NAME
tapset::syscalls - systemtap syscall tapset DESCRIPTION Following is an overview of available syscall probes and convenience variables they offer. By default, each syscall probe has name and argstr convenience variables, which are not included in the overview in
order to keep it short. Non dwarf-based ndsyscall probes are supposed to have the same convenience variables. syscall.accept addruaddr, addrlenuaddr, sockfd syscall.accept4 addruaddr, addrlenuaddr, flags, flagsstr, sockfd syscall.access mode, modestr, pathname syscall.acct filename syscall.addkey descriptionuaddr, payloaduaddr, plen, ringid, typeuaddr syscall.adjtimex bufstr, bufuaddr syscall.alarm seconds syscall.archprctl addr, code, codestr syscall.bdflush data, datastr, func syscall.bind addrlen, myaddruaddr, sockfd, uaddraf, uaddrip, uaddripport, uaddripv6flowinfo, uaddripv6scopeid syscall.bpf attruaddr, cmd, cmdstr, size syscall.brk brk syscall.capget datauaddr, headeruaddr syscall.capset datauaddr, headeruaddr syscall.chdir path syscall.chmod mode, path syscall.chown group, owner, path syscall.chown16 group, owner, path syscall.chroot path syscall.clockadjtime clkid, clkidstr, txuaddr, txuaddrstr syscall.clockgetres clkid, clkidstr, resuaddr syscall.clockgettime clkid, clkidstr, tpuaddr syscall.clocknanosleep clkid, clkidstr, flags, flagsstr, remuaddr, reqstr, requaddr syscall.clocksettime clkid, clkidstr, tpuaddr, tpuaddrstr syscall.clone childtiduaddr, cloneflags, parenttiduaddr, stackstart syscall.close fd syscall.compatadjtimex bufstr, bufuaddr syscall.compatclocknanosleep clkid, clkidstr, flags, flagsstr, remuaddr, reqstr, requaddr syscall.compatexecve args, envstr, filename syscall.compatexecveat args, dirfd, dirfdstr, envstr, filename, flags, flagsstr syscall.compatfutex futexuaddr, op, uaddr2uaddr, utimeuaddr, val3, val syscall.compatfutimesat dirfd, dirfdstr, filename, filenameuaddr, tvpstr, tvpuaddr syscall.compatgetitimer valueuaddr, which syscall.compatlookupdcookie bufferuaddr, cookie, len syscall.compatnanosleep remuaddr, reqstr, requaddr syscall.compatppoll fdsuaddr, nfds, sigmask, sigsetsize, tsp, tspstr syscall.compatpselect6 exceptfds, nfds, readfds, sigmask, timeout, time‐ outstr, writefds syscall.compatrecvmmsg flags, flagsstr, mmsguaddr, s, timeoutstr, timeoutuaddr, vlen syscall.compatrtsigprocmask how, howstr, oldsetuaddr, setstr, setuaddr, sigsetsize syscall.compatselect exceptfdsuaddr, n, readfdsuaddr, timeoutstr, timeoutuaddr, writefdsuaddr syscall.compatsetitimer ovalueuaddr, valuestr, valueuaddr, which, whichstr syscall.compatsignalfd flags syscall.compatsysmsgctl bufuaddr, cmd, cmdstr, msqid syscall.compatsysmsgrcv msgflg, msgflgstr, msgpuaddr, msgsz, msgtyp, msqid syscall.compatsysmsgsnd msgflg, msgflgstr, msgpuaddr, msgsz, msqid syscall.compatsysrecvmsg flags, flagsstr, msguaddr, s syscall.compatsyssemctl arg, cmd, cmdstr, semid, semnum syscall.compatsyssemtimedop nsops, semid, sopsuaddr, timeoutstr, time‐ outuaddr syscall.compatsyssendmsg flags, flagsstr, msguaddr, s syscall.compatsysshmat shmaddruaddr, shmflg, shmflgstr, shmid syscall.compatsysshmctl bufuaddr, cmd, cmdstr, shmid syscall.compatsysutimes filename, timeval, tvpuaddrstr syscall.compatutime actime, bufuaddr, filename, filenameuaddr, mod‐ time syscall.compatutimensat dfd, dfdstr, filename, filenameuaddr, flags, flagsstr, tspstr, tspuaddr syscall.compatvmsplice fd, flags, flagsstr, iov, nrsegs syscall.connect addrlen, servaddruaddr, sockfd, uaddraf, uaddrip, uaddripport, uaddripv6flowinfo, uaddripv6scopeid syscall.copyfilerange fdin, fdout, flags, len, offin, offout syscall.creat mode, pathname syscall.deletemodule flags, flagsstr, nameuser syscall.dup oldfd syscall.dup2 flags, flagsstr, newfd, oldfd syscall.dup3 flags, flagsstr, newfd, oldfd syscall.epollcreate flags, size syscall.epollctl epfd, eventuaddr, fd, op, opstr syscall.epollpwait epfd, eventsuaddr, maxevents, sigmaskuaddr, sigsetsize, timeout syscall.epollwait epfd, eventsuaddr, maxevents, timeout syscall.eventfd count, flags, flagsstr syscall.execve args, envstr, filename syscall.execveat args, dirfd, dirfdstr, envstr, filename, flags, flagsstr syscall.exit status syscall.exitgroup status syscall.faccessat dirfd, dirfdstr, mode, modestr, pathname syscall.fadvise64 advice, advicestr, fd, len, offset syscall.fadvise6464 advice, advicestr, fd, len, offset syscall.fallocate fd, len, mode, modestr, offset syscall.fanotifyinit eventfflags, eventfflagsstr, flags, flagsstr syscall.fanotifymark dirfd, dirfdstr, fanotifyfd, flags, flagsstr, mask, maskstr, pathname syscall.fchdir fd syscall.fchmod fildes, mode syscall.fchmodat dirfd, dirfdstr, mode, pathname syscall.fchown fd, group, owner syscall.fchown16 fd, group, owner syscall.fchownat dirfd, dirfdstr, flags, flagsstr, group, owner, pathname syscall.fcntl arg, cmd, cmdstr, fd syscall.fdatasync fd syscall.fgetxattr filedes, namestr, size, valueuaddr syscall.finitmodule fd, flags, flagsstr, uargs syscall.flistxattr filedes, listuaddr, size syscall.flock fd, operation syscall.fork syscall.fremovexattr filedes, namestr, nameuaddr syscall.fsetxattr filedes, flags, flagsstr, namestr, nameuaddr, size, valuestr, valueuaddr syscall.fstat bufuaddr, filedes syscall.fstatat bufuaddr, dirfd, dirfdstr, flags, flagsstr, path syscall.fstatfs bufuaddr, fd syscall.fstatfs64 bufuaddr, fd, sz syscall.fsync fd syscall.ftruncate fd, length syscall.futex futexuaddr, op, uaddr2uaddr, utimeuaddr, val3, val syscall.futimesat dirfd, dirfdstr, filename, filenameuaddr, tvpstr, tvpuaddr syscall.getmempolicy addr, flags, flagsstr, maxnode, nmaskuaddr, pol‐ icyuaddr syscall.getrobustlist lenuaddr, listheaduaddr, pid syscall.getthreadarea uinfostr, uinfouaddr syscall.getcpu cpuuaddr, nodeuaddr, tcacheuaddr syscall.getcwd bufuaddr, size syscall.getdents count, dirpuaddr, fd syscall.getegid syscall.geteuid syscall.getgid syscall.getgroups listuaddr, size syscall.gethostname len, nameuaddr syscall.getitimer valueuaddr, which syscall.getpeername nameuaddr, namelenuaddr, s syscall.getpgid pid syscall.getpgrp syscall.getpid syscall.getppid syscall.getpriority which, who syscall.getrandom buf, count, flags, flagsstr syscall.getresgid egiduaddr, rgiduaddr, sgiduaddr syscall.getresuid euiduaddr, ruiduaddr, suiduaddr syscall.getrlimit resource, rlimuaddr syscall.getrusage usageuaddr, who, whostr syscall.getsid pid syscall.getsockname nameuaddr, namelenuaddr, s syscall.getsockopt fd, level, levelstr, optlenuaddr, optname, opt‐ namestr, optvaluaddr syscall.gettid syscall.gettimeofday tvuaddr, tzuaddr syscall.getuid syscall.getxattr namestr, path, size, valueuaddr syscall.initmodule len, uargs, umoduaddr syscall.inotifyaddwatch fd, mask, maskstr, path, pathuaddr syscall.inotifyinit flags syscall.inotifyrmwatch fd, wd syscall.iocancel ctxid, iocbuaddr, resultuaddr syscall.iodestroy ctx syscall.iogetevents ctxid, eventsuaddr, minnr, nr, timeoutuaddr, timestr syscall.iosetup ctxpuaddr, maxevents syscall.iosubmit ctxid, iocbppuaddr, nr syscall.ioctl argp, fd, request syscall.ioperm from, num, turnon syscall.iopl level syscall.ioprioget which, whichstr, who syscall.ioprioset ioprio, iopriostr, which, whichstr, who syscall.kcmp idx1, idx2, pid1, pid2, type, typestr syscall.kexecfileload cmdline, cmdlinelen, flags, flagsstr, initrdfd, kernelfd syscall.kexecload entry, flags, flagsstr, nrsegments, seg‐ mentsuaddr syscall.keyctl arg2, arg3, arg4, arg5, option syscall.kill pid, sig, signame syscall.lchown group, owner, path syscall.lchown16 group, owner, path syscall.lgetxattr namestr, path, size, valueuaddr syscall.link newpath, oldpath syscall.linkat flags, flagsstr, newdirfd, newdirfdstr, newpath, olddirfd, olddirfdstr, oldpath syscall.listen backlog, sockfd syscall.listxattr listuaddr, path, pathuaddr, size syscall.llistxattr listuaddr, path, pathuaddr, size syscall.llseek fd, offsethigh, offsetlow, resultuaddr, whence, whencestr syscall.lookupdcookie bufferuaddr, cookie, len syscall.lremovexattr namestr, nameuaddr, path, pathuaddr syscall.lseek fildes, offset, whence, whencestr syscall.lsetxattr flags, flagsstr, namestr, nameuaddr, path, pathuaddr, size, valuestr, valueuaddr syscall.lstat bufuaddr, path syscall.madvise advice, advicestr, length, start syscall.mbind flags, flagsstr, len, maxnode, mode, modestr, nmaskuaddr, start syscall.membarrier cmd, cmdstr, flags syscall.memfdcreate flags, flagsstr, uname syscall.migratepages maxnode, newnodes, oldnodes, pid syscall.mincore length, start, vecuaddr syscall.mkdir mode, pathname, pathnameuaddr syscall.mkdirat dirfd, dirfdstr, mode, pathname syscall.mknod dev, mode, modestr, pathname syscall.mknodat dev, dirfd, dirfdstr, mode, modestr, pathname syscall.mlock addr, len syscall.mlock2 addr, flags, flagsstr, len syscall.mlockall flags, flagsstr syscall.mmap2 fd, flags, flagsstr, length, pgoffset, prot, protstr, start syscall.modifyldt bytecount, func, ptruaddr syscall.mount data, filesystemtype, mountflags, mountflagsstr, source, target syscall.movepages flags, flagsstr, nodes, nrpages, pages, pid, status syscall.mprotect addr, len, prot, protstr syscall.mqgetsetattr mqdes, umqstatuaddr, uomqstatuaddr syscall.mqnotify mqdes, notificationuaddr syscall.mqopen filename, mode, nameuaddr, oflag, oflagstr, uattruaddr syscall.mqtimedreceive abstimeoutuaddr, mqdes, msglen, msgpriouaddr, msgptruaddr syscall.mqtimedsend abstimeoutuaddr, mqdes, msglen, msgprio, msgptruaddr syscall.mqunlink uname, unameuaddr syscall.mremap flags, flagsstr, newaddress, newsize, oldaddress, oldsize syscall.msgctl bufuaddr, cmd, cmdstr, msqid syscall.msgget key, keystr, msgflg, msgflgstr syscall.msgrcv msgflg, msgflgstr, msgpuaddr, msgsz, msgtyp, msqid syscall.msgsnd msgflg, msgflgstr, msgpuaddr, msgsz, msqid syscall.msync flags, flagsstr, length, start syscall.munlock addr, len syscall.munlockall syscall.munmap length, start syscall.nametohandleat