(CommandList
  children: [
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:tracing)
          op: Equal
          rhs: {(/sys/kernel/debug/tracing)}
          spids: [142]
        )
      ]
      spids: [142]
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [
            (assign_pair
              lhs: (LhsName name:flock)
              op: Equal
              rhs: {(/var/tmp/.ftrace-lock)}
              spids: [145]
            )
          ]
          spids: [145]
        )
      terminator: <Op_Semi ';'>
    )
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:wroteflock) op:Equal rhs:{(0)} spids:[149])]
      spids: [149]
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:opt_duration) op:Equal rhs:{(0)} spids:[152])]
          spids: [152]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:duration) op:Equal rhs:{(EmptyPart)} spids:[156])]
          spids: [156]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:opt_name) op:Equal rhs:{(0)} spids:[159])]
          spids: [159]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:name) op:Equal rhs:{(EmptyPart)} spids:[163])]
          spids: [163]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:opt_pid) op:Equal rhs:{(0)} spids:[166])]
          spids: [166]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:pid) op:Equal rhs:{(EmptyPart)} spids:[170])]
          spids: [170]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:opt_tid) op:Equal rhs:{(0)} spids:[173])]
          spids: [173]
        )
      terminator: <Op_Semi ';'>
    )
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:tid) op:Equal rhs:{(EmptyPart)} spids:[177])]
      spids: [177]
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:ftext) op:Equal rhs:{(EmptyPart)} spids:[179])]
          spids: [179]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:opt_time) op:Equal rhs:{(0)} spids:[182])]
          spids: [182]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:opt_fail) op:Equal rhs:{(0)} spids:[186])]
          spids: [186]
        )
      terminator: <Op_Semi ';'>
    )
    (Sentence
      child: 
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:opt_file) op:Equal rhs:{(0)} spids:[190])]
          spids: [190]
        )
      terminator: <Op_Semi ';'>
    )
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:file) op:Equal rhs:{(EmptyPart)} spids:[194])]
      spids: [194]
    )
    (C {(trap)} {(SQ <':'>)} {(INT)} {(QUIT)} {(TERM)} {(PIPE)} {(HUP)})
    (FuncDef
      name: usage
      body: 
        (BraceGroup
          children: [
            (SimpleCommand
              words: [{(cat)}]
              redirects: [
                (HereDoc
                  op_id: Redir_DLessDash
                  fd: 16777215
                  body: 
                    {
                      (DQ 
                        (
'USAGE: opensnoop [-htx] [-d secs] [-p PID] [-L TID] [-n name] [filename]\n'
                        ) ('                 -d seconds      # trace duration, and use buffers\n') 
                        ('                 -n name         # process name to match on open\n') ('                 -p PID          # PID to match on open\n') 
                        ('                 -L TID          # PID to match on open\n') ('                 -t              # include time (seconds)\n') 
                        ('                 -x              # only show failed opens\n') ('                 -h              # this usage message\n') 
                        ('                 filename        # match filename (partials, REs, ok)\n') ('  eg,\n') ('       opensnoop                 # watch open()s live (unbuffered)\n') 
                        ('       opensnoop -d 1            # trace 1 sec (buffered)\n') ('       opensnoop -p 181          # trace I/O issued by PID 181 only\n') 
                        ('       opensnoop conf            # trace filenames containing ') (Right_DoubleQuote '"') (conf) (Right_DoubleQuote '"') ('\n') ("       opensnoop 'log") (Lit_Other '$') 
                        ("'          # filenames ending in ") (Right_DoubleQuote '"') (log) (Right_DoubleQuote '"') ('\n') ('\n') 
                        ('See the man page and example file for more info.\n')
                      )
                    }
                  do_expansion: True
                  here_end: END
                  was_filled: T
                  spids: [225]
                )
                (Redir op_id:Redir_GreatAnd fd:16777215 arg_word:{(2)} spids:[228])
              ]
            )
            (ControlFlow token:<ControlFlow_Exit exit>)
          ]
          spids: [220]
        )
      spids: [216 219]
    )
    (FuncDef
      name: warn
      body: 
        (BraceGroup
          children: [
            (If
              arms: [
                (if_arm
                  cond: [
                    (Sentence
                      child: (Pipeline children:[(C {(eval)} {(DQ ($ VSub_At '$@'))})] negated:T)
                      terminator: <Op_Semi ';'>
                    )
                  ]
                  action: [
                    (SimpleCommand
                      words: [
                        {(echo)}
                        {
                          (DQ ('WARNING: command failed ') 
                            (EscapedLiteralPart
                              token: <Lit_EscapedChar '\\"'>
                            ) ($ VSub_At '$@') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>)
                          )
                        }
                      ]
                      redirects: [(Redir op_id:Redir_GreatAnd fd:16777215 arg_word:{(2)} spids:[288])]
                    )
                  ]
                  spids: [16777215 283]
                )
              ]
              spids: [16777215 299]
            )
          ]
          spids: [269]
        )
      spids: [265 268]
    )
    (FuncDef
      name: end
      body: 
        (BraceGroup
          children: [
            (SimpleCommand
              words: [{(echo)}]
              redirects: [(Redir op_id:Redir_Great fd:2 arg_word:{(/dev/null)} spids:[317])]
            )
            (SimpleCommand
              words: [{(echo)} {(DQ ('Ending tracing...'))}]
              redirects: [(Redir op_id:Redir_Great fd:2 arg_word:{(/dev/null)} spids:[327])]
            )
            (C {(cd)} {($ VSub_Name '$tracing')})
            (C {(warn)} {(DQ ('echo 0 > events/kprobes/getnameprobe/enable'))})
            (C {(warn)} {(DQ ('echo 0 > events/syscalls/sys_exit_open/enable'))})
            (If
              arms: [
                (if_arm
                  cond: [
                    (Sentence
                      child: 
                        (DParen
                          child: 
                            (ArithBinary
                              op_id: Arith_DPipe
                              left: (ArithVarRef name:opt_pid)
                              right: (ArithVarRef name:opt_tid)
                            )
                        )
                      terminator: <Op_Semi ';'>
                    )
                  ]
                  action: [
                    (C {(warn)} {(DQ ('echo 0 > events/kprobes/getnameprobe/filter'))})
                    (C {(warn)} {(DQ ('echo 0 > events/syscalls/sys_exit_open/filter'))})
                  ]
                  spids: [16777215 364]
                )
              ]
              spids: [16777215 381]
            )
            (C {(warn)} {(DQ ('echo -:getnameprobe >> kprobe_events'))})
            (C {(warn)} {(DQ ('echo > trace'))})
            (AndOr
              ops: [Op_DAmp]
              children: [
                (DParen child:(ArithVarRef name:wroteflock))
                (C {(warn)} {(DQ ('rm ') ($ VSub_Name '$flock'))})
              ]
            )
          ]
          spids: [308]
        )
      spids: [304 307]
    )
    (FuncDef
      name: die
      body: 
        (BraceGroup
          children: [
            (SimpleCommand
              words: [{(echo)} {(DQ ($ VSub_At '$@'))}]
              redirects: [(Redir op_id:Redir_GreatAnd fd:16777215 arg_word:{(2)} spids:[426])]
            )
            (ControlFlow token:<ControlFlow_Exit exit> arg_word:{(1)})
          ]
          spids: [421]
        )
      spids: [417 420]
    )
    (FuncDef
      name: edie
      body: 
        (BraceGroup
          children: [
            (SimpleCommand
              words: [{(echo)} {(DQ ($ VSub_At '$@'))}]
              redirects: [(Redir op_id:Redir_GreatAnd fd:16777215 arg_word:{(2)} spids:[454])]
            )
            (SimpleCommand
              words: [{(exec)}]
              redirects: [
                (Redir
                  op_id: Redir_Great
                  fd: 16777215
                  arg_word: {(/dev/null)}
                  spids: [464]
                )
                (Redir op_id:Redir_GreatAnd fd:2 arg_word:{(1)} spids:[467])
              ]
            )
            (C {(end)})
            (ControlFlow token:<ControlFlow_Exit exit> arg_word:{(1)})
          ]
          spids: [445]
        )
      spids: [441 444]
    )
    (While
      cond: [
        (C {(getopts)} 
          {(d) (Lit_Other ':') (hn) (Lit_Other ':') (p) (Lit_Other ':') (L) (Lit_Other ':') (tx)} {(opt)}
        )
      ]
      body: 
        (DoGroup
          children: [
            (Case
              to_match: {($ VSub_Name '$opt')}
              arms: [
                (case_arm
                  pat_list: [{(d)}]
                  action: [
                    (Sentence
                      child: 
                        (Assignment
                          keyword: Assign_None
                          pairs: [
                            (assign_pair
                              lhs: (LhsName name:opt_duration)
                              op: Equal
                              rhs: {(1)}
                              spids: [513]
                            )
                          ]
                          spids: [513]
                        )
                      terminator: <Op_Semi ';'>
                    )
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:duration)
                          op: Equal
                          rhs: {($ VSub_Name '$OPTARG')}
                          spids: [517]
                        )
                      ]
                      spids: [517]
                    )
                  ]
                  spids: [510 511 520 16777215]
                )
                (case_arm
                  pat_list: [{(n)}]
                  action: [
                    (Sentence
                      child: 
                        (Assignment
                          keyword: Assign_None
                          pairs: [
                            (assign_pair
                              lhs: (LhsName name:opt_name)
                              op: Equal
                              rhs: {(1)}
                              spids: [526]
                            )
                          ]
                          spids: [526]
                        )
                      terminator: <Op_Semi ';'>
                    )
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:name)
                          op: Equal
                          rhs: {($ VSub_Name '$OPTARG')}
                          spids: [530]
                        )
                      ]
                      spids: [530]
                    )
                  ]
                  spids: [523 524 533 16777215]
                )
                (case_arm
                  pat_list: [{(p)}]
                  action: [
                    (Sentence
                      child: 
                        (Assignment
                          keyword: Assign_None
                          pairs: [
                            (assign_pair
                              lhs: (LhsName name:opt_pid)
                              op: Equal
                              rhs: {(1)}
                              spids: [539]
                            )
                          ]
                          spids: [539]
                        )
                      terminator: <Op_Semi ';'>
                    )
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:pid)
                          op: Equal
                          rhs: {($ VSub_Name '$OPTARG')}
                          spids: [543]
                        )
                      ]
                      spids: [543]
                    )
                  ]
                  spids: [536 537 546 16777215]
                )
                (case_arm
                  pat_list: [{(L)}]
                  action: [
                    (Sentence
                      child: 
                        (Assignment
                          keyword: Assign_None
                          pairs: [
                            (assign_pair
                              lhs: (LhsName name:opt_tid)
                              op: Equal
                              rhs: {(1)}
                              spids: [552]
                            )
                          ]
                          spids: [552]
                        )
                      terminator: <Op_Semi ';'>
                    )
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:tid)
                          op: Equal
                          rhs: {($ VSub_Name '$OPTARG')}
                          spids: [556]
                        )
                      ]
                      spids: [556]
                    )
                  ]
                  spids: [549 550 559 16777215]
                )
                (case_arm
                  pat_list: [{(t)}]
                  action: [
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:opt_time)
                          op: Equal
                          rhs: {(1)}
                          spids: [565]
                        )
                      ]
                      spids: [565]
                    )
                  ]
                  spids: [562 563 568 16777215]
                )
                (case_arm
                  pat_list: [{(x)}]
                  action: [
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:opt_fail)
                          op: Equal
                          rhs: {(1)}
                          spids: [574]
                        )
                      ]
                      spids: [574]
                    )
                  ]
                  spids: [571 572 577 16777215]
                )
                (case_arm
                  pat_list: [{(h)} {(Lit_Other '?')}]
                  action: [(C {(usage)})]
                  spids: [580 583 587 16777215]
                )
              ]
              spids: [503 507 590]
            )
          ]
          spids: [500 592]
        )
    )
    (C {(shift)} 
      {
        (ArithSubPart
          anode: 
            (ArithBinary
              op_id: Arith_Minus
              left: (ArithWord w:{($ VSub_Name '$OPTIND')})
              right: (ArithWord w:{(Lit_Digits 1)})
            )
          spids: [596 605]
        )
      }
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: (DParen child:(ArithWord w:{($ VSub_Pound '$#')}))
              terminator: <Op_Semi ';'>
            )
          ]
          action: [
            (Assignment
              keyword: Assign_None
              pairs: [(assign_pair lhs:(LhsName name:opt_file) op:Equal rhs:{(1)} spids:[620])]
              spids: [620]
            )
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:file)
                  op: Equal
                  rhs: {($ VSub_Number '$1')}
                  spids: [624]
                )
              ]
              spids: [624]
            )
            (C {(shift)})
          ]
          spids: [16777215 617]
        )
      ]
      spids: [16777215 630]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [(DParen child:(ArithWord w:{($ VSub_Pound '$#')})) (C {(usage)})]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [
        (DParen
          child: 
            (ArithBinary
              op_id: Arith_Great
              left: 
                (ArithBinary
                  op_id: Arith_Plus
                  left: 
                    (ArithBinary
                      op_id: Arith_Plus
                      left: (ArithVarRef name:opt_pid)
                      right: (ArithVarRef name:opt_name)
                    )
                  right: (ArithVarRef name:opt_tid)
                )
              right: (ArithWord w:{(Lit_Digits 1)})
            )
        )
        (C {(die)} {(DQ ('ERROR: use at most one of -p, -n, -L.'))})
      ]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [
        (DParen child:(ArithVarRef name:opt_pid))
        (Assignment
          keyword: Assign_None
          pairs: [
            (assign_pair
              lhs: (LhsName name:ftext)
              op: Equal
              rhs: {(DQ (' issued by PID ') ($ VSub_Name '$pid'))}
              spids: [685]
            )
          ]
          spids: [685]
        )
      ]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [
        (DParen child:(ArithVarRef name:opt_tid))
        (Assignment
          keyword: Assign_None
          pairs: [
            (assign_pair
              lhs: (LhsName name:ftext)
              op: Equal
              rhs: {(DQ (' issued by TID ') ($ VSub_Name '$tid'))}
              spids: [700]
            )
          ]
          spids: [700]
        )
      ]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [
        (DParen child:(ArithVarRef name:opt_name))
        (Assignment
          keyword: Assign_None
          pairs: [
            (assign_pair
              lhs: (LhsName name:ftext)
              op: Equal
              rhs: 
                {
                  (DQ (' issued by process name ') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) 
                    ($ VSub_Name '$name') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>)
                  )
                }
              spids: [715]
            )
          ]
          spids: [715]
        )
      ]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [
        (DParen child:(ArithVarRef name:opt_file))
        (Assignment
          keyword: Assign_None
          pairs: [
            (assign_pair
              lhs: (LhsName name:ftext)
              op: Equal
              rhs: 
                {
                  (DQ ($ VSub_Name '$ftext') (' for filenames containing ') 
                    (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) ($ VSub_Name '$file') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>)
                  )
                }
              spids: [732]
            )
          ]
          spids: [732]
        )
      ]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: (DParen child:(ArithVarRef name:opt_duration))
              terminator: <Op_Semi ';'>
            )
          ]
          action: [
            (C {(echo)} 
              {
                (DQ ('Tracing open()s') ($ VSub_Name '$ftext') (' for ') ($ VSub_Name '$duration') 
                  (' seconds (buffered)...')
                )
              }
            )
          ]
          spids: [16777215 751]
        )
      ]
      else_action: [(C {(echo)} {(DQ ('Tracing open()s') ($ VSub_Name '$ftext') ('. Ctrl-C to end.'))})]
      spids: [764 775]
    )
    (AndOr
      ops: [Op_DAmp Op_DPipe]
      children: [
        (DParen child:(ArithVarRef name:opt_duration))
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:use) op:Equal rhs:{(mawk)} spids:[790])]
          spids: [790]
        )
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:use) op:Equal rhs:{(gawk)} spids:[795])]
          spids: [795]
        )
      ]
    )
    (AndOr
      ops: [Op_DAmp Op_DPipe]
      children: [
        (DBracket expr:(BoolUnary op_id:BoolUnary_x child:{(/usr/bin/) ($ VSub_Name '$use')}))
        (Assignment
          keyword: Assign_None
          pairs: [
            (assign_pair
              lhs: (LhsName name:awk)
              op: Equal
              rhs: {($ VSub_Name '$use')}
              spids: [812]
            )
          ]
          spids: [812]
        )
        (Assignment
          keyword: Assign_None
          pairs: [(assign_pair lhs:(LhsName name:awk) op:Equal rhs:{(awk)} spids:[817])]
          spids: [817]
        )
      ]
    )
    (AndOr
      ops: [Op_DPipe]
      children: [
        (C {(cd)} {($ VSub_Name '$tracing')})
        (C {(die)} 
          {
            (DQ ('ERROR: accessing tracing. Root user? Kernel has FTRACE?\n') 
              ('    debugfs mounted? (mount -t debugfs debugfs /sys/kernel/debug)')
            )
          }
        )
      ]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [
        (DBracket expr:(BoolUnary op_id:BoolUnary_e child:{($ VSub_Name '$flock')}))
        (C {(die)} 
          {
            (DQ ('ERROR: ftrace may be in use by PID ') 
              (CommandSubPart
                command_list: (CommandList children:[(C {(cat)} {($ VSub_Name '$flock')})])
                left_token: <Left_CommandSub '$('>
                spids: [855 859]
              ) (' ') ($ VSub_Name '$flock')
            )
          }
        )
      ]
    )
    (AndOr
      ops: [Op_DPipe]
      children: [
        (SimpleCommand
          words: [{(echo)} {($ VSub_Dollar '$$')}]
          redirects: [
            (Redir
              op_id: Redir_Great
              fd: 16777215
              arg_word: {($ VSub_Name '$flock')}
              spids: [868]
            )
          ]
        )
        (C {(die)} {(DQ ('ERROR: unable to write ') ($ VSub_Name '$flock') (.))})
      ]
    )
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:wroteflock) op:Equal rhs:{(1)} spids:[882])]
      spids: [882]
    )
    (SimpleCommand
      words: [{(echo)} {(nop)}]
      redirects: [(Redir op_id:Redir_Great fd:16777215 arg_word:{(current_tracer)} spids:[893])]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:ver)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: (CommandList children:[(C {(uname)} {(-r)})])
                left_token: <Left_CommandSub '$('>
                spids: [898 902]
              )
            }
          spids: [897]
        )
      ]
      spids: [897]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (DBracket
                  expr: 
                    (LogicalOr
                      left: 
                        (BoolBinary
                          op_id: BoolBinary_GlobDEqual
                          left: {(DQ ($ VSub_Name '$ver'))}
                          right: {(2.) (Lit_Other '*')}
                        )
                      right: 
                        (BoolBinary
                          op_id: BoolBinary_GlobDEqual
                          left: {(DQ ($ VSub_Name '$ver'))}
                          right: {(3.) (Lit_Other '[') (1-6) (Lit_Other ']') (.) (Lit_Other '*')}
                        )
                    )
                )
              terminator: <Op_Semi ';'>
            )
          ]
          action: [
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:kprobe)
                  op: Equal
                  rhs: {(SQ <'r:getnameprobe getname +0($retval):string'>)}
                  spids: [942]
                )
              ]
              spids: [942]
            )
          ]
          spids: [16777215 935]
        )
      ]
      else_action: [
        (Assignment
