BPF_ALU_SUB
[BPF_ALU_SUB] = "sub",
case BPF_ALU_SUB | BPF_X:
op = op_table[BPF_ALU_SUB];
case BPF_ALU_SUB | BPF_K:
op = op_table[BPF_ALU_SUB];
case BPF_ALU_SUB | BPF_X:
case BPF_ALU_SUB | BPF_K: