>>
>>> The issue appears to be that clang generates "rodata" members in
>>> restrict_ifaces_bpf while with gcc we get "data" members instead.
>>
>> This is because the BPF GCC port is putting the
>>
>> const volatile unsigned char is_allow_list = 0;
>>
>> in a .data section instead of .rodata, due to the `volatile'. The
>> x86_64 GCC seems to use .rodata.
>>
>> Looking at why the PBF port does this...
>
> So, turns out GCC puts zero-initialized `const volatile' variables in
> .data sections (and not .rodata) in all the targets I have tried, like
> x86_64 and aarch64.
>
> So this is a LLVM and GCC divergence :/
See https://gcc.gnu.org/bugzilla/show_bug.cgi?id=25521.
You may try, as a workaround:
__attribute__((section(".rodata"))) const volatile unsigned char is_allow_list = 0;
But that will use permissions "aw" for the .rodata section (and you will
get a warning from the assembler.) It may be problematic for libbpf.
>>> Differences below:
>>>
>>> GCC:
>>> $ /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>> --debug gen skeleton
>>> output/build/systemd-custom/build/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>> libbpf: loading object 'restrict_ifaces_bpf' from buffer
>>> libbpf: elf: section(2) .symtab, size 336, link 1, flags 0, type=2
>>> libbpf: elf: section(3) .data, size 1, link 0, flags 3, type=1
>>> libbpf: elf: section(4) .bss, size 0, link 0, flags 3, type=8
>>> libbpf: elf: section(5) cgroup_skb/egress, size 184, link 0, flags 6, type=1
>>> libbpf: sec 'cgroup_skb/egress': found program 'sd_restrictif_e' at
>>> insn offset 0 (0 bytes), code size 23 insns (184 bytes)
>>> libbpf: elf: section(6) cgroup_skb/ingress, size 184, link 0, flags 6, type=1
>>> libbpf: sec 'cgroup_skb/ingress': found program 'sd_restrictif_i' at
>>> insn offset 0 (0 bytes), code size 23 insns (184 bytes)
>>> libbpf: elf: section(7) license, size 18, link 0, flags 2, type=1
>>> libbpf: license of restrict_ifaces_bpf is LGPL-2.1-or-later
>>> libbpf: elf: section(8) .maps, size 24, link 0, flags 3, type=1
>>> libbpf: elf: section(9) .comment, size 49, link 0, flags 30, type=1
>>> libbpf: elf: skipping unrecognized data section(9) .comment
>>> libbpf: elf: section(10) .relcgroup_skb/egress, size 32, link 2, flags
>>> 40, type=9
>>> libbpf: elf: section(11) .relcgroup_skb/ingress, size 32, link 2,
>>> flags 40, type=9
>>> libbpf: elf: section(12) .BTF, size 3606, link 0, flags 0, type=1
>>> libbpf: looking for externs among 14 symbols...
>>> libbpf: collected 0 externs total
>>> libbpf: map 'sd_restrictif': at sec_idx 8, offset 0.
>>> libbpf: map 'sd_restrictif': found type = 1.
>>> libbpf: map 'sd_restrictif': found key [12], sz = 4.
>>> libbpf: map 'sd_restrictif': found value [3], sz = 1.
>>> libbpf: map 'restrict.data' (global data): at sec_idx 3, offset 0, flags 400.
>>> libbpf: map 1 is "restrict.data"
>>> libbpf: sec '.relcgroup_skb/egress': collecting relocation for
>>> section(5) 'cgroup_skb/egress'
>>> libbpf: sec '.relcgroup_skb/egress': relo #0: insn #4 against 'sd_restrictif'
>>> libbpf: prog 'sd_restrictif_e': found map 0 (sd_restrictif, sec 8, off
>>> 0) for insn #4
>>> libbpf: sec '.relcgroup_skb/egress': relo #1: insn #7 against 'is_allow_list'
>>> libbpf: prog 'sd_restrictif_e': found data map 1 (restrict.data, sec
>>> 3, off 0) for insn 7
>>> libbpf: sec '.relcgroup_skb/ingress': collecting relocation for
>>> section(6) 'cgroup_skb/ingress'
>>> libbpf: sec '.relcgroup_skb/ingress': relo #0: insn #4 against 'sd_restrictif'
>>> libbpf: prog 'sd_restrictif_i': found map 0 (sd_restrictif, sec 8, off
>>> 0) for insn #4
>>> libbpf: sec '.relcgroup_skb/ingress': relo #1: insn #7 against 'is_allow_list'
>>> libbpf: prog 'sd_restrictif_i': found data map 1 (restrict.data, sec
>>> 3, off 0) for insn 7
>>> /* SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause) */
>>>
>>> /* THIS FILE IS AUTOGENERATED BY BPFTOOL! */
>>> #ifndef __RESTRICT_IFACES_BPF_SKEL_H__
>>> #define __RESTRICT_IFACES_BPF_SKEL_H__
>>>
>>> #include <errno.h>
>>> #include <stdlib.h>
>>> #include <bpf/libbpf.h>
>>>
>>> struct restrict_ifaces_bpf {
>>> struct bpf_object_skeleton *skeleton;
>>> struct bpf_object *obj;
>>> struct {
>>> struct bpf_map *sd_restrictif;
>>> struct bpf_map *data;
>>> } maps;
>>> struct {
>>> struct bpf_program *sd_restrictif_e;
>>> struct bpf_program *sd_restrictif_i;
>>> } progs;
>>> struct {
>>> struct bpf_link *sd_restrictif_e;
>>> struct bpf_link *sd_restrictif_i;
>>> } links;
>>> struct restrict_ifaces_bpf__data {
>>> __u8 is_allow_list;
>>> } *data;
>>>
>>> #ifdef __cplusplus
>>> static inline struct restrict_ifaces_bpf *open(const struct
>>> bpf_object_open_opts *opts = nullptr);
>>> static inline struct restrict_ifaces_bpf *open_and_load();
>>> static inline int load(struct restrict_ifaces_bpf *skel);
>>> static inline int attach(struct restrict_ifaces_bpf *skel);
>>> static inline void detach(struct restrict_ifaces_bpf *skel);
>>> static inline void destroy(struct restrict_ifaces_bpf *skel);
>>> static inline const void *elf_bytes(size_t *sz);
>>> #endif /* __cplusplus */
>>> };
>>>
>>> static void
>>> restrict_ifaces_bpf__destroy(struct restrict_ifaces_bpf *obj)
>>> {
>>> if (!obj)
>>> return;
>>> if (obj->skeleton)
>>> bpf_object__destroy_skeleton(obj->skeleton);
>>> free(obj);
>>> }
>>>
>>> static inline int
>>> restrict_ifaces_bpf__create_skeleton(struct restrict_ifaces_bpf *obj);
>>>
>>> static inline struct restrict_ifaces_bpf *
>>> restrict_ifaces_bpf__open_opts(const struct bpf_object_open_opts *opts)
>>> {
>>> struct restrict_ifaces_bpf *obj;
>>> int err;
>>>
>>> obj = (struct restrict_ifaces_bpf *)calloc(1, sizeof(*obj));
>>> if (!obj) {
>>> errno = ENOMEM;
>>> return NULL;
>>> }
>>>
>>> err = restrict_ifaces_bpf__create_skeleton(obj);
>>> if (err)
>>> goto err_out;
>>>
>>> err = bpf_object__open_skeleton(obj->skeleton, opts);
>>> if (err)
>>> goto err_out;
>>>
>>> return obj;
>>> err_out:
>>> restrict_ifaces_bpf__destroy(obj);
>>> errno = -err;
>>> return NULL;
>>> }
>>>
>>> static inline struct restrict_ifaces_bpf *
>>> restrict_ifaces_bpf__open(void)
>>> {
>>> return restrict_ifaces_bpf__open_opts(NULL);
>>> }
>>>
>>> static inline int
>>> restrict_ifaces_bpf__load(struct restrict_ifaces_bpf *obj)
>>> {
>>> return bpf_object__load_skeleton(obj->skeleton);
>>> }
>>>
>>> static inline struct restrict_ifaces_bpf *
>>> restrict_ifaces_bpf__open_and_load(void)
>>> {
>>> struct restrict_ifaces_bpf *obj;
>>> int err;
>>>
>>> obj = restrict_ifaces_bpf__open();
>>> if (!obj)
>>> return NULL;
>>> err = restrict_ifaces_bpf__load(obj);
>>> if (err) {
>>> restrict_ifaces_bpf__destroy(obj);
>>> errno = -err;
>>> return NULL;
>>> }
>>> return obj;
>>> }
>>>
>>> static inline int
>>> restrict_ifaces_bpf__attach(struct restrict_ifaces_bpf *obj)
>>> {
>>> return bpf_object__attach_skeleton(obj->skeleton);
>>> }
>>>
>>> static inline void
>>> restrict_ifaces_bpf__detach(struct restrict_ifaces_bpf *obj)
>>> {
>>> return bpf_object__detach_skeleton(obj->skeleton);
>>> }
>>>
>>> static inline const void *restrict_ifaces_bpf__elf_bytes(size_t *sz);
>>>
>>> static inline int
>>> restrict_ifaces_bpf__create_skeleton(struct restrict_ifaces_bpf *obj)
>>> {
>>> struct bpf_object_skeleton *s;
>>> int err;
>>>
>>> s = (struct bpf_object_skeleton *)calloc(1, sizeof(*s));
>>> if (!s) {
>>> err = -ENOMEM;
>>> goto err;
>>> }
>>>
>>> s->sz = sizeof(*s);
>>> s->name = "restrict_ifaces_bpf";
>>> s->obj = &obj->obj;
>>>
>>> /* maps */
>>> s->map_cnt = 2;
>>> s->map_skel_sz = sizeof(*s->maps);
>>> s->maps = (struct bpf_map_skeleton *)calloc(s->map_cnt, s->map_skel_sz);
>>> if (!s->maps) {
>>> err = -ENOMEM;
>>> goto err;
>>> }
>>>
>>> s->maps[0].name = "sd_restrictif";
>>> s->maps[0].map = &obj->maps.sd_restrictif;
>>>
>>> s->maps[1].name = "restrict.data";
>>> s->maps[1].map = &obj->maps.data;
>>> s->maps[1].mmaped = (void **)&obj->data;
>>>
>>> /* programs */
>>> s->prog_cnt = 2;
>>> s->prog_skel_sz = sizeof(*s->progs);
>>> s->progs = (struct bpf_prog_skeleton *)calloc(s->prog_cnt, s->prog_skel_sz);
>>> if (!s->progs) {
>>> err = -ENOMEM;
>>> goto err;
>>> }
>>>
>>> s->progs[0].name = "sd_restrictif_e";
>>> s->progs[0].prog = &obj->progs.sd_restrictif_e;
>>> s->progs[0].link = &obj->links.sd_restrictif_e;
>>>
>>> s->progs[1].name = "sd_restrictif_i";
>>> s->progs[1].prog = &obj->progs.sd_restrictif_i;
>>> s->progs[1].link = &obj->links.sd_restrictif_i;
>>>
>>> s->data = (void *)restrict_ifaces_bpf__elf_bytes(&s->data_sz);
>>>
>>> obj->skeleton = s;
>>> return 0;
>>> err:
>>> bpf_object__destroy_skeleton(s);
>>> return err;
>>> }
>>>
>>> static inline const void *restrict_ifaces_bpf__elf_bytes(size_t *sz)
>>> {
>>> *sz = 5616;
>>> return (const void *)"\
>>> \x7f\x45\x4c\x46\x02\x01\x01\0\0\0\0\0\0\0\0\0\x01\0\xf7\0\x01\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\xb0\x12\0\0\0\0\0\0\0\0\0\0\x40\0\0\0\0\0\x40\0\x0d\0\
>>> \x01\0\0\x2e\x73\x74\x72\x74\x61\x62\0\x2e\x73\x79\x6d\x74\x61\x62\0\x2e\x64\
>>> \x61\x74\x61\0\x2e\x62\x73\x73\0\x63\x67\x72\x6f\x75\x70\x5f\x73\x6b\x62\x2f\
>>> \x65\x67\x72\x65\x73\x73\0\x63\x67\x72\x6f\x75\x70\x5f\x73\x6b\x62\x2f\x69\x6e\
>>> \x67\x72\x65\x73\x73\0\x6c\x69\x63\x65\x6e\x73\x65\0\x2e\x6d\x61\x70\x73\0\x2e\
>>> \x63\x6f\x6d\x6d\x65\x6e\x74\0\x72\x65\x73\x74\x72\x69\x63\x74\x2d\x69\x66\x61\
>>> \x63\x65\x73\x2e\x62\x70\x66\x2e\x63\0\x5f\x6c\x69\x63\x65\x6e\x73\x65\0\x73\
>>> \x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\x5f\x65\0\x73\x64\x5f\x72\x65\
>>> \x73\x74\x72\x69\x63\x74\x69\x66\0\x69\x73\x5f\x61\x6c\x6c\x6f\x77\x5f\x6c\x69\
>>> \x73\x74\0\x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\x5f\x69\0\x2e\
>>> \x72\x65\x6c\x63\x67\x72\x6f\x75\x70\x5f\x73\x6b\x62\x2f\x65\x67\x72\x65\x73\
>>> \x73\0\x2e\x72\x65\x6c\x63\x67\x72\x6f\x75\x70\x5f\x73\x6b\x62\x2f\x69\x6e\x67\
