I hadn't considered this! Can eBPF be used to access arbitrary kernel data structures, though?
Check out https://github.com/iovisor/bpftrace and the example tools/ for a taste. You'll likely want to play with kprobes/kretprobes.
https://github.com/iovisor/bpftrace
I would also strongly recommend Brendan Greggs book: http://www.brendangregg.com/bpf-performance-tools-book.html