1/* SPDX-License-Identifier: GPL-2.0 */
 2#undef TRACE_SYSTEM
 3#define TRACE_SYSTEM raw_syscalls
 4#undef TRACE_INCLUDE_FILE
 5#define TRACE_INCLUDE_FILE syscalls
 6
 7#if !defined(_TRACE_EVENTS_SYSCALLS_H) || defined(TRACE_HEADER_MULTI_READ)
 8#define _TRACE_EVENTS_SYSCALLS_H
 9
10#include <linux/tracepoint.h>
11
12#include <asm/ptrace.h>
13#include <asm/syscall.h>
14
15
16#ifdef CONFIG_HAVE_SYSCALL_TRACEPOINTS
17
18TRACE_EVENT_FN(sys_enter,
19
20	TP_PROTO(struct pt_regs *regs, long id),
21
22	TP_ARGS(regs, id),
23
24	TP_STRUCT__entry(
25		__field(	long,		id		)
26		__array(	unsigned long,	args,	6	)
27	),
28
29	TP_fast_assign(
30		__entry->id	= id;
31		syscall_get_arguments(current, regs, __entry->args);
32	),
33
34	TP_printk("NR %ld (%lx, %lx, %lx, %lx, %lx, %lx)",
35		  __entry->id,
36		  __entry->args[0], __entry->args[1], __entry->args[2],
37		  __entry->args[3], __entry->args[4], __entry->args[5]),
38
39	syscall_regfunc, syscall_unregfunc
40);
41
42TRACE_EVENT_FLAGS(sys_enter, TRACE_EVENT_FL_CAP_ANY)
43
44TRACE_EVENT_FN(sys_exit,
45
46	TP_PROTO(struct pt_regs *regs, long ret),
47
48	TP_ARGS(regs, ret),
49
50	TP_STRUCT__entry(
51		__field(	long,	id	)
52		__field(	long,	ret	)
53	),
54
55	TP_fast_assign(
56		__entry->id	= syscall_get_nr(current, regs);
57		__entry->ret	= ret;
58	),
59
60	TP_printk("NR %ld = %ld",
61		  __entry->id, __entry->ret),
62
63	syscall_regfunc, syscall_unregfunc
64);
65
66TRACE_EVENT_FLAGS(sys_exit, TRACE_EVENT_FL_CAP_ANY)
67
68#endif /* CONFIG_HAVE_SYSCALL_TRACEPOINTS */
69
70#endif /* _TRACE_EVENTS_SYSCALLS_H */
71
72/* This part must be outside protection */
73#include <trace/define_trace.h>
74

 
 1#undef TRACE_SYSTEM
 2#define TRACE_SYSTEM raw_syscalls
 3#undef TRACE_INCLUDE_FILE
 4#define TRACE_INCLUDE_FILE syscalls
 5
 6#if !defined(_TRACE_EVENTS_SYSCALLS_H) || defined(TRACE_HEADER_MULTI_READ)
 7#define _TRACE_EVENTS_SYSCALLS_H
 8
 9#include <linux/tracepoint.h>
10
11#include <asm/ptrace.h>
12#include <asm/syscall.h>
13
14
15#ifdef CONFIG_HAVE_SYSCALL_TRACEPOINTS
16
17TRACE_EVENT_FN(sys_enter,
18
19	TP_PROTO(struct pt_regs *regs, long id),
20
21	TP_ARGS(regs, id),
22
23	TP_STRUCT__entry(
24		__field(	long,		id		)
25		__array(	unsigned long,	args,	6	)
26	),
27
28	TP_fast_assign(
29		__entry->id	= id;
30		syscall_get_arguments(current, regs, 0, 6, __entry->args);
31	),
32
33	TP_printk("NR %ld (%lx, %lx, %lx, %lx, %lx, %lx)",
34		  __entry->id,
35		  __entry->args[0], __entry->args[1], __entry->args[2],
36		  __entry->args[3], __entry->args[4], __entry->args[5]),
37
38	syscall_regfunc, syscall_unregfunc
39);
40
41TRACE_EVENT_FLAGS(sys_enter, TRACE_EVENT_FL_CAP_ANY)
42
43TRACE_EVENT_FN(sys_exit,
44
45	TP_PROTO(struct pt_regs *regs, long ret),
46
47	TP_ARGS(regs, ret),
48
49	TP_STRUCT__entry(
50		__field(	long,	id	)
51		__field(	long,	ret	)
52	),
53
54	TP_fast_assign(
55		__entry->id	= syscall_get_nr(current, regs);
56		__entry->ret	= ret;
57	),
58
59	TP_printk("NR %ld = %ld",
60		  __entry->id, __entry->ret),
61
62	syscall_regfunc, syscall_unregfunc
63);
64
65TRACE_EVENT_FLAGS(sys_exit, TRACE_EVENT_FL_CAP_ANY)
66
67#endif /* CONFIG_HAVE_SYSCALL_TRACEPOINTS */
68
69#endif /* _TRACE_EVENTS_SYSCALLS_H */
70
71/* This part must be outside protection */
72#include <trace/define_trace.h>
73