用gdk7 加载内核调试符号之后,在函数开头下断点,然后用k命令或者kv命令之后,kd一直现实busy,而且无法中断
x lk!openat
ffffffff8aefbb60 lk!types__openat = Array [4]
ffffffff
8aefbb40 lk!argsopenat = Array [4]
ffffffff8aefbb00 lk!__syscall_meta__openat = syscall_metadata
ffffffff
8aefba60 lk!evententeropenat = traceeventcall
ffffffff8b2e3dd0 lk!__event_enter__openat = 00000000
00000000
ffffffff8aefb9c0 lk!event_exit__openat = trace_event_call
ffffffff
8b2e3dc8 lk!eventexitopenat = 0000000000000000
ffffffff
8b2e6578 lk!psyscallmetaopenat = 0000000000000000
ffffffff
8b2e9110 lk!eiladdrx64sysopenat = errorinjectionentry
ffffffff8b2e9100 lk!_eil_addr___ia32_sys_openat = error_injection_entry
ffffffff
8b2e90d0 lk!eiladdria32compatsysopenat = errorinjectionentry
ffffffff8b2e90c0 lk!_eil_addr___x32_compat_sys_openat = error_injection_entry
ffffffff
12ae15b0 lk!x32compatsysopenat (const ptregs*)
ffffffff12ae1590 lk!__ia32_compat_sys_openat (const pt_regs*)
ffffffff
12ae1510 lk!ia32sysopenat (const ptregs)
ffffffff12ae14e0
lk!__x64_sys_openat (const pt_regs*)
ffffffff
12af55f0 lk!path_openat (nameidata, const openflags*, unsigned int)
ffffffff896f55f0 lk!path_openat
ffffffff
896e1590 lk!ia32compatsysopenat
ffffffff896e14e0 lk!__x64_sys_openat
ffffffff
896e15b0 lk!x32compatsysopenat
ffffffff896e1510 lk!__ia32_sys_openat
ba lk!__x64_sys_openat
^ Syntax error in 'ba lk!__x64_sys_openat'
bp lk!__x64_sys_openat
Ambiguous symbol error at 'lk!__x64_sys_openat'
bp __x64_sys_openat
Failed to evaluate bp expression '__x64_sys_openat', deferred bp is added
bu lk!__x64_sys_openat
Ambiguous symbol error at 'lk!__x64_sys_openat'
bp __x64_sys_openat
Failed to evaluate bp expression '__x64_sys_openat', deferred bp is added
bp ffffffff
896e14e0
g
ambush 4 hit
lk!x64sys_openat:
ffffffff896e14e0 0f1f440000 nop dword ptr [rax + rax]