summaryrefslogtreecommitdiff
path: root/internal
diff options
context:
space:
mode:
Diffstat (limited to 'internal')
-rw-r--r--internal/c/generated_tracepoints.c929
-rw-r--r--internal/c/generated_tracepoints_result.txt1
-rw-r--r--internal/generate/bpfhandler.go12
-rw-r--r--internal/generate/codegen_test.go6
-rw-r--r--internal/generate/tracepointsgo_test.go10
-rw-r--r--internal/types/generated_types.go464
6 files changed, 716 insertions, 706 deletions
diff --git a/internal/c/generated_tracepoints.c b/internal/c/generated_tracepoints.c
index b4d4e0f..5bc3110 100644
--- a/internal/c/generated_tracepoints.c
+++ b/internal/c/generated_tracepoints.c
@@ -86,6 +86,7 @@
/// Ignoring sys_enter_landlock_restrict_self sys_exit_landlock_restrict_self as possibly not file I/O related
/// Ignoring sys_enter_listen sys_exit_listen as possibly not file I/O related
/// Ignoring sys_enter_listmount sys_exit_listmount as possibly not file I/O related
+/// Ignoring sys_enter_listns sys_exit_listns as possibly not file I/O related
/// Ignoring sys_enter_lsm_get_self_attr sys_exit_lsm_get_self_attr as possibly not file I/O related
/// Ignoring sys_enter_lsm_list_modules sys_exit_lsm_list_modules as possibly not file I/O related
/// Ignoring sys_enter_lsm_set_self_attr sys_exit_lsm_set_self_attr as possibly not file I/O related
@@ -250,236 +251,236 @@
/// Ignoring sys_enter_wait4 sys_exit_wait4 as possibly not file I/O related
/// Ignoring sys_enter_waitid sys_exit_waitid as possibly not file I/O related
-#define SYS_ENTER_IO_URING_REGISTER 1515
-#define SYS_EXIT_IO_URING_REGISTER 1514
-#define SYS_ENTER_IO_URING_ENTER 1496
-#define SYS_EXIT_IO_URING_ENTER 1495
-#define SYS_ENTER_IO_URING_SETUP 1494
-#define SYS_EXIT_IO_URING_SETUP 1493
-#define SYS_ENTER_QUOTACTL_FD 1151
-#define SYS_EXIT_QUOTACTL_FD 1150
-#define SYS_ENTER_NAME_TO_HANDLE_AT 1135
-#define SYS_EXIT_NAME_TO_HANDLE_AT 1134
-#define SYS_ENTER_OPEN_BY_HANDLE_AT 1133
-#define SYS_EXIT_OPEN_BY_HANDLE_AT 1132
-#define SYS_ENTER_FLOCK 1119
-#define SYS_EXIT_FLOCK 1118
-#define SYS_ENTER_IO_SETUP 1105
-#define SYS_EXIT_IO_SETUP 1104
-#define SYS_ENTER_IO_DESTROY 1103
-#define SYS_EXIT_IO_DESTROY 1102
-#define SYS_ENTER_IO_SUBMIT 1101
-#define SYS_EXIT_IO_SUBMIT 1100
-#define SYS_ENTER_IO_CANCEL 1099
-#define SYS_EXIT_IO_CANCEL 1098
-#define SYS_ENTER_IO_GETEVENTS 1097
-#define SYS_EXIT_IO_GETEVENTS 1096
-#define SYS_ENTER_IO_PGETEVENTS 1095
-#define SYS_EXIT_IO_PGETEVENTS 1094
-#define SYS_ENTER_FANOTIFY_MARK 1063
-#define SYS_EXIT_FANOTIFY_MARK 1062
-#define SYS_ENTER_FILE_GETATTR 1053
-#define SYS_EXIT_FILE_GETATTR 1052
-#define SYS_ENTER_FILE_SETATTR 1051
-#define SYS_EXIT_FILE_SETATTR 1050
-#define SYS_ENTER_FSPICK 1047
-#define SYS_EXIT_FSPICK 1046
-#define SYS_ENTER_FSCONFIG 1045
-#define SYS_EXIT_FSCONFIG 1044
-#define SYS_ENTER_STATFS 1043
-#define SYS_EXIT_STATFS 1042
-#define SYS_ENTER_FSTATFS 1041
-#define SYS_EXIT_FSTATFS 1040
-#define SYS_ENTER_GETCWD 1037
-#define SYS_EXIT_GETCWD 1036
-#define SYS_ENTER_UTIMENSAT 1035
-#define SYS_EXIT_UTIMENSAT 1034
-#define SYS_ENTER_FUTIMESAT 1033
-#define SYS_EXIT_FUTIMESAT 1032
-#define SYS_ENTER_SYNC 1027
-#define SYS_EXIT_SYNC 1026
-#define SYS_ENTER_SYNCFS 1025
-#define SYS_EXIT_SYNCFS 1024
-#define SYS_ENTER_FSYNC 1023
-#define SYS_EXIT_FSYNC 1022
-#define SYS_ENTER_FDATASYNC 1021
-#define SYS_EXIT_FDATASYNC 1020
-#define SYS_ENTER_SYNC_FILE_RANGE 1019
-#define SYS_EXIT_SYNC_FILE_RANGE 1018
-#define SYS_ENTER_VMSPLICE 1017
-#define SYS_EXIT_VMSPLICE 1016
-#define SYS_ENTER_SETXATTRAT 978
-#define SYS_EXIT_SETXATTRAT 977
-#define SYS_ENTER_SETXATTR 976
-#define SYS_EXIT_SETXATTR 975
-#define SYS_ENTER_LSETXATTR 974
-#define SYS_EXIT_LSETXATTR 973
-#define SYS_ENTER_FSETXATTR 972
-#define SYS_EXIT_FSETXATTR 971
-#define SYS_ENTER_GETXATTRAT 970
-#define SYS_EXIT_GETXATTRAT 969
-#define SYS_ENTER_GETXATTR 968
-#define SYS_EXIT_GETXATTR 967
-#define SYS_ENTER_LGETXATTR 966
-#define SYS_EXIT_LGETXATTR 965
-#define SYS_ENTER_FGETXATTR 964
-#define SYS_EXIT_FGETXATTR 963
-#define SYS_ENTER_LISTXATTRAT 962
-#define SYS_EXIT_LISTXATTRAT 961
-#define SYS_ENTER_LISTXATTR 960
-#define SYS_EXIT_LISTXATTR 959
-#define SYS_ENTER_LLISTXATTR 958
-#define SYS_EXIT_LLISTXATTR 957
-#define SYS_ENTER_FLISTXATTR 956
-#define SYS_EXIT_FLISTXATTR 955
-#define SYS_ENTER_REMOVEXATTRAT 954
-#define SYS_EXIT_REMOVEXATTRAT 953
-#define SYS_ENTER_REMOVEXATTR 952
-#define SYS_EXIT_REMOVEXATTR 951
-#define SYS_ENTER_LREMOVEXATTR 950
-#define SYS_EXIT_LREMOVEXATTR 949
-#define SYS_ENTER_FREMOVEXATTR 948
-#define SYS_EXIT_FREMOVEXATTR 947
-#define SYS_ENTER_OPEN_TREE 944
-#define SYS_EXIT_OPEN_TREE 943
-#define SYS_ENTER_MOUNT_SETATTR 934
-#define SYS_EXIT_MOUNT_SETATTR 933
-#define SYS_ENTER_OPEN_TREE_ATTR 932
-#define SYS_EXIT_OPEN_TREE_ATTR 931
-#define SYS_ENTER_CLOSE_RANGE 924
-#define SYS_EXIT_CLOSE_RANGE 923
-#define SYS_ENTER_DUP3 922
-#define SYS_EXIT_DUP3 921
-#define SYS_ENTER_DUP2 920
-#define SYS_EXIT_DUP2 919
-#define SYS_ENTER_DUP 918
-#define SYS_EXIT_DUP 917
-#define SYS_ENTER_GETDENTS 904
-#define SYS_EXIT_GETDENTS 903
-#define SYS_ENTER_GETDENTS64 902
-#define SYS_EXIT_GETDENTS64 901
-#define SYS_ENTER_IOCTL 900
-#define SYS_EXIT_IOCTL 899
-#define SYS_ENTER_FCNTL 898
-#define SYS_EXIT_FCNTL 897
-#define SYS_ENTER_MKDIRAT 892
-#define SYS_EXIT_MKDIRAT 891
-#define SYS_ENTER_MKDIR 890
-#define SYS_EXIT_MKDIR 889
-#define SYS_ENTER_RMDIR 888
-#define SYS_EXIT_RMDIR 887
-#define SYS_ENTER_UNLINKAT 886
-#define SYS_EXIT_UNLINKAT 885
-#define SYS_ENTER_UNLINK 884
-#define SYS_EXIT_UNLINK 883
-#define SYS_ENTER_SYMLINKAT 882
-#define SYS_EXIT_SYMLINKAT 881
-#define SYS_ENTER_SYMLINK 880
-#define SYS_EXIT_SYMLINK 879
-#define SYS_ENTER_LINKAT 878
-#define SYS_EXIT_LINKAT 877
-#define SYS_ENTER_LINK 876
-#define SYS_EXIT_LINK 875
-#define SYS_ENTER_RENAMEAT2 874
-#define SYS_EXIT_RENAMEAT2 873
-#define SYS_ENTER_RENAMEAT 872
-#define SYS_EXIT_RENAMEAT 871
-#define SYS_ENTER_RENAME 870
-#define SYS_EXIT_RENAME 869
-#define SYS_ENTER_NEWSTAT 860
-#define SYS_EXIT_NEWSTAT 859
-#define SYS_ENTER_NEWLSTAT 858
-#define SYS_EXIT_NEWLSTAT 857
-#define SYS_ENTER_NEWFSTATAT 856
-#define SYS_EXIT_NEWFSTATAT 855
-#define SYS_ENTER_NEWFSTAT 854
-#define SYS_EXIT_NEWFSTAT 853
-#define SYS_ENTER_READLINKAT 852
-#define SYS_EXIT_READLINKAT 851
-#define SYS_ENTER_READLINK 850
-#define SYS_EXIT_READLINK 849
-#define SYS_ENTER_STATX 848
-#define SYS_EXIT_STATX 847
-#define SYS_ENTER_LSEEK 846
-#define SYS_EXIT_LSEEK 845
-#define SYS_ENTER_READ 844
-#define SYS_EXIT_READ 843
-#define SYS_ENTER_WRITE 842
-#define SYS_EXIT_WRITE 841
-#define SYS_ENTER_PREAD64 840
-#define SYS_EXIT_PREAD64 839
-#define SYS_ENTER_PWRITE64 838
-#define SYS_EXIT_PWRITE64 837
-#define SYS_ENTER_READV 836
-#define SYS_EXIT_READV 835
-#define SYS_ENTER_WRITEV 834
-#define SYS_EXIT_WRITEV 833
-#define SYS_ENTER_PREADV 832
-#define SYS_EXIT_PREADV 831
-#define SYS_ENTER_PREADV2 830
-#define SYS_EXIT_PREADV2 829
-#define SYS_ENTER_PWRITEV 828
-#define SYS_EXIT_PWRITEV 827
-#define SYS_ENTER_PWRITEV2 826
-#define SYS_EXIT_PWRITEV2 825
-#define SYS_ENTER_COPY_FILE_RANGE 822
-#define SYS_EXIT_COPY_FILE_RANGE 821
-#define SYS_ENTER_TRUNCATE 820
-#define SYS_EXIT_TRUNCATE 819
-#define SYS_ENTER_FTRUNCATE 818
-#define SYS_EXIT_FTRUNCATE 817
-#define SYS_ENTER_FALLOCATE 816
-#define SYS_EXIT_FALLOCATE 815
-#define SYS_ENTER_FACCESSAT 814
-#define SYS_EXIT_FACCESSAT 813
-#define SYS_ENTER_FACCESSAT2 812
-#define SYS_EXIT_FACCESSAT2 811
-#define SYS_ENTER_ACCESS 810
-#define SYS_EXIT_ACCESS 809
-#define SYS_ENTER_CHDIR 808
-#define SYS_EXIT_CHDIR 807
-#define SYS_ENTER_FCHDIR 806
-#define SYS_EXIT_FCHDIR 805
-#define SYS_ENTER_CHROOT 804
-#define SYS_EXIT_CHROOT 803
-#define SYS_ENTER_FCHMOD 802
-#define SYS_EXIT_FCHMOD 801
-#define SYS_ENTER_FCHMODAT2 800
-#define SYS_EXIT_FCHMODAT2 799
-#define SYS_ENTER_FCHMODAT 798
-#define SYS_EXIT_FCHMODAT 797
-#define SYS_ENTER_CHMOD 796
-#define SYS_EXIT_CHMOD 795
-#define SYS_ENTER_FCHOWNAT 794
-#define SYS_EXIT_FCHOWNAT 793
-#define SYS_ENTER_CHOWN 792
-#define SYS_EXIT_CHOWN 791
-#define SYS_ENTER_LCHOWN 790
-#define SYS_EXIT_LCHOWN 789
-#define SYS_ENTER_FCHOWN 788
-#define SYS_EXIT_FCHOWN 787
-#define SYS_ENTER_OPEN 786
-#define SYS_EXIT_OPEN 785
-#define SYS_ENTER_OPENAT 784
-#define SYS_EXIT_OPENAT 783
-#define SYS_ENTER_OPENAT2 782
-#define SYS_EXIT_OPENAT2 781
-#define SYS_ENTER_CREAT 780
-#define SYS_EXIT_CREAT 779
-#define SYS_ENTER_CLOSE 778
-#define SYS_EXIT_CLOSE 777
-#define SYS_ENTER_MSYNC 707
-#define SYS_EXIT_MSYNC 706
-#define SYS_ENTER_READAHEAD 613
-#define SYS_EXIT_READAHEAD 612
-#define SYS_ENTER_FADVISE64 611
-#define SYS_EXIT_FADVISE64 610
-#define SYS_ENTER_CACHESTAT 592
-#define SYS_EXIT_CACHESTAT 591
-#define SYS_ENTER_FINIT_MODULE 403
-#define SYS_EXIT_FINIT_MODULE 402
-#define SYS_ENTER_SYSLOG 347
-#define SYS_EXIT_SYSLOG 346
+#define SYS_ENTER_IO_URING_REGISTER 1521
+#define SYS_EXIT_IO_URING_REGISTER 1520
+#define SYS_ENTER_IO_URING_ENTER 1502
+#define SYS_EXIT_IO_URING_ENTER 1501
+#define SYS_ENTER_IO_URING_SETUP 1500
+#define SYS_EXIT_IO_URING_SETUP 1499
+#define SYS_ENTER_QUOTACTL_FD 1155
+#define SYS_EXIT_QUOTACTL_FD 1154
+#define SYS_ENTER_NAME_TO_HANDLE_AT 1139
+#define SYS_EXIT_NAME_TO_HANDLE_AT 1138
+#define SYS_ENTER_OPEN_BY_HANDLE_AT 1137
+#define SYS_EXIT_OPEN_BY_HANDLE_AT 1136
+#define SYS_ENTER_FLOCK 1123
+#define SYS_EXIT_FLOCK 1122
+#define SYS_ENTER_IO_SETUP 1109
+#define SYS_EXIT_IO_SETUP 1108
+#define SYS_ENTER_IO_DESTROY 1107
+#define SYS_EXIT_IO_DESTROY 1106
+#define SYS_ENTER_IO_SUBMIT 1105
+#define SYS_EXIT_IO_SUBMIT 1104
+#define SYS_ENTER_IO_CANCEL 1103
+#define SYS_EXIT_IO_CANCEL 1102
+#define SYS_ENTER_IO_GETEVENTS 1101
+#define SYS_EXIT_IO_GETEVENTS 1100
+#define SYS_ENTER_IO_PGETEVENTS 1099
+#define SYS_EXIT_IO_PGETEVENTS 1098
+#define SYS_ENTER_FANOTIFY_MARK 1067
+#define SYS_EXIT_FANOTIFY_MARK 1066
+#define SYS_ENTER_FILE_GETATTR 1057
+#define SYS_EXIT_FILE_GETATTR 1056
+#define SYS_ENTER_FILE_SETATTR 1055
+#define SYS_EXIT_FILE_SETATTR 1054
+#define SYS_ENTER_FSPICK 1051
+#define SYS_EXIT_FSPICK 1050
+#define SYS_ENTER_FSCONFIG 1049
+#define SYS_EXIT_FSCONFIG 1048
+#define SYS_ENTER_STATFS 1047
+#define SYS_EXIT_STATFS 1046
+#define SYS_ENTER_FSTATFS 1045
+#define SYS_EXIT_FSTATFS 1044
+#define SYS_ENTER_GETCWD 1041
+#define SYS_EXIT_GETCWD 1040
+#define SYS_ENTER_UTIMENSAT 1039
+#define SYS_EXIT_UTIMENSAT 1038
+#define SYS_ENTER_FUTIMESAT 1037
+#define SYS_EXIT_FUTIMESAT 1036
+#define SYS_ENTER_SYNC 1031
+#define SYS_EXIT_SYNC 1030
+#define SYS_ENTER_SYNCFS 1029
+#define SYS_EXIT_SYNCFS 1028
+#define SYS_ENTER_FSYNC 1027
+#define SYS_EXIT_FSYNC 1026
+#define SYS_ENTER_FDATASYNC 1025
+#define SYS_EXIT_FDATASYNC 1024
+#define SYS_ENTER_SYNC_FILE_RANGE 1023
+#define SYS_EXIT_SYNC_FILE_RANGE 1022
+#define SYS_ENTER_VMSPLICE 1021
+#define SYS_EXIT_VMSPLICE 1020
+#define SYS_ENTER_SETXATTRAT 982
+#define SYS_EXIT_SETXATTRAT 981
+#define SYS_ENTER_SETXATTR 980
+#define SYS_EXIT_SETXATTR 979
+#define SYS_ENTER_LSETXATTR 978
+#define SYS_EXIT_LSETXATTR 977
+#define SYS_ENTER_FSETXATTR 976
+#define SYS_EXIT_FSETXATTR 975
+#define SYS_ENTER_GETXATTRAT 974
+#define SYS_EXIT_GETXATTRAT 973
+#define SYS_ENTER_GETXATTR 972
+#define SYS_EXIT_GETXATTR 971
+#define SYS_ENTER_LGETXATTR 970
+#define SYS_EXIT_LGETXATTR 969
+#define SYS_ENTER_FGETXATTR 968
+#define SYS_EXIT_FGETXATTR 967
+#define SYS_ENTER_LISTXATTRAT 966
+#define SYS_EXIT_LISTXATTRAT 965
+#define SYS_ENTER_LISTXATTR 964
+#define SYS_EXIT_LISTXATTR 963
+#define SYS_ENTER_LLISTXATTR 962
+#define SYS_EXIT_LLISTXATTR 961
+#define SYS_ENTER_FLISTXATTR 960
+#define SYS_EXIT_FLISTXATTR 959
+#define SYS_ENTER_REMOVEXATTRAT 958
+#define SYS_EXIT_REMOVEXATTRAT 957
+#define SYS_ENTER_REMOVEXATTR 956
+#define SYS_EXIT_REMOVEXATTR 955
+#define SYS_ENTER_LREMOVEXATTR 954
+#define SYS_EXIT_LREMOVEXATTR 953
+#define SYS_ENTER_FREMOVEXATTR 952
+#define SYS_EXIT_FREMOVEXATTR 951
+#define SYS_ENTER_OPEN_TREE 948
+#define SYS_EXIT_OPEN_TREE 947
+#define SYS_ENTER_MOUNT_SETATTR 938
+#define SYS_EXIT_MOUNT_SETATTR 937
+#define SYS_ENTER_OPEN_TREE_ATTR 936
+#define SYS_EXIT_OPEN_TREE_ATTR 935
+#define SYS_ENTER_CLOSE_RANGE 928
+#define SYS_EXIT_CLOSE_RANGE 927
+#define SYS_ENTER_DUP3 926
+#define SYS_EXIT_DUP3 925
+#define SYS_ENTER_DUP2 924
+#define SYS_EXIT_DUP2 923
+#define SYS_ENTER_DUP 922
+#define SYS_EXIT_DUP 921
+#define SYS_ENTER_GETDENTS 908
+#define SYS_EXIT_GETDENTS 907
+#define SYS_ENTER_GETDENTS64 906
+#define SYS_EXIT_GETDENTS64 905
+#define SYS_ENTER_IOCTL 904
+#define SYS_EXIT_IOCTL 903
+#define SYS_ENTER_FCNTL 902
+#define SYS_EXIT_FCNTL 901
+#define SYS_ENTER_MKDIRAT 896
+#define SYS_EXIT_MKDIRAT 895
+#define SYS_ENTER_MKDIR 894
+#define SYS_EXIT_MKDIR 893
+#define SYS_ENTER_RMDIR 892
+#define SYS_EXIT_RMDIR 891
+#define SYS_ENTER_UNLINKAT 890
+#define SYS_EXIT_UNLINKAT 889
+#define SYS_ENTER_UNLINK 888
+#define SYS_EXIT_UNLINK 887
+#define SYS_ENTER_SYMLINKAT 886
+#define SYS_EXIT_SYMLINKAT 885
+#define SYS_ENTER_SYMLINK 884
+#define SYS_EXIT_SYMLINK 883
+#define SYS_ENTER_LINKAT 882
+#define SYS_EXIT_LINKAT 881
+#define SYS_ENTER_LINK 880
+#define SYS_EXIT_LINK 879
+#define SYS_ENTER_RENAMEAT2 878
+#define SYS_EXIT_RENAMEAT2 877
+#define SYS_ENTER_RENAMEAT 876
+#define SYS_EXIT_RENAMEAT 875
+#define SYS_ENTER_RENAME 874
+#define SYS_EXIT_RENAME 873
+#define SYS_ENTER_NEWSTAT 864
+#define SYS_EXIT_NEWSTAT 863
+#define SYS_ENTER_NEWLSTAT 862
+#define SYS_EXIT_NEWLSTAT 861
+#define SYS_ENTER_NEWFSTATAT 860
+#define SYS_EXIT_NEWFSTATAT 859
+#define SYS_ENTER_NEWFSTAT 858
+#define SYS_EXIT_NEWFSTAT 857
+#define SYS_ENTER_READLINKAT 856
+#define SYS_EXIT_READLINKAT 855
+#define SYS_ENTER_READLINK 854
+#define SYS_EXIT_READLINK 853
+#define SYS_ENTER_STATX 852
+#define SYS_EXIT_STATX 851
+#define SYS_ENTER_LSEEK 850
+#define SYS_EXIT_LSEEK 849
+#define SYS_ENTER_READ 848
+#define SYS_EXIT_READ 847
+#define SYS_ENTER_WRITE 846
+#define SYS_EXIT_WRITE 845
+#define SYS_ENTER_PREAD64 844
+#define SYS_EXIT_PREAD64 843
+#define SYS_ENTER_PWRITE64 842
+#define SYS_EXIT_PWRITE64 841
+#define SYS_ENTER_READV 840
+#define SYS_EXIT_READV 839
+#define SYS_ENTER_WRITEV 838
+#define SYS_EXIT_WRITEV 837
+#define SYS_ENTER_PREADV 836
+#define SYS_EXIT_PREADV 835
+#define SYS_ENTER_PREADV2 834
+#define SYS_EXIT_PREADV2 833
+#define SYS_ENTER_PWRITEV 832
+#define SYS_EXIT_PWRITEV 831
+#define SYS_ENTER_PWRITEV2 830
+#define SYS_EXIT_PWRITEV2 829
+#define SYS_ENTER_COPY_FILE_RANGE 826
+#define SYS_EXIT_COPY_FILE_RANGE 825
+#define SYS_ENTER_TRUNCATE 824
+#define SYS_EXIT_TRUNCATE 823
+#define SYS_ENTER_FTRUNCATE 822
+#define SYS_EXIT_FTRUNCATE 821
+#define SYS_ENTER_FALLOCATE 820
+#define SYS_EXIT_FALLOCATE 819
+#define SYS_ENTER_FACCESSAT 818
+#define SYS_EXIT_FACCESSAT 817
+#define SYS_ENTER_FACCESSAT2 816
+#define SYS_EXIT_FACCESSAT2 815
+#define SYS_ENTER_ACCESS 814
+#define SYS_EXIT_ACCESS 813
+#define SYS_ENTER_CHDIR 812
+#define SYS_EXIT_CHDIR 811
+#define SYS_ENTER_FCHDIR 810
+#define SYS_EXIT_FCHDIR 809
+#define SYS_ENTER_CHROOT 808
+#define SYS_EXIT_CHROOT 807
+#define SYS_ENTER_FCHMOD 806
+#define SYS_EXIT_FCHMOD 805
+#define SYS_ENTER_FCHMODAT2 804
+#define SYS_EXIT_FCHMODAT2 803
+#define SYS_ENTER_FCHMODAT 802
+#define SYS_EXIT_FCHMODAT 801
+#define SYS_ENTER_CHMOD 800
+#define SYS_EXIT_CHMOD 799
+#define SYS_ENTER_FCHOWNAT 798
+#define SYS_EXIT_FCHOWNAT 797
+#define SYS_ENTER_CHOWN 796
+#define SYS_EXIT_CHOWN 795
+#define SYS_ENTER_LCHOWN 794
+#define SYS_EXIT_LCHOWN 793
+#define SYS_ENTER_FCHOWN 792
+#define SYS_EXIT_FCHOWN 791
+#define SYS_ENTER_OPEN 790
+#define SYS_EXIT_OPEN 789
+#define SYS_ENTER_OPENAT 788
+#define SYS_EXIT_OPENAT 787
+#define SYS_ENTER_OPENAT2 786
+#define SYS_EXIT_OPENAT2 785
+#define SYS_ENTER_CREAT 784
+#define SYS_EXIT_CREAT 783
+#define SYS_ENTER_CLOSE 782
+#define SYS_EXIT_CLOSE 781
+#define SYS_ENTER_MSYNC 710
+#define SYS_EXIT_MSYNC 709
+#define SYS_ENTER_READAHEAD 616
+#define SYS_EXIT_READAHEAD 615
+#define SYS_ENTER_FADVISE64 614
+#define SYS_EXIT_FADVISE64 613
+#define SYS_ENTER_CACHESTAT 595
+#define SYS_EXIT_CACHESTAT 594
+#define SYS_ENTER_FINIT_MODULE 406
+#define SYS_EXIT_FINIT_MODULE 405
+#define SYS_ENTER_SYSLOG 350
+#define SYS_EXIT_SYSLOG 349
#define SYS_ENTER_PIDFD_GETFD 271
#define SYS_EXIT_PIDFD_GETFD 270
#define SYS_ENTER_MMAP 100
@@ -487,7 +488,7 @@
/// sys_enter_io_uring_register is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_io_uring_register")
-int handle_sys_enter_io_uring_register(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_uring_register(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -509,7 +510,7 @@ int handle_sys_enter_io_uring_register(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_uring_register is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_uring_register")
-int handle_sys_exit_io_uring_register(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_uring_register(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -532,7 +533,7 @@ int handle_sys_exit_io_uring_register(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_uring_enter is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_io_uring_enter")
-int handle_sys_enter_io_uring_enter(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_uring_enter(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -554,7 +555,7 @@ int handle_sys_enter_io_uring_enter(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_uring_enter is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_uring_enter")
-int handle_sys_exit_io_uring_enter(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_uring_enter(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -577,7 +578,7 @@ int handle_sys_exit_io_uring_enter(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_uring_setup is a struct null_event
SEC("tracepoint/syscalls/sys_enter_io_uring_setup")
-int handle_sys_enter_io_uring_setup(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_uring_setup(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -598,7 +599,7 @@ int handle_sys_enter_io_uring_setup(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_uring_setup is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_uring_setup")
-int handle_sys_exit_io_uring_setup(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_uring_setup(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -621,7 +622,7 @@ int handle_sys_exit_io_uring_setup(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_quotactl_fd is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_quotactl_fd")
-int handle_sys_enter_quotactl_fd(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_quotactl_fd(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -643,7 +644,7 @@ int handle_sys_enter_quotactl_fd(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_quotactl_fd is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_quotactl_fd")
-int handle_sys_exit_quotactl_fd(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_quotactl_fd(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -666,7 +667,7 @@ int handle_sys_exit_quotactl_fd(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_name_to_handle_at is a struct path_event
SEC("tracepoint/syscalls/sys_enter_name_to_handle_at")
-int handle_sys_enter_name_to_handle_at(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_name_to_handle_at(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -689,7 +690,7 @@ int handle_sys_enter_name_to_handle_at(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_name_to_handle_at is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_name_to_handle_at")
-int handle_sys_exit_name_to_handle_at(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_name_to_handle_at(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -712,7 +713,7 @@ int handle_sys_exit_name_to_handle_at(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_open_by_handle_at is a struct open_by_handle_at_event
SEC("tracepoint/syscalls/sys_enter_open_by_handle_at")
-int handle_sys_enter_open_by_handle_at(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_open_by_handle_at(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -734,7 +735,7 @@ int handle_sys_enter_open_by_handle_at(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_open_by_handle_at is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_open_by_handle_at")
-int handle_sys_exit_open_by_handle_at(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_open_by_handle_at(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -757,7 +758,7 @@ int handle_sys_exit_open_by_handle_at(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_flock is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_flock")
-int handle_sys_enter_flock(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_flock(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -779,7 +780,7 @@ int handle_sys_enter_flock(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_flock is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_flock")
-int handle_sys_exit_flock(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_flock(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -802,7 +803,7 @@ int handle_sys_exit_flock(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_setup is a struct null_event
SEC("tracepoint/syscalls/sys_enter_io_setup")
-int handle_sys_enter_io_setup(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_setup(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -823,7 +824,7 @@ int handle_sys_enter_io_setup(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_setup is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_setup")
-int handle_sys_exit_io_setup(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_setup(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -846,7 +847,7 @@ int handle_sys_exit_io_setup(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_destroy is a struct null_event
SEC("tracepoint/syscalls/sys_enter_io_destroy")
-int handle_sys_enter_io_destroy(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_destroy(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -867,7 +868,7 @@ int handle_sys_enter_io_destroy(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_destroy is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_destroy")
-int handle_sys_exit_io_destroy(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_destroy(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -890,7 +891,7 @@ int handle_sys_exit_io_destroy(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_submit is a struct null_event
SEC("tracepoint/syscalls/sys_enter_io_submit")
-int handle_sys_enter_io_submit(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_submit(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -911,7 +912,7 @@ int handle_sys_enter_io_submit(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_submit is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_submit")
-int handle_sys_exit_io_submit(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_submit(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -934,7 +935,7 @@ int handle_sys_exit_io_submit(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_cancel is a struct null_event
SEC("tracepoint/syscalls/sys_enter_io_cancel")
-int handle_sys_enter_io_cancel(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_cancel(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -955,7 +956,7 @@ int handle_sys_enter_io_cancel(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_cancel is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_cancel")
-int handle_sys_exit_io_cancel(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_cancel(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -978,7 +979,7 @@ int handle_sys_exit_io_cancel(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_getevents is a struct null_event
SEC("tracepoint/syscalls/sys_enter_io_getevents")
-int handle_sys_enter_io_getevents(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_getevents(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -999,7 +1000,7 @@ int handle_sys_enter_io_getevents(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_getevents is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_getevents")
-int handle_sys_exit_io_getevents(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_getevents(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1022,7 +1023,7 @@ int handle_sys_exit_io_getevents(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_io_pgetevents is a struct null_event
SEC("tracepoint/syscalls/sys_enter_io_pgetevents")
-int handle_sys_enter_io_pgetevents(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_io_pgetevents(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1043,7 +1044,7 @@ int handle_sys_enter_io_pgetevents(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_io_pgetevents is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_io_pgetevents")
-int handle_sys_exit_io_pgetevents(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_io_pgetevents(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1066,7 +1067,7 @@ int handle_sys_exit_io_pgetevents(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fanotify_mark is a struct path_event
SEC("tracepoint/syscalls/sys_enter_fanotify_mark")
-int handle_sys_enter_fanotify_mark(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fanotify_mark(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1089,7 +1090,7 @@ int handle_sys_enter_fanotify_mark(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fanotify_mark is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fanotify_mark")
-int handle_sys_exit_fanotify_mark(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fanotify_mark(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1112,7 +1113,7 @@ int handle_sys_exit_fanotify_mark(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_file_getattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_file_getattr")
-int handle_sys_enter_file_getattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_file_getattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1135,7 +1136,7 @@ int handle_sys_enter_file_getattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_file_getattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_file_getattr")
-int handle_sys_exit_file_getattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_file_getattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1158,7 +1159,7 @@ int handle_sys_exit_file_getattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_file_setattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_file_setattr")
-int handle_sys_enter_file_setattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_file_setattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1181,7 +1182,7 @@ int handle_sys_enter_file_setattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_file_setattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_file_setattr")
-int handle_sys_exit_file_setattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_file_setattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1204,7 +1205,7 @@ int handle_sys_exit_file_setattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fspick is a struct path_event
SEC("tracepoint/syscalls/sys_enter_fspick")
-int handle_sys_enter_fspick(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fspick(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1227,7 +1228,7 @@ int handle_sys_enter_fspick(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fspick is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fspick")
-int handle_sys_exit_fspick(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fspick(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1250,7 +1251,7 @@ int handle_sys_exit_fspick(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fsconfig is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fsconfig")
-int handle_sys_enter_fsconfig(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fsconfig(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1272,7 +1273,7 @@ int handle_sys_enter_fsconfig(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fsconfig is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fsconfig")
-int handle_sys_exit_fsconfig(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fsconfig(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1295,7 +1296,7 @@ int handle_sys_exit_fsconfig(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_statfs is a struct path_event
SEC("tracepoint/syscalls/sys_enter_statfs")
-int handle_sys_enter_statfs(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_statfs(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1318,7 +1319,7 @@ int handle_sys_enter_statfs(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_statfs is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_statfs")
-int handle_sys_exit_statfs(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_statfs(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1341,7 +1342,7 @@ int handle_sys_exit_statfs(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fstatfs is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fstatfs")
-int handle_sys_enter_fstatfs(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fstatfs(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1363,7 +1364,7 @@ int handle_sys_enter_fstatfs(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fstatfs is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fstatfs")
-int handle_sys_exit_fstatfs(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fstatfs(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1386,7 +1387,7 @@ int handle_sys_exit_fstatfs(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_getcwd is a struct null_event
SEC("tracepoint/syscalls/sys_enter_getcwd")
-int handle_sys_enter_getcwd(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_getcwd(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1407,7 +1408,7 @@ int handle_sys_enter_getcwd(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_getcwd is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_getcwd")
-int handle_sys_exit_getcwd(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_getcwd(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1430,7 +1431,7 @@ int handle_sys_exit_getcwd(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_utimensat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_utimensat")
-int handle_sys_enter_utimensat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_utimensat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1453,7 +1454,7 @@ int handle_sys_enter_utimensat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_utimensat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_utimensat")
-int handle_sys_exit_utimensat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_utimensat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1476,7 +1477,7 @@ int handle_sys_exit_utimensat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_futimesat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_futimesat")
-int handle_sys_enter_futimesat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_futimesat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1499,7 +1500,7 @@ int handle_sys_enter_futimesat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_futimesat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_futimesat")
-int handle_sys_exit_futimesat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_futimesat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1522,7 +1523,7 @@ int handle_sys_exit_futimesat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_sync is a struct null_event
SEC("tracepoint/syscalls/sys_enter_sync")
-int handle_sys_enter_sync(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_sync(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1543,7 +1544,7 @@ int handle_sys_enter_sync(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_sync is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_sync")
-int handle_sys_exit_sync(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_sync(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1566,7 +1567,7 @@ int handle_sys_exit_sync(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_syncfs is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_syncfs")
-int handle_sys_enter_syncfs(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_syncfs(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1588,7 +1589,7 @@ int handle_sys_enter_syncfs(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_syncfs is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_syncfs")
-int handle_sys_exit_syncfs(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_syncfs(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1611,7 +1612,7 @@ int handle_sys_exit_syncfs(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fsync is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fsync")
-int handle_sys_enter_fsync(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fsync(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1633,7 +1634,7 @@ int handle_sys_enter_fsync(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fsync is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fsync")
-int handle_sys_exit_fsync(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fsync(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1656,7 +1657,7 @@ int handle_sys_exit_fsync(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fdatasync is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fdatasync")
-int handle_sys_enter_fdatasync(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fdatasync(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1678,7 +1679,7 @@ int handle_sys_enter_fdatasync(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fdatasync is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fdatasync")
