On Tue, Dec 5, 2023 at 10:17 AM Marco Elver <elver@xxxxxxxxxx> wrote: > > On Tue, 5 Dec 2023 at 19:07, Namhyung Kim <namhyung@xxxxxxxxxx> wrote: > > If we want to handle returning 0 from bpf as if the event didn't > > happen, I think SIGTRAP and event_limit logic should be done > > after the overflow handler depending on pending_kill or something. > > I'm not sure which kernel version this is for, but in recent kernels, > the SIGTRAP logic was changed to no longer "abuse" event_limit, and > uses its own "pending_sigtrap" + "pending_work" (on reschedule > transitions). Oh, I didn't mean SIGTRAP and event_limit together. Maybe they have an issue separately. Thanks, Namhyung