dfd, dfdstr, flags, flagsstr, handleuaddr, mntiduaddr, pathname syscall.nanosleep remuaddr, reqstr, requaddr syscall.nisyscall syscall.nice inc syscall.open filename, flags, flagsstr, mode syscall.openbyhandleat flags, flagsstr, handleuaddr, mountdfd, mountdfdstr syscall.openat dfd, dfdstr, filename, flags, flagsstr, mode syscall.pause syscall.perfeventopen attruaddr, cpu, flags, flagsstr, groupfd, pid syscall.personality persona syscall.pipe fildesuaddr, flagstr, flags, pipe0, pipe1 syscall.pivotroot newrootstr, oldrootstr syscall.poll nfds, timeout, ufdsuaddr syscall.ppoll fdsuaddr, nfds, sigmask, sigsetsize, tsp, tspstr syscall.prctl arg2, arg3, arg4, arg5, option syscall.pread bufuaddr, count, fd, offset syscall.preadv count, fd, offset, vectoruaddr syscall.preadv2 count, fd, flags, flagsstr, offset, vectoruaddr syscall.prlimit64 newrlimstr, newrlimuaddr, oldrlimuaddr, pid, resource, resourcestr syscall.processvmreadv flags, liovcnt, localiovuaddr, pid, remoteiovuaddr, riovcnt syscall.processvmwritev flags, liovcnt, localiovuaddr, pid, remoteiovuaddr, riovcnt syscall.pselect6 exceptfds, nfds, readfds, sigmask, timeout, time‐ outstr, writefds syscall.ptrace addr, data, pid, request syscall.pwrite bufstr, bufuaddr, count, fd, offset syscall.pwritev count, fd, offset, vectoruaddr syscall.pwritev2 count, fd, flags, flagsstr, offset, vectoruaddr syscall.quotactl addruaddr, cmd, cmdstr, id, special, specialstr syscall.read bufuaddr, count, fd syscall.readahead count, fd, offset syscall.readdir count, dirent, fd syscall.readlink bufuaddr, bufsiz, path syscall.readlinkat bufuaddr, bufsiz, dfd, dfdstr, path syscall.readv count, fd, vectoruaddr syscall.reboot arguaddr, flag, flagstr, magic2, magic2str, magic, magicstr syscall.recv bufuaddr, flags, flagsstr, len, s syscall.recvfrom addruaddr, addrlenuaddr, bufuaddr, flags, flagsstr, len, s syscall.recvmmsg flags, flagsstr, mmsguaddr, s, timeoutstr, timeoutuaddr, vlen syscall.recvmsg flags, flagsstr, msguaddr, s syscall.remapfilepages flags, flagsstr, pgoff, prot, protstr, size, start syscall.removexattr namestr, path syscall.rename newpath, oldpath syscall.renameat newdfd, newdfdstr, newname, newnamestr, olddfd, olddfdstr, oldname, oldnamestr syscall.renameat2 flags, flagsstr, newdfd, newdfdstr, newname, newnamestr, olddfd, olddfdstr, oldname, old‐ namestr syscall.requestkey calloutinfouaddr, descriptionstr, descrip‐ tionuaddr, destringid, typestr, typeuaddr syscall.restartsyscall syscall.rmdir pathname syscall.rtsigaction actstr, actuaddr, oactuaddr, sig, sigstr, sigsetsize syscall.rtsigaction32 actstr, actuaddr, oactuaddr, sig, sigstr, sigsetsize syscall.rtsigpending setuaddr, sigsetsize syscall.rtsigprocmask how, howstr, oldsetuaddr, setstr, setuaddr, sigsetsize syscall.rtsigqueueinfo pid, sig, signame, siginfostr, uinfouaddr syscall.rtsigreturn syscall.rtsigsuspend setstr, setuaddr, sigsetsize syscall.rtsigtimedwait sigsetsize, uinfostr, uinfouaddr, uthesestr, utheseuaddr, utsstr, utsuaddr syscall.rttgsigqueueinfo sig, sigstr, tgid, tid, uinfostr, uinfouaddr syscall.schedgetprioritymax policy, policystr syscall.schedgetprioritymin policy, policystr syscall.schedgetaffinity len, maskuaddr, pid syscall.schedgetattr flags, pid, schedattrstr, schedattruaddr, size syscall.schedgetparam puaddr, pid syscall.schedgetscheduler