>>> \x72\x65\x73\x73\0\x2e\x42\x54\x46\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\x58\0\0\0\x04\0\xf1\xff\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \x03\0\x03\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x03\0\x04\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\x03\0\x05\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \x03\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x03\0\x07\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\x6e\0\0\0\x01\0\x07\0\0\0\0\0\0\0\0\0\x12\0\0\0\0\0\0\0\0\0\
>>> \0\0\x03\0\x08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x03\0\x09\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\x77\0\0\0\x12\0\x05\0\0\0\0\0\0\0\0\0\xb8\0\0\0\0\0\0\0\
>>> \x87\0\0\0\x11\0\x08\0\0\0\0\0\0\0\0\0\x18\0\0\0\0\0\0\0\x95\0\0\0\x11\0\x03\0\
>>> \0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\xa3\0\0\0\x12\0\x06\0\0\0\0\0\0\0\0\0\xb8\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0\x61\x10\x28\0\0\0\0\0\x63\x0a\xfc\xff\0\0\0\0\xbf\
>>> \xa2\0\0\0\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\x18\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\x85\0\0\0\x01\0\0\0\x18\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x71\x13\0\0\0\0\0\0\
>>> \x57\x03\0\0\xff\0\0\0\x15\x03\x05\0\0\0\0\0\xbf\x02\0\0\0\0\0\0\x87\x02\0\0\0\
>>> \0\0\0\x4f\x20\0\0\0\0\0\0\x77\0\0\0\x3f\0\0\0\x95\0\0\0\0\0\0\0\xb7\x01\0\0\
>>> \x01\0\0\0\x15\0\x01\0\0\0\0\0\xbf\x31\0\0\0\0\0\0\xbf\x10\0\0\0\0\0\0\x57\0\0\
>>> \0\x01\0\0\0\x95\0\0\0\0\0\0\0\x61\x10\x28\0\0\0\0\0\x63\x0a\xfc\xff\0\0\0\0\
>>> \xbf\xa2\0\0\0\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\x18\x01\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\x85\0\0\0\x01\0\0\0\x18\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x71\x13\0\0\0\0\
>>> \0\0\x57\x03\0\0\xff\0\0\0\x15\x03\x05\0\0\0\0\0\xbf\x02\0\0\0\0\0\0\x87\x02\0\
>>> \0\0\0\0\0\x4f\x20\0\0\0\0\0\0\x77\0\0\0\x3f\0\0\0\x95\0\0\0\0\0\0\0\xb7\x01\0\
>>> \0\x01\0\0\0\x15\0\x01\0\0\0\0\0\xbf\x31\0\0\0\0\0\0\xbf\x10\0\0\0\0\0\0\x57\0\
>>> \0\0\x01\0\0\0\x95\0\0\0\0\0\0\0\x4c\x47\x50\x4c\x2d\x32\x2e\x31\x2d\x6f\x72\
>>> \x2d\x6c\x61\x74\x65\x72\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\x47\x43\x43\x3a\x20\x28\x42\x75\x69\x6c\x64\x72\x6f\x6f\x74\x20\x32\
>>> \x30\x32\x32\x2e\x30\x35\x2d\x31\x33\x32\x2d\x67\x35\x32\x38\x62\x35\x61\x36\
>>> \x35\x66\x36\x29\x20\x31\x32\x2e\x31\x2e\x30\0\0\0\0\0\0\0\0\x20\0\0\0\0\0\0\0\
>>> \x01\0\0\0\x0b\0\0\0\x38\0\0\0\0\0\0\0\x01\0\0\0\x0c\0\0\0\x20\0\0\0\0\0\0\0\
>>> \x01\0\0\0\x0b\0\0\0\x38\0\0\0\0\0\0\0\x01\0\0\0\x0c\0\0\0\x9f\xeb\x01\0\x18\0\
>>> \0\0\0\0\0\0\x9c\x07\0\0\x9c\x07\0\0\x62\x06\0\0\x01\0\0\0\0\0\0\x01\x01\0\0\0\
>>> \x08\0\0\x03\x0d\0\0\0\0\0\0\x01\x01\0\0\0\x08\0\0\x02\x1b\0\0\0\0\0\0\x08\x02\
>>> \0\0\0\0\0\0\0\0\0\0\x0a\x03\0\0\0\0\0\0\0\0\0\0\x09\x04\0\0\0\x20\0\0\0\0\0\0\
>>> \x01\x02\0\0\0\x10\0\0\x01\x2a\0\0\0\0\0\0\x01\x02\0\0\0\x10\0\0\0\x3d\0\0\0\0\
>>> \0\0\x08\x07\0\0\0\x43\0\0\0\0\0\0\x01\x04\0\0\0\x20\0\0\x01\x47\0\0\0\0\0\0\
>>> \x08\x09\0\0\0\x4d\0\0\0\0\0\0\x01\x04\0\0\0\x20\0\0\0\x5a\0\0\0\0\0\0\x08\x0b\
>>> \0\0\0\x60\0\0\0\0\0\0\x01\x08\0\0\0\x40\0\0\x01\x6e\0\0\0\0\0\0\x01\x08\0\0\0\
>>> \x40\0\0\0\x85\0\0\0\0\0\0\x08\x0e\0\0\0\x8b\0\0\0\0\0\0\x01\x08\0\0\0\x40\0\0\
>>> \0\x9d\0\0\0\0\0\0\x01\x08\0\0\0\x40\0\0\x01\xa6\0\0\0\0\0\0\x01\x01\0\0\0\x08\
>>> \0\0\x03\0\0\0\0\0\0\0\x0a\x12\0\0\0\xab\0\0\0\0\0\0\x08\x08\0\0\0\xb2\0\0\0\0\
>>> \0\0\x08\x0c\0\0\0\xb9\0\0\0\x1f\0\0\x06\x04\0\0\0\xc6\0\0\0\0\0\0\0\xda\0\0\0\
>>> \x01\0\0\0\xec\0\0\0\x02\0\0\0\xff\0\0\0\x03\0\0\0\x17\x01\0\0\x04\0\0\0\x35\
>>> \x01\0\0\x05\0\0\0\x4e\x01\0\0\x06\0\0\0\x68\x01\0\0\x07\0\0\0\x81\x01\0\0\x08\
>>> \0\0\0\x9b\x01\0\0\x09\0\0\0\xb1\x01\0\0\x0a\0\0\0\xce\x01\0\0\x0b\0\0\0\xe4\
>>> \x01\0\0\x0c\0\0\0\xff\x01\0\0\x0d\0\0\0\x19\x02\0\0\x0e\0\0\0\x2d\x02\0\0\x0f\
>>> \0\0\0\x42\x02\0\0\x10\0\0\0\x56\x02\0\0\x11\0\0\0\x6a\x02\0\0\x12\0\0\0\x80\
>>> \x02\0\0\x13\0\0\0\x9c\x02\0\0\x14\0\0\0\xbd\x02\0\0\x15\0\0\0\xe0\x02\0\0\x16\
>>> \0\0\0\xf3\x02\0\0\x17\0\0\0\x06\x03\0\0\x18\0\0\0\x1e\x03\0\0\x19\0\0\0\x37\
>>> \x03\0\0\x1a\0\0\0\x4f\x03\0\0\x1b\0\0\0\x64\x03\0\0\x1c\0\0\0\x7f\x03\0\0\x1d\
>>> \0\0\0\x99\x03\0\0\x1e\0\0\0\0\0\0\0\x01\0\0\x05\x08\0\0\0\xb3\x03\0\0\x1d\0\0\
>>> \0\0\0\0\0\xbd\x03\0\0\x0d\0\0\x04\x38\0\0\0\xcb\x03\0\0\x08\0\0\0\0\0\0\0\xd1\
>>> \x03\0\0\x08\0\0\0\x10\0\0\0\xd7\x03\0\0\x08\0\0\0\x20\0\0\0\xe2\x03\0\0\x03\0\
>>> \0\0\x30\0\0\0\xea\x03\0\0\x03\0\0\0\x38\0\0\0\xf8\x03\0\0\x03\0\0\0\x40\0\0\0\
>>> \x01\x04\0\0\x03\0\0\0\x48\0\0\0\x0a\x04\0\0\x14\0\0\0\x50\0\0\0\x12\x04\0\0\
>>> \x14\0\0\0\x60\0\0\0\x18\x04\0\0\x14\0\0\0\x70\0\0\0\0\0\0\0\x19\0\0\0\x80\0\0\
>>> \0\x1e\x04\0\0\x0c\0\0\0\x80\x01\0\0\x24\x04\0\0\x15\0\0\0\xa0\x01\0\0\0\0\0\0\
>>> \x02\0\0\x05\x20\0\0\0\0\0\0\0\x1a\0\0\0\0\0\0\0\0\0\0\0\x1b\0\0\0\0\0\0\0\0\0\
>>> \0\0\x02\0\0\x04\x08\0\0\0\x2f\x04\0\0\x15\0\0\0\0\0\0\0\x38\x04\0\0\x15\0\0\0\
>>> \x20\0\0\0\0\0\0\0\x02\0\0\x04\x20\0\0\0\x41\x04\0\0\x1c\0\0\0\0\0\0\0\x4a\x04\
>>> \0\0\x1c\0\0\0\x80\0\0\0\0\0\0\0\0\0\0\x03\0\0\0\0\x0c\0\0\0\x10\0\0\0\x04\0\0\
>>> \0\0\0\0\0\0\0\0\x02\x18\0\0\0\0\0\0\0\x01\0\0\x05\x08\0\0\0\x53\x04\0\0\x20\0\
>>> \0\0\0\0\0\0\x56\x04\0\0\x0e\0\0\x04\x50\0\0\0\x5f\x04\0\0\x0c\0\0\0\0\0\0\0\
>>> \x6c\x04\0\0\x0c\0\0\0\x20\0\0\0\x73\x04\0\0\x0c\0\0\0\x40\0\0\0\x78\x04\0\0\
>>> \x0c\0\0\0\x60\0\0\0\x81\x04\0\0\x0c\0\0\0\x80\0\0\0\x86\x04\0\0\x0c\0\0\0\xa0\
>>> \0\0\0\x8f\x04\0\0\x0c\0\0\0\xc0\0\0\0\x97\x04\0\0\x1c\0\0\0\xe0\0\0\0\x9f\x04\
>>> \0\0\x0c\0\0\0\x60\x01\0\0\xa8\x04\0\0\x14\0\0\0\x80\x01\0\0\xb1\x04\0\0\x0c\0\
>>> \0\0\xa0\x01\0\0\xb9\x04\0\0\x1c\0\0\0\xc0\x01\0\0\xc1\x04\0\0\x0c\0\0\0\x40\
>>> \x02\0\0\xc7\x04\0\0\x0a\0\0\0\x60\x02\0\0\0\0\0\0\0\0\0\x02\x1f\0\0\0\xd8\x04\
>>> \0\0\x21\0\0\x04\xc0\0\0\0\xe2\x04\0\0\x0c\0\0\0\0\0\0\0\xe6\x04\0\0\x0c\0\0\0\
>>> \x20\0\0\0\x81\x04\0\0\x0c\0\0\0\x40\0\0\0\xef\x04\0\0\x0c\0\0\0\x60\0\0\0\x78\
>>> \x04\0\0\x0c\0\0\0\x80\0\0\0\xfd\x04\0\0\x0c\0\0\0\xa0\0\0\0\x0a\x05\0\0\x0c\0\
>>> \0\0\xc0\0\0\0\x13\x05\0\0\x0c\0\0\0\xe0\0\0\0\x86\x04\0\0\x0c\0\0\0\0\x01\0\0\
>>> \x1e\x05\0\0\x0c\0\0\0\x20\x01\0\0\x2e\x05\0\0\x0c\0\0\0\x40\x01\0\0\x36\x05\0\
>>> \0\x0c\0\0\0\x60\x01\0\0\x3f\x05\0\0\x22\0\0\0\x80\x01\0\0\x42\x05\0\0\x0c\0\0\
>>> \0\x20\x02\0\0\x47\x05\0\0\x0c\0\0\0\x40\x02\0\0\x52\x05\0\0\x0c\0\0\0\x60\x02\
>>> \0\0\x57\x05\0\0\x0c\0\0\0\x80\x02\0\0\x60\x05\0\0\x0c\0\0\0\xa0\x02\0\0\x6c\
>>> \x04\0\0\x0c\0\0\0\xc0\x02\0\0\x68\x05\0\0\x0c\0\0\0\xe0\x02\0\0\x73\x05\0\0\
>>> \x0c\0\0\0\0\x03\0\0\x7d\x05\0\0\x1c\0\0\0\x20\x03\0\0\x88\x05\0\0\x1c\0\0\0\
>>> \xa0\x03\0\0\x92\x05\0\0\x0c\0\0\0\x20\x04\0\0\x9e\x05\0\0\x0c\0\0\0\x40\x04\0\
>>> \0\xa9\x05\0\0\x0c\0\0\0\x60\x04\0\0\0\0\0\0\x17\0\0\0\x80\x04\0\0\xb3\x05\0\0\
>>> \x0f\0\0\0\xc0\x04\0\0\xba\x05\0\0\x0c\0\0\0\0\x05\0\0\xc3\x05\0\0\x0c\0\0\0\
>>> \x20\x05\0\0\0\0\0\0\x1e\0\0\0\x40\x05\0\0\xcc\x05\0\0\x0c\0\0\0\x80\x05\0\0\
>>> \xd5\x05\0\0\x0f\0\0\0\xc0\x05\0\0\0\0\0\0\0\0\0\x03\0\0\0\0\x0c\0\0\0\x10\0\0\
>>> \0\x05\0\0\0\0\0\0\0\0\0\0\x0a\x21\0\0\0\0\0\0\0\0\0\0\x02\0\0\0\0\0\0\0\0\x03\
>>> \0\0\x04\x18\0\0\0\x73\x04\0\0\x27\0\0\0\0\0\0\0\xde\x05\0\0\x28\0\0\0\x40\0\0\
>>> \0\xe2\x05\0\0\x29\0\0\0\x80\0\0\0\0\0\0\0\0\0\0\x03\0\0\0\0\x09\0\0\0\x10\0\0\
>>> \0\x01\0\0\0\0\0\0\0\0\0\0\x02\x26\0\0\0\0\0\0\0\0\0\0\x02\x0c\0\0\0\0\0\0\0\0\
>>> \0\0\x02\x03\0\0\0\0\0\0\0\0\0\0\x03\0\0\0\0\x13\0\0\0\x10\0\0\0\x12\0\0\0\0\0\
>>> \0\0\0\0\0\x0a\x2a\0\0\0\0\0\0\0\x02\0\0\x0d\x24\0\0\0\0\0\0\0\x24\0\0\0\0\0\0\
>>> \0\x2e\0\0\0\0\0\0\0\0\0\0\x0a\0\0\0\0\0\0\0\0\0\0\0\x02\x2d\0\0\0\0\0\0\0\x01\
>>> \0\0\x0d\x09\0\0\0\x53\x04\0\0\x30\0\0\0\0\0\0\0\0\0\0\x02\x23\0\0\0\xe8\x05\0\
>>> \0\0\0\0\x0e\x2b\0\0\0\0\0\0\0\xf1\x05\0\0\0\0\0\x0e\x05\0\0\0\x01\0\0\0\xff\
>>> \x05\0\0\0\0\0\x0e\x25\0\0\0\x01\0\0\0\x0d\x06\0\0\x01\0\0\x0c\x2f\0\0\0\x1d\
>>> \x06\0\0\x01\0\0\x0c\x2f\0\0\0\x2d\x06\0\0\0\0\0\x0c\x2f\0\0\0\x4e\x06\0\0\x01\
>>> \0\0\x0f\x01\0\0\0\x32\0\0\0\0\0\0\0\x01\0\0\0\x54\x06\0\0\x01\0\0\x0f\x12\0\0\
>>> \0\x31\0\0\0\0\0\0\0\x12\0\0\0\x5c\x06\0\0\x01\0\0\x0f\x18\0\0\0\x33\0\0\0\0\0\
>>> \0\0\x18\0\0\0\0\x73\x69\x67\x6e\x65\x64\x20\x63\x68\x61\x72\0\x75\x6e\x73\x69\
>>> \x67\x6e\x65\x64\x20\x63\x68\x61\x72\0\x5f\x5f\x75\x38\0\x73\x68\x6f\x72\x74\
>>> \x20\x69\x6e\x74\0\x73\x68\x6f\x72\x74\x20\x75\x6e\x73\x69\x67\x6e\x65\x64\x20\
>>> \x69\x6e\x74\0\x5f\x5f\x75\x31\x36\0\x69\x6e\x74\0\x5f\x5f\x73\x33\x32\0\x75\
>>> \x6e\x73\x69\x67\x6e\x65\x64\x20\x69\x6e\x74\0\x5f\x5f\x75\x33\x32\0\x6c\x6f\
>>> \x6e\x67\x20\x6c\x6f\x6e\x67\x20\x69\x6e\x74\0\x6c\x6f\x6e\x67\x20\x6c\x6f\x6e\
>>> \x67\x20\x75\x6e\x73\x69\x67\x6e\x65\x64\x20\x69\x6e\x74\0\x5f\x5f\x75\x36\x34\
>>> \0\x6c\x6f\x6e\x67\x20\x75\x6e\x73\x69\x67\x6e\x65\x64\x20\x69\x6e\x74\0\x6c\
>>> \x6f\x6e\x67\x20\x69\x6e\x74\0\x63\x68\x61\x72\0\x5f\x5f\x62\x65\x31\x36\0\x5f\
>>> \x5f\x62\x65\x33\x32\0\x62\x70\x66\x5f\x6d\x61\x70\x5f\x74\x79\x70\x65\0\x42\
>>> \x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x55\x4e\x53\x50\x45\x43\0\x42\
>>> \x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x48\x41\x53\x48\0\x42\x50\x46\
>>> \x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x41\x52\x52\x41\x59\0\x42\x50\x46\x5f\
>>> \x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x50\x52\x4f\x47\x5f\x41\x52\x52\x41\x59\0\
>>> \x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x50\x45\x52\x46\x5f\x45\
>>> \x56\x45\x4e\x54\x5f\x41\x52\x52\x41\x59\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\
>>> \x59\x50\x45\x5f\x50\x45\x52\x43\x50\x55\x5f\x48\x41\x53\x48\0\x42\x50\x46\x5f\
>>> \x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x50\x45\x52\x43\x50\x55\x5f\x41\x52\x52\
>>> \x41\x59\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x53\x54\x41\x43\
>>> \x4b\x5f\x54\x52\x41\x43\x45\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\
>>> \x5f\x43\x47\x52\x4f\x55\x50\x5f\x41\x52\x52\x41\x59\0\x42\x50\x46\x5f\x4d\x41\
>>> \x50\x5f\x54\x59\x50\x45\x5f\x4c\x52\x55\x5f\x48\x41\x53\x48\0\x42\x50\x46\x5f\
