73 	unsigned long	   args[6];  member
122        struct syscall_enter_args args;  member
146 static inline int augmented__output(void *ctx, struct augmented_args_payload *args, int len)  in augmented__output()  argument
149 	return bpf_perf_event_output(ctx, &__augmented_syscalls__, BPF_F_CURRENT_CPU, args, len);  in augmented__output()
181 int syscall_unaugmented(struct syscall_enter_args *args)  in syscall_unaugmented()  argument
193 int sys_enter_connect(struct syscall_enter_args *args)  in sys_enter_connect()  argument
196 	const void *sockaddr_arg = (const void *)args->args[1];  in sys_enter_connect()
197 	unsigned int socklen = args->args[2];  in sys_enter_connect()
198 	unsigned int len = sizeof(augmented_args->args);  in sys_enter_connect()
208 	return augmented__output(args, augmented_args, len + socklen);  in sys_enter_connect()
212 int sys_enter_sendto(struct syscall_enter_args *args)  in sys_enter_sendto()  argument
215 	const void *sockaddr_arg = (const void *)args->args[4];  in sys_enter_sendto()
216 	unsigned int socklen = args->args[5];  in sys_enter_sendto()
217 	unsigned int len = sizeof(augmented_args->args);  in sys_enter_sendto()
226 	return augmented__output(args, augmented_args, len + socklen);  in sys_enter_sendto()
230 int sys_enter_open(struct syscall_enter_args *args)  in sys_enter_open()  argument
233 	const void *filename_arg = (const void *)args->args[0];  in sys_enter_open()
234 	unsigned int len = sizeof(augmented_args->args);  in sys_enter_open()
241 	return augmented__output(args, augmented_args, len);  in sys_enter_open()
245 int sys_enter_openat(struct syscall_enter_args *args)  in sys_enter_openat()  argument
248 	const void *filename_arg = (const void *)args->args[1];  in sys_enter_openat()
249 	unsigned int len = sizeof(augmented_args->args);  in sys_enter_openat()
256 	return augmented__output(args, augmented_args, len);  in sys_enter_openat()
260 int sys_enter_rename(struct syscall_enter_args *args)  in sys_enter_rename()  argument
263 	const void *oldpath_arg = (const void *)args->args[0],  in sys_enter_rename()
264 		   *newpath_arg = (const void *)args->args[1];  in sys_enter_rename()
265 	unsigned int len = sizeof(augmented_args->args), oldpath_len;  in sys_enter_rename()
273 	return augmented__output(args, augmented_args, len);  in sys_enter_rename()
277 int sys_enter_renameat(struct syscall_enter_args *args)  in sys_enter_renameat()  argument
280 	const void *oldpath_arg = (const void *)args->args[1],  in sys_enter_renameat()
281 		   *newpath_arg = (const void *)args->args[3];  in sys_enter_renameat()
282 	unsigned int len = sizeof(augmented_args->args), oldpath_len;  in sys_enter_renameat()
290 	return augmented__output(args, augmented_args, len);  in sys_enter_renameat()
305 int sys_enter_perf_event_open(struct syscall_enter_args *args)  in sys_enter_perf_event_open()  argument
308 …const struct perf_event_attr_size *attr = (const struct perf_event_attr_size *)args->args[0], *att…  in sys_enter_perf_event_open()
309 	unsigned int len = sizeof(augmented_args->args);  in sys_enter_perf_event_open()
331 	return augmented__output(args, augmented_args, len + size);  in sys_enter_perf_event_open()
337 int sys_enter_clock_nanosleep(struct syscall_enter_args *args)  in sys_enter_clock_nanosleep()  argument
340 	const void *rqtp_arg = (const void *)args->args[2];  in sys_enter_clock_nanosleep()
341 	unsigned int len = sizeof(augmented_args->args);  in sys_enter_clock_nanosleep()
352 	return augmented__output(args, augmented_args, len + size);  in sys_enter_clock_nanosleep()
368 int sys_enter(struct syscall_enter_args *args)  in sys_enter()  argument
388 	bpf_probe_read_kernel(&augmented_args->args, sizeof(augmented_args->args), args);  in sys_enter()
395 	bpf_tail_call(args, &syscalls_sys_enter, augmented_args->args.syscall_nr);  in sys_enter()
402 int sys_exit(struct syscall_exit_args *args)  in sys_exit()  argument
409 	bpf_probe_read_kernel(&exit_args, sizeof(exit_args), args);  in sys_exit()
415 	bpf_tail_call(args, &syscalls_sys_exit, exit_args.syscall_nr);  in sys_exit()