          keyword: Assign_None
          pairs: [
            (assign_pair
              lhs: (LhsName name:kprobe)
              op: Equal
              rhs: {(SQ <'r:getnameprobe getname +0(+0($retval)):string'>)}
              spids: [954]
            )
          ]
          spids: [954]
        )
      ]
      spids: [947 959]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (Pipeline
                  children: [
                    (SimpleCommand
                      words: [{(echo)} {($ VSub_Name '$kprobe')}]
                      redirects: [
                        (Redir
                          op_id: Redir_DGreat
                          fd: 16777215
                          arg_word: {(kprobe_events)}
                          spids: [969]
                        )
                      ]
                    )
                  ]
                  negated: T
                )
              terminator: <Op_Semi ';'>
            )
          ]
          action: [(C {(edie)} {(DQ ('ERROR: adding a kprobe for getname(). Exiting.'))})]
          spids: [16777215 974]
        )
      ]
      spids: [16777215 983]
    )
    (If
      arms: [
        (if_arm
          cond: [(Sentence child:(DParen child:(ArithVarRef name:opt_pid)) terminator:<Op_Semi ';'>)]
          action: [
            (Assignment
              keyword: Assign_None
              pairs: [(assign_pair lhs:(LhsName name:filter) op:Equal rhs:{(EmptyPart)} spids:[998])]
              spids: [998]
            )
            (ForEach
              iter_name: tid
              iter_words: [{(/proc/) ($ VSub_Name '$pid') (/task/) (Lit_Other '*')}]
              do_arg_iter: F
              body: 
                (DoGroup
                  children: [
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:filter)
                          op: Equal
                          rhs: 
                            {
                              (DQ ($ VSub_Name '$filter') (' || common_pid == ') 
                                (BracedVarSub
                                  token: <VSub_Name tid>
                                  suffix_op: 
                                    (StringUnary
                                      op_id: VOp1_DPound
                                      arg_word: {('*') (Lit_Slash /)}
                                    )
                                  spids: [1020 1025]
                                )
                              )
                            }
                          spids: [1016]
                        )
                      ]
                      spids: [1016]
                    )
                  ]
                  spids: [1013 1029]
                )
              spids: [1006 1011]
            )
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:filter)
                  op: Equal
                  rhs: 
                    {
                      (BracedVarSub
                        token: <VSub_Name filter>
                        suffix_op: (Slice begin:(ArithWord w:{(Lit_Digits 3)}))
                        spids: [1033 1037]
                      )
                    }
                  spids: [1032]
                )
              ]
              spids: [1032]
            )
            (If
              arms: [
                (if_arm
                  cond: [
                    (AndOr
                      ops: [Op_DPipe]
                      children: [
                        (Pipeline
                          children: [
                            (SimpleCommand
                              words: [{(echo)} {($ VSub_Name '$filter')}]
                              redirects: [
                                (Redir
                                  op_id: Redir_Great
                                  fd: 16777215
                                  arg_word: {(events/kprobes/getnameprobe/filter)}
                                  spids: [1051]
                                )
                              ]
                            )
                          ]
                          negated: T
                        )
                        (Pipeline
                          children: [
                            (SimpleCommand
                              words: [{(echo)} {($ VSub_Name '$filter')}]