>>> \x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x4c\x52\x55\x5f\x50\x45\x52\x43\x50\x55\
>>> \x5f\x48\x41\x53\x48\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x4c\
>>> \x50\x4d\x5f\x54\x52\x49\x45\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\
>>> \x5f\x41\x52\x52\x41\x59\x5f\x4f\x46\x5f\x4d\x41\x50\x53\0\x42\x50\x46\x5f\x4d\
>>> \x41\x50\x5f\x54\x59\x50\x45\x5f\x48\x41\x53\x48\x5f\x4f\x46\x5f\x4d\x41\x50\
>>> \x53\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x44\x45\x56\x4d\x41\
>>> \x50\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x53\x4f\x43\x4b\x4d\
>>> \x41\x50\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x43\x50\x55\x4d\
>>> \x41\x50\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x58\x53\x4b\x4d\
>>> \x41\x50\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x53\x4f\x43\x4b\
>>> \x48\x41\x53\x48\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x43\x47\
>>> \x52\x4f\x55\x50\x5f\x53\x54\x4f\x52\x41\x47\x45\0\x42\x50\x46\x5f\x4d\x41\x50\
>>> \x5f\x54\x59\x50\x45\x5f\x52\x45\x55\x53\x45\x50\x4f\x52\x54\x5f\x53\x4f\x43\
>>> \x4b\x41\x52\x52\x41\x59\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\
>>> \x50\x45\x52\x43\x50\x55\x5f\x43\x47\x52\x4f\x55\x50\x5f\x53\x54\x4f\x52\x41\
>>> \x47\x45\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x51\x55\x45\x55\
>>> \x45\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x53\x54\x41\x43\x4b\
>>> \0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x53\x4b\x5f\x53\x54\x4f\
>>> \x52\x41\x47\x45\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x44\x45\
>>> \x56\x4d\x41\x50\x5f\x48\x41\x53\x48\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\
>>> \x50\x45\x5f\x53\x54\x52\x55\x43\x54\x5f\x4f\x50\x53\0\x42\x50\x46\x5f\x4d\x41\
>>> \x50\x5f\x54\x59\x50\x45\x5f\x52\x49\x4e\x47\x42\x55\x46\0\x42\x50\x46\x5f\x4d\
>>> \x41\x50\x5f\x54\x59\x50\x45\x5f\x49\x4e\x4f\x44\x45\x5f\x53\x54\x4f\x52\x41\
>>> \x47\x45\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\x45\x5f\x54\x41\x53\x4b\
>>> \x5f\x53\x54\x4f\x52\x41\x47\x45\0\x42\x50\x46\x5f\x4d\x41\x50\x5f\x54\x59\x50\
>>> \x45\x5f\x42\x4c\x4f\x4f\x4d\x5f\x46\x49\x4c\x54\x45\x52\0\x66\x6c\x6f\x77\x5f\
>>> \x6b\x65\x79\x73\0\x62\x70\x66\x5f\x66\x6c\x6f\x77\x5f\x6b\x65\x79\x73\0\x6e\
>>> \x68\x6f\x66\x66\0\x74\x68\x6f\x66\x66\0\x61\x64\x64\x72\x5f\x70\x72\x6f\x74\
>>> \x6f\0\x69\x73\x5f\x66\x72\x61\x67\0\x69\x73\x5f\x66\x69\x72\x73\x74\x5f\x66\
>>> \x72\x61\x67\0\x69\x73\x5f\x65\x6e\x63\x61\x70\0\x69\x70\x5f\x70\x72\x6f\x74\
>>> \x6f\0\x6e\x5f\x70\x72\x6f\x74\x6f\0\x73\x70\x6f\x72\x74\0\x64\x70\x6f\x72\x74\
>>> \0\x66\x6c\x61\x67\x73\0\x66\x6c\x6f\x77\x5f\x6c\x61\x62\x65\x6c\0\x69\x70\x76\
>>> \x34\x5f\x73\x72\x63\0\x69\x70\x76\x34\x5f\x64\x73\x74\0\x69\x70\x76\x36\x5f\
>>> \x73\x72\x63\0\x69\x70\x76\x36\x5f\x64\x73\x74\0\x73\x6b\0\x62\x70\x66\x5f\x73\
>>> \x6f\x63\x6b\0\x62\x6f\x75\x6e\x64\x5f\x64\x65\x76\x5f\x69\x66\0\x66\x61\x6d\
>>> \x69\x6c\x79\0\x74\x79\x70\x65\0\x70\x72\x6f\x74\x6f\x63\x6f\x6c\0\x6d\x61\x72\
>>> \x6b\0\x70\x72\x69\x6f\x72\x69\x74\x79\0\x73\x72\x63\x5f\x69\x70\x34\0\x73\x72\
>>> \x63\x5f\x69\x70\x36\0\x73\x72\x63\x5f\x70\x6f\x72\x74\0\x64\x73\x74\x5f\x70\
>>> \x6f\x72\x74\0\x64\x73\x74\x5f\x69\x70\x34\0\x64\x73\x74\x5f\x69\x70\x36\0\x73\
>>> \x74\x61\x74\x65\0\x72\x78\x5f\x71\x75\x65\x75\x65\x5f\x6d\x61\x70\x70\x69\x6e\
>>> \x67\0\x5f\x5f\x73\x6b\x5f\x62\x75\x66\x66\0\x6c\x65\x6e\0\x70\x6b\x74\x5f\x74\
>>> \x79\x70\x65\0\x71\x75\x65\x75\x65\x5f\x6d\x61\x70\x70\x69\x6e\x67\0\x76\x6c\
>>> \x61\x6e\x5f\x70\x72\x65\x73\x65\x6e\x74\0\x76\x6c\x61\x6e\x5f\x74\x63\x69\0\
>>> \x76\x6c\x61\x6e\x5f\x70\x72\x6f\x74\x6f\0\x69\x6e\x67\x72\x65\x73\x73\x5f\x69\
>>> \x66\x69\x6e\x64\x65\x78\0\x69\x66\x69\x6e\x64\x65\x78\0\x74\x63\x5f\x69\x6e\
>>> \x64\x65\x78\0\x63\x62\0\x68\x61\x73\x68\0\x74\x63\x5f\x63\x6c\x61\x73\x73\x69\
>>> \x64\0\x64\x61\x74\x61\0\x64\x61\x74\x61\x5f\x65\x6e\x64\0\x6e\x61\x70\x69\x5f\
>>> \x69\x64\0\x72\x65\x6d\x6f\x74\x65\x5f\x69\x70\x34\0\x6c\x6f\x63\x61\x6c\x5f\
>>> \x69\x70\x34\0\x72\x65\x6d\x6f\x74\x65\x5f\x69\x70\x36\0\x6c\x6f\x63\x61\x6c\
>>> \x5f\x69\x70\x36\0\x72\x65\x6d\x6f\x74\x65\x5f\x70\x6f\x72\x74\0\x6c\x6f\x63\
>>> \x61\x6c\x5f\x70\x6f\x72\x74\0\x64\x61\x74\x61\x5f\x6d\x65\x74\x61\0\x74\x73\
>>> \x74\x61\x6d\x70\0\x77\x69\x72\x65\x5f\x6c\x65\x6e\0\x67\x73\x6f\x5f\x73\x65\
>>> \x67\x73\0\x67\x73\x6f\x5f\x73\x69\x7a\x65\0\x68\x77\x74\x73\x74\x61\x6d\x70\0\
>>> \x6b\x65\x79\0\x76\x61\x6c\x75\x65\0\x5f\x6c\x69\x63\x65\x6e\x73\x65\0\x69\x73\
>>> \x5f\x61\x6c\x6c\x6f\x77\x5f\x6c\x69\x73\x74\0\x73\x64\x5f\x72\x65\x73\x74\x72\
>>> \x69\x63\x74\x69\x66\0\x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\x5f\
>>> \x69\0\x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\x5f\x65\0\x72\x65\
>>> \x73\x74\x72\x69\x63\x74\x5f\x6e\x65\x74\x77\x6f\x72\x6b\x5f\x69\x6e\x74\x65\
>>> \x72\x66\x61\x63\x65\x73\x5f\x69\x6d\x70\x6c\0\x2e\x64\x61\x74\x61\0\x6c\x69\
>>> \x63\x65\x6e\x73\x65\0\x2e\x6d\x61\x70\x73\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\x01\0\0\0\x03\0\0\0\x20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x40\
>>> \0\0\0\0\0\0\0\xe5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\x09\0\0\0\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x28\x01\0\0\0\0\0\0\
>>> \x50\x01\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\x18\0\0\0\0\0\0\0\x11\
>>> \0\0\0\x01\0\0\0\x03\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x78\x02\0\0\0\0\0\0\x01\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x17\0\0\0\x08\0\0\
>>> \0\x03\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x79\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x1c\0\0\0\x01\0\0\0\x06\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\x80\x02\0\0\0\0\0\0\xb8\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x2e\0\0\0\x01\0\0\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\x38\x03\0\0\0\0\0\0\xb8\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\x41\0\0\0\x01\0\0\0\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xf0\x03\
>>> \0\0\0\0\0\0\x12\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\x49\0\0\0\x01\0\0\0\x03\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\x04\0\0\0\0\0\0\
>>> \x18\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x4f\0\0\0\
>>> \x01\0\0\0\x30\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x20\x04\0\0\0\0\0\0\x31\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\xb3\0\0\0\x09\0\0\0\
>>> \x40\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x58\x04\0\0\0\0\0\0\x20\0\0\0\0\0\0\0\x02\0\
>>> \0\0\x05\0\0\0\x08\0\0\0\0\0\0\0\x10\0\0\0\0\0\0\0\xc9\0\0\0\x09\0\0\0\x40\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\x78\x04\0\0\0\0\0\0\x20\0\0\0\0\0\0\0\x02\0\0\0\x06\
>>> \0\0\0\x08\0\0\0\0\0\0\0\x10\0\0\0\0\0\0\0\xe0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\x98\x04\0\0\0\0\0\0\x16\x0e\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0";
>>> }
>>>
>>> #ifdef __cplusplus
>>> struct restrict_ifaces_bpf *restrict_ifaces_bpf::open(const struct
>>> bpf_object_open_opts *opts) { return
>>> restrict_ifaces_bpf__open_opts(opts); }
>>> struct restrict_ifaces_bpf *restrict_ifaces_bpf::open_and_load() {
>>> return restrict_ifaces_bpf__open_and_load(); }
>>> int restrict_ifaces_bpf::load(struct restrict_ifaces_bpf *skel) {
>>> return restrict_ifaces_bpf__load(skel); }
>>> int restrict_ifaces_bpf::attach(struct restrict_ifaces_bpf *skel) {
>>> return restrict_ifaces_bpf__attach(skel); }
>>> void restrict_ifaces_bpf::detach(struct restrict_ifaces_bpf *skel) {
>>> restrict_ifaces_bpf__detach(skel); }
>>> void restrict_ifaces_bpf::destroy(struct restrict_ifaces_bpf *skel) {
>>> restrict_ifaces_bpf__destroy(skel); }
>>> const void *restrict_ifaces_bpf::elf_bytes(size_t *sz) { return
>>> restrict_ifaces_bpf__elf_bytes(sz); }
>>> #endif /* __cplusplus */
>>>
>>> __attribute__((unused)) static void
>>> restrict_ifaces_bpf__assert(struct restrict_ifaces_bpf *s
>>> __attribute__((unused)))
>>> {
>>> #ifdef __cplusplus
>>> #define _Static_assert static_assert
>>> #endif
>>> _Static_assert(sizeof(s->data->is_allow_list) == 1, "unexpected
>>> size of 'is_allow_list'");
>>> #ifdef __cplusplus
>>> #undef _Static_assert
>>> #endif
>>> }
>>>
>>> #endif /* __RESTRICT_IFACES_BPF_SKEL_H__ */
>>>
>>> Clang:
>>> $ /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>> --debug gen skeleton restrict-ifaces.bpf.o
>>> libbpf: loading object 'restrict_ifaces_bpf' from buffer
>>> libbpf: elf: section(2) .symtab, size 384, link 1, flags 0, type=2
>>> libbpf: elf: section(3) cgroup_skb/egress, size 152, link 0, flags 6, type=1
>>> libbpf: sec 'cgroup_skb/egress': found program 'sd_restrictif_e' at
>>> insn offset 0 (0 bytes), code size 19 insns (152 bytes)
>>> libbpf: elf: section(4) cgroup_skb/ingress, size 152, link 0, flags 6, type=1
>>> libbpf: sec 'cgroup_skb/ingress': found program 'sd_restrictif_i' at
>>> insn offset 0 (0 bytes), code size 19 insns (152 bytes)
>>> libbpf: elf: section(5) .rodata, size 1, link 0, flags 2, type=1
>>> libbpf: elf: section(6) license, size 18, link 0, flags 2, type=1
>>> libbpf: license of restrict_ifaces_bpf is LGPL-2.1-or-later
>>> libbpf: elf: section(7) .maps, size 24, link 0, flags 3, type=1
>>> libbpf: elf: section(8) .relcgroup_skb/egress, size 32, link 2, flags 40, type=9
>>> libbpf: elf: section(9) .relcgroup_skb/ingress, size 32, link 2, flags
>>> 40, type=9
>>> libbpf: elf: section(10) .BTF, size 1988, link 0, flags 0, type=1
>>> libbpf: elf: section(11) .BTF.ext, size 376, link 0, flags 0, type=1
>>> libbpf: looking for externs among 16 symbols...
>>> libbpf: collected 0 externs total
>>> libbpf: map 'sd_restrictif': at sec_idx 7, offset 0.
>>> libbpf: map 'sd_restrictif': found type = 1.
>>> libbpf: map 'sd_restrictif': found key [6], sz = 4.
>>> libbpf: map 'sd_restrictif': found value [9], sz = 1.
>>> libbpf: map 'restrict.rodata' (global data): at sec_idx 5, offset 0, flags 480.
>>> libbpf: map 1 is "restrict.rodata"
>>> libbpf: sec '.relcgroup_skb/egress': collecting relocation for
>>> section(3) 'cgroup_skb/egress'
>>> libbpf: sec '.relcgroup_skb/egress': relo #0: insn #4 against 'sd_restrictif'
>>> libbpf: prog 'sd_restrictif_e': found map 0 (sd_restrictif, sec 7, off
>>> 0) for insn #4
>>> libbpf: sec '.relcgroup_skb/egress': relo #1: insn #7 against 'is_allow_list'
>>> libbpf: prog 'sd_restrictif_e': found data map 1 (restrict.rodata, sec
>>> 5, off 0) for insn 7
>>> libbpf: sec '.relcgroup_skb/ingress': collecting relocation for
>>> section(4) 'cgroup_skb/ingress'
>>> libbpf: sec '.relcgroup_skb/ingress': relo #0: insn #4 against 'sd_restrictif'
>>> libbpf: prog 'sd_restrictif_i': found map 0 (sd_restrictif, sec 7, off
>>> 0) for insn #4
>>> libbpf: sec '.relcgroup_skb/ingress': relo #1: insn #7 against 'is_allow_list'
>>> libbpf: prog 'sd_restrictif_i': found data map 1 (restrict.rodata, sec
>>> 5, off 0) for insn 7
>>> /* SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause) */
>>>
>>> /* THIS FILE IS AUTOGENERATED BY BPFTOOL! */
>>> #ifndef __RESTRICT_IFACES_BPF_SKEL_H__
>>> #define __RESTRICT_IFACES_BPF_SKEL_H__
>>>
>>> #include <errno.h>
>>> #include <stdlib.h>
>>> #include <bpf/libbpf.h>
>>>
>>> struct restrict_ifaces_bpf {
>>> struct bpf_object_skeleton *skeleton;
>>> struct bpf_object *obj;
>>> struct {
>>> struct bpf_map *sd_restrictif;
>>> struct bpf_map *rodata;
>>> } maps;
>>> struct {
>>> struct bpf_program *sd_restrictif_e;
>>> struct bpf_program *sd_restrictif_i;
>>> } progs;
>>> struct {
>>> struct bpf_link *sd_restrictif_e;
>>> struct bpf_link *sd_restrictif_i;
>>> } links;
>>> struct restrict_ifaces_bpf__rodata {
>>> __u8 is_allow_list;
>>> } *rodata;
>>>
>>> #ifdef __cplusplus
>>> static inline struct restrict_ifaces_bpf *open(const struct
>>> bpf_object_open_opts *opts = nullptr);
>>> static inline struct restrict_ifaces_bpf *open_and_load();
>>> static inline int load(struct restrict_ifaces_bpf *skel);
>>> static inline int attach(struct restrict_ifaces_bpf *skel);
>>> static inline void detach(struct restrict_ifaces_bpf *skel);
>>> static inline void destroy(struct restrict_ifaces_bpf *skel);
>>> static inline const void *elf_bytes(size_t *sz);
>>> #endif /* __cplusplus */
>>> };
>>>
>>> static void
>>> restrict_ifaces_bpf__destroy(struct restrict_ifaces_bpf *obj)
>>> {
>>> if (!obj)
>>> return;
>>> if (obj->skeleton)
>>> bpf_object__destroy_skeleton(obj->skeleton);
>>> free(obj);
>>> }
>>>
>>> static inline int
>>> restrict_ifaces_bpf__create_skeleton(struct restrict_ifaces_bpf *obj);
>>>
>>> static inline struct restrict_ifaces_bpf *
>>> restrict_ifaces_bpf__open_opts(const struct bpf_object_open_opts *opts)
>>> {
>>> struct restrict_ifaces_bpf *obj;
>>> int err;
>>>
>>> obj = (struct restrict_ifaces_bpf *)calloc(1, sizeof(*obj));
>>> if (!obj) {
>>> errno = ENOMEM;
>>> return NULL;
>>> }
>>>
>>> err = restrict_ifaces_bpf__create_skeleton(obj);
>>> if (err)
>>> goto err_out;
>>>
>>> err = bpf_object__open_skeleton(obj->skeleton, opts);
>>> if (err)
>>> goto err_out;
>>>
>>> return obj;
>>> err_out:
>>> restrict_ifaces_bpf__destroy(obj);
>>> errno = -err;
>>> return NULL;
>>> }
>>>
>>> static inline struct restrict_ifaces_bpf *
>>> restrict_ifaces_bpf__open(void)
>>> {
>>> return restrict_ifaces_bpf__open_opts(NULL);
>>> }
>>>
>>> static inline int
>>> restrict_ifaces_bpf__load(struct restrict_ifaces_bpf *obj)
>>> {
>>> return bpf_object__load_skeleton(obj->skeleton);
>>> }
>>>
>>> static inline struct restrict_ifaces_bpf *
>>> restrict_ifaces_bpf__open_and_load(void)
>>> {
>>> struct restrict_ifaces_bpf *obj;
>>> int err;
>>>
>>> obj = restrict_ifaces_bpf__open();
>>> if (!obj)
>>> return NULL;
>>> err = restrict_ifaces_bpf__load(obj);
>>> if (err) {
>>> restrict_ifaces_bpf__destroy(obj);
>>> errno = -err;
>>> return NULL;
>>> }
>>> return obj;
>>> }
>>>
>>> static inline int
>>> restrict_ifaces_bpf__attach(struct restrict_ifaces_bpf *obj)
>>> {
>>> return bpf_object__attach_skeleton(obj->skeleton);
>>> }
>>>
>>> static inline void
>>> restrict_ifaces_bpf__detach(struct restrict_ifaces_bpf *obj)
>>> {
>>> return bpf_object__detach_skeleton(obj->skeleton);
>>> }
>>>
>>> static inline const void *restrict_ifaces_bpf__elf_bytes(size_t *sz);
>>>
>>> static inline int
>>> restrict_ifaces_bpf__create_skeleton(struct restrict_ifaces_bpf *obj)
>>> {
>>> struct bpf_object_skeleton *s;
>>> int err;
>>>
>>> s = (struct bpf_object_skeleton *)calloc(1, sizeof(*s));
>>> if (!s) {
>>> err = -ENOMEM;
>>> goto err;
>>> }
>>>
>>> s->sz = sizeof(*s);
>>> s->name = "restrict_ifaces_bpf";
>>> s->obj = &obj->obj;
>>>
>>> /* maps */
>>> s->map_cnt = 2;
>>> s->map_skel_sz = sizeof(*s->maps);
>>> s->maps = (struct bpf_map_skeleton *)calloc(s->map_cnt, s->map_skel_sz);
>>> if (!s->maps) {
>>> err = -ENOMEM;
>>> goto err;
>>> }
>>>
>>> s->maps[0].name = "sd_restrictif";
>>> s->maps[0].map = &obj->maps.sd_restrictif;
>>>
>>> s->maps[1].name = "restrict.rodata";
>>> s->maps[1].map = &obj->maps.rodata;
>>> s->maps[1].mmaped = (void **)&obj->rodata;
>>>
>>> /* programs */
>>> s->prog_cnt = 2;
>>> s->prog_skel_sz = sizeof(*s->progs);
>>> s->progs = (struct bpf_prog_skeleton *)calloc(s->prog_cnt, s->prog_skel_sz);
>>> if (!s->progs) {
>>> err = -ENOMEM;
>>> goto err;
>>> }
>>>
>>> s->progs[0].name = "sd_restrictif_e";
>>> s->progs[0].prog = &obj->progs.sd_restrictif_e;
>>> s->progs[0].link = &obj->links.sd_restrictif_e;
>>>
>>> s->progs[1].name = "sd_restrictif_i";
>>> s->progs[1].prog = &obj->progs.sd_restrictif_i;
>>> s->progs[1].link = &obj->links.sd_restrictif_i;
>>>
>>> s->data = (void *)restrict_ifaces_bpf__elf_bytes(&s->data_sz);
>>>
>>> obj->skeleton = s;
>>> return 0;
>>> err:
>>> bpf_object__destroy_skeleton(s);
>>> return err;
>>> }
>>>
>>> static inline const void *restrict_ifaces_bpf__elf_bytes(size_t *sz)
>>> {
>>> *sz = 4272;
>>> return (const void *)"\
>>> \x7f\x45\x4c\x46\x02\x01\x01\0\0\0\0\0\0\0\0\0\x01\0\xf7\0\x01\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\xb0\x0d\0\0\0\0\0\0\0\0\0\0\x40\0\0\0\0\0\x40\0\x0c\0\
>>> \x01\0\0\x2e\x73\x74\x72\x74\x61\x62\0\x2e\x73\x79\x6d\x74\x61\x62\0\x63\x67\
>>> \x72\x6f\x75\x70\x5f\x73\x6b\x62\x2f\x65\x67\x72\x65\x73\x73\0\x63\x67\x72\x6f\
>>> \x75\x70\x5f\x73\x6b\x62\x2f\x69\x6e\x67\x72\x65\x73\x73\0\x2e\x72\x6f\x64\x61\
>>> \x74\x61\0\x6c\x69\x63\x65\x6e\x73\x65\0\x2e\x6d\x61\x70\x73\0\x72\x65\x73\x74\
>>> \x72\x69\x63\x74\x2d\x69\x66\x61\x63\x65\x73\x2e\x62\x70\x66\x2e\x63\0\x4c\x42\
>>> \x42\x30\x5f\x32\0\x4c\x42\x42\x30\x5f\x33\0\x4c\x42\x42\x30\x5f\x34\0\x4c\x42\
>>> \x42\x31\x5f\x32\0\x4c\x42\x42\x31\x5f\x33\0\x4c\x42\x42\x31\x5f\x34\0\x5f\x6c\
>>> \x69\x63\x65\x6e\x73\x65\0\x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\
>>> \x5f\x65\0\x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\0\x69\x73\x5f\
>>> \x61\x6c\x6c\x6f\x77\x5f\x6c\x69\x73\x74\0\x73\x64\x5f\x72\x65\x73\x74\x72\x69\
>>> \x63\x74\x69\x66\x5f\x69\0\x2e\x72\x65\x6c\x63\x67\x72\x6f\x75\x70\x5f\x73\x6b\
>>> \x62\x2f\x65\x67\x72\x65\x73\x73\0\x2e\x72\x65\x6c\x63\x67\x72\x6f\x75\x70\x5f\
>>> \x73\x6b\x62\x2f\x69\x6e\x67\x72\x65\x73\x73\0\x2e\x42\x54\x46\0\x2e\x42\x54\
>>> \x46\x2e\x65\x78\x74\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \x4c\0\0\0\x04\0\xf1\xff\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x03\0\x03\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x62\0\0\0\0\0\x03\0\x70\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\x69\0\0\0\0\0\x03\0\x80\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x70\0\0\0\0\0\x03\
>>> \0\x88\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x03\0\x04\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\x77\0\0\0\0\0\x04\0\x70\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x7e\0\0\0\0\0\
>>> \x04\0\x80\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x85\0\0\0\0\0\x04\0\x88\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\x8c\0\0\0\x01\0\x06\0\0\0\0\0\0\0\0\0\x12\0\0\0\0\0\0\0\0\0\0\
>>> \0\x03\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x95\0\0\0\x12\0\x03\0\0\0\0\0\0\
>>> \0\0\0\x98\0\0\0\0\0\0\0\xa5\0\0\0\x11\0\x07\0\0\0\0\0\0\0\0\0\x18\0\0\0\0\0\0\
>>> \0\xb3\0\0\0\x11\0\x05\0\0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\xc1\0\0\0\x12\0\x04\
>>> \0\0\0\0\0\0\0\0\0\x98\0\0\0\0\0\0\0\x61\x11\x28\0\0\0\0\0\x63\x1a\xfc\xff\0\0\
>>> \0\0\xbf\xa2\0\0\0\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\x18\x01\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\x85\0\0\0\x01\0\0\0\x18\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x71\x11\0\0\
>>> \0\0\0\0\x15\x01\x03\0\0\0\0\0\xb7\x01\0\0\x01\0\0\0\x15\0\x03\0\0\0\0\0\x05\0\
>>> \x03\0\0\0\0\0\xb7\x01\0\0\x01\0\0\0\x15\0\x01\0\0\0\0\0\xb7\x01\0\0\0\0\0\0\
>>> \xbf\x10\0\0\0\0\0\0\x95\0\0\0\0\0\0\0\x61\x11\x28\0\0\0\0\0\x63\x1a\xfc\xff\0\
>>> \0\0\0\xbf\xa2\0\0\0\0\0\0\x07\x02\0\0\xfc\xff\xff\xff\x18\x01\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\x85\0\0\0\x01\0\0\0\x18\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x71\x11\0\
>>> \0\0\0\0\0\x15\x01\x03\0\0\0\0\0\xb7\x01\0\0\x01\0\0\0\x15\0\x03\0\0\0\0\0\x05\
>>> \0\x03\0\0\0\0\0\xb7\x01\0\0\x01\0\0\0\x15\0\x01\0\0\0\0\0\xb7\x01\0\0\0\0\0\0\
>>> \xbf\x10\0\0\0\0\0\0\x95\0\0\0\0\0\0\0\0\x4c\x47\x50\x4c\x2d\x32\x2e\x31\x2d\
>>> \x6f\x72\x2d\x6c\x61\x74\x65\x72\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\x20\0\0\0\0\0\0\0\x01\0\0\0\x0d\0\0\0\x38\0\0\0\0\0\0\0\x01\0\0\
>>> \0\x0e\0\0\0\x20\0\0\0\0\0\0\0\x01\0\0\0\x0d\0\0\0\x38\0\0\0\0\0\0\0\x01\0\0\0\
>>> \x0e\0\0\0\x9f\xeb\x01\0\x18\0\0\0\0\0\0\0\x10\x04\0\0\x10\x04\0\0\x9c\x03\0\0\
>>> \0\0\0\0\0\0\0\x02\x03\0\0\0\x01\0\0\0\0\0\0\x01\x04\0\0\0\x20\0\0\x01\0\0\0\0\
>>> \0\0\0\x03\0\0\0\0\x02\0\0\0\x04\0\0\0\x01\0\0\0\x05\0\0\0\0\0\0\x01\x04\0\0\0\
>>> \x20\0\0\0\0\0\0\0\0\0\0\x02\x06\0\0\0\x19\0\0\0\0\0\0\x08\x07\0\0\0\x1f\0\0\0\
>>> \0\0\0\x01\x04\0\0\0\x20\0\0\0\0\0\0\0\0\0\0\x02\x09\0\0\0\x2c\0\0\0\0\0\0\x08\
>>> \x0a\0\0\0\x31\0\0\0\0\0\0\x01\x01\0\0\0\x08\0\0\0\0\0\0\0\x03\0\0\x04\x18\0\0\
>>> \0\x3f\0\0\0\x01\0\0\0\0\0\0\0\x44\0\0\0\x05\0\0\0\x40\0\0\0\x48\0\0\0\x08\0\0\
>>> \0\x80\0\0\0\x4e\0\0\0\0\0\0\x0e\x0b\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\x02\x0e\0\0\
>>> \0\0\0\0\0\0\0\0\x0a\x0f\0\0\0\x5c\0\0\0\x21\0\0\x04\xc0\0\0\0\x66\0\0\0\x06\0\
>>> \0\0\0\0\0\0\x6a\0\0\0\x06\0\0\0\x20\0\0\0\x73\0\0\0\x06\0\0\0\x40\0\0\0\x78\0\
>>> \0\0\x06\0\0\0\x60\0\0\0\x86\0\0\0\x06\0\0\0\x80\0\0\0\x8f\0\0\0\x06\0\0\0\xa0\
>>> \0\0\0\x9c\0\0\0\x06\0\0\0\xc0\0\0\0\xa5\0\0\0\x06\0\0\0\xe0\0\0\0\xb0\0\0\0\