-int handle_sys_exit_fdatasync(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fdatasync(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1701,7 +1702,7 @@ int handle_sys_exit_fdatasync(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_sync_file_range is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_sync_file_range")
-int handle_sys_enter_sync_file_range(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_sync_file_range(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1723,7 +1724,7 @@ int handle_sys_enter_sync_file_range(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_sync_file_range is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_sync_file_range")
-int handle_sys_exit_sync_file_range(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_sync_file_range(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1746,7 +1747,7 @@ int handle_sys_exit_sync_file_range(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_vmsplice is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_vmsplice")
-int handle_sys_enter_vmsplice(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_vmsplice(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1768,7 +1769,7 @@ int handle_sys_enter_vmsplice(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_vmsplice is a struct ret_event (TRANSFER_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_vmsplice")
-int handle_sys_exit_vmsplice(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_vmsplice(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1791,7 +1792,7 @@ int handle_sys_exit_vmsplice(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_setxattrat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_setxattrat")
-int handle_sys_enter_setxattrat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_setxattrat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1814,7 +1815,7 @@ int handle_sys_enter_setxattrat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_setxattrat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_setxattrat")
-int handle_sys_exit_setxattrat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_setxattrat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1837,7 +1838,7 @@ int handle_sys_exit_setxattrat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_setxattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_setxattr")
-int handle_sys_enter_setxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_setxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1860,7 +1861,7 @@ int handle_sys_enter_setxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_setxattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_setxattr")
-int handle_sys_exit_setxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_setxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1883,7 +1884,7 @@ int handle_sys_exit_setxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_lsetxattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_lsetxattr")
-int handle_sys_enter_lsetxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_lsetxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1906,7 +1907,7 @@ int handle_sys_enter_lsetxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_lsetxattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_lsetxattr")
-int handle_sys_exit_lsetxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_lsetxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1929,7 +1930,7 @@ int handle_sys_exit_lsetxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fsetxattr is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fsetxattr")
-int handle_sys_enter_fsetxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fsetxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1951,7 +1952,7 @@ int handle_sys_enter_fsetxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fsetxattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fsetxattr")
-int handle_sys_exit_fsetxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fsetxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1974,7 +1975,7 @@ int handle_sys_exit_fsetxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_getxattrat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_getxattrat")
-int handle_sys_enter_getxattrat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_getxattrat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -1997,7 +1998,7 @@ int handle_sys_enter_getxattrat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_getxattrat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_getxattrat")
-int handle_sys_exit_getxattrat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_getxattrat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2020,7 +2021,7 @@ int handle_sys_exit_getxattrat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_getxattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_getxattr")
-int handle_sys_enter_getxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_getxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2043,7 +2044,7 @@ int handle_sys_enter_getxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_getxattr is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_getxattr")
-int handle_sys_exit_getxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_getxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2066,7 +2067,7 @@ int handle_sys_exit_getxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_lgetxattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_lgetxattr")
-int handle_sys_enter_lgetxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_lgetxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2089,7 +2090,7 @@ int handle_sys_enter_lgetxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_lgetxattr is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_lgetxattr")
-int handle_sys_exit_lgetxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_lgetxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2112,7 +2113,7 @@ int handle_sys_exit_lgetxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fgetxattr is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fgetxattr")
-int handle_sys_enter_fgetxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fgetxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2134,7 +2135,7 @@ int handle_sys_enter_fgetxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fgetxattr is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fgetxattr")
-int handle_sys_exit_fgetxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fgetxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2157,7 +2158,7 @@ int handle_sys_exit_fgetxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_listxattrat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_listxattrat")
-int handle_sys_enter_listxattrat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_listxattrat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2180,7 +2181,7 @@ int handle_sys_enter_listxattrat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_listxattrat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_listxattrat")
-int handle_sys_exit_listxattrat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_listxattrat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2203,7 +2204,7 @@ int handle_sys_exit_listxattrat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_listxattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_listxattr")
-int handle_sys_enter_listxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_listxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2226,7 +2227,7 @@ int handle_sys_enter_listxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_listxattr is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_listxattr")
-int handle_sys_exit_listxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_listxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2249,7 +2250,7 @@ int handle_sys_exit_listxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_llistxattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_llistxattr")
-int handle_sys_enter_llistxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_llistxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2272,7 +2273,7 @@ int handle_sys_enter_llistxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_llistxattr is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_llistxattr")
-int handle_sys_exit_llistxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_llistxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2295,7 +2296,7 @@ int handle_sys_exit_llistxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_flistxattr is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_flistxattr")
-int handle_sys_enter_flistxattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_flistxattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2317,7 +2318,7 @@ int handle_sys_enter_flistxattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_flistxattr is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_flistxattr")
-int handle_sys_exit_flistxattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_flistxattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2340,7 +2341,7 @@ int handle_sys_exit_flistxattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_removexattrat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_removexattrat")
-int handle_sys_enter_removexattrat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_removexattrat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2363,7 +2364,7 @@ int handle_sys_enter_removexattrat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_removexattrat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_removexattrat")
-int handle_sys_exit_removexattrat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_removexattrat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2386,7 +2387,7 @@ int handle_sys_exit_removexattrat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_removexattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_removexattr")
-int handle_sys_enter_removexattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_removexattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2409,7 +2410,7 @@ int handle_sys_enter_removexattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_removexattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_removexattr")
-int handle_sys_exit_removexattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_removexattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2432,7 +2433,7 @@ int handle_sys_exit_removexattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_lremovexattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_lremovexattr")
-int handle_sys_enter_lremovexattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_lremovexattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2455,7 +2456,7 @@ int handle_sys_enter_lremovexattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_lremovexattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_lremovexattr")
-int handle_sys_exit_lremovexattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_lremovexattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2478,7 +2479,7 @@ int handle_sys_exit_lremovexattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fremovexattr is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fremovexattr")
-int handle_sys_enter_fremovexattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fremovexattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2500,7 +2501,7 @@ int handle_sys_enter_fremovexattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fremovexattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fremovexattr")
-int handle_sys_exit_fremovexattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fremovexattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2523,7 +2524,7 @@ int handle_sys_exit_fremovexattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_open_tree is a struct open_event
SEC("tracepoint/syscalls/sys_enter_open_tree")
-int handle_sys_enter_open_tree(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_open_tree(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2548,7 +2549,7 @@ int handle_sys_enter_open_tree(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_open_tree is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_open_tree")
-int handle_sys_exit_open_tree(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_open_tree(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2571,7 +2572,7 @@ int handle_sys_exit_open_tree(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_mount_setattr is a struct path_event
SEC("tracepoint/syscalls/sys_enter_mount_setattr")
-int handle_sys_enter_mount_setattr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_mount_setattr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2594,7 +2595,7 @@ int handle_sys_enter_mount_setattr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_mount_setattr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_mount_setattr")
-int handle_sys_exit_mount_setattr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_mount_setattr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2617,7 +2618,7 @@ int handle_sys_exit_mount_setattr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_open_tree_attr is a struct open_event
SEC("tracepoint/syscalls/sys_enter_open_tree_attr")
-int handle_sys_enter_open_tree_attr(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_open_tree_attr(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2642,7 +2643,7 @@ int handle_sys_enter_open_tree_attr(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_open_tree_attr is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_open_tree_attr")
-int handle_sys_exit_open_tree_attr(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_open_tree_attr(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2665,7 +2666,7 @@ int handle_sys_exit_open_tree_attr(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_close_range is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_close_range")
-int handle_sys_enter_close_range(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_close_range(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2687,7 +2688,7 @@ int handle_sys_enter_close_range(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_close_range is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_close_range")
-int handle_sys_exit_close_range(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_close_range(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2710,7 +2711,7 @@ int handle_sys_exit_close_range(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_dup3 is a struct dup3_event
SEC("tracepoint/syscalls/sys_enter_dup3")
-int handle_sys_enter_dup3(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_dup3(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2733,7 +2734,7 @@ int handle_sys_enter_dup3(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_dup3 is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_dup3")
-int handle_sys_exit_dup3(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_dup3(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2756,7 +2757,7 @@ int handle_sys_exit_dup3(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_dup2 is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_dup2")
-int handle_sys_enter_dup2(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_dup2(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2778,7 +2779,7 @@ int handle_sys_enter_dup2(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_dup2 is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_dup2")
-int handle_sys_exit_dup2(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_dup2(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2801,7 +2802,7 @@ int handle_sys_exit_dup2(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_dup is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_dup")
-int handle_sys_enter_dup(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_dup(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2823,7 +2824,7 @@ int handle_sys_enter_dup(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_dup is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_dup")
-int handle_sys_exit_dup(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_dup(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2846,7 +2847,7 @@ int handle_sys_exit_dup(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_getdents is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_getdents")
-int handle_sys_enter_getdents(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_getdents(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2868,7 +2869,7 @@ int handle_sys_enter_getdents(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_getdents is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_getdents")