                              redirects: [
                                (Redir
                                  op_id: Redir_Great
                                  fd: 16777215
                                  arg_word: {(events/syscalls/sys_exit_open/filter)}
                                  spids: [1065]
                                )
                              ]
                            )
                          ]
                          negated: T
                        )
                      ]
                    )
                  ]
                  action: [
                    (C {(edie)} {(DQ ('ERROR: setting -p ') ($ VSub_Name '$pid') ('. Exiting.'))})
                  ]
                  spids: [16777215 1070]
                )
              ]
              spids: [16777215 1082]
            )
          ]
          spids: [16777215 995]
        )
      ]
      spids: [16777215 1084]
    )
    (If
      arms: [
        (if_arm
          cond: [(Sentence child:(DParen child:(ArithVarRef name:opt_tid)) terminator:<Op_Semi ';'>)]
          action: [
            (If
              arms: [
                (if_arm
                  cond: [
                    (AndOr
                      ops: [Op_DPipe]
                      children: [
                        (Pipeline
                          children: [
                            (SimpleCommand
                              words: [{(echo)} {(DQ ('common_pid == ') ($ VSub_Name '$tid'))}]
                              redirects: [
                                (Redir
                                  op_id: Redir_Great
                                  fd: 16777215
                                  arg_word: {(events/kprobes/getnameprobe/filter)}
                                  spids: [1110]
                                )
                              ]
                            )
                          ]
                          negated: T
                        )
                        (Pipeline
                          children: [
                            (SimpleCommand
                              words: [{(echo)} {(DQ ('common_pid == ') ($ VSub_Name '$tid'))}]
                              redirects: [
                                (Redir
                                  op_id: Redir_Great
                                  fd: 16777215
                                  arg_word: {(events/syscalls/sys_exit_open/filter)}
                                  spids: [1127]
                                )
                              ]
                            )
                          ]
                          negated: T
                        )
                      ]
                    )
                  ]
                  action: [
                    (C {(edie)} {(DQ ('ERROR: setting -L ') ($ VSub_Name '$tid') ('. Exiting.'))})
                  ]
                  spids: [16777215 1132]
                )
              ]
              spids: [16777215 1144]
            )
          ]
          spids: [16777215 1096]
        )
      ]
      spids: [16777215 1146]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (Pipeline
                  children: [
                    (SimpleCommand
                      words: [{(echo)} {(1)}]
                      redirects: [
                        (Redir
                          op_id: Redir_Great
                          fd: 16777215
                          arg_word: {(events/kprobes/getnameprobe/enable)}
                          spids: [1156]
                        )
                      ]
                    )
                  ]
                  negated: T
                )
              terminator: <Op_Semi ';'>
            )
          ]
          action: [(C {(edie)} {(DQ ('ERROR: enabling kprobe for getname(). Exiting.'))})]
          spids: [16777215 1161]
        )
      ]
      spids: [16777215 1170]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (Pipeline
                  children: [
                    (SimpleCommand
                      words: [{(echo)} {(1)}]
                      redirects: [
                        (Redir
                          op_id: Redir_Great
                          fd: 16777215
                          arg_word: {(events/syscalls/sys_exit_open/enable)}
                          spids: [1180]
                        )
                      ]
                    )
                  ]
                  negated: T
                )
              terminator: <Op_Semi ';'>
            )
          ]
          action: [(C {(edie)} {(DQ ('ERROR: enabling open() exit tracepoint. Exiting.'))})]
          spids: [16777215 1185]
        )
      ]
      spids: [16777215 1194]
    )
    (AndOr
      ops: [Op_DAmp]
      children: [
        (DParen child:(ArithVarRef name:opt_time))
        (C {(printf)} {(DQ ('%-16s '))} {(DQ (TIMEs))})
      ]
    )
    (C {(printf)} {(DQ ('%-16.16s %-6s %4s %s') (Lit_Other '\\') (n))} {(DQ (COMM))} {(DQ (PID))} 
      {(DQ (FD))} {(DQ (FILE))}
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:offset)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: 
                  (CommandList
                    children: [
                      (C {($ VSub_Name '$awk')} 
                        {
                          (SQ <'BEGIN { o = 0; }\n'> 
                            <'\t$1 == "#" && $2 ~ /TASK/ && NF == 6 { o = 1; }\n'> <'\t$2 ~ /TASK/ { print o; exit }'>
                          )
                        } {(trace)}
                      )
                    ]
                  )
                left_token: <Left_CommandSub '$('>
                spids: [1262 1272]
              )
            }
          spids: [1261]
        )
      ]
      spids: [1261]
    )
    (C {(warn)} {(DQ ('echo > trace'))})
    (Pipeline
      children: [
        (Subshell
          child: 
            (If
              arms: [
                (if_arm
                  cond: [
                    (Sentence
                      child: (DParen child:(ArithVarRef name:opt_duration))
                      terminator: <Op_Semi ';'>
                    )
                  ]
                  action: [(C {(sleep)} {($ VSub_Name '$duration')}) (C {(cat)} {(trace)})]
                  spids: [16777215 1296]
                )
              ]
              else_action: [(C {(cat)} {(trace_pipe)})]
              spids: [1312 1323]
            )
          spids: [1284 1325]
        )
        (C {($ VSub_Name '$awk')} {(-v)} {(Lit_VarLike 'o=') ($ VSub_Name '$offset')} {(-v)} 
          {(Lit_VarLike 'opt_name=') ($ VSub_Name '$opt_name')} {(-v)} {(Lit_VarLike 'name=') ($ VSub_Name '$name')} {(-v)} 
          {(Lit_VarLike 'opt_duration=') ($ VSub_Name '$opt_duration')} {(-v)} {(Lit_VarLike 'opt_time=') ($ VSub_Name '$opt_time')} {(-v)} 
          {(Lit_VarLike 'opt_fail=') ($ VSub_Name '$opt_fail')} {(-v)} {(Lit_VarLike 'opt_file=') ($ VSub_Name '$opt_file')} {(-v)} 
          {(Lit_VarLike 'file=') ($ VSub_Name '$file')} 
          {
            (SQ <'\n'> <'\t# common fields\n'> <'\t$1 != "#" {\n'> 
              <'\t\t# task name can contain dashes and space\n'> <'\t\tsplit($0, line, "-")\n'> <'\t\tsub(/^[ \\t\\r\\n]+/, "", line[1])\n'> <'\t\tcomm = line[1]\n'> 
              <'\t\tif (opt_name && match(comm, name) == 0)\n'> <'\t\t\tnext\n'> <'\t\tsub(/ .*$/, "", line[2])\n'> <'\t\tpid = line[2]\n'> <'\t}\n'> <'\n'> 
              <'\t# do_sys_open()\n'> <'\t$1 != "#" && $(5+o) ~ /do_sys_open/ {\n'> <'\t\t#\n'> 
              <'\t\t# eg: ... (do_sys_open+0xc3/0x220 <- getname) arg1="file1"\n'> <'\t\t#\n'> <'\t\tfilename = $NF\n'> <'\t\tsub(/"$/, "", filename)\n'> 
              <'\t\tsub(/.*"/, "", filename)\n'> <'\t\tlastfile[pid] = filename\n'> <'\t}\n'> <'\n'> <'\t# sys_open()\n'> 
              <'\t$1 != "#" && $(4+o) == "sys_open" {\n'> <'\t\tfilename = lastfile[pid]\n'> <'\t\tdelete lastfile[pid]\n'> 
              <'\t\tif (opt_file && filename !~ file)\n'> <'\t\t\tnext\n'> <'\t\trval = $NF\n'> <'\t\t# matched failed as beginning with 0xfffff\n'> 
              <'\t\tif (opt_fail && rval !~ /0xfffff/)\n'> <'\t\t\tnext\n'> <'\t\tif (rval ~ /0xfffff/)\n'> <'\t\t\trval = -1\n'> <'\n'> <'\t\tif (opt_time) {\n'> 
              <'\t\t\ttime = $(3+o); sub(":", "", time)\n'> <'\t\t\tprintf "%-16s ", time\n'> <'\t\t}\n'> 
              <'\t\tprintf "%-16.16s %-6s %4s %s\\n", comm, pid, rval, filename\n'> <'\t}\n'> <'\n'> <'\t$0 ~ /LOST.*EVENTS/ { print "WARNING: " $0 > "/dev/stderr" }\n'>
            )
          }
        )
      ]
      negated: F
    )
    (C {(end)})
  ]
)