>>> \x06\0\0\0\0\x01\0\0\xb9\0\0\0\x06\0\0\0\x20\x01\0\0\xc9\0\0\0\x06\0\0\0\x40\
>>> \x01\0\0\xd1\0\0\0\x06\0\0\0\x60\x01\0\0\xda\0\0\0\x10\0\0\0\x80\x01\0\0\xdd\0\
>>> \0\0\x06\0\0\0\x20\x02\0\0\xe2\0\0\0\x06\0\0\0\x40\x02\0\0\xed\0\0\0\x06\0\0\0\
>>> \x60\x02\0\0\xf2\0\0\0\x06\0\0\0\x80\x02\0\0\xfb\0\0\0\x06\0\0\0\xa0\x02\0\0\
>>> \x03\x01\0\0\x06\0\0\0\xc0\x02\0\0\x0a\x01\0\0\x06\0\0\0\xe0\x02\0\0\x15\x01\0\
>>> \0\x06\0\0\0\0\x03\0\0\x1f\x01\0\0\x11\0\0\0\x20\x03\0\0\x2a\x01\0\0\x11\0\0\0\
>>> \xa0\x03\0\0\x34\x01\0\0\x06\0\0\0\x20\x04\0\0\x40\x01\0\0\x06\0\0\0\x40\x04\0\
>>> \0\x4b\x01\0\0\x06\0\0\0\x60\x04\0\0\0\0\0\0\x12\0\0\0\x80\x04\0\0\x55\x01\0\0\
>>> \x14\0\0\0\xc0\x04\0\0\x5c\x01\0\0\x06\0\0\0\0\x05\0\0\x65\x01\0\0\x06\0\0\0\
>>> \x20\x05\0\0\0\0\0\0\x16\0\0\0\x40\x05\0\0\x6e\x01\0\0\x06\0\0\0\x80\x05\0\0\
>>> \x77\x01\0\0\x14\0\0\0\xc0\x05\0\0\0\0\0\0\0\0\0\x03\0\0\0\0\x06\0\0\0\x04\0\0\
>>> \0\x05\0\0\0\0\0\0\0\0\0\0\x03\0\0\0\0\x06\0\0\0\x04\0\0\0\x04\0\0\0\0\0\0\0\
>>> \x01\0\0\x05\x08\0\0\0\x80\x01\0\0\x13\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x02\x22\0\0\
>>> \0\x8a\x01\0\0\0\0\0\x08\x15\0\0\0\x90\x01\0\0\0\0\0\x01\x08\0\0\0\x40\0\0\0\0\
>>> \0\0\0\x01\0\0\x05\x08\0\0\0\xa3\x01\0\0\x17\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x02\
>>> \x23\0\0\0\0\0\0\0\x01\0\0\x0d\x02\0\0\0\xa3\x01\0\0\x0d\0\0\0\xa6\x01\0\0\x01\
>>> \0\0\x0c\x18\0\0\0\xb6\x01\0\0\x01\0\0\x0c\x18\0\0\0\0\0\0\0\0\0\0\x0a\x1c\0\0\
>>> \0\0\0\0\0\0\0\0\x09\x09\0\0\0\xc6\x01\0\0\0\0\0\x0e\x1b\0\0\0\x01\0\0\0\0\0\0\
>>> \0\0\0\0\x0a\x1f\0\0\0\xd4\x01\0\0\0\0\0\x01\x01\0\0\0\x08\0\0\x01\0\0\0\0\0\0\
>>> \0\x03\0\0\0\0\x1e\0\0\0\x04\0\0\0\x12\0\0\0\xd9\x01\0\0\0\0\0\x0e\x20\0\0\0\0\
>>> \0\0\0\xe2\x01\0\0\0\0\0\x07\0\0\0\0\xf0\x01\0\0\0\0\0\x07\0\0\0\0\x61\x03\0\0\
>>> \x01\0\0\x0f\x01\0\0\0\x1d\0\0\0\0\0\0\0\x01\0\0\0\x69\x03\0\0\x01\0\0\x0f\x12\
>>> \0\0\0\x21\0\0\0\0\0\0\0\x12\0\0\0\x71\x03\0\0\x01\0\0\x0f\x18\0\0\0\x0c\0\0\0\
>>> \0\0\0\0\x18\0\0\0\0\x69\x6e\x74\0\x5f\x5f\x41\x52\x52\x41\x59\x5f\x53\x49\x5a\
>>> \x45\x5f\x54\x59\x50\x45\x5f\x5f\0\x5f\x5f\x75\x33\x32\0\x75\x6e\x73\x69\x67\
>>> \x6e\x65\x64\x20\x69\x6e\x74\0\x5f\x5f\x75\x38\0\x75\x6e\x73\x69\x67\x6e\x65\
>>> \x64\x20\x63\x68\x61\x72\0\x74\x79\x70\x65\0\x6b\x65\x79\0\x76\x61\x6c\x75\x65\
>>> \0\x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\0\x5f\x5f\x73\x6b\x5f\
>>> \x62\x75\x66\x66\0\x6c\x65\x6e\0\x70\x6b\x74\x5f\x74\x79\x70\x65\0\x6d\x61\x72\
>>> \x6b\0\x71\x75\x65\x75\x65\x5f\x6d\x61\x70\x70\x69\x6e\x67\0\x70\x72\x6f\x74\
>>> \x6f\x63\x6f\x6c\0\x76\x6c\x61\x6e\x5f\x70\x72\x65\x73\x65\x6e\x74\0\x76\x6c\
>>> \x61\x6e\x5f\x74\x63\x69\0\x76\x6c\x61\x6e\x5f\x70\x72\x6f\x74\x6f\0\x70\x72\
>>> \x69\x6f\x72\x69\x74\x79\0\x69\x6e\x67\x72\x65\x73\x73\x5f\x69\x66\x69\x6e\x64\
>>> \x65\x78\0\x69\x66\x69\x6e\x64\x65\x78\0\x74\x63\x5f\x69\x6e\x64\x65\x78\0\x63\
>>> \x62\0\x68\x61\x73\x68\0\x74\x63\x5f\x63\x6c\x61\x73\x73\x69\x64\0\x64\x61\x74\
>>> \x61\0\x64\x61\x74\x61\x5f\x65\x6e\x64\0\x6e\x61\x70\x69\x5f\x69\x64\0\x66\x61\
>>> \x6d\x69\x6c\x79\0\x72\x65\x6d\x6f\x74\x65\x5f\x69\x70\x34\0\x6c\x6f\x63\x61\
>>> \x6c\x5f\x69\x70\x34\0\x72\x65\x6d\x6f\x74\x65\x5f\x69\x70\x36\0\x6c\x6f\x63\
>>> \x61\x6c\x5f\x69\x70\x36\0\x72\x65\x6d\x6f\x74\x65\x5f\x70\x6f\x72\x74\0\x6c\
>>> \x6f\x63\x61\x6c\x5f\x70\x6f\x72\x74\0\x64\x61\x74\x61\x5f\x6d\x65\x74\x61\0\
>>> \x74\x73\x74\x61\x6d\x70\0\x77\x69\x72\x65\x5f\x6c\x65\x6e\0\x67\x73\x6f\x5f\
>>> \x73\x65\x67\x73\0\x67\x73\x6f\x5f\x73\x69\x7a\x65\0\x68\x77\x74\x73\x74\x61\
>>> \x6d\x70\0\x66\x6c\x6f\x77\x5f\x6b\x65\x79\x73\0\x5f\x5f\x75\x36\x34\0\x75\x6e\
>>> \x73\x69\x67\x6e\x65\x64\x20\x6c\x6f\x6e\x67\x20\x6c\x6f\x6e\x67\0\x73\x6b\0\
>>> \x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\x74\x69\x66\x5f\x65\0\x73\x64\x5f\x72\
>>> \x65\x73\x74\x72\x69\x63\x74\x69\x66\x5f\x69\0\x69\x73\x5f\x61\x6c\x6c\x6f\x77\
>>> \x5f\x6c\x69\x73\x74\0\x63\x68\x61\x72\0\x5f\x6c\x69\x63\x65\x6e\x73\x65\0\x62\
>>> \x70\x66\x5f\x66\x6c\x6f\x77\x5f\x6b\x65\x79\x73\0\x62\x70\x66\x5f\x73\x6f\x63\
>>> \x6b\0\x2f\x68\x6f\x6d\x65\x2f\x62\x75\x69\x6c\x64\x72\x6f\x6f\x74\x2f\x62\x75\
>>> \x69\x6c\x64\x72\x6f\x6f\x74\x2f\x6f\x75\x74\x70\x75\x74\x2f\x62\x75\x69\x6c\
>>> \x64\x2f\x73\x79\x73\x74\x65\x6d\x64\x2d\x63\x75\x73\x74\x6f\x6d\x2f\x73\x72\
>>> \x63\x2f\x63\x6f\x72\x65\x2f\x62\x70\x66\x2f\x72\x65\x73\x74\x72\x69\x63\x74\
>>> \x5f\x69\x66\x61\x63\x65\x73\x2f\x72\x65\x73\x74\x72\x69\x63\x74\x2d\x69\x66\
>>> \x61\x63\x65\x73\x2e\x62\x70\x66\x2e\x63\0\x20\x20\x20\x20\x20\x20\x20\x20\x69\
>>> \x66\x69\x6e\x64\x65\x78\x20\x3d\x20\x73\x6b\x2d\x3e\x69\x66\x69\x6e\x64\x65\
>>> \x78\x3b\0\x20\x20\x20\x20\x20\x20\x20\x20\x6c\x6f\x6f\x6b\x75\x70\x5f\x72\x65\
>>> \x73\x75\x6c\x74\x20\x3d\x20\x62\x70\x66\x5f\x6d\x61\x70\x5f\x6c\x6f\x6f\x6b\
>>> \x75\x70\x5f\x65\x6c\x65\x6d\x28\x26\x73\x64\x5f\x72\x65\x73\x74\x72\x69\x63\
>>> \x74\x69\x66\x2c\x20\x26\x69\x66\x69\x6e\x64\x65\x78\x29\x3b\0\x20\x20\x20\x20\
>>> \x20\x20\x20\x20\x69\x66\x20\x28\x69\x73\x5f\x61\x6c\x6c\x6f\x77\x5f\x6c\x69\
>>> \x73\x74\x29\x20\x7b\0\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\
>>> \x20\x20\x69\x66\x20\x28\x6c\x6f\x6f\x6b\x75\x70\x5f\x72\x65\x73\x75\x6c\x74\
>>> \x29\0\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x69\x66\
>>> \x20\x28\x21\x6c\x6f\x6f\x6b\x75\x70\x5f\x72\x65\x73\x75\x6c\x74\x29\0\x20\x20\
>>> \x20\x20\x20\x20\x20\x20\x72\x65\x74\x75\x72\x6e\x20\x72\x65\x73\x74\x72\x69\
>>> \x63\x74\x5f\x6e\x65\x74\x77\x6f\x72\x6b\x5f\x69\x6e\x74\x65\x72\x66\x61\x63\
>>> \x65\x73\x5f\x69\x6d\x70\x6c\x28\x73\x6b\x29\x3b\0\x2e\x72\x6f\x64\x61\x74\x61\
>>> \0\x6c\x69\x63\x65\x6e\x73\x65\0\x2e\x6d\x61\x70\x73\0\x63\x67\x72\x6f\x75\x70\
>>> \x5f\x73\x6b\x62\x2f\x65\x67\x72\x65\x73\x73\0\x63\x67\x72\x6f\x75\x70\x5f\x73\
>>> \x6b\x62\x2f\x69\x6e\x67\x72\x65\x73\x73\0\0\0\0\0\x9f\xeb\x01\0\x20\0\0\0\0\0\
>>> \0\0\x24\0\0\0\x24\0\0\0\x34\x01\0\0\x58\x01\0\0\0\0\0\0\x08\0\0\0\x77\x03\0\0\
>>> \x01\0\0\0\0\0\0\0\x19\0\0\0\x89\x03\0\0\x01\0\0\0\0\0\0\0\x1a\0\0\0\x10\0\0\0\
>>> \x77\x03\0\0\x09\0\0\0\0\0\0\0\xf9\x01\0\0\x62\x02\0\0\x17\x6c\0\0\x08\0\0\0\
>>> \xf9\x01\0\0\x62\x02\0\0\x11\x6c\0\0\x18\0\0\0\xf9\x01\0\0\0\0\0\0\0\0\0\0\x20\
>>> \0\0\0\xf9\x01\0\0\x81\x02\0\0\x19\x70\0\0\x38\0\0\0\xf9\x01\0\0\xc8\x02\0\0\
>>> \x0d\x74\0\0\x50\0\0\0\xf9\x01\0\0\xc8\x02\0\0\x0d\x74\0\0\x60\0\0\0\xf9\x01\0\
>>> \0\xe5\x02\0\0\x15\x7c\0\0\x78\0\0\0\xf9\x01\0\0\x08\x03\0\0\x15\x8c\0\0\x88\0\
>>> \0\0\xf9\x01\0\0\x2c\x03\0\0\x09\xb0\0\0\x89\x03\0\0\x09\0\0\0\0\0\0\0\xf9\x01\
>>> \0\0\x62\x02\0\0\x17\x6c\0\0\x08\0\0\0\xf9\x01\0\0\x62\x02\0\0\x11\x6c\0\0\x18\
>>> \0\0\0\xf9\x01\0\0\0\0\0\0\0\0\0\0\x20\0\0\0\xf9\x01\0\0\x81\x02\0\0\x19\x70\0\
>>> \0\x38\0\0\0\xf9\x01\0\0\xc8\x02\0\0\x0d\x74\0\0\x50\0\0\0\xf9\x01\0\0\xc8\x02\
>>> \0\0\x0d\x74\0\0\x60\0\0\0\xf9\x01\0\0\xe5\x02\0\0\x15\x7c\0\0\x78\0\0\0\xf9\
>>> \x01\0\0\x08\x03\0\0\x15\x8c\0\0\x88\0\0\0\xf9\x01\0\0\x2c\x03\0\0\x09\xc4\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\0\x03\0\0\0\x20\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\x40\0\0\0\0\0\0\0\x0c\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x09\0\0\0\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\x50\x01\0\0\0\0\0\0\x80\x01\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\x08\0\0\0\
>>> \0\0\0\0\x18\0\0\0\0\0\0\0\x11\0\0\0\x01\0\0\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\xd0\x02\0\0\0\0\0\0\x98\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\x23\0\0\0\x01\0\0\0\x06\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x68\x03\0\0\
>>> \0\0\0\0\x98\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \x36\0\0\0\x01\0\0\0\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x04\0\0\0\0\0\0\x01\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x3e\0\0\0\x01\0\
>>> \0\0\x02\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x01\x04\0\0\0\0\0\0\x12\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x46\0\0\0\x01\0\0\0\x03\0\0\0\
>>> \0\0\0\0\0\0\0\0\0\0\0\0\x18\x04\0\0\0\0\0\0\x18\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \x08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\xd1\0\0\0\x09\0\0\0\x40\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\0\0\0\x30\x04\0\0\0\0\0\0\x20\0\0\0\0\0\0\0\x02\0\0\0\x03\0\0\0\x08\0\0\0\
>>> \0\0\0\0\x10\0\0\0\0\0\0\0\xe7\0\0\0\x09\0\0\0\x40\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\x50\x04\0\0\0\0\0\0\x20\0\0\0\0\0\0\0\x02\0\0\0\x04\0\0\0\x08\0\0\0\0\0\0\0\
>>> \x10\0\0\0\0\0\0\0\xfe\0\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x70\x04\
>>> \0\0\0\0\0\0\xc4\x07\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\0\0\0\0\0\0\
>>> \0\0\x03\x01\0\0\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x38\x0c\0\0\0\0\0\0\
>>> \x78\x01\0\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0";
>>> }
>>>
>>> #ifdef __cplusplus
>>> struct restrict_ifaces_bpf *restrict_ifaces_bpf::open(const struct
>>> bpf_object_open_opts *opts) { return
>>> restrict_ifaces_bpf__open_opts(opts); }
>>> struct restrict_ifaces_bpf *restrict_ifaces_bpf::open_and_load() {
>>> return restrict_ifaces_bpf__open_and_load(); }
>>> int restrict_ifaces_bpf::load(struct restrict_ifaces_bpf *skel) {
>>> return restrict_ifaces_bpf__load(skel); }
>>> int restrict_ifaces_bpf::attach(struct restrict_ifaces_bpf *skel) {
>>> return restrict_ifaces_bpf__attach(skel); }
>>> void restrict_ifaces_bpf::detach(struct restrict_ifaces_bpf *skel) {
>>> restrict_ifaces_bpf__detach(skel); }
>>> void restrict_ifaces_bpf::destroy(struct restrict_ifaces_bpf *skel) {
>>> restrict_ifaces_bpf__destroy(skel); }
>>> const void *restrict_ifaces_bpf::elf_bytes(size_t *sz) { return
>>> restrict_ifaces_bpf__elf_bytes(sz); }
>>> #endif /* __cplusplus */
>>>
>>> __attribute__((unused)) static void
>>> restrict_ifaces_bpf__assert(struct restrict_ifaces_bpf *s
>>> __attribute__((unused)))
>>> {
>>> #ifdef __cplusplus
>>> #define _Static_assert static_assert
>>> #endif
>>> _Static_assert(sizeof(s->rodata->is_allow_list) == 1, "unexpected
>>> size of 'is_allow_list'");
>>> #ifdef __cplusplus
>>> #undef _Static_assert
>>> #endif
>>> }
>>>
>>> #endif /* __RESTRICT_IFACES_BPF_SKEL_H__ */
>>>
>>>>
>>>>
>>>> > Starting program:
>>>> > /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> > --debug gen skeleton
>>>> > output/build/systemd-custom/build/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>>> > [Thread debugging using libthread_db enabled]
>>>> > Using host libthread_db library "/usr/lib/libthread_db.so.1".
>>>> > libbpf: loading object 'restrict_ifaces_bpf' from buffer
>>>> > libbpf: elf: section(2) .symtab, size 336, link 1, flags 0, type=2
>>>> > libbpf: elf: section(3) .data, size 1, link 0, flags 3, type=1
>>>> > libbpf: elf: section(4) .bss, size 0, link 0, flags 3, type=8
>>>> > libbpf: elf: section(5) cgroup_skb/egress, size 184, link 0, flags 6, type=1
>>>> > libbpf: sec 'cgroup_skb/egress': found program 'sd_restrictif_e' at
>>>> > insn offset 0 (0 bytes), code size 23 insns (184 bytes)
>>>> > libbpf: elf: section(6) cgroup_skb/ingress, size 184, link 0, flags 6, type=1
>>>> > libbpf: sec 'cgroup_skb/ingress': found program 'sd_restrictif_i' at
>>>> > insn offset 0 (0 bytes), code size 23 insns (184 bytes)
>>>> > libbpf: elf: section(7) license, size 18, link 0, flags 2, type=1
>>>> > libbpf: license of restrict_ifaces_bpf is LGPL-2.1-or-later
>>>> > libbpf: elf: section(8) .maps, size 24, link 0, flags 3, type=1
>>>> > libbpf: elf: section(9) .comment, size 49, link 0, flags 30, type=1
>>>> > libbpf: elf: skipping unrecognized data section(9) .comment
>>>> > libbpf: elf: section(10) .relcgroup_skb/egress, size 32, link 2, flags
>>>> > 40, type=9
>>>> > libbpf: elf: section(11) .relcgroup_skb/ingress, size 32, link 2,
>>>> > flags 40, type=9
>>>> > libbpf: elf: section(12) .BTF, size 3606, link 0, flags 0, type=1
>>>> > libbpf: looking for externs among 14 symbols...
>>>> > libbpf: collected 0 externs total
>>>> > libbpf: map 'sd_restrictif': at sec_idx 8, offset 0.
>>>> > libbpf: map 'sd_restrictif': found type = 1.
>>>> > libbpf: map 'sd_restrictif': found key [12], sz = 4.
>>>> > libbpf: map 'sd_restrictif': found value [3], sz = 1.
>>>> >
>>>> > Program received signal SIGSEGV, Segmentation fault.
>>>> > 0x0000aaaaaab4fd2c in bpf_object.init_maps ()
>>>> > (gdb) bt
>>>> > #0 0x0000aaaaaab4fd2c in bpf_object.init_maps ()
>>>> > #1 0x0000aaaaaab52178 in bpf_object_open.part ()
>>>> > #2 0x0000aaaaaab544e8 in bpf_object.open_mem ()
>>>> > #3 0x0000aaaaaab2a58c in do_skeleton ()
>>>> > #4 0x0000aaaaaab1e204 in main ()
>>>> >
>>>> >>
>>>> >> diff --git a/tools/lib/bpf/libbpf.c b/tools/lib/bpf/libbpf.c
>>>> >> index e89cc9c885b3..e3a6808f0bb6 100644
>>>> >> --- a/tools/lib/bpf/libbpf.c
>>>> >> +++ b/tools/lib/bpf/libbpf.c
>>>> >> @@ -1591,6 +1591,10 @@ static int
>> bpf_object__init_global_data_maps(struct bpf_object *obj)
>>>> >> for (sec_idx = 1; sec_idx < obj->efile.sec_cnt; sec_idx++) {
>>>> >> sec_desc = &obj->efile.secs[sec_idx];
>>>> >>
>>>> >> + /* Skip empty sections. */
>>>> >> + if (sec_desc->data->d_size == 0)
>>>> >> + continue;
>>>> >> +
>>>> >> switch (sec_desc->sec_type) {
>>>> >> case SEC_DATA:
>>>> >> sec_name = elf_sec_name(obj, elf_sec_by_idx(obj, sec_idx));
>>>> >>
>>>> >> > GCC:
>>>> >> > $ /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> >> > --debug gen skeleton
>>>> >> > output/build/systemd-custom/build/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>>> >> > libbpf: loading object 'restrict_ifaces_bpf' from buffer
>>>> >> > libbpf: elf: section(2) .symtab, size 336, link 1, flags 0, type=2
>>>> >> > libbpf: elf: section(3) .data, size 1, link 0, flags 3, type=1
>>>> >> > libbpf: elf: section(4) .bss, size 0, link 0, flags 3, type=8
>>>> >> > libbpf: elf: section(5) cgroup_skb/egress, size 184, link 0, flags 6, type=1
>>>> >> > libbpf: sec 'cgroup_skb/egress': found program 'sd_restrictif_e' at
>>>> >> > insn offset 0 (0 bytes), code size 23 insns (184 bytes)
>>>> >> > libbpf: elf: section(6) cgroup_skb/ingress, size 184, link 0, flags 6, type=1
>>>> >> > libbpf: sec 'cgroup_skb/ingress': found program 'sd_restrictif_i' at
>>>> >> > insn offset 0 (0 bytes), code size 23 insns (184 bytes)
>>>> >> > libbpf: elf: section(7) license, size 18, link 0, flags 2, type=1
>>>> >> > libbpf: license of restrict_ifaces_bpf is LGPL-2.1-or-later
>>>> >> > libbpf: elf: section(8) .maps, size 24, link 0, flags 3, type=1
>>>> >> > libbpf: elf: section(9) .comment, size 49, link 0, flags 30, type=1
>>>> >> > libbpf: elf: skipping unrecognized data section(9) .comment
>>>> >> > libbpf: elf: section(10) .relcgroup_skb/egress, size 32, link 2, flags
>>>> >> > 40, type=9
>>>> >> > libbpf: elf: section(11) .relcgroup_skb/ingress, size 32, link 2,
>>>> >> > flags 40, type=9
>>>> >> > libbpf: elf: section(12) .BTF, size 3606, link 0, flags 0, type=1
>>>> >> > libbpf: looking for externs among 14 symbols...
>>>> >> > libbpf: collected 0 externs total
>>>> >> > libbpf: map 'sd_restrictif': at sec_idx 8, offset 0.
>>>> >> > libbpf: map 'sd_restrictif': found type = 1.
>>>> >> > libbpf: map 'sd_restrictif': found key [12], sz = 4.
>>>> >> > libbpf: map 'sd_restrictif': found value [3], sz = 1.
>>>> >> > libbpf: map 'restrict.data' (global data): at sec_idx 3, offset 0, flags 400.
>>>> >> > libbpf: map 1 is "restrict.data"
>>>> >> > libbpf: map 'restrict.bss' (global data): at sec_idx 4, offset 0, flags 400.
>>>> >> > libbpf: failed to alloc map 'restrict.bss' content buffer: -22
>>>> >> > Error: failed to open BPF object file: Invalid argument
>>>> >> >
>>>> >> > LLVM:
>>>> >> > $ /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> >> > --debug gen skeleton restrict-ifaces.bpf.o
>>>> >> > libbpf: loading object 'restrict_ifaces_bpf' from buffer
>>>> >> > libbpf: elf: section(2) .symtab, size 384, link 1, flags 0, type=2
>>>> >> > libbpf: elf: section(3) cgroup_skb/egress, size 152, link 0, flags 6, type=1
>>>> >> > libbpf: sec 'cgroup_skb/egress': found program 'sd_restrictif_e' at
>>>> >> > insn offset 0 (0 bytes), code size 19 insns (152 bytes)
>>>> >> > libbpf: elf: section(4) cgroup_skb/ingress, size 152, link 0, flags 6, type=1
>>>> >> > libbpf: sec 'cgroup_skb/ingress': found program 'sd_restrictif_i' at
>>>> >> > insn offset 0 (0 bytes), code size 19 insns (152 bytes)
>>>> >> > libbpf: elf: section(5) .rodata, size 1, link 0, flags 2, type=1
>>>> >> > libbpf: elf: section(6) license, size 18, link 0, flags 2, type=1
>>>> >> > libbpf: license of restrict_ifaces_bpf is LGPL-2.1-or-later
>>>> >> > libbpf: elf: section(7) .maps, size 24, link 0, flags 3, type=1
>>>> >> > libbpf: elf: section(8) .relcgroup_skb/egress, size 32, link 2, flags 40, type=9
>>>> >> > libbpf: elf: section(9) .relcgroup_skb/ingress, size 32, link 2, flags
>>>> >> > 40, type=9
>>>> >> > libbpf: elf: section(10) .BTF, size 1988, link 0, flags 0, type=1
>>>> >> > libbpf: elf: section(11) .BTF.ext, size 376, link 0, flags 0, type=1
>>>> >> > libbpf: looking for externs among 16 symbols...
>>>> >> > libbpf: collected 0 externs total
>>>> >> > libbpf: map 'sd_restrictif': at sec_idx 7, offset 0.
>>>> >> > libbpf: map 'sd_restrictif': found type = 1.
>>>> >> > libbpf: map 'sd_restrictif': found key [6], sz = 4.
>>>> >> > libbpf: map 'sd_restrictif': found value [9], sz = 1.
>>>> >> > libbpf: map 'restrict.rodata' (global data): at sec_idx 5, offset 0, flags 480.
>>>> >> > libbpf: map 1 is "restrict.rodata"
>>>> >> > libbpf: sec '.relcgroup_skb/egress': collecting relocation for
>>>> >> > section(3) 'cgroup_skb/egress'
>>>> >> > libbpf: sec '.relcgroup_skb/egress': relo #0: insn #4 against 'sd_restrictif'
>>>> >> > libbpf: prog 'sd_restrictif_e': found map 0 (sd_restrictif, sec 7, off
>>>> >> > 0) for insn #4
>>>> >> > libbpf: sec '.relcgroup_skb/egress': relo #1: insn #7 against 'is_allow_list'
>>>> >> > libbpf: prog 'sd_restrictif_e': found data map 1 (restrict.rodata, sec
>>>> >> > 5, off 0) for insn 7
>>>> >> > libbpf: sec '.relcgroup_skb/ingress': collecting relocation for
>>>> >> > section(4) 'cgroup_skb/ingress'
>>>> >> > libbpf: sec '.relcgroup_skb/ingress': relo #0: insn #4 against 'sd_restrictif'
>>>> >> > libbpf: prog 'sd_restrictif_i': found map 0 (sd_restrictif, sec 7, off
>>>> >> > 0) for insn #4
>>>> >> > libbpf: sec '.relcgroup_skb/ingress': relo #1: insn #7 against 'is_allow_list'
>>>> >> > libbpf: prog 'sd_restrictif_i': found data map 1 (restrict.rodata, sec
>>>> >> > 5, off 0) for insn 7
>>>> >> >
>>>> >> >> >
>>>> >> >> > >>
>>>> >> >> > >> Looking at libbpf.c, it seems to me that this may be due of trying to
>>>> >> >> > >> mmap 0 bytes in `bpf_object__init_internal_map':
>>>> >> >> > >>
>>>> >> >> > >> map->mmaped = mmap(NULL, bpf_map_mmap_sz(map), PROT_READ | PROT_WRITE,
>>>> >> >> > >> MAP_SHARED | MAP_ANONYMOUS, -1, 0);
>>>> >> >> > >> if (map->mmaped == MAP_FAILED) {
>>>> >> >> > >> err = -errno;
>>>> >> >> > >> map->mmaped = NULL;
>>>> >> >> > >> pr_warn("failed to alloc map '%s' content buffer: %d\n",
>>>> >> >> > >> map->name, err);
>>>> >> >> > >> zfree(&map->real_name);
>>>> >> >> > >> zfree(&map->name);
>>>> >> >> > >> return err;
>>>> >> >> > >> }
>>>> >> >> > >>
>>>> >> >> > >> I see no check for zero sized sections in
>>>> >> >> > >> bpf_object__init_global_data_maps.
>>>> >> >> > >>
>>>> >> >> > >> Is maybe GCC failing to allocate stuff in BSS that is supposed to be
>>>> >> >> > >> there?