-int handle_sys_exit_getdents(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_getdents(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2891,7 +2892,7 @@ int handle_sys_exit_getdents(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_getdents64 is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_getdents64")
-int handle_sys_enter_getdents64(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_getdents64(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2913,7 +2914,7 @@ int handle_sys_enter_getdents64(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_getdents64 is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_getdents64")
-int handle_sys_exit_getdents64(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_getdents64(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2936,7 +2937,7 @@ int handle_sys_exit_getdents64(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_ioctl is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_ioctl")
-int handle_sys_enter_ioctl(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_ioctl(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2958,7 +2959,7 @@ int handle_sys_enter_ioctl(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_ioctl is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_ioctl")
-int handle_sys_exit_ioctl(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_ioctl(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -2981,7 +2982,7 @@ int handle_sys_exit_ioctl(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fcntl is a struct fcntl_event
SEC("tracepoint/syscalls/sys_enter_fcntl")
-int handle_sys_enter_fcntl(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fcntl(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3005,7 +3006,7 @@ int handle_sys_enter_fcntl(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fcntl is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fcntl")
-int handle_sys_exit_fcntl(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fcntl(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3028,7 +3029,7 @@ int handle_sys_exit_fcntl(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_mkdirat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_mkdirat")
-int handle_sys_enter_mkdirat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_mkdirat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3051,7 +3052,7 @@ int handle_sys_enter_mkdirat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_mkdirat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_mkdirat")
-int handle_sys_exit_mkdirat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_mkdirat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3074,7 +3075,7 @@ int handle_sys_exit_mkdirat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_mkdir is a struct path_event
SEC("tracepoint/syscalls/sys_enter_mkdir")
-int handle_sys_enter_mkdir(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_mkdir(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3097,7 +3098,7 @@ int handle_sys_enter_mkdir(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_mkdir is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_mkdir")
-int handle_sys_exit_mkdir(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_mkdir(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3120,7 +3121,7 @@ int handle_sys_exit_mkdir(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_rmdir is a struct path_event
SEC("tracepoint/syscalls/sys_enter_rmdir")
-int handle_sys_enter_rmdir(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_rmdir(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3143,7 +3144,7 @@ int handle_sys_enter_rmdir(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_rmdir is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_rmdir")
-int handle_sys_exit_rmdir(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_rmdir(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3166,7 +3167,7 @@ int handle_sys_exit_rmdir(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_unlinkat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_unlinkat")
-int handle_sys_enter_unlinkat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_unlinkat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3189,7 +3190,7 @@ int handle_sys_enter_unlinkat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_unlinkat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_unlinkat")
-int handle_sys_exit_unlinkat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_unlinkat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3212,7 +3213,7 @@ int handle_sys_exit_unlinkat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_unlink is a struct path_event
SEC("tracepoint/syscalls/sys_enter_unlink")
-int handle_sys_enter_unlink(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_unlink(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3235,7 +3236,7 @@ int handle_sys_enter_unlink(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_unlink is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_unlink")
-int handle_sys_exit_unlink(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_unlink(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3258,7 +3259,7 @@ int handle_sys_exit_unlink(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_symlinkat is a struct name_event
SEC("tracepoint/syscalls/sys_enter_symlinkat")
-int handle_sys_enter_symlinkat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_symlinkat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3282,7 +3283,7 @@ int handle_sys_enter_symlinkat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_symlinkat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_symlinkat")
-int handle_sys_exit_symlinkat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_symlinkat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3305,7 +3306,7 @@ int handle_sys_exit_symlinkat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_symlink is a struct name_event
SEC("tracepoint/syscalls/sys_enter_symlink")
-int handle_sys_enter_symlink(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_symlink(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3329,7 +3330,7 @@ int handle_sys_enter_symlink(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_symlink is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_symlink")
-int handle_sys_exit_symlink(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_symlink(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3352,7 +3353,7 @@ int handle_sys_exit_symlink(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_linkat is a struct name_event
SEC("tracepoint/syscalls/sys_enter_linkat")
-int handle_sys_enter_linkat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_linkat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3376,7 +3377,7 @@ int handle_sys_enter_linkat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_linkat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_linkat")
-int handle_sys_exit_linkat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_linkat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3399,7 +3400,7 @@ int handle_sys_exit_linkat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_link is a struct name_event
SEC("tracepoint/syscalls/sys_enter_link")
-int handle_sys_enter_link(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_link(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3423,7 +3424,7 @@ int handle_sys_enter_link(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_link is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_link")
-int handle_sys_exit_link(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_link(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3446,7 +3447,7 @@ int handle_sys_exit_link(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_renameat2 is a struct name_event
SEC("tracepoint/syscalls/sys_enter_renameat2")
-int handle_sys_enter_renameat2(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_renameat2(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3470,7 +3471,7 @@ int handle_sys_enter_renameat2(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_renameat2 is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_renameat2")
-int handle_sys_exit_renameat2(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_renameat2(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3493,7 +3494,7 @@ int handle_sys_exit_renameat2(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_renameat is a struct name_event
SEC("tracepoint/syscalls/sys_enter_renameat")
-int handle_sys_enter_renameat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_renameat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3517,7 +3518,7 @@ int handle_sys_enter_renameat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_renameat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_renameat")
-int handle_sys_exit_renameat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_renameat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3540,7 +3541,7 @@ int handle_sys_exit_renameat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_rename is a struct name_event
SEC("tracepoint/syscalls/sys_enter_rename")
-int handle_sys_enter_rename(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_rename(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3564,7 +3565,7 @@ int handle_sys_enter_rename(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_rename is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_rename")
-int handle_sys_exit_rename(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_rename(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3587,7 +3588,7 @@ int handle_sys_exit_rename(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_newstat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_newstat")
-int handle_sys_enter_newstat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_newstat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3610,7 +3611,7 @@ int handle_sys_enter_newstat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_newstat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_newstat")
-int handle_sys_exit_newstat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_newstat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3633,7 +3634,7 @@ int handle_sys_exit_newstat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_newlstat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_newlstat")
-int handle_sys_enter_newlstat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_newlstat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3656,7 +3657,7 @@ int handle_sys_enter_newlstat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_newlstat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_newlstat")
-int handle_sys_exit_newlstat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_newlstat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3679,7 +3680,7 @@ int handle_sys_exit_newlstat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_newfstatat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_newfstatat")
-int handle_sys_enter_newfstatat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_newfstatat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3702,7 +3703,7 @@ int handle_sys_enter_newfstatat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_newfstatat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_newfstatat")
-int handle_sys_exit_newfstatat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_newfstatat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3725,7 +3726,7 @@ int handle_sys_exit_newfstatat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_newfstat is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_newfstat")
-int handle_sys_enter_newfstat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_newfstat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3747,7 +3748,7 @@ int handle_sys_enter_newfstat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_newfstat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_newfstat")
-int handle_sys_exit_newfstat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_newfstat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3770,7 +3771,7 @@ int handle_sys_exit_newfstat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_readlinkat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_readlinkat")
-int handle_sys_enter_readlinkat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_readlinkat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3793,7 +3794,7 @@ int handle_sys_enter_readlinkat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_readlinkat is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_readlinkat")
-int handle_sys_exit_readlinkat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_readlinkat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3816,7 +3817,7 @@ int handle_sys_exit_readlinkat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_readlink is a struct path_event
SEC("tracepoint/syscalls/sys_enter_readlink")
-int handle_sys_enter_readlink(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_readlink(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3839,7 +3840,7 @@ int handle_sys_enter_readlink(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_readlink is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_readlink")
-int handle_sys_exit_readlink(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_readlink(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3862,7 +3863,7 @@ int handle_sys_exit_readlink(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_statx is a struct path_event
SEC("tracepoint/syscalls/sys_enter_statx")
-int handle_sys_enter_statx(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_statx(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3885,7 +3886,7 @@ int handle_sys_enter_statx(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_statx is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_statx")
-int handle_sys_exit_statx(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_statx(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3908,7 +3909,7 @@ int handle_sys_exit_statx(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_lseek is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_lseek")
-int handle_sys_enter_lseek(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_lseek(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3930,7 +3931,7 @@ int handle_sys_enter_lseek(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_lseek is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_lseek")
-int handle_sys_exit_lseek(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_lseek(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3953,7 +3954,7 @@ int handle_sys_exit_lseek(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_read is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_read")
-int handle_sys_enter_read(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_read(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3975,7 +3976,7 @@ int handle_sys_enter_read(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_read is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_read")
-int handle_sys_exit_read(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_read(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -3998,7 +3999,7 @@ int handle_sys_exit_read(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_write is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_write")
-int handle_sys_enter_write(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_write(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4020,7 +4021,7 @@ int handle_sys_enter_write(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_write is a struct ret_event (WRITE_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_write")
-int handle_sys_exit_write(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_write(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4043,7 +4044,7 @@ int handle_sys_exit_write(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_pread64 is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_pread64")
-int handle_sys_enter_pread64(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_pread64(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4065,7 +4066,7 @@ int handle_sys_enter_pread64(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_pread64 is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_pread64")
-int handle_sys_exit_pread64(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_pread64(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4088,7 +4089,7 @@ int handle_sys_exit_pread64(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_pwrite64 is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_pwrite64")
-int handle_sys_enter_pwrite64(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_pwrite64(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4110,7 +4111,7 @@ int handle_sys_enter_pwrite64(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_pwrite64 is a struct ret_event (WRITE_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_pwrite64")
-int handle_sys_exit_pwrite64(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_pwrite64(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4133,7 +4134,7 @@ int handle_sys_exit_pwrite64(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_readv is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_readv")
-int handle_sys_enter_readv(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_readv(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4155,7 +4156,7 @@ int handle_sys_enter_readv(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_readv is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_readv")
-int handle_sys_exit_readv(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_readv(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4178,7 +4179,7 @@ int handle_sys_exit_readv(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_writev is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_writev")
-int handle_sys_enter_writev(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_writev(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4200,7 +4201,7 @@ int handle_sys_enter_writev(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_writev is a struct ret_event (WRITE_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_writev")
-int handle_sys_exit_writev(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_writev(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4223,7 +4224,7 @@ int handle_sys_exit_writev(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_preadv is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_preadv")
-int handle_sys_enter_preadv(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_preadv(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4245,7 +4246,7 @@ int handle_sys_enter_preadv(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_preadv is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_preadv")
-int handle_sys_exit_preadv(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_preadv(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4268,7 +4269,7 @@ int handle_sys_exit_preadv(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_preadv2 is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_preadv2")
-int handle_sys_enter_preadv2(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_preadv2(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4290,7 +4291,7 @@ int handle_sys_enter_preadv2(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_preadv2 is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_preadv2")
-int handle_sys_exit_preadv2(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_preadv2(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4313,7 +4314,7 @@ int handle_sys_exit_preadv2(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_pwritev is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_pwritev")
-int handle_sys_enter_pwritev(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_pwritev(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4335,7 +4336,7 @@ int handle_sys_enter_pwritev(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_pwritev is a struct ret_event (WRITE_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_pwritev")
-int handle_sys_exit_pwritev(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_pwritev(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4358,7 +4359,7 @@ int handle_sys_exit_pwritev(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_pwritev2 is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_pwritev2")
-int handle_sys_enter_pwritev2(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_pwritev2(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4380,7 +4381,7 @@ int handle_sys_enter_pwritev2(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_pwritev2 is a struct ret_event (WRITE_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_pwritev2")
-int handle_sys_exit_pwritev2(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_pwritev2(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4403,7 +4404,7 @@ int handle_sys_exit_pwritev2(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_copy_file_range is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_copy_file_range")
-int handle_sys_enter_copy_file_range(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_copy_file_range(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4425,7 +4426,7 @@ int handle_sys_enter_copy_file_range(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_copy_file_range is a struct ret_event (TRANSFER_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_copy_file_range")
-int handle_sys_exit_copy_file_range(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_copy_file_range(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4448,7 +4449,7 @@ int handle_sys_exit_copy_file_range(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_truncate is a struct path_event
SEC("tracepoint/syscalls/sys_enter_truncate")
-int handle_sys_enter_truncate(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_truncate(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4471,7 +4472,7 @@ int handle_sys_enter_truncate(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_truncate is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_truncate")
-int handle_sys_exit_truncate(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_truncate(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4494,7 +4495,7 @@ int handle_sys_exit_truncate(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_ftruncate is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_ftruncate")
-int handle_sys_enter_ftruncate(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_ftruncate(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4516,7 +4517,7 @@ int handle_sys_enter_ftruncate(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_ftruncate is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_ftruncate")
-int handle_sys_exit_ftruncate(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_ftruncate(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4539,7 +4540,7 @@ int handle_sys_exit_ftruncate(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fallocate is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fallocate")
-int handle_sys_enter_fallocate(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fallocate(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4561,7 +4562,7 @@ int handle_sys_enter_fallocate(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fallocate is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fallocate")
-int handle_sys_exit_fallocate(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fallocate(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4584,7 +4585,7 @@ int handle_sys_exit_fallocate(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_faccessat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_faccessat")
-int handle_sys_enter_faccessat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_faccessat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4607,7 +4608,7 @@ int handle_sys_enter_faccessat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_faccessat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_faccessat")
-int handle_sys_exit_faccessat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_faccessat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4630,7 +4631,7 @@ int handle_sys_exit_faccessat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_faccessat2 is a struct path_event
SEC("tracepoint/syscalls/sys_enter_faccessat2")
-int handle_sys_enter_faccessat2(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_faccessat2(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4653,7 +4654,7 @@ int handle_sys_enter_faccessat2(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_faccessat2 is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_faccessat2")
-int handle_sys_exit_faccessat2(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_faccessat2(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4676,7 +4677,7 @@ int handle_sys_exit_faccessat2(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_access is a struct path_event
SEC("tracepoint/syscalls/sys_enter_access")
-int handle_sys_enter_access(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_access(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4699,7 +4700,7 @@ int handle_sys_enter_access(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_access is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_access")
-int handle_sys_exit_access(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_access(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4722,7 +4723,7 @@ int handle_sys_exit_access(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_chdir is a struct path_event
SEC("tracepoint/syscalls/sys_enter_chdir")
-int handle_sys_enter_chdir(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_chdir(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4745,7 +4746,7 @@ int handle_sys_enter_chdir(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_chdir is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_chdir")
-int handle_sys_exit_chdir(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_chdir(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4768,7 +4769,7 @@ int handle_sys_exit_chdir(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fchdir is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fchdir")
-int handle_sys_enter_fchdir(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fchdir(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4790,7 +4791,7 @@ int handle_sys_enter_fchdir(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fchdir is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fchdir")
-int handle_sys_exit_fchdir(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fchdir(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4813,7 +4814,7 @@ int handle_sys_exit_fchdir(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_chroot is a struct path_event
SEC("tracepoint/syscalls/sys_enter_chroot")
-int handle_sys_enter_chroot(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_chroot(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4836,7 +4837,7 @@ int handle_sys_enter_chroot(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_chroot is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_chroot")
-int handle_sys_exit_chroot(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_chroot(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4859,7 +4860,7 @@ int handle_sys_exit_chroot(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fchmod is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fchmod")
-int handle_sys_enter_fchmod(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fchmod(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4881,7 +4882,7 @@ int handle_sys_enter_fchmod(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fchmod is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fchmod")
-int handle_sys_exit_fchmod(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fchmod(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4904,7 +4905,7 @@ int handle_sys_exit_fchmod(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fchmodat2 is a struct path_event
SEC("tracepoint/syscalls/sys_enter_fchmodat2")
-int handle_sys_enter_fchmodat2(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fchmodat2(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4927,7 +4928,7 @@ int handle_sys_enter_fchmodat2(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fchmodat2 is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fchmodat2")
-int handle_sys_exit_fchmodat2(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fchmodat2(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4950,7 +4951,7 @@ int handle_sys_exit_fchmodat2(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fchmodat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_fchmodat")
-int handle_sys_enter_fchmodat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fchmodat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4973,7 +4974,7 @@ int handle_sys_enter_fchmodat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fchmodat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fchmodat")
-int handle_sys_exit_fchmodat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fchmodat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -4996,7 +4997,7 @@ int handle_sys_exit_fchmodat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_chmod is a struct path_event
SEC("tracepoint/syscalls/sys_enter_chmod")
-int handle_sys_enter_chmod(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_chmod(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5019,7 +5020,7 @@ int handle_sys_enter_chmod(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_chmod is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_chmod")
-int handle_sys_exit_chmod(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_chmod(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5042,7 +5043,7 @@ int handle_sys_exit_chmod(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fchownat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_fchownat")
-int handle_sys_enter_fchownat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fchownat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5065,7 +5066,7 @@ int handle_sys_enter_fchownat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fchownat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fchownat")
-int handle_sys_exit_fchownat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fchownat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5088,7 +5089,7 @@ int handle_sys_exit_fchownat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_chown is a struct path_event
SEC("tracepoint/syscalls/sys_enter_chown")
-int handle_sys_enter_chown(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_chown(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5111,7 +5112,7 @@ int handle_sys_enter_chown(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_chown is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_chown")
-int handle_sys_exit_chown(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_chown(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5134,7 +5135,7 @@ int handle_sys_exit_chown(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_lchown is a struct path_event
SEC("tracepoint/syscalls/sys_enter_lchown")
-int handle_sys_enter_lchown(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_lchown(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5157,7 +5158,7 @@ int handle_sys_enter_lchown(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_lchown is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_lchown")
-int handle_sys_exit_lchown(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_lchown(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5180,7 +5181,7 @@ int handle_sys_exit_lchown(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fchown is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fchown")
-int handle_sys_enter_fchown(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fchown(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5202,7 +5203,7 @@ int handle_sys_enter_fchown(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fchown is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fchown")
-int handle_sys_exit_fchown(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fchown(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5225,7 +5226,7 @@ int handle_sys_exit_fchown(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_open is a struct open_event
SEC("tracepoint/syscalls/sys_enter_open")
-int handle_sys_enter_open(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_open(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5250,7 +5251,7 @@ int handle_sys_enter_open(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_open is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_open")
-int handle_sys_exit_open(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_open(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5273,7 +5274,7 @@ int handle_sys_exit_open(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_openat is a struct open_event
SEC("tracepoint/syscalls/sys_enter_openat")
-int handle_sys_enter_openat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_openat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5298,7 +5299,7 @@ int handle_sys_enter_openat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_openat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_openat")