>>>> >> >> > >>
>>>> >> >> > >> > Stripped file passed to gen skeleton:
>>>> >> >> > >> > /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> >> >> > >> > btf dump file
>>>> >> >> > >> >
>> output/build/systemd-custom/build/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.o
>>>> >> >> > >> > format raw
>>>> >> >> > >> > [1] INT 'signed char' size=1 bits_offset=0 nr_bits=8 encoding=UNKN
>>>> >> >> > >> > [2] INT 'unsigned char' size=1 bits_offset=0 nr_bits=8 encoding=CHAR
>>>> >> >> > >> > [3] TYPEDEF '__u8' type_id=2
>>>> >> >> > >> > [4] CONST '(anon)' type_id=3
>>>> >> >> > >> > [5] VOLATILE '(anon)' type_id=4
>>>> >> >> > >> > [6] INT 'short int' size=2 bits_offset=0 nr_bits=16 encoding=SIGNED
>>>> >> >> > >> > [7] INT 'short unsigned int' size=2 bits_offset=0 nr_bits=16 encoding=(none)
>>>> >> >> > >> > [8] TYPEDEF '__u16' type_id=7
>>>> >> >> > >> > [9] INT 'int' size=4 bits_offset=0 nr_bits=32 encoding=SIGNED
>>>> >> >> > >> > [10] TYPEDEF '__s32' type_id=9
>>>> >> >> > >> > [11] INT 'unsigned int' size=4 bits_offset=0 nr_bits=32 encoding=(none)
>>>> >> >> > >> > [12] TYPEDEF '__u32' type_id=11
>>>> >> >> > >> > [13] INT 'long long int' size=8 bits_offset=0 nr_bits=64 encoding=SIGNED
>>>> >> >> > >> > [14] INT 'long long unsigned int' size=8 bits_offset=0 nr_bits=64
>>>> >> >> > >> > encoding=(none)
>>>> >> >> > >> > [15] TYPEDEF '__u64' type_id=14
>>>> >> >> > >> > [16] INT 'long unsigned int' size=8 bits_offset=0 nr_bits=64 encoding=(none)
>>>> >> >> > >> > [17] INT 'long int' size=8 bits_offset=0 nr_bits=64 encoding=SIGNED
>>>> >> >> > >> > [18] INT 'char' size=1 bits_offset=0 nr_bits=8 encoding=UNKN
>>>> >> >> > >> > [19] CONST '(anon)' type_id=18
>>>> >> >> > >> > [20] TYPEDEF '__be16' type_id=8
>>>> >> >> > >> > [21] TYPEDEF '__be32' type_id=12
>>>> >> >> > >> > [22] ENUM 'bpf_map_type' encoding=UNSIGNED size=4 vlen=31
>>>> >> >> > >> > 'BPF_MAP_TYPE_UNSPEC' val=0
>>>> >> >> > >> > 'BPF_MAP_TYPE_HASH' val=1
>>>> >> >> > >> > 'BPF_MAP_TYPE_ARRAY' val=2
>>>> >> >> > >> > 'BPF_MAP_TYPE_PROG_ARRAY' val=3
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERF_EVENT_ARRAY' val=4
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERCPU_HASH' val=5
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERCPU_ARRAY' val=6
>>>> >> >> > >> > 'BPF_MAP_TYPE_STACK_TRACE' val=7
>>>> >> >> > >> > 'BPF_MAP_TYPE_CGROUP_ARRAY' val=8
>>>> >> >> > >> > 'BPF_MAP_TYPE_LRU_HASH' val=9
>>>> >> >> > >> > 'BPF_MAP_TYPE_LRU_PERCPU_HASH' val=10
>>>> >> >> > >> > 'BPF_MAP_TYPE_LPM_TRIE' val=11
>>>> >> >> > >> > 'BPF_MAP_TYPE_ARRAY_OF_MAPS' val=12
>>>> >> >> > >> > 'BPF_MAP_TYPE_HASH_OF_MAPS' val=13
>>>> >> >> > >> > 'BPF_MAP_TYPE_DEVMAP' val=14
>>>> >> >> > >> > 'BPF_MAP_TYPE_SOCKMAP' val=15
>>>> >> >> > >> > 'BPF_MAP_TYPE_CPUMAP' val=16
>>>> >> >> > >> > 'BPF_MAP_TYPE_XSKMAP' val=17
>>>> >> >> > >> > 'BPF_MAP_TYPE_SOCKHASH' val=18
>>>> >> >> > >> > 'BPF_MAP_TYPE_CGROUP_STORAGE' val=19
>>>> >> >> > >> > 'BPF_MAP_TYPE_REUSEPORT_SOCKARRAY' val=20
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE' val=21
>>>> >> >> > >> > 'BPF_MAP_TYPE_QUEUE' val=22
>>>> >> >> > >> > 'BPF_MAP_TYPE_STACK' val=23
>>>> >> >> > >> > 'BPF_MAP_TYPE_SK_STORAGE' val=24
>>>> >> >> > >> > 'BPF_MAP_TYPE_DEVMAP_HASH' val=25
>>>> >> >> > >> > 'BPF_MAP_TYPE_STRUCT_OPS' val=26
>>>> >> >> > >> > 'BPF_MAP_TYPE_RINGBUF' val=27
>>>> >> >> > >> > 'BPF_MAP_TYPE_INODE_STORAGE' val=28
>>>> >> >> > >> > 'BPF_MAP_TYPE_TASK_STORAGE' val=29
>>>> >> >> > >> > 'BPF_MAP_TYPE_BLOOM_FILTER' val=30
>>>> >> >> > >> > [23] UNION '(anon)' size=8 vlen=1
>>>> >> >> > >> > 'flow_keys' type_id=29 bits_offset=0
>>>> >> >> > >> > [24] STRUCT 'bpf_flow_keys' size=56 vlen=13
>>>> >> >> > >> > 'nhoff' type_id=8 bits_offset=0
>>>> >> >> > >> > 'thoff' type_id=8 bits_offset=16
>>>> >> >> > >> > 'addr_proto' type_id=8 bits_offset=32
>>>> >> >> > >> > 'is_frag' type_id=3 bits_offset=48
>>>> >> >> > >> > 'is_first_frag' type_id=3 bits_offset=56
>>>> >> >> > >> > 'is_encap' type_id=3 bits_offset=64
>>>> >> >> > >> > 'ip_proto' type_id=3 bits_offset=72
>>>> >> >> > >> > 'n_proto' type_id=20 bits_offset=80
>>>> >> >> > >> > 'sport' type_id=20 bits_offset=96
>>>> >> >> > >> > 'dport' type_id=20 bits_offset=112
>>>> >> >> > >> > '(anon)' type_id=25 bits_offset=128
>>>> >> >> > >> > 'flags' type_id=12 bits_offset=384
>>>> >> >> > >> > 'flow_label' type_id=21 bits_offset=416
>>>> >> >> > >> > [25] UNION '(anon)' size=32 vlen=2
>>>> >> >> > >> > '(anon)' type_id=26 bits_offset=0
>>>> >> >> > >> > '(anon)' type_id=27 bits_offset=0
>>>> >> >> > >> > [26] STRUCT '(anon)' size=8 vlen=2
>>>> >> >> > >> > 'ipv4_src' type_id=21 bits_offset=0
>>>> >> >> > >> > 'ipv4_dst' type_id=21 bits_offset=32
>>>> >> >> > >> > [27] STRUCT '(anon)' size=32 vlen=2
>>>> >> >> > >> > 'ipv6_src' type_id=28 bits_offset=0
>>>> >> >> > >> > 'ipv6_dst' type_id=28 bits_offset=128
>>>> >> >> > >> > [28] ARRAY '(anon)' type_id=12 index_type_id=16 nr_elems=4
>>>> >> >> > >> > [29] PTR '(anon)' type_id=24
>>>> >> >> > >> > [30] UNION '(anon)' size=8 vlen=1
>>>> >> >> > >> > 'sk' type_id=32 bits_offset=0
>>>> >> >> > >> > [31] STRUCT 'bpf_sock' size=80 vlen=14
>>>> >> >> > >> > 'bound_dev_if' type_id=12 bits_offset=0
>>>> >> >> > >> > 'family' type_id=12 bits_offset=32
>>>> >> >> > >> > 'type' type_id=12 bits_offset=64
>>>> >> >> > >> > 'protocol' type_id=12 bits_offset=96
>>>> >> >> > >> > 'mark' type_id=12 bits_offset=128
>>>> >> >> > >> > 'priority' type_id=12 bits_offset=160
>>>> >> >> > >> > 'src_ip4' type_id=12 bits_offset=192
>>>> >> >> > >> > 'src_ip6' type_id=28 bits_offset=224
>>>> >> >> > >> > 'src_port' type_id=12 bits_offset=352
>>>> >> >> > >> > 'dst_port' type_id=20 bits_offset=384
>>>> >> >> > >> > 'dst_ip4' type_id=12 bits_offset=416
>>>> >> >> > >> > 'dst_ip6' type_id=28 bits_offset=448
>>>> >> >> > >> > 'state' type_id=12 bits_offset=576
>>>> >> >> > >> > 'rx_queue_mapping' type_id=10 bits_offset=608
>>>> >> >> > >> > [32] PTR '(anon)' type_id=31
>>>> >> >> > >> > [33] STRUCT '__sk_buff' size=192 vlen=33
>>>> >> >> > >> > 'len' type_id=12 bits_offset=0
>>>> >> >> > >> > 'pkt_type' type_id=12 bits_offset=32
>>>> >> >> > >> > 'mark' type_id=12 bits_offset=64
>>>> >> >> > >> > 'queue_mapping' type_id=12 bits_offset=96
>>>> >> >> > >> > 'protocol' type_id=12 bits_offset=128
>>>> >> >> > >> > 'vlan_present' type_id=12 bits_offset=160
>>>> >> >> > >> > 'vlan_tci' type_id=12 bits_offset=192
>>>> >> >> > >> > 'vlan_proto' type_id=12 bits_offset=224
>>>> >> >> > >> > 'priority' type_id=12 bits_offset=256
>>>> >> >> > >> > 'ingress_ifindex' type_id=12 bits_offset=288
>>>> >> >> > >> > 'ifindex' type_id=12 bits_offset=320
>>>> >> >> > >> > 'tc_index' type_id=12 bits_offset=352
>>>> >> >> > >> > 'cb' type_id=34 bits_offset=384
>>>> >> >> > >> > 'hash' type_id=12 bits_offset=544
>>>> >> >> > >> > 'tc_classid' type_id=12 bits_offset=576
>>>> >> >> > >> > 'data' type_id=12 bits_offset=608
>>>> >> >> > >> > 'data_end' type_id=12 bits_offset=640
>>>> >> >> > >> > 'napi_id' type_id=12 bits_offset=672
>>>> >> >> > >> > 'family' type_id=12 bits_offset=704
>>>> >> >> > >> > 'remote_ip4' type_id=12 bits_offset=736
>>>> >> >> > >> > 'local_ip4' type_id=12 bits_offset=768
>>>> >> >> > >> > 'remote_ip6' type_id=28 bits_offset=800
>>>> >> >> > >> > 'local_ip6' type_id=28 bits_offset=928
>>>> >> >> > >> > 'remote_port' type_id=12 bits_offset=1056
>>>> >> >> > >> > 'local_port' type_id=12 bits_offset=1088
>>>> >> >> > >> > 'data_meta' type_id=12 bits_offset=1120
>>>> >> >> > >> > '(anon)' type_id=23 bits_offset=1152
>>>> >> >> > >> > 'tstamp' type_id=15 bits_offset=1216
>>>> >> >> > >> > 'wire_len' type_id=12 bits_offset=1280
>>>> >> >> > >> > 'gso_segs' type_id=12 bits_offset=1312
>>>> >> >> > >> > '(anon)' type_id=30 bits_offset=1344
>>>> >> >> > >> > 'gso_size' type_id=12 bits_offset=1408
>>>> >> >> > >> > 'hwtstamp' type_id=15 bits_offset=1472
>>>> >> >> > >> > [34] ARRAY '(anon)' type_id=12 index_type_id=16 nr_elems=5
>>>> >> >> > >> > [35] CONST '(anon)' type_id=33
>>>> >> >> > >> > [36] PTR '(anon)' type_id=0
>>>> >> >> > >> > [37] STRUCT '(anon)' size=24 vlen=3
>>>> >> >> > >> > 'type' type_id=39 bits_offset=0
>>>> >> >> > >> > 'key' type_id=40 bits_offset=64
>>>> >> >> > >> > 'value' type_id=41 bits_offset=128
>>>> >> >> > >> > [38] ARRAY '(anon)' type_id=9 index_type_id=16 nr_elems=1
>>>> >> >> > >> > [39] PTR '(anon)' type_id=38
>>>> >> >> > >> > [40] PTR '(anon)' type_id=12
>>>> >> >> > >> > [41] PTR '(anon)' type_id=3
>>>> >> >> > >> > [42] ARRAY '(anon)' type_id=19 index_type_id=16 nr_elems=18
>>>> >> >> > >> > [43] CONST '(anon)' type_id=42
>>>> >> >> > >> > [44] FUNC_PROTO '(anon)' ret_type_id=36 vlen=2
>>>> >> >> > >> > '(anon)' type_id=36
>>>> >> >> > >> > '(anon)' type_id=46
>>>> >> >> > >> > [45] CONST '(anon)' type_id=0
>>>> >> >> > >> > [46] PTR '(anon)' type_id=45
>>>> >> >> > >> > [47] FUNC_PROTO '(anon)' ret_type_id=9 vlen=1
>>>> >> >> > >> > 'sk' type_id=48
>>>> >> >> > >> > [48] PTR '(anon)' type_id=35
>>>> >> >> > >> > [49] VAR '_license' type_id=43, linkage=static
>>>> >> >> > >> > [50] VAR 'is_allow_list' type_id=5, linkage=global
>>>> >> >> > >> > [51] VAR 'sd_restrictif' type_id=37, linkage=global
>>>> >> >> > >> > [52] FUNC 'sd_restrictif_i' type_id=47 linkage=global
>>>> >> >> > >> > [53] FUNC 'sd_restrictif_e' type_id=47 linkage=global
>>>> >> >> > >> > [54] FUNC 'restrict_network_interfaces_impl' type_id=47 linkage=static
>>>> >> >> > >> > [55] DATASEC '.data' size=1 vlen=1
>>>> >> >> > >> > type_id=50 offset=0 size=1 (VAR 'is_allow_list')
>>>> >> >> > >> > [56] DATASEC 'license' size=18 vlen=1
>>>> >> >> > >> > type_id=49 offset=0 size=18 (VAR '_license')
>>>> >> >> > >> > [57] DATASEC '.maps' size=24 vlen=1
>>>> >> >> > >> > type_id=51 offset=0 size=24 (VAR 'sd_restrictif')
>>>> >> >> > >> >
>>>> >> >> > >> > File before being stripped using bpftool gen object:
>>>> >> >> > >> > /home/buildroot/buildroot/output/per-package/systemd/host/sbin/bpftool
>>>> >> >> > >> > btf dump file
>>>> >> >> > >> >
>>>> >> >
>>>> >
>>
> output/build/systemd-custom/build/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.unstripped.o
>>>> >> >> > >> > format raw
>>>> >> >> > >> > [1] INT 'signed char' size=1 bits_offset=0 nr_bits=8 encoding=UNKN
>>>> >> >> > >> > [2] INT 'unsigned char' size=1 bits_offset=0 nr_bits=8 encoding=CHAR
>>>> >> >> > >> > [3] TYPEDEF '__u8' type_id=2
>>>> >> >> > >> > [4] CONST '(anon)' type_id=3
>>>> >> >> > >> > [5] VOLATILE '(anon)' type_id=4
>>>> >> >> > >> > [6] INT 'short int' size=2 bits_offset=0 nr_bits=16 encoding=SIGNED
>>>> >> >> > >> > [7] INT 'short unsigned int' size=2 bits_offset=0 nr_bits=16 encoding=(none)
>>>> >> >> > >> > [8] TYPEDEF '__u16' type_id=7
>>>> >> >> > >> > [9] INT 'int' size=4 bits_offset=0 nr_bits=32 encoding=SIGNED
>>>> >> >> > >> > [10] TYPEDEF '__s32' type_id=9
>>>> >> >> > >> > [11] INT 'unsigned int' size=4 bits_offset=0 nr_bits=32 encoding=(none)
>>>> >> >> > >> > [12] TYPEDEF '__u32' type_id=11
>>>> >> >> > >> > [13] INT 'long long int' size=8 bits_offset=0 nr_bits=64 encoding=SIGNED
>>>> >> >> > >> > [14] INT 'long long unsigned int' size=8 bits_offset=0 nr_bits=64
>>>> >> >> > >> > encoding=(none)
>>>> >> >> > >> > [15] TYPEDEF '__u64' type_id=14
>>>> >> >> > >> > [16] INT 'long unsigned int' size=8 bits_offset=0 nr_bits=64 encoding=(none)
>>>> >> >> > >> > [17] INT 'long int' size=8 bits_offset=0 nr_bits=64 encoding=SIGNED
>>>> >> >> > >> > [18] INT 'char' size=1 bits_offset=0 nr_bits=8 encoding=UNKN
>>>> >> >> > >> > [19] CONST '(anon)' type_id=18
>>>> >> >> > >> > [20] TYPEDEF '__be16' type_id=8
>>>> >> >> > >> > [21] TYPEDEF '__be32' type_id=12
>>>> >> >> > >> > [22] ENUM 'bpf_map_type' encoding=UNSIGNED size=4 vlen=31
>>>> >> >> > >> > 'BPF_MAP_TYPE_UNSPEC' val=0
>>>> >> >> > >> > 'BPF_MAP_TYPE_HASH' val=1
>>>> >> >> > >> > 'BPF_MAP_TYPE_ARRAY' val=2
>>>> >> >> > >> > 'BPF_MAP_TYPE_PROG_ARRAY' val=3
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERF_EVENT_ARRAY' val=4
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERCPU_HASH' val=5
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERCPU_ARRAY' val=6
>>>> >> >> > >> > 'BPF_MAP_TYPE_STACK_TRACE' val=7
>>>> >> >> > >> > 'BPF_MAP_TYPE_CGROUP_ARRAY' val=8
>>>> >> >> > >> > 'BPF_MAP_TYPE_LRU_HASH' val=9
>>>> >> >> > >> > 'BPF_MAP_TYPE_LRU_PERCPU_HASH' val=10
>>>> >> >> > >> > 'BPF_MAP_TYPE_LPM_TRIE' val=11
>>>> >> >> > >> > 'BPF_MAP_TYPE_ARRAY_OF_MAPS' val=12
>>>> >> >> > >> > 'BPF_MAP_TYPE_HASH_OF_MAPS' val=13
>>>> >> >> > >> > 'BPF_MAP_TYPE_DEVMAP' val=14
>>>> >> >> > >> > 'BPF_MAP_TYPE_SOCKMAP' val=15
>>>> >> >> > >> > 'BPF_MAP_TYPE_CPUMAP' val=16
>>>> >> >> > >> > 'BPF_MAP_TYPE_XSKMAP' val=17
>>>> >> >> > >> > 'BPF_MAP_TYPE_SOCKHASH' val=18
>>>> >> >> > >> > 'BPF_MAP_TYPE_CGROUP_STORAGE' val=19
>>>> >> >> > >> > 'BPF_MAP_TYPE_REUSEPORT_SOCKARRAY' val=20
>>>> >> >> > >> > 'BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE' val=21
>>>> >> >> > >> > 'BPF_MAP_TYPE_QUEUE' val=22
>>>> >> >> > >> > 'BPF_MAP_TYPE_STACK' val=23
>>>> >> >> > >> > 'BPF_MAP_TYPE_SK_STORAGE' val=24
>>>> >> >> > >> > 'BPF_MAP_TYPE_DEVMAP_HASH' val=25
>>>> >> >> > >> > 'BPF_MAP_TYPE_STRUCT_OPS' val=26
>>>> >> >> > >> > 'BPF_MAP_TYPE_RINGBUF' val=27
>>>> >> >> > >> > 'BPF_MAP_TYPE_INODE_STORAGE' val=28
>>>> >> >> > >> > 'BPF_MAP_TYPE_TASK_STORAGE' val=29
>>>> >> >> > >> > 'BPF_MAP_TYPE_BLOOM_FILTER' val=30
>>>> >> >> > >> > [23] UNION '(anon)' size=8 vlen=1
>>>> >> >> > >> > 'flow_keys' type_id=29 bits_offset=0
>>>> >> >> > >> > [24] STRUCT 'bpf_flow_keys' size=56 vlen=13
>>>> >> >> > >> > 'nhoff' type_id=8 bits_offset=0
>>>> >> >> > >> > 'thoff' type_id=8 bits_offset=16
>>>> >> >> > >> > 'addr_proto' type_id=8 bits_offset=32
>>>> >> >> > >> > 'is_frag' type_id=3 bits_offset=48
>>>> >> >> > >> > 'is_first_frag' type_id=3 bits_offset=56
>>>> >> >> > >> > 'is_encap' type_id=3 bits_offset=64
>>>> >> >> > >> > 'ip_proto' type_id=3 bits_offset=72
>>>> >> >> > >> > 'n_proto' type_id=20 bits_offset=80
>>>> >> >> > >> > 'sport' type_id=20 bits_offset=96
>>>> >> >> > >> > 'dport' type_id=20 bits_offset=112
>>>> >> >> > >> > '(anon)' type_id=25 bits_offset=128
>>>> >> >> > >> > 'flags' type_id=12 bits_offset=384
>>>> >> >> > >> > 'flow_label' type_id=21 bits_offset=416
>>>> >> >> > >> > [25] UNION '(anon)' size=32 vlen=2
>>>> >> >> > >> > '(anon)' type_id=26 bits_offset=0
>>>> >> >> > >> > '(anon)' type_id=27 bits_offset=0
>>>> >> >> > >> > [26] STRUCT '(anon)' size=8 vlen=2
>>>> >> >> > >> > 'ipv4_src' type_id=21 bits_offset=0
>>>> >> >> > >> > 'ipv4_dst' type_id=21 bits_offset=32
>>>> >> >> > >> > [27] STRUCT '(anon)' size=32 vlen=2
>>>> >> >> > >> > 'ipv6_src' type_id=28 bits_offset=0
>>>> >> >> > >> > 'ipv6_dst' type_id=28 bits_offset=128
>>>> >> >> > >> > [28] ARRAY '(anon)' type_id=12 index_type_id=16 nr_elems=4
>>>> >> >> > >> > [29] PTR '(anon)' type_id=24
>>>> >> >> > >> > [30] UNION '(anon)' size=8 vlen=1
>>>> >> >> > >> > 'sk' type_id=32 bits_offset=0
>>>> >> >> > >> > [31] STRUCT 'bpf_sock' size=80 vlen=14
>>>> >> >> > >> > 'bound_dev_if' type_id=12 bits_offset=0
>>>> >> >> > >> > 'family' type_id=12 bits_offset=32
>>>> >> >> > >> > 'type' type_id=12 bits_offset=64
>>>> >> >> > >> > 'protocol' type_id=12 bits_offset=96
>>>> >> >> > >> > 'mark' type_id=12 bits_offset=128
>>>> >> >> > >> > 'priority' type_id=12 bits_offset=160
>>>> >> >> > >> > 'src_ip4' type_id=12 bits_offset=192
>>>> >> >> > >> > 'src_ip6' type_id=28 bits_offset=224
>>>> >> >> > >> > 'src_port' type_id=12 bits_offset=352
>>>> >> >> > >> > 'dst_port' type_id=20 bits_offset=384
>>>> >> >> > >> > 'dst_ip4' type_id=12 bits_offset=416
>>>> >> >> > >> > 'dst_ip6' type_id=28 bits_offset=448
>>>> >> >> > >> > 'state' type_id=12 bits_offset=576
>>>> >> >> > >> > 'rx_queue_mapping' type_id=10 bits_offset=608
>>>> >> >> > >> > [32] PTR '(anon)' type_id=31
>>>> >> >> > >> > [33] STRUCT '__sk_buff' size=192 vlen=33
>>>> >> >> > >> > 'len' type_id=12 bits_offset=0
>>>> >> >> > >> > 'pkt_type' type_id=12 bits_offset=32
>>>> >> >> > >> > 'mark' type_id=12 bits_offset=64
>>>> >> >> > >> > 'queue_mapping' type_id=12 bits_offset=96
>>>> >> >> > >> > 'protocol' type_id=12 bits_offset=128
>>>> >> >> > >> > 'vlan_present' type_id=12 bits_offset=160
>>>> >> >> > >> > 'vlan_tci' type_id=12 bits_offset=192
>>>> >> >> > >> > 'vlan_proto' type_id=12 bits_offset=224
>>>> >> >> > >> > 'priority' type_id=12 bits_offset=256
>>>> >> >> > >> > 'ingress_ifindex' type_id=12 bits_offset=288
>>>> >> >> > >> > 'ifindex' type_id=12 bits_offset=320
>>>> >> >> > >> > 'tc_index' type_id=12 bits_offset=352
>>>> >> >> > >> > 'cb' type_id=34 bits_offset=384
>>>> >> >> > >> > 'hash' type_id=12 bits_offset=544
>>>> >> >> > >> > 'tc_classid' type_id=12 bits_offset=576
>>>> >> >> > >> > 'data' type_id=12 bits_offset=608
>>>> >> >> > >> > 'data_end' type_id=12 bits_offset=640
>>>> >> >> > >> > 'napi_id' type_id=12 bits_offset=672
>>>> >> >> > >> > 'family' type_id=12 bits_offset=704
>>>> >> >> > >> > 'remote_ip4' type_id=12 bits_offset=736
>>>> >> >> > >> > 'local_ip4' type_id=12 bits_offset=768
>>>> >> >> > >> > 'remote_ip6' type_id=28 bits_offset=800
>>>> >> >> > >> > 'local_ip6' type_id=28 bits_offset=928
>>>> >> >> > >> > 'remote_port' type_id=12 bits_offset=1056
>>>> >> >> > >> > 'local_port' type_id=12 bits_offset=1088
>>>> >> >> > >> > 'data_meta' type_id=12 bits_offset=1120
>>>> >> >> > >> > '(anon)' type_id=23 bits_offset=1152
>>>> >> >> > >> > 'tstamp' type_id=15 bits_offset=1216
>>>> >> >> > >> > 'wire_len' type_id=12 bits_offset=1280
>>>> >> >> > >> > 'gso_segs' type_id=12 bits_offset=1312
>>>> >> >> > >> > '(anon)' type_id=30 bits_offset=1344
>>>> >> >> > >> > 'gso_size' type_id=12 bits_offset=1408
>>>> >> >> > >> > 'hwtstamp' type_id=15 bits_offset=1472
>>>> >> >> > >> > [34] ARRAY '(anon)' type_id=12 index_type_id=16 nr_elems=5
>>>> >> >> > >> > [35] CONST '(anon)' type_id=33
>>>> >> >> > >> > [36] PTR '(anon)' type_id=0
>>>> >> >> > >> > [37] STRUCT '(anon)' size=24 vlen=3
>>>> >> >> > >> > 'type' type_id=39 bits_offset=0
>>>> >> >> > >> > 'key' type_id=40 bits_offset=64
>>>> >> >> > >> > 'value' type_id=41 bits_offset=128
>>>> >> >> > >> > [38] ARRAY '(anon)' type_id=9 index_type_id=16 nr_elems=1
>>>> >> >> > >> > [39] PTR '(anon)' type_id=38
>>>> >> >> > >> > [40] PTR '(anon)' type_id=12
>>>> >> >> > >> > [41] PTR '(anon)' type_id=3
>>>> >> >> > >> > [42] ARRAY '(anon)' type_id=19 index_type_id=16 nr_elems=18
>>>> >> >> > >> > [43] CONST '(anon)' type_id=42
>>>> >> >> > >> > [44] FUNC_PROTO '(anon)' ret_type_id=36 vlen=2
>>>> >> >> > >> > '(anon)' type_id=36
>>>> >> >> > >> > '(anon)' type_id=46
>>>> >> >> > >> > [45] CONST '(anon)' type_id=0
>>>> >> >> > >> > [46] PTR '(anon)' type_id=45
>>>> >> >> > >> > [47] FUNC_PROTO '(anon)' ret_type_id=9 vlen=1
>>>> >> >> > >> > 'sk' type_id=48
>>>> >> >> > >> > [48] PTR '(anon)' type_id=35
>>>> >> >> > >> > [49] FUNC_PROTO '(anon)' ret_type_id=9 vlen=1
>>>> >> >> > >> > 'sk' type_id=48
>>>> >> >> > >> > [50] FUNC_PROTO '(anon)' ret_type_id=9 vlen=1
>>>> >> >> > >> > 'sk' type_id=48
>>>> >> >> > >> > [51] VAR '_license' type_id=43, linkage=static
>>>> >> >> > >> > [52] VAR 'is_allow_list' type_id=5, linkage=global
>>>> >> >> > >> > [53] VAR 'sd_restrictif' type_id=37, linkage=global
>>>> >> >> > >> > [54] FUNC 'bpf_map_lookup_elem' type_id=44 linkage=global
>>>> >> >> > >> > [55] FUNC 'sd_restrictif_i' type_id=47 linkage=global
>>>> >> >> > >> > [56] FUNC 'sd_restrictif_e' type_id=49 linkage=global
>>>> >> >> > >> > [57] FUNC 'restrict_network_interfaces_impl' type_id=50 linkage=static
>>>> >> >> > >> > [58] DATASEC 'license' size=0 vlen=1
>>>> >> >> > >> > type_id=51 offset=0 size=18 (VAR '_license')
>>>> >> >> > >> > [59] DATASEC '.maps' size=0 vlen=1
>>>> >> >> > >> > type_id=53 offset=0 size=24 (VAR 'sd_restrictif')
>>>> >> >> > >> > [60] DATASEC '.data' size=0 vlen=1
>>>> >> >> > >> > type_id=52 offset=0 size=1 (VAR 'is_allow_list')
>>>> >> >> > >> >
>>>> >> >> > >> >>
>>>> >> >> > >> >> >> GCC is wrong, clearly. This function is global ([0]) and libbpf
>>>> >> >> > >> >> >> expects it to be marked as such in BTF.
>>>> >> >> > >> >> >>
>>>> >> >> > >> >> >>
>>>> >> >> > >> >
>>>> >> >
>>>> >
>>
> https://github.com/systemd/systemd/blob/main/src/core/bpf/restrict_ifaces/restrict-ifaces.bpf.c#L42-L50
>>>> >> >> > >> >> >>
>>>> >> >> > >> >> >>
>>>> >> >> > >> >> >>> GCC:
>>>> >> >> > >> >> >>>
>>>> >> >> > >> >> >>> [1] INT 'signed char' size=1 bits_offset=0 nr_bits=8 encoding=UNKN
>>>> >> >> > >> >> >>> [2] INT 'unsigned char' size=1 bits_offset=0 nr_bits=8 encoding=CHAR
>>>> >> >> > >> >> >>> [3] TYPEDEF '__u8' type_id=2
>>>> >> >> > >> >> >>> [4] CONST '(anon)' type_id=3
>>>> >> >> > >> >> >>
>>>> >> >> > >> >> >> [...]
next prev parent reply other threads:[~2022-07-10 20:22 UTC|newest]
Thread overview: 38+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-07-06 17:11 bpftool gen object doesn't handle GCC built BPF ELF files James Hilliard
2022-07-06 17:20 ` Andrii Nakryiko
2022-07-06 17:49 ` James Hilliard
2022-07-08 11:55 ` Jose E. Marchesi
2022-07-08 12:23 ` James Hilliard
2022-07-08 13:46 ` Jose E. Marchesi
2022-07-08 13:53 ` James Hilliard
2022-07-08 14:39 ` Jose E. Marchesi
2022-07-08 14:51 ` Jose E. Marchesi
2022-07-08 18:33 ` Jose E. Marchesi
2022-07-08 20:59 ` James Hilliard
2022-07-09 17:24 ` Jose E. Marchesi
2022-07-09 17:28 ` James Hilliard
2022-07-09 20:20 ` Jose E. Marchesi
2022-07-09 20:32 ` James Hilliard
2022-07-09 20:39 ` James Hilliard
2022-07-09 22:41 ` Jose E. Marchesi
2022-07-09 22:54 ` James Hilliard
2022-07-10 9:38 ` Jose E. Marchesi
2022-07-10 12:16 ` James Hilliard
2022-07-10 13:06 ` Jose E. Marchesi
2022-07-10 19:49 ` Jose E. Marchesi
2022-07-10 20:22 ` Jose E. Marchesi [this message]
2022-07-11 1:55 ` Jose E. Marchesi
[not found] ` <CADvTj4o-36iuru665BW0XnEauXBeszW438QTtpt4_VUEjf5nXg@mail.gmail.com>
2022-08-01 22:51 ` Andrii Nakryiko
2022-08-01 23:35 ` James Hilliard
2022-08-02 21:28 ` Andrii Nakryiko
2022-08-02 22:05 ` James Hilliard
2022-08-03 0:29 ` Andrii Nakryiko
2022-08-03 1:49 ` James Hilliard
2022-08-03 16:57 ` Andrii Nakryiko
2022-08-03 19:24 ` James Hilliard
2022-09-30 21:52 ` James Hilliard
2022-09-30 22:50 ` Andrii Nakryiko
2022-08-04 17:29 ` Alexei Starovoitov
2022-08-02 15:57 ` Jose E. Marchesi
2022-07-12 0:34 ` Indu Bhagat
2022-07-13 4:28 ` Yonghong Song
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87bktwvhu5.fsf@oracle.com \
--to=jose.marchesi@oracle.com \
--cc=andrii.nakryiko@gmail.com \
--cc=bpf@vger.kernel.org \
--cc=david.faust@oracle.com \
--cc=james.hilliard1@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.