-int handle_sys_exit_openat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_openat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5321,7 +5322,7 @@ int handle_sys_exit_openat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_openat2 is a struct open_event
SEC("tracepoint/syscalls/sys_enter_openat2")
-int handle_sys_enter_openat2(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_openat2(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5346,7 +5347,7 @@ int handle_sys_enter_openat2(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_openat2 is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_openat2")
-int handle_sys_exit_openat2(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_openat2(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5369,7 +5370,7 @@ int handle_sys_exit_openat2(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_creat is a struct path_event
SEC("tracepoint/syscalls/sys_enter_creat")
-int handle_sys_enter_creat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_creat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5392,7 +5393,7 @@ int handle_sys_enter_creat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_creat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_creat")
-int handle_sys_exit_creat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_creat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5415,7 +5416,7 @@ int handle_sys_exit_creat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_close is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_close")
-int handle_sys_enter_close(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_close(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5437,7 +5438,7 @@ int handle_sys_enter_close(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_close is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_close")
-int handle_sys_exit_close(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_close(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5460,7 +5461,7 @@ int handle_sys_exit_close(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_msync is a struct null_event
SEC("tracepoint/syscalls/sys_enter_msync")
-int handle_sys_enter_msync(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_msync(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5481,7 +5482,7 @@ int handle_sys_enter_msync(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_msync is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_msync")
-int handle_sys_exit_msync(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_msync(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5504,7 +5505,7 @@ int handle_sys_exit_msync(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_readahead is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_readahead")
-int handle_sys_enter_readahead(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_readahead(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5526,7 +5527,7 @@ int handle_sys_enter_readahead(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_readahead is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_readahead")
-int handle_sys_exit_readahead(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_readahead(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5549,7 +5550,7 @@ int handle_sys_exit_readahead(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_fadvise64 is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_fadvise64")
-int handle_sys_enter_fadvise64(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_fadvise64(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5571,7 +5572,7 @@ int handle_sys_enter_fadvise64(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_fadvise64 is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_fadvise64")
-int handle_sys_exit_fadvise64(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_fadvise64(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5594,7 +5595,7 @@ int handle_sys_exit_fadvise64(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_cachestat is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_cachestat")
-int handle_sys_enter_cachestat(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_cachestat(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5616,7 +5617,7 @@ int handle_sys_enter_cachestat(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_cachestat is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_cachestat")
-int handle_sys_exit_cachestat(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_cachestat(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5639,7 +5640,7 @@ int handle_sys_exit_cachestat(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_finit_module is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_finit_module")
-int handle_sys_enter_finit_module(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_finit_module(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5661,7 +5662,7 @@ int handle_sys_enter_finit_module(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_finit_module is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_finit_module")
-int handle_sys_exit_finit_module(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_finit_module(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5684,7 +5685,7 @@ int handle_sys_exit_finit_module(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_syslog is a struct null_event
SEC("tracepoint/syscalls/sys_enter_syslog")
-int handle_sys_enter_syslog(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_syslog(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5705,7 +5706,7 @@ int handle_sys_enter_syslog(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_syslog is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_syslog")
-int handle_sys_exit_syslog(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_syslog(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5728,7 +5729,7 @@ int handle_sys_exit_syslog(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_pidfd_getfd is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_pidfd_getfd")
-int handle_sys_enter_pidfd_getfd(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_pidfd_getfd(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5750,7 +5751,7 @@ int handle_sys_enter_pidfd_getfd(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_pidfd_getfd is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_pidfd_getfd")
-int handle_sys_exit_pidfd_getfd(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_pidfd_getfd(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5773,7 +5774,7 @@ int handle_sys_exit_pidfd_getfd(struct trace_event_raw_sys_exit *ctx) {
/// sys_enter_mmap is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_mmap")
-int handle_sys_enter_mmap(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_mmap(struct syscall_trace_enter *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
@@ -5795,7 +5796,7 @@ int handle_sys_enter_mmap(struct trace_event_raw_sys_enter *ctx) {
/// sys_exit_mmap is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_mmap")
-int handle_sys_exit_mmap(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_mmap(struct syscall_trace_exit *ctx) {
__u32 pid, tid;
if (filter(&pid, &tid))
return 0;
diff --git a/internal/c/generated_tracepoints_result.txt b/internal/c/generated_tracepoints_result.txt
index c18fec5..0d439b4 100644
--- a/internal/c/generated_tracepoints_result.txt
+++ b/internal/c/generated_tracepoints_result.txt
@@ -84,6 +84,7 @@ Ignoring sys_enter_landlock_create_ruleset sys_exit_landlock_create_ruleset as p
Ignoring sys_enter_landlock_restrict_self sys_exit_landlock_restrict_self as possibly not file I/O related
Ignoring sys_enter_listen sys_exit_listen as possibly not file I/O related
Ignoring sys_enter_listmount sys_exit_listmount as possibly not file I/O related
+Ignoring sys_enter_listns sys_exit_listns as possibly not file I/O related
Ignoring sys_enter_lsm_get_self_attr sys_exit_lsm_get_self_attr as possibly not file I/O related
Ignoring sys_enter_lsm_list_modules sys_exit_lsm_list_modules as possibly not file I/O related
Ignoring sys_enter_lsm_set_self_attr sys_exit_lsm_set_self_attr as possibly not file I/O related
diff --git a/internal/generate/bpfhandler.go b/internal/generate/bpfhandler.go
index 2c0d648..3d76ac4 100644
--- a/internal/generate/bpfhandler.go
+++ b/internal/generate/bpfhandler.go
@@ -9,9 +9,17 @@ func generateBPFHandler(tp GeneratedTracepoint) string {
f := tp.Format
isEnter := strings.Split(f.Name, "_")[1] == "enter"
- ctxStruct := "trace_event_raw_sys_exit"
+ // Use the kernel's actual tracepoint context structs (syscall_trace_enter/exit)
+ // rather than the BTF-emitted trace_event_raw_sys_enter/exit aliases. On RHEL 9
+ // kernels (5.14 with the rt-merge backport that added preempt_lazy_count to
+ // trace_entry) the two diverge: trace_event_raw_sys_* grows by 8 bytes and
+ // the args/ret offsets shift, but the real context handed to the BPF program
+ // is still syscall_trace_*. Reading via the wider alias trips the verifier's
+ // max_ctx_offset check and the attach fails with EACCES. The two structs are
+ // identical on non-RHEL kernels, so this is a no-op everywhere else.
+ ctxStruct := "syscall_trace_exit"
if isEnter {
- ctxStruct = "trace_event_raw_sys_enter"
+ ctxStruct = "syscall_trace_enter"
}
eventStruct := eventStructName(tp.Classification.Kind)
diff --git a/internal/generate/codegen_test.go b/internal/generate/codegen_test.go
index caad340..7a7d469 100644
--- a/internal/generate/codegen_test.go
+++ b/internal/generate/codegen_test.go
@@ -16,7 +16,7 @@ func TestGenerateFdHandler(t *testing.T) {
output := generateFromPair(t, FormatRead, FormatExitRead)
requireContains(t, output, `SEC("tracepoint/syscalls/sys_enter_read")`)
- requireContains(t, output, "struct trace_event_raw_sys_enter *ctx")
+ requireContains(t, output, "struct syscall_trace_enter *ctx")
requireContains(t, output, "struct fd_event *ev = bpf_ringbuf_reserve(&event_map, sizeof(struct fd_event), 0);")
requireContains(t, output, "ev->event_type = ENTER_FD_EVENT;")
requireContains(t, output, "ev->trace_id = SYS_ENTER_READ;")
@@ -70,7 +70,7 @@ func TestGenerateRetHandlerRead(t *testing.T) {
output := generateFromPair(t, FormatRead, FormatExitRead)
requireContains(t, output, `SEC("tracepoint/syscalls/sys_exit_read")`)
- requireContains(t, output, "struct trace_event_raw_sys_exit *ctx")
+ requireContains(t, output, "struct syscall_trace_exit *ctx")
requireContains(t, output, "struct ret_event *ev")
requireContains(t, output, "ev->event_type = EXIT_RET_EVENT;")
requireContains(t, output, "ev->trace_id = SYS_EXIT_READ;")
@@ -226,7 +226,7 @@ func TestGenerateDefinesSortedByIDDesc(t *testing.T) {
func TestGenerateHandlerStructure(t *testing.T) {
output := generateFromPair(t, FormatClose, FormatExitClose)
- requireContains(t, output, "int handle_sys_enter_close(struct trace_event_raw_sys_enter *ctx) {")
+ requireContains(t, output, "int handle_sys_enter_close(struct syscall_trace_enter *ctx) {")
requireContains(t, output, "__u32 pid, tid;")
requireContains(t, output, "if (filter(&pid, &tid))")
requireContains(t, output, "ev->pid = pid;")
diff --git a/internal/generate/tracepointsgo_test.go b/internal/generate/tracepointsgo_test.go
index cd24942..978633b 100644
--- a/internal/generate/tracepointsgo_test.go
+++ b/internal/generate/tracepointsgo_test.go
@@ -16,25 +16,25 @@ const sampleGeneratedC = `// Code generated - don't change manually!
/// sys_enter_read is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_read")
-int handle_sys_enter_read(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_read(struct syscall_trace_enter *ctx) {
return 0;
}
/// sys_exit_read is a struct ret_event (READ_CLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_read")
-int handle_sys_exit_read(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_read(struct syscall_trace_exit *ctx) {
return 0;
}
/// sys_enter_close is a struct fd_event
SEC("tracepoint/syscalls/sys_enter_close")
-int handle_sys_enter_close(struct trace_event_raw_sys_enter *ctx) {
+int handle_sys_enter_close(struct syscall_trace_enter *ctx) {
return 0;
}
/// sys_exit_close is a struct ret_event (UNCLASSIFIED)
SEC("tracepoint/syscalls/sys_exit_close")
-int handle_sys_exit_close(struct trace_event_raw_sys_exit *ctx) {
+int handle_sys_exit_close(struct syscall_trace_exit *ctx) {
return 0;
}
`
@@ -93,7 +93,7 @@ func TestExtractTracepointsPackageHeader(t *testing.T) {
func TestExtractTracepointsMalformedSEC(t *testing.T) {
input := `SEC("tracepoint/not_matching_pattern")
-int handle_something(struct trace_event_raw_sys_enter *ctx) {
+int handle_something(struct syscall_trace_enter *ctx) {
return 0;
}
SEC("some/garbage")
diff --git a/internal/types/generated_types.go b/internal/types/generated_types.go
index ff3ed02..8e4a584 100644
--- a/internal/types/generated_types.go
+++ b/internal/types/generated_types.go
@@ -12,11 +12,11 @@ type EventType uint32
type TraceId uint32
var traceId2String = map[TraceId]string{
- 1515: "enter_io_uring_register", 1514: "exit_io_uring_register", 1496: "enter_io_uring_enter", 1495: "exit_io_uring_enter", 1494: "enter_io_uring_setup", 1493: "exit_io_uring_setup", 1151: "enter_quotactl_fd", 1150: "exit_quotactl_fd", 1135: "enter_name_to_handle_at", 1134: "exit_name_to_handle_at", 1133: "enter_open_by_handle_at", 1132: "exit_open_by_handle_at", 1119: "enter_flock", 1118: "exit_flock", 1105: "enter_io_setup", 1104: "exit_io_setup", 1103: "enter_io_destroy", 1102: "exit_io_destroy", 1101: "enter_io_submit", 1100: "exit_io_submit", 1099: "enter_io_cancel", 1098: "exit_io_cancel", 1097: "enter_io_getevents", 1096: "exit_io_getevents", 1095: "enter_io_pgetevents", 1094: "exit_io_pgetevents", 1063: "enter_fanotify_mark", 1062: "exit_fanotify_mark", 1053: "enter_file_getattr", 1052: "exit_file_getattr", 1051: "enter_file_setattr", 1050: "exit_file_setattr", 1047: "enter_fspick", 1046: "exit_fspick", 1045: "enter_fsconfig", 1044: "exit_fsconfig", 1043: "enter_statfs", 1042: "exit_statfs", 1041: "enter_fstatfs", 1040: "exit_fstatfs", 1037: "enter_getcwd", 1036: "exit_getcwd", 1035: "enter_utimensat", 1034: "exit_utimensat", 1033: "enter_futimesat", 1032: "exit_futimesat", 1027: "enter_sync", 1026: "exit_sync", 1025: "enter_syncfs", 1024: "exit_syncfs", 1023: "enter_fsync", 1022: "exit_fsync", 1021: "enter_fdatasync", 1020: "exit_fdatasync", 1019: "enter_sync_file_range", 1018: "exit_sync_file_range", 1017: "enter_vmsplice", 1016: "exit_vmsplice", 978: "enter_setxattrat", 977: "exit_setxattrat", 976: "enter_setxattr", 975: "exit_setxattr", 974: "enter_lsetxattr", 973: "exit_lsetxattr", 972: "enter_fsetxattr", 971: "exit_fsetxattr", 970: "enter_getxattrat", 969: "exit_getxattrat", 968: "enter_getxattr", 967: "exit_getxattr", 966: "enter_lgetxattr", 965: "exit_lgetxattr", 964: "enter_fgetxattr", 963: "exit_fgetxattr", 962: "enter_listxattrat", 961: "exit_listxattrat", 960: "enter_listxattr", 959: "exit_listxattr", 958: "enter_llistxattr", 957: "exit_llistxattr", 956: "enter_flistxattr", 955: "exit_flistxattr", 954: "enter_removexattrat", 953: "exit_removexattrat", 952: "enter_removexattr", 951: "exit_removexattr", 950: "enter_lremovexattr", 949: "exit_lremovexattr", 948: "enter_fremovexattr", 947: "exit_fremovexattr", 944: "enter_open_tree", 943: "exit_open_tree", 934: "enter_mount_setattr", 933: "exit_mount_setattr", 932: "enter_open_tree_attr", 931: "exit_open_tree_attr", 924: "enter_close_range", 923: "exit_close_range", 922: "enter_dup3", 921: "exit_dup3", 920: "enter_dup2", 919: "exit_dup2", 918: "enter_dup", 917: "exit_dup", 904: "enter_getdents", 903: "exit_getdents", 902: "enter_getdents64", 901: "exit_getdents64", 900: "enter_ioctl", 899: "exit_ioctl", 898: "enter_fcntl", 897: "exit_fcntl", 892: "enter_mkdirat", 891: "exit_mkdirat", 890: "enter_mkdir", 889: "exit_mkdir", 888: "enter_rmdir", 887: "exit_rmdir", 886: "enter_unlinkat", 885: "exit_unlinkat", 884: "enter_unlink", 883: "exit_unlink", 882: "enter_symlinkat", 881: "exit_symlinkat", 880: "enter_symlink", 879: "exit_symlink", 878: "enter_linkat", 877: "exit_linkat", 876: "enter_link", 875: "exit_link", 874: "enter_renameat2", 873: "exit_renameat2", 872: "enter_renameat", 871: "exit_renameat", 870: "enter_rename", 869: "exit_rename", 860: "enter_newstat", 859: "exit_newstat", 858: "enter_newlstat", 857: "exit_newlstat", 856: "enter_newfstatat", 855: "exit_newfstatat", 854: "enter_newfstat", 853: "exit_newfstat", 852: "enter_readlinkat", 851: "exit_readlinkat", 850: "enter_readlink", 849: "exit_readlink", 848: "enter_statx", 847: "exit_statx", 846: "enter_lseek", 845: "exit_lseek", 844: "enter_read", 843: "exit_read", 842: "enter_write", 841: "exit_write", 840: "enter_pread64", 839: "exit_pread64", 838: "enter_pwrite64", 837: "exit_pwrite64", 836: "enter_readv", 835: "exit_readv", 834: "enter_writev", 833: "exit_writev", 832: "enter_preadv", 831: "exit_preadv", 830: "enter_preadv2", 829: "exit_preadv2", 828: "enter_pwritev", 827: "exit_pwritev", 826: "enter_pwritev2", 825: "exit_pwritev2", 822: "enter_copy_file_range", 821: "exit_copy_file_range", 820: "enter_truncate", 819: "exit_truncate", 818: "enter_ftruncate", 817: "exit_ftruncate", 816: "enter_fallocate", 815: "exit_fallocate", 814: "enter_faccessat", 813: "exit_faccessat", 812: "enter_faccessat2", 811: "exit_faccessat2", 810: "enter_access", 809: "exit_access", 808: "enter_chdir", 807: "exit_chdir", 806: "enter_fchdir", 805: "exit_fchdir", 804: "enter_chroot", 803: "exit_chroot", 802: "enter_fchmod", 801: "exit_fchmod", 800: "enter_fchmodat2", 799: "exit_fchmodat2", 798: "enter_fchmodat", 797: "exit_fchmodat", 796: "enter_chmod", 795: "exit_chmod", 794: "enter_fchownat", 793: "exit_fchownat", 792: "enter_chown", 791: "exit_chown", 790: "enter_lchown", 789: "exit_lchown", 788: "enter_fchown", 787: "exit_fchown", 786: "enter_open", 785: "exit_open", 784: "enter_openat", 783: "exit_openat", 782: "enter_openat2", 781: "exit_openat2", 780: "enter_creat", 779: "exit_creat", 778: "enter_close", 777: "exit_close", 707: "enter_msync", 706: "exit_msync", 613: "enter_readahead", 612: "exit_readahead", 611: "enter_fadvise64", 610: "exit_fadvise64", 592: "enter_cachestat", 591: "exit_cachestat", 403: "enter_finit_module", 402: "exit_finit_module", 347: "enter_syslog", 346: "exit_syslog", 271: "enter_pidfd_getfd", 270: "exit_pidfd_getfd", 100: "enter_mmap", 99: "exit_mmap",
+ 1521: "enter_io_uring_register", 1520: "exit_io_uring_register", 1502: "enter_io_uring_enter", 1501: "exit_io_uring_enter", 1500: "enter_io_uring_setup", 1499: "exit_io_uring_setup", 1155: "enter_quotactl_fd", 1154: "exit_quotactl_fd", 1139: "enter_name_to_handle_at", 1138: "exit_name_to_handle_at", 1137: "enter_open_by_handle_at", 1136: "exit_open_by_handle_at", 1123: "enter_flock", 1122: "exit_flock", 1109: "enter_io_setup", 1108: "exit_io_setup", 1107: "enter_io_destroy", 1106: "exit_io_destroy", 1105: "enter_io_submit", 1104: "exit_io_submit", 1103: "enter_io_cancel", 1102: "exit_io_cancel", 1101: "enter_io_getevents", 1100: "exit_io_getevents", 1099: "enter_io_pgetevents", 1098: "exit_io_pgetevents", 1067: "enter_fanotify_mark", 1066: "exit_fanotify_mark", 1057: "enter_file_getattr", 1056: "exit_file_getattr", 1055: "enter_file_setattr", 1054: "exit_file_setattr", 1051: "enter_fspick", 1050: "exit_fspick", 1049: "enter_fsconfig", 1048: "exit_fsconfig", 1047: "enter_statfs", 1046: "exit_statfs", 1045: "enter_fstatfs", 1044: "exit_fstatfs", 1041: "enter_getcwd", 1040: "exit_getcwd", 1039: "enter_utimensat", 1038: "exit_utimensat", 1037: "enter_futimesat", 1036: "exit_futimesat", 1031: "enter_sync", 1030: "exit_sync", 1029: "enter_syncfs", 1028: "exit_syncfs", 1027: "enter_fsync", 1026: "exit_fsync", 1025: "enter_fdatasync", 1024: "exit_fdatasync", 1023: "enter_sync_file_range", 1022: "exit_sync_file_range", 1021: "enter_vmsplice", 1020: "exit_vmsplice", 982: "enter_setxattrat", 981: "exit_setxattrat", 980: "enter_setxattr", 979: "exit_setxattr", 978: "enter_lsetxattr", 977: "exit_lsetxattr", 976: "enter_fsetxattr", 975: "exit_fsetxattr", 974: "enter_getxattrat", 973: "exit_getxattrat", 972: "enter_getxattr", 971: "exit_getxattr", 970: "enter_lgetxattr", 969: "exit_lgetxattr", 968: "enter_fgetxattr", 967: "exit_fgetxattr", 966: "enter_listxattrat", 965: "exit_listxattrat", 964: "enter_listxattr", 963: "exit_listxattr", 962: "enter_llistxattr", 961: "exit_llistxattr", 960: "enter_flistxattr", 959: "exit_flistxattr", 958: "enter_removexattrat", 957: "exit_removexattrat", 956: "enter_removexattr", 955: "exit_removexattr", 954: "enter_lremovexattr", 953: "exit_lremovexattr", 952: "enter_fremovexattr", 951: "exit_fremovexattr", 948: "enter_open_tree", 947: "exit_open_tree", 938: "enter_mount_setattr", 937: "exit_mount_setattr", 936: "enter_open_tree_attr", 935: "exit_open_tree_attr", 928: "enter_close_range", 927: "exit_close_range", 926: "enter_dup3", 925: "exit_dup3", 924: "enter_dup2", 923: "exit_dup2", 922: "enter_dup", 921: "exit_dup", 908: "enter_getdents", 907: "exit_getdents", 906: "enter_getdents64", 905: "exit_getdents64", 904: "enter_ioctl", 903: "exit_ioctl", 902: "enter_fcntl", 901: "exit_fcntl", 896: "enter_mkdirat", 895: "exit_mkdirat", 894: "enter_mkdir", 893: "exit_mkdir", 892: "enter_rmdir", 891: "exit_rmdir", 890: "enter_unlinkat", 889: "exit_unlinkat", 888: "enter_unlink", 887: "exit_unlink", 886: "enter_symlinkat", 885: "exit_symlinkat", 884: "enter_symlink", 883: "exit_symlink", 882: "enter_linkat", 881: "exit_linkat", 880: "enter_link", 879: "exit_link", 878: "enter_renameat2", 877: "exit_renameat2", 876: "enter_renameat", 875: "exit_renameat", 874: "enter_rename", 873: "exit_rename", 864: "enter_newstat", 863: "exit_newstat", 862: "enter_newlstat", 861: "exit_newlstat", 860: "enter_newfstatat", 859: "exit_newfstatat", 858: "enter_newfstat", 857: "exit_newfstat", 856: "enter_readlinkat", 855: "exit_readlinkat", 854: "enter_readlink", 853: "exit_readlink", 852: "enter_statx", 851: "exit_statx", 850: "enter_lseek", 849: "exit_lseek", 848: "enter_read", 847: "exit_read", 846: "enter_write", 845: "exit_write", 844: "enter_pread64", 843: "exit_pread64", 842: "enter_pwrite64", 841: "exit_pwrite64", 840: "enter_readv", 839: "exit_readv", 838: "enter_writev", 837: "exit_writev", 836: "enter_preadv", 835: "exit_preadv", 834: "enter_preadv2", 833: "exit_preadv2", 832: "enter_pwritev", 831: "exit_pwritev", 830: "enter_pwritev2", 829: "exit_pwritev2", 826: "enter_copy_file_range", 825: "exit_copy_file_range", 824: "enter_truncate", 823: "exit_truncate", 822: "enter_ftruncate", 821: "exit_ftruncate", 820: "enter_fallocate", 819: "exit_fallocate", 818: "enter_faccessat", 817: "exit_faccessat", 816: "enter_faccessat2", 815: "exit_faccessat2", 814: "enter_access", 813: "exit_access", 812: "enter_chdir", 811: "exit_chdir", 810: "enter_fchdir", 809: "exit_fchdir", 808: "enter_chroot", 807: "exit_chroot", 806: "enter_fchmod", 805: "exit_fchmod", 804: "enter_fchmodat2", 803: "exit_fchmodat2", 802: "enter_fchmodat", 801: "exit_fchmodat", 800: "enter_chmod", 799: "exit_chmod", 798: "enter_fchownat", 797: "exit_fchownat", 796: "enter_chown", 795: "exit_chown", 794: "enter_lchown", 793: "exit_lchown", 792: "enter_fchown", 791: "exit_fchown", 790: "enter_open", 789: "exit_open", 788: "enter_openat", 787: "exit_openat", 786: "enter_openat2", 785: "exit_openat2", 784: "enter_creat", 783: "exit_creat", 782: "enter_close", 781: "exit_close", 710: "enter_msync", 709: "exit_msync", 616: "enter_readahead", 615: "exit_readahead", 614: "enter_fadvise64", 613: "exit_fadvise64", 595: "enter_cachestat", 594: "exit_cachestat", 406: "enter_finit_module", 405: "exit_finit_module", 350: "enter_syslog", 349: "exit_syslog", 271: "enter_pidfd_getfd", 270: "exit_pidfd_getfd", 100: "enter_mmap", 99: "exit_mmap",
}
var traceId2Name = map[TraceId]string{
- 1515: "io_uring_register", 1514: "io_uring_register", 1496: "io_uring_enter", 1495: "io_uring_enter", 1494: "io_uring_setup", 1493: "io_uring_setup", 1151: "quotactl_fd", 1150: "quotactl_fd", 1135: "name_to_handle_at", 1134: "name_to_handle_at", 1133: "open_by_handle_at", 1132: "open_by_handle_at", 1119: "flock", 1118: "flock", 1105: "io_setup", 1104: "io_setup", 1103: "io_destroy", 1102: "io_destroy", 1101: "io_submit", 1100: "io_submit", 1099: "io_cancel", 1098: "io_cancel", 1097: "io_getevents", 1096: "io_getevents", 1095: "io_pgetevents", 1094: "io_pgetevents", 1063: "fanotify_mark", 1062: "fanotify_mark", 1053: "file_getattr", 1052: "file_getattr", 1051: "file_setattr", 1050: "file_setattr", 1047: "fspick", 1046: "fspick", 1045: "fsconfig", 1044: "fsconfig", 1043: "statfs", 1042: "statfs", 1041: "fstatfs", 1040: "fstatfs", 1037: "getcwd", 1036: "getcwd", 1035: "utimensat", 1034: "utimensat", 1033: "futimesat", 1032: "futimesat", 1027: "sync", 1026: "sync", 1025: "syncfs", 1024: "syncfs", 1023: "fsync", 1022: "fsync", 1021: "fdatasync", 1020: "fdatasync", 1019: "sync_file_range", 1018: "sync_file_range", 1017: "vmsplice", 1016: "vmsplice", 978: "setxattrat", 977: "setxattrat", 976: "setxattr", 975: "setxattr", 974: "lsetxattr", 973: "lsetxattr", 972: "fsetxattr", 971: "fsetxattr", 970: "getxattrat", 969: "getxattrat", 968: "getxattr", 967: "getxattr", 966: "lgetxattr", 965: "lgetxattr", 964: "fgetxattr", 963: "fgetxattr", 962: "listxattrat", 961: "listxattrat", 960: "listxattr", 959: "listxattr", 958: "llistxattr", 957: "llistxattr", 956: "flistxattr", 955: "flistxattr", 954: "removexattrat", 953: "removexattrat", 952: "removexattr", 951: "removexattr", 950: "lremovexattr", 949: "lremovexattr", 948: "fremovexattr", 947: "fremovexattr", 944: "open_tree", 943: "open_tree", 934: "mount_setattr", 933: "mount_setattr", 932: "open_tree_attr", 931: "open_tree_attr", 924: "close_range", 923: "close_range", 922: "dup3", 921: "dup3", 920: "dup2", 919: "dup2", 918: "dup", 917: "dup", 904: "getdents", 903: "getdents", 902: "getdents64", 901: "getdents64", 900: "ioctl", 899: "ioctl", 898: "fcntl", 897: "fcntl", 892: "mkdirat", 891: "mkdirat", 890: "mkdir", 889: "mkdir", 888: "rmdir", 887: "rmdir", 886: "unlinkat", 885: "unlinkat", 884: "unlink", 883: "unlink", 882: "symlinkat", 881: "symlinkat", 880: "symlink", 879: "symlink", 878: "linkat", 877: "linkat", 876: "link", 875: "link", 874: "renameat2", 873: "renameat2", 872: "renameat", 871: "renameat", 870: "rename", 869: "rename", 860: "newstat", 859: "newstat", 858: "newlstat", 857: "newlstat", 856: "newfstatat", 855: "newfstatat", 854: "newfstat", 853: "newfstat", 852: "readlinkat", 851: "readlinkat", 850: "readlink", 849: "readlink", 848: "statx", 847: "statx", 846: "lseek", 845: "lseek", 844: "read", 843: "read", 842: "write", 841: "write", 840: "pread64", 839: "pread64", 838: "pwrite64", 837: "pwrite64", 836: "readv", 835: "readv", 834: "writev", 833: "writev", 832: "preadv", 831: "preadv", 830: "preadv2", 829: "preadv2", 828: "pwritev", 827: "pwritev", 826: "pwritev2", 825: "pwritev2", 822: "copy_file_range", 821: "copy_file_range", 820: "truncate", 819: "truncate", 818: "ftruncate", 817: "ftruncate", 816: "fallocate", 815: "fallocate", 814: "faccessat", 813: "faccessat", 812: "faccessat2", 811: "faccessat2", 810: "access", 809: "access", 808: "chdir", 807: "chdir", 806: "fchdir", 805: "fchdir", 804: "chroot", 803: "chroot", 802: "fchmod", 801: "fchmod", 800: "fchmodat2", 799: "fchmodat2", 798: "fchmodat", 797: "fchmodat", 796: "chmod", 795: "chmod", 794: "fchownat", 793: "fchownat", 792: "chown", 791: "chown", 790: "lchown", 789: "lchown", 788: "fchown", 787: "fchown", 786: "open", 785: "open", 784: "openat", 783: "openat", 782: "openat2", 781: "openat2", 780: "creat", 779: "creat", 778: "close", 777: "close", 707: "msync", 706: "msync", 613: "readahead", 612: "readahead", 611: "fadvise64", 610: "fadvise64", 592: "cachestat", 591: "cachestat", 403: "finit_module", 402: "finit_module", 347: "syslog", 346: "syslog", 271: "pidfd_getfd", 270: "pidfd_getfd", 100: "mmap", 99: "mmap",
+ 1521: "io_uring_register", 1520: "io_uring_register", 1502: "io_uring_enter", 1501: "io_uring_enter", 1500: "io_uring_setup", 1499: "io_uring_setup", 1155: "quotactl_fd", 1154: "quotactl_fd", 1139: "name_to_handle_at", 1138: "name_to_handle_at", 1137: "open_by_handle_at", 1136: "open_by_handle_at", 1123: "flock", 1122: "flock", 1109: "io_setup", 1108: "io_setup", 1107: "io_destroy", 1106: "io_destroy", 1105: "io_submit", 1104: "io_submit", 1103: "io_cancel", 1102: "io_cancel", 1101: "io_getevents", 1100: "io_getevents", 1099: "io_pgetevents", 1098: "io_pgetevents", 1067: "fanotify_mark", 1066: "fanotify_mark", 1057: "file_getattr", 1056: "file_getattr", 1055: "file_setattr", 1054: "file_setattr", 1051: "fspick", 1050: "fspick", 1049: "fsconfig", 1048: "fsconfig", 1047: "statfs", 1046: "statfs", 1045: "fstatfs", 1044: "fstatfs", 1041: "getcwd", 1040: "getcwd", 1039: "utimensat", 1038: "utimensat", 1037: "futimesat", 1036: "futimesat", 1031: "sync", 1030: "sync", 1029: "syncfs", 1028: "syncfs", 1027: "fsync", 1026: "fsync", 1025: "fdatasync", 1024: "fdatasync", 1023: "sync_file_range", 1022: "sync_file_range", 1021: "vmsplice", 1020: "vmsplice", 982: "setxattrat", 981: "setxattrat", 980: "setxattr", 979: "setxattr", 978: "lsetxattr", 977: "lsetxattr", 976: "fsetxattr", 975: "fsetxattr", 974: "getxattrat", 973: "getxattrat", 972: "getxattr", 971: "getxattr", 970: "lgetxattr", 969: "lgetxattr", 968: "fgetxattr", 967: "fgetxattr", 966: "listxattrat", 965: "listxattrat", 964: "listxattr", 963: "listxattr", 962: "llistxattr", 961: "llistxattr", 960: "flistxattr", 959: "flistxattr", 958: "removexattrat", 957: "removexattrat", 956: "removexattr", 955: "removexattr", 954: "lremovexattr", 953: "lremovexattr", 952: "fremovexattr", 951: "fremovexattr", 948: "open_tree", 947: "open_tree", 938: "mount_setattr", 937: "mount_setattr", 936: "open_tree_attr", 935: "open_tree_attr", 928: "close_range", 927: "close_range", 926: "dup3", 925: "dup3", 924: "dup2", 923: "dup2", 922: "dup", 921: "dup", 908: "getdents", 907: "getdents", 906: "getdents64", 905: "getdents64", 904: "ioctl", 903: "ioctl", 902: "fcntl", 901: "fcntl", 896: "mkdirat", 895: "mkdirat", 894: "mkdir", 893: "mkdir", 892: "rmdir", 891: "rmdir", 890: "unlinkat", 889: "unlinkat", 888: "unlink", 887: "unlink", 886: "symlinkat", 885: "symlinkat", 884: "symlink", 883: "symlink", 882: "linkat", 881: "linkat", 880: "link", 879: "link", 878: "renameat2", 877: "renameat2", 876: "renameat", 875: "renameat", 874: "rename", 873: "rename", 864: "newstat", 863: "newstat", 862: "newlstat", 861: "newlstat", 860: "newfstatat", 859: "newfstatat", 858: "newfstat", 857: "newfstat", 856: "readlinkat", 855: "readlinkat", 854: "readlink", 853: "readlink", 852: "statx", 851: "statx", 850: "lseek", 849: "lseek", 848: "read", 847: "read", 846: "write", 845: "write", 844: "pread64", 843: "pread64", 842: "pwrite64", 841: "pwrite64", 840: "readv", 839: "readv", 838: "writev", 837: "writev", 836: "preadv", 835: "preadv", 834: "preadv2", 833: "preadv2", 832: "pwritev", 831: "pwritev", 830: "pwritev2", 829: "pwritev2", 826: "copy_file_range", 825: "copy_file_range", 824: "truncate", 823: "truncate", 822: "ftruncate", 821: "ftruncate", 820: "fallocate", 819: "fallocate", 818: "faccessat", 817: "faccessat", 816: "faccessat2", 815: "faccessat2", 814: "access", 813: "access", 812: "chdir", 811: "chdir", 810: "fchdir", 809: "fchdir", 808: "chroot", 807: "chroot", 806: "fchmod", 805: "fchmod", 804: "fchmodat2", 803: "fchmodat2", 802: "fchmodat", 801: "fchmodat", 800: "chmod", 799: "chmod", 798: "fchownat", 797: "fchownat", 796: "chown", 795: "chown", 794: "lchown", 793: "lchown", 792: "fchown", 791: "fchown", 790: "open", 789: "open", 788: "openat", 787: "openat", 786: "openat2", 785: "openat2", 784: "creat", 783: "creat", 782: "close", 781: "close", 710: "msync", 709: "msync", 616: "readahead", 615: "readahead", 614: "fadvise64", 613: "fadvise64", 595: "cachestat", 594: "cachestat", 406: "finit_module", 405: "finit_module", 350: "syslog", 349: "syslog", 271: "pidfd_getfd", 270: "pidfd_getfd", 100: "mmap", 99: "mmap",
}
func (s TraceId) String() string {
@@ -59,236 +59,236 @@ const UNCLASSIFIED = 0
const READ_CLASSIFIED = 1
const WRITE_CLASSIFIED = 2
const TRANSFER_CLASSIFIED = 3
-const SYS_ENTER_IO_URING_REGISTER TraceId = 1515
-const SYS_EXIT_IO_URING_REGISTER TraceId = 1514
-const SYS_ENTER_IO_URING_ENTER TraceId = 1496
-const SYS_EXIT_IO_URING_ENTER TraceId = 1495
-const SYS_ENTER_IO_URING_SETUP TraceId = 1494
-const SYS_EXIT_IO_URING_SETUP TraceId = 1493
-const SYS_ENTER_QUOTACTL_FD TraceId = 1151
-const SYS_EXIT_QUOTACTL_FD TraceId = 1150
-const SYS_ENTER_NAME_TO_HANDLE_AT TraceId = 1135
-const SYS_EXIT_NAME_TO_HANDLE_AT TraceId = 1134
-const SYS_ENTER_OPEN_BY_HANDLE_AT TraceId = 1133
-const SYS_EXIT_OPEN_BY_HANDLE_AT TraceId = 1132
-const SYS_ENTER_FLOCK TraceId = 1119
-const SYS_EXIT_FLOCK TraceId = 1118
-const SYS_ENTER_IO_SETUP TraceId = 1105
-const SYS_EXIT_IO_SETUP TraceId = 1104
-const SYS_ENTER_IO_DESTROY TraceId = 1103
-const SYS_EXIT_IO_DESTROY TraceId = 1102
-const SYS_ENTER_IO_SUBMIT TraceId = 1101
-const SYS_EXIT_IO_SUBMIT TraceId = 1100
-const SYS_ENTER_IO_CANCEL TraceId = 1099
-const SYS_EXIT_IO_CANCEL TraceId = 1098
-const SYS_ENTER_IO_GETEVENTS TraceId = 1097
-const SYS_EXIT_IO_GETEVENTS TraceId = 1096
-const SYS_ENTER_IO_PGETEVENTS TraceId = 1095
-const SYS_EXIT_IO_PGETEVENTS TraceId = 1094
-const SYS_ENTER_FANOTIFY_MARK TraceId = 1063
-const SYS_EXIT_FANOTIFY_MARK TraceId = 1062
-const SYS_ENTER_FILE_GETATTR TraceId = 1053
-const SYS_EXIT_FILE_GETATTR TraceId = 1052
-const SYS_ENTER_FILE_SETATTR TraceId = 1051
-const SYS_EXIT_FILE_SETATTR TraceId = 1050
-const SYS_ENTER_FSPICK TraceId = 1047
-const SYS_EXIT_FSPICK TraceId = 1046
-const SYS_ENTER_FSCONFIG TraceId = 1045
-const SYS_EXIT_FSCONFIG TraceId = 1044
-const SYS_ENTER_STATFS TraceId = 1043
-const SYS_EXIT_STATFS TraceId = 1042
-const SYS_ENTER_FSTATFS TraceId = 1041
-const SYS_EXIT_FSTATFS TraceId = 1040
-const SYS_ENTER_GETCWD TraceId = 1037
-const SYS_EXIT_GETCWD TraceId = 1036
-const SYS_ENTER_UTIMENSAT TraceId = 1035
-const SYS_EXIT_UTIMENSAT TraceId = 1034
-const SYS_ENTER_FUTIMESAT TraceId = 1033
-const SYS_EXIT_FUTIMESAT TraceId = 1032
-const SYS_ENTER_SYNC TraceId = 1027
-const SYS_EXIT_SYNC TraceId = 1026
-const SYS_ENTER_SYNCFS TraceId = 1025
-const SYS_EXIT_SYNCFS TraceId = 1024
-const SYS_ENTER_FSYNC TraceId = 1023
-const SYS_EXIT_FSYNC TraceId = 1022
-const SYS_ENTER_FDATASYNC TraceId = 1021
-const SYS_EXIT_FDATASYNC TraceId = 1020
-const SYS_ENTER_SYNC_FILE_RANGE TraceId = 1019
-const SYS_EXIT_SYNC_FILE_RANGE TraceId = 1018
-const SYS_ENTER_VMSPLICE TraceId = 1017
-const SYS_EXIT_VMSPLICE TraceId = 1016
-const SYS_ENTER_SETXATTRAT TraceId = 978
-const SYS_EXIT_SETXATTRAT TraceId = 977
-const SYS_ENTER_SETXATTR TraceId = 976
-const SYS_EXIT_SETXATTR TraceId = 975
-const SYS_ENTER_LSETXATTR TraceId = 974
-const SYS_EXIT_LSETXATTR TraceId = 973
-const SYS_ENTER_FSETXATTR TraceId = 972
-const SYS_EXIT_FSETXATTR TraceId = 971
-const SYS_ENTER_GETXATTRAT TraceId = 970
-const SYS_EXIT_GETXATTRAT TraceId = 969
-const SYS_ENTER_GETXATTR TraceId = 968
-const SYS_EXIT_GETXATTR TraceId = 967
-const SYS_ENTER_LGETXATTR TraceId = 966
-const SYS_EXIT_LGETXATTR TraceId = 965
-const SYS_ENTER_FGETXATTR TraceId = 964
-const SYS_EXIT_FGETXATTR TraceId = 963
-const SYS_ENTER_LISTXATTRAT TraceId = 962
-const SYS_EXIT_LISTXATTRAT TraceId = 961
-const SYS_ENTER_LISTXATTR TraceId = 960
-const SYS_EXIT_LISTXATTR TraceId = 959
-const SYS_ENTER_LLISTXATTR TraceId = 958
-const SYS_EXIT_LLISTXATTR TraceId = 957
-const SYS_ENTER_FLISTXATTR TraceId = 956
-const SYS_EXIT_FLISTXATTR TraceId = 955
-const SYS_ENTER_REMOVEXATTRAT TraceId = 954
-const SYS_EXIT_REMOVEXATTRAT TraceId = 953
-const SYS_ENTER_REMOVEXATTR TraceId = 952
-const SYS_EXIT_REMOVEXATTR TraceId = 951
-const SYS_ENTER_LREMOVEXATTR TraceId = 950
-const SYS_EXIT_LREMOVEXATTR TraceId = 949
-const SYS_ENTER_FREMOVEXATTR TraceId = 948
-const SYS_EXIT_FREMOVEXATTR TraceId = 947
-const SYS_ENTER_OPEN_TREE TraceId = 944
-const SYS_EXIT_OPEN_TREE TraceId = 943
-const SYS_ENTER_MOUNT_SETATTR TraceId = 934
-const SYS_EXIT_MOUNT_SETATTR TraceId = 933
-const SYS_ENTER_OPEN_TREE_ATTR TraceId = 932
-const SYS_EXIT_OPEN_TREE_ATTR TraceId = 931
-const SYS_ENTER_CLOSE_RANGE TraceId = 924
-const SYS_EXIT_CLOSE_RANGE TraceId = 923
-const SYS_ENTER_DUP3 TraceId = 922
-const SYS_EXIT_DUP3 TraceId = 921
-const SYS_ENTER_DUP2 TraceId = 920
-const SYS_EXIT_DUP2 TraceId = 919
-const SYS_ENTER_DUP TraceId = 918
-const SYS_EXIT_DUP TraceId = 917
-const SYS_ENTER_GETDENTS TraceId = 904
-const SYS_EXIT_GETDENTS TraceId = 903
-const SYS_ENTER_GETDENTS64 TraceId = 902
-const SYS_EXIT_GETDENTS64 TraceId = 901
-const SYS_ENTER_IOCTL TraceId = 900
-const SYS_EXIT_IOCTL TraceId = 899
-const SYS_ENTER_FCNTL TraceId = 898
-const SYS_EXIT_FCNTL TraceId = 897
-const SYS_ENTER_MKDIRAT TraceId = 892
-const SYS_EXIT_MKDIRAT TraceId = 891
-const SYS_ENTER_MKDIR TraceId = 890
-const SYS_EXIT_MKDIR TraceId = 889
-const SYS_ENTER_RMDIR TraceId = 888
-const SYS_EXIT_RMDIR TraceId = 887
-const SYS_ENTER_UNLINKAT TraceId = 886
-const SYS_EXIT_UNLINKAT TraceId = 885
-const SYS_ENTER_UNLINK TraceId = 884
-const SYS_EXIT_UNLINK TraceId = 883
-const SYS_ENTER_SYMLINKAT TraceId = 882
-const SYS_EXIT_SYMLINKAT TraceId = 881
-const SYS_ENTER_SYMLINK TraceId = 880
-const SYS_EXIT_SYMLINK TraceId = 879
-const SYS_ENTER_LINKAT TraceId = 878
-const SYS_EXIT_LINKAT TraceId = 877
-const SYS_ENTER_LINK TraceId = 876
-const SYS_EXIT_LINK TraceId = 875
-const SYS_ENTER_RENAMEAT2 TraceId = 874
-const SYS_EXIT_RENAMEAT2 TraceId = 873
-const SYS_ENTER_RENAMEAT TraceId = 872
-const SYS_EXIT_RENAMEAT TraceId = 871
-const SYS_ENTER_RENAME TraceId = 870
-const SYS_EXIT_RENAME TraceId = 869
-const SYS_ENTER_NEWSTAT TraceId = 860
-const SYS_EXIT_NEWSTAT TraceId = 859
-const SYS_ENTER_NEWLSTAT TraceId = 858
-const SYS_EXIT_NEWLSTAT TraceId = 857
-const SYS_ENTER_NEWFSTATAT TraceId = 856
-const SYS_EXIT_NEWFSTATAT TraceId = 855
-const SYS_ENTER_NEWFSTAT TraceId = 854
-const SYS_EXIT_NEWFSTAT TraceId = 853
-const SYS_ENTER_READLINKAT TraceId = 852
-const SYS_EXIT_READLINKAT TraceId = 851
-const SYS_ENTER_READLINK TraceId = 850
-const SYS_EXIT_READLINK TraceId = 849
-const SYS_ENTER_STATX TraceId = 848
-const SYS_EXIT_STATX TraceId = 847
-const SYS_ENTER_LSEEK TraceId = 846
-const SYS_EXIT_LSEEK TraceId = 845
-const SYS_ENTER_READ TraceId = 844
-const SYS_EXIT_READ TraceId = 843
-const SYS_ENTER_WRITE TraceId = 842
-const SYS_EXIT_WRITE TraceId = 841
-const SYS_ENTER_PREAD64 TraceId = 840
-const SYS_EXIT_PREAD64 TraceId = 839
-const SYS_ENTER_PWRITE64 TraceId = 838
-const SYS_EXIT_PWRITE64 TraceId = 837
-const SYS_ENTER_READV TraceId = 836
-const SYS_EXIT_READV TraceId = 835
-const SYS_ENTER_WRITEV TraceId = 834
-const SYS_EXIT_WRITEV TraceId = 833
-const SYS_ENTER_PREADV TraceId = 832
-const SYS_EXIT_PREADV TraceId = 831
-const SYS_ENTER_PREADV2 TraceId = 830
-const SYS_EXIT_PREADV2 TraceId = 829
-const SYS_ENTER_PWRITEV TraceId = 828
-const SYS_EXIT_PWRITEV TraceId = 827
-const SYS_ENTER_PWRITEV2 TraceId = 826
-const SYS_EXIT_PWRITEV2 TraceId = 825
-const SYS_ENTER_COPY_FILE_RANGE TraceId = 822
-const SYS_EXIT_COPY_FILE_RANGE TraceId = 821
-const SYS_ENTER_TRUNCATE TraceId = 820
-const SYS_EXIT_TRUNCATE TraceId = 819
-const SYS_ENTER_FTRUNCATE TraceId = 818
-const SYS_EXIT_FTRUNCATE TraceId = 817
-const SYS_ENTER_FALLOCATE TraceId = 816
-const SYS_EXIT_FALLOCATE TraceId = 815
-const SYS_ENTER_FACCESSAT TraceId = 814
-const SYS_EXIT_FACCESSAT TraceId = 813
-const SYS_ENTER_FACCESSAT2 TraceId = 812
-const SYS_EXIT_FACCESSAT2 TraceId = 811
-const SYS_ENTER_ACCESS TraceId = 810
-const SYS_EXIT_ACCESS TraceId = 809
-const SYS_ENTER_CHDIR TraceId = 808
-const SYS_EXIT_CHDIR TraceId = 807
-const SYS_ENTER_FCHDIR TraceId = 806
-const SYS_EXIT_FCHDIR TraceId = 805
-const SYS_ENTER_CHROOT TraceId = 804
-const SYS_EXIT_CHROOT TraceId = 803
-const SYS_ENTER_FCHMOD TraceId = 802
-const SYS_EXIT_FCHMOD TraceId = 801
-const SYS_ENTER_FCHMODAT2 TraceId = 800
-const SYS_EXIT_FCHMODAT2 TraceId = 799
-const SYS_ENTER_FCHMODAT TraceId = 798
-const SYS_EXIT_FCHMODAT TraceId = 797
-const SYS_ENTER_CHMOD TraceId = 796
-const SYS_EXIT_CHMOD TraceId = 795
-const SYS_ENTER_FCHOWNAT TraceId = 794
-const SYS_EXIT_FCHOWNAT TraceId = 793
-const SYS_ENTER_CHOWN TraceId = 792
-const SYS_EXIT_CHOWN TraceId = 791
-const SYS_ENTER_LCHOWN TraceId = 790
-const SYS_EXIT_LCHOWN TraceId = 789
-const SYS_ENTER_FCHOWN TraceId = 788
-const SYS_EXIT_FCHOWN TraceId = 787
-const SYS_ENTER_OPEN TraceId = 786
-const SYS_EXIT_OPEN TraceId = 785
-const SYS_ENTER_OPENAT TraceId = 784
-const SYS_EXIT_OPENAT TraceId = 783
-const SYS_ENTER_OPENAT2 TraceId = 782
-const SYS_EXIT_OPENAT2 TraceId = 781
-const SYS_ENTER_CREAT TraceId = 780
-const SYS_EXIT_CREAT TraceId = 779
-const SYS_ENTER_CLOSE TraceId = 778
-const SYS_EXIT_CLOSE TraceId = 777
-const SYS_ENTER_MSYNC TraceId = 707
-const SYS_EXIT_MSYNC TraceId = 706
-const SYS_ENTER_READAHEAD TraceId = 613
-const SYS_EXIT_READAHEAD TraceId = 612
-const SYS_ENTER_FADVISE64 TraceId = 611
-const SYS_EXIT_FADVISE64 TraceId = 610
-const SYS_ENTER_CACHESTAT TraceId = 592
-const SYS_EXIT_CACHESTAT TraceId = 591
-const SYS_ENTER_FINIT_MODULE TraceId = 403
-const SYS_EXIT_FINIT_MODULE TraceId = 402
-const SYS_ENTER_SYSLOG TraceId = 347
-const SYS_EXIT_SYSLOG TraceId = 346
+const SYS_ENTER_IO_URING_REGISTER TraceId = 1521
+const SYS_EXIT_IO_URING_REGISTER TraceId = 1520
+const SYS_ENTER_IO_URING_ENTER TraceId = 1502
+const SYS_EXIT_IO_URING_ENTER TraceId = 1501
+const SYS_ENTER_IO_URING_SETUP TraceId = 1500
+const SYS_EXIT_IO_URING_SETUP TraceId = 1499
+const SYS_ENTER_QUOTACTL_FD TraceId = 1155
+const SYS_EXIT_QUOTACTL_FD TraceId = 1154
+const SYS_ENTER_NAME_TO_HANDLE_AT TraceId = 1139
+const SYS_EXIT_NAME_TO_HANDLE_AT TraceId = 1138
+const SYS_ENTER_OPEN_BY_HANDLE_AT TraceId = 1137
+const SYS_EXIT_OPEN_BY_HANDLE_AT TraceId = 1136
+const SYS_ENTER_FLOCK TraceId = 1123
+const SYS_EXIT_FLOCK TraceId = 1122
+const SYS_ENTER_IO_SETUP TraceId = 1109
+const SYS_EXIT_IO_SETUP TraceId = 1108
+const SYS_ENTER_IO_DESTROY TraceId = 1107
+const SYS_EXIT_IO_DESTROY TraceId = 1106
+const SYS_ENTER_IO_SUBMIT TraceId = 1105
+const SYS_EXIT_IO_SUBMIT TraceId = 1104
+const SYS_ENTER_IO_CANCEL TraceId = 1103
+const SYS_EXIT_IO_CANCEL TraceId = 1102
+const SYS_ENTER_IO_GETEVENTS TraceId = 1101
+const SYS_EXIT_IO_GETEVENTS TraceId = 1100
+const SYS_ENTER_IO_PGETEVENTS TraceId = 1099
+const SYS_EXIT_IO_PGETEVENTS TraceId = 1098
+const SYS_ENTER_FANOTIFY_MARK TraceId = 1067
+const SYS_EXIT_FANOTIFY_MARK TraceId = 1066
+const SYS_ENTER_FILE_GETATTR TraceId = 1057
+const SYS_EXIT_FILE_GETATTR TraceId = 1056
+const SYS_ENTER_FILE_SETATTR TraceId = 1055
+const SYS_EXIT_FILE_SETATTR TraceId = 1054
+const SYS_ENTER_FSPICK TraceId = 1051
+const SYS_EXIT_FSPICK TraceId = 1050
+const SYS_ENTER_FSCONFIG TraceId = 1049
+const SYS_EXIT_FSCONFIG TraceId = 1048
+const SYS_ENTER_STATFS TraceId = 1047
+const SYS_EXIT_STATFS TraceId = 1046
+const SYS_ENTER_FSTATFS TraceId = 1045
+const SYS_EXIT_FSTATFS TraceId = 1044
+const SYS_ENTER_GETCWD TraceId = 1041
+const SYS_EXIT_GETCWD TraceId = 1040
+const SYS_ENTER_UTIMENSAT TraceId = 1039
+const SYS_EXIT_UTIMENSAT TraceId = 1038
+const SYS_ENTER_FUTIMESAT TraceId = 1037
+const SYS_EXIT_FUTIMESAT TraceId = 1036
+const SYS_ENTER_SYNC TraceId = 1031
+const SYS_EXIT_SYNC TraceId = 1030
+const SYS_ENTER_SYNCFS TraceId = 1029
+const SYS_EXIT_SYNCFS TraceId = 1028
+const SYS_ENTER_FSYNC TraceId = 1027
+const SYS_EXIT_FSYNC TraceId = 1026
+const SYS_ENTER_FDATASYNC TraceId = 1025
+const SYS_EXIT_FDATASYNC TraceId = 1024
+const SYS_ENTER_SYNC_FILE_RANGE TraceId = 1023
+const SYS_EXIT_SYNC_FILE_RANGE TraceId = 1022
+const SYS_ENTER_VMSPLICE TraceId = 1021
+const SYS_EXIT_VMSPLICE TraceId = 1020
+const SYS_ENTER_SETXATTRAT TraceId = 982
+const SYS_EXIT_SETXATTRAT TraceId = 981
+const SYS_ENTER_SETXATTR TraceId = 980
+const SYS_EXIT_SETXATTR TraceId = 979
+const SYS_ENTER_LSETXATTR TraceId = 978
+const SYS_EXIT_LSETXATTR TraceId = 977
+const SYS_ENTER_FSETXATTR TraceId = 976
+const SYS_EXIT_FSETXATTR TraceId = 975
+const SYS_ENTER_GETXATTRAT TraceId = 974
+const SYS_EXIT_GETXATTRAT TraceId = 973
+const SYS_ENTER_GETXATTR TraceId = 972
+const SYS_EXIT_GETXATTR TraceId = 971
+const SYS_ENTER_LGETXATTR TraceId = 970
+const SYS_EXIT_LGETXATTR TraceId = 969
+const SYS_ENTER_FGETXATTR TraceId = 968
+const SYS_EXIT_FGETXATTR TraceId = 967
+const SYS_ENTER_LISTXATTRAT TraceId = 966
+const SYS_EXIT_LISTXATTRAT TraceId = 965
+const SYS_ENTER_LISTXATTR TraceId = 964
+const SYS_EXIT_LISTXATTR TraceId = 963
+const SYS_ENTER_LLISTXATTR TraceId = 962
+const SYS_EXIT_LLISTXATTR TraceId = 961
+const SYS_ENTER_FLISTXATTR TraceId = 960
+const SYS_EXIT_FLISTXATTR TraceId = 959
+const SYS_ENTER_REMOVEXATTRAT TraceId = 958
+const SYS_EXIT_REMOVEXATTRAT TraceId = 957
+const SYS_ENTER_REMOVEXATTR TraceId = 956
+const SYS_EXIT_REMOVEXATTR TraceId = 955
+const SYS_ENTER_LREMOVEXATTR TraceId = 954
+const SYS_EXIT_LREMOVEXATTR TraceId = 953
+const SYS_ENTER_FREMOVEXATTR TraceId = 952
+const SYS_EXIT_FREMOVEXATTR TraceId = 951
+const SYS_ENTER_OPEN_TREE TraceId = 948
+const SYS_EXIT_OPEN_TREE TraceId = 947
+const SYS_ENTER_MOUNT_SETATTR TraceId = 938
+const SYS_EXIT_MOUNT_SETATTR TraceId = 937
+const SYS_ENTER_OPEN_TREE_ATTR TraceId = 936
+const SYS_EXIT_OPEN_TREE_ATTR TraceId = 935
+const SYS_ENTER_CLOSE_RANGE TraceId = 928
+const SYS_EXIT_CLOSE_RANGE TraceId = 927
+const SYS_ENTER_DUP3 TraceId = 926
+const SYS_EXIT_DUP3 TraceId = 925
+const SYS_ENTER_DUP2 TraceId = 924
+const SYS_EXIT_DUP2 TraceId = 923
+const SYS_ENTER_DUP TraceId = 922
+const SYS_EXIT_DUP TraceId = 921
+const SYS_ENTER_GETDENTS TraceId = 908
+const SYS_EXIT_GETDENTS TraceId = 907
+const SYS_ENTER_GETDENTS64 TraceId = 906
+const SYS_EXIT_GETDENTS64 TraceId = 905
+const SYS_ENTER_IOCTL TraceId = 904
+const SYS_EXIT_IOCTL TraceId = 903
+const SYS_ENTER_FCNTL TraceId = 902
+const SYS_EXIT_FCNTL TraceId = 901
+const SYS_ENTER_MKDIRAT TraceId = 896
+const SYS_EXIT_MKDIRAT TraceId = 895
+const SYS_ENTER_MKDIR TraceId = 894
+const SYS_EXIT_MKDIR TraceId = 893
+const SYS_ENTER_RMDIR TraceId = 892
+const SYS_EXIT_RMDIR TraceId = 891
+const SYS_ENTER_UNLINKAT TraceId = 890
+const SYS_EXIT_UNLINKAT TraceId = 889
+const SYS_ENTER_UNLINK TraceId = 888
+const SYS_EXIT_UNLINK TraceId = 887
+const SYS_ENTER_SYMLINKAT TraceId = 886
+const SYS_EXIT_SYMLINKAT TraceId = 885
+const SYS_ENTER_SYMLINK TraceId = 884
+const SYS_EXIT_SYMLINK TraceId = 883
+const SYS_ENTER_LINKAT TraceId = 882
+const SYS_EXIT_LINKAT TraceId = 881
+const SYS_ENTER_LINK TraceId = 880
+const SYS_EXIT_LINK TraceId = 879
+const SYS_ENTER_RENAMEAT2 TraceId = 878
+const SYS_EXIT_RENAMEAT2 TraceId = 877
+const SYS_ENTER_RENAMEAT TraceId = 876
+const SYS_EXIT_RENAMEAT TraceId = 875
+const SYS_ENTER_RENAME TraceId = 874
+const SYS_EXIT_RENAME TraceId = 873
+const SYS_ENTER_NEWSTAT TraceId = 864
+const SYS_EXIT_NEWSTAT TraceId = 863
+const SYS_ENTER_NEWLSTAT TraceId = 862
+const SYS_EXIT_NEWLSTAT TraceId = 861
+const SYS_ENTER_NEWFSTATAT TraceId = 860
+const SYS_EXIT_NEWFSTATAT TraceId = 859
+const SYS_ENTER_NEWFSTAT TraceId = 858
+const SYS_EXIT_NEWFSTAT TraceId = 857
+const SYS_ENTER_READLINKAT TraceId = 856
+const SYS_EXIT_READLINKAT TraceId = 855
+const SYS_ENTER_READLINK TraceId = 854
+const SYS_EXIT_READLINK TraceId = 853
+const SYS_ENTER_STATX TraceId = 852
+const SYS_EXIT_STATX TraceId = 851
+const SYS_ENTER_LSEEK TraceId = 850
+const SYS_EXIT_LSEEK TraceId = 849
+const SYS_ENTER_READ TraceId = 848
+const SYS_EXIT_READ TraceId = 847
+const SYS_ENTER_WRITE TraceId = 846
+const SYS_EXIT_WRITE TraceId = 845
+const SYS_ENTER_PREAD64 TraceId = 844
+const SYS_EXIT_PREAD64 TraceId = 843
+const SYS_ENTER_PWRITE64 TraceId = 842
+const SYS_EXIT_PWRITE64 TraceId = 841
+const SYS_ENTER_READV TraceId = 840
+const SYS_EXIT_READV TraceId = 839
+const SYS_ENTER_WRITEV TraceId = 838
+const SYS_EXIT_WRITEV TraceId = 837
+const SYS_ENTER_PREADV TraceId = 836
+const SYS_EXIT_PREADV TraceId = 835
+const SYS_ENTER_PREADV2 TraceId = 834
+const SYS_EXIT_PREADV2 TraceId = 833
+const SYS_ENTER_PWRITEV TraceId = 832
+const SYS_EXIT_PWRITEV TraceId = 831
+const SYS_ENTER_PWRITEV2 TraceId = 830
+const SYS_EXIT_PWRITEV2 TraceId = 829
+const SYS_ENTER_COPY_FILE_RANGE TraceId = 826
+const SYS_EXIT_COPY_FILE_RANGE TraceId = 825
+const SYS_ENTER_TRUNCATE TraceId = 824
+const SYS_EXIT_TRUNCATE TraceId = 823
+const SYS_ENTER_FTRUNCATE TraceId = 822
+const SYS_EXIT_FTRUNCATE TraceId = 821
+const SYS_ENTER_FALLOCATE TraceId = 820
+const SYS_EXIT_FALLOCATE TraceId = 819
+const SYS_ENTER_FACCESSAT TraceId = 818
+const SYS_EXIT_FACCESSAT TraceId = 817
+const SYS_ENTER_FACCESSAT2 TraceId = 816
+const SYS_EXIT_FACCESSAT2 TraceId = 815
+const SYS_ENTER_ACCESS TraceId = 814
+const SYS_EXIT_ACCESS TraceId = 813
+const SYS_ENTER_CHDIR TraceId = 812
+const SYS_EXIT_CHDIR TraceId = 811
+const SYS_ENTER_FCHDIR TraceId = 810
+const SYS_EXIT_FCHDIR TraceId = 809
+const SYS_ENTER_CHROOT TraceId = 808
+const SYS_EXIT_CHROOT TraceId = 807
+const SYS_ENTER_FCHMOD TraceId = 806
+const SYS_EXIT_FCHMOD TraceId = 805
+const SYS_ENTER_FCHMODAT2 TraceId = 804
+const SYS_EXIT_FCHMODAT2 TraceId = 803
+const SYS_ENTER_FCHMODAT TraceId = 802
+const SYS_EXIT_FCHMODAT TraceId = 801
+const SYS_ENTER_CHMOD TraceId = 800
+const SYS_EXIT_CHMOD TraceId = 799
+const SYS_ENTER_FCHOWNAT TraceId = 798
+const SYS_EXIT_FCHOWNAT TraceId = 797
+const SYS_ENTER_CHOWN TraceId = 796
+const SYS_EXIT_CHOWN TraceId = 795
+const SYS_ENTER_LCHOWN TraceId = 794
+const SYS_EXIT_LCHOWN TraceId = 793
+const SYS_ENTER_FCHOWN TraceId = 792
+const SYS_EXIT_FCHOWN TraceId = 791
+const SYS_ENTER_OPEN TraceId = 790
+const SYS_EXIT_OPEN TraceId = 789
+const SYS_ENTER_OPENAT TraceId = 788
+const SYS_EXIT_OPENAT TraceId = 787
+const SYS_ENTER_OPENAT2 TraceId = 786
+const SYS_EXIT_OPENAT2 TraceId = 785
+const SYS_ENTER_CREAT TraceId = 784
+const SYS_EXIT_CREAT TraceId = 783
+const SYS_ENTER_CLOSE TraceId = 782
+const SYS_EXIT_CLOSE TraceId = 781
+const SYS_ENTER_MSYNC TraceId = 710
+const SYS_EXIT_MSYNC TraceId = 709
+const SYS_ENTER_READAHEAD TraceId = 616
+const SYS_EXIT_READAHEAD TraceId = 615
+const SYS_ENTER_FADVISE64 TraceId = 614
+const SYS_EXIT_FADVISE64 TraceId = 613
+const SYS_ENTER_CACHESTAT TraceId = 595
+const SYS_EXIT_CACHESTAT TraceId = 594
+const SYS_ENTER_FINIT_MODULE TraceId = 406
+const SYS_EXIT_FINIT_MODULE TraceId = 405
+const SYS_ENTER_SYSLOG TraceId = 350
+const SYS_EXIT_SYSLOG TraceId = 349
const SYS_ENTER_PIDFD_GETFD TraceId = 271
const SYS_EXIT_PIDFD_GETFD TraceId = 270
const SYS_ENTER_MMAP TraceId = 100