pid syscall.schedrrgetinterval pid, tpuaddr syscall.schedsetaffinity len, maskuaddr, pid syscall.schedsetattr flags, pid, schedattrstr, schedattruaddr syscall.schedsetparam puaddr, pid syscall.schedsetscheduler puaddr, pid, policy, policystr syscall.schedyield syscall.seccomp flags, flagsstr, op, opstr, uargsuaddr syscall.select exceptfdsuaddr, n, readfdsuaddr, timeoutstr, timeoutuaddr, writefdsuaddr syscall.semctl arg, cmd, cmdstr, semid, semnum syscall.semget key, keystr, nsems, semflg, semflgstr syscall.semop nsops, semid, sopsuaddr syscall.semtimedop nsops, semid, sopsuaddr, timeoutstr, time‐ outuaddr syscall.send buf, bufuaddr, flags, flagsstr, len, s syscall.sendfile count, infd, offsetuaddr, outfd syscall.sendmmsg flags, flagsstr, mmsguaddr, s, vlen syscall.sendmsg flags, flagsstr, msguaddr, s syscall.sendto buf, bufuaddr, flags, flagsstr, len, s, tostr, touaddr, tolen syscall.setmempolicy maxnode, mode, modestr, nmaskuaddr syscall.setrobustlist len, listheaduaddr syscall.setthreadarea uinfostr, uinfouaddr syscall.settidaddress tidptruaddr syscall.setdomainname domainnamestr, domainnameuaddr, len syscall.setfsgid fsgid syscall.setfsuid fsuid syscall.setgid gid syscall.setgroups listuaddr, size syscall.sethostname hostnameuaddr, len, namestr syscall.setitimer ovalueuaddr, valuestr, valueuaddr, which, whichstr syscall.setns fd, nstype, nstypestr syscall.setpgid pgid, pid syscall.setpriority prio, which, whichstr, who syscall.setregid egid, rgid syscall.setregid16 egid, rgid syscall.setresgid egid, rgid, sgid syscall.setresgid16 egid, rgid, sgid syscall.setresuid euid, ruid, suid syscall.setresuid16 euid, ruid, suid syscall.setreuid euid, ruid syscall.setreuid16 euid, ruid syscall.setrlimit resource, resourcestr, rlimstr, rlimuaddr syscall.setsid syscall.setsockopt fd, level, levelstr, optlen, optname, opt‐ namestr, optvaluaddr syscall.settimeofday tvstr, tvuaddr, tzstr, tzuaddr syscall.settimeofday32 tvstr, tvuaddr, tzstr, tzuaddr syscall.setuid uid syscall.setxattr flags, flagsstr, namestr, nameuaddr, path, pathuaddr, size, valuestr, valueuaddr syscall.sgetmask syscall.shmat shmaddruaddr, shmflg, shmflgstr, shmid syscall.shmctl bufuaddr, cmd, cmdstr, shmid syscall.shmdt shmaddruaddr syscall.shmget key, shmflg, shmflgstr, size syscall.shutdown how, howstr, s syscall.sigaction32 actstr, actuaddr, oactuaddr, sig, sigstr syscall.sigaltstack uossuaddr, ussstr, ussuaddr syscall.signal handler, handlerstr, sig, sigstr syscall.signalfd flags syscall.sigpending set syscall.sigprocmask how, howstr, oldsetuaddr, setuaddr syscall.sigreturn syscall.sigsuspend mask, maskstr syscall.socket family, familystr, protocol, protocolstr, type, typestr syscall.socketpair family, familystr, protocol, protocolstr, svuaddr, type, typestr syscall.splice fdin, fdout, flags, flagsstr, len, offin, offout syscall.ssetmask newmask, newmaskstr syscall.stat bufuaddr, filename, filenameuaddr syscall.statfs bufuaddr, path syscall.statfs64 bufuaddr, path, sz syscall.statx bufuaddr, dfd, dfdstr, filename, filenameuaddr, flags, flagsstr, mask, maskstr syscall.stime tuaddr syscall.swapoff path, pathuaddr syscall.swapon path, pathuaddr, swapflags, swapflagsstr syscall.symlink newpath, oldpath syscall.symlinkat newdfd, newdfdstr, newname, newnamestr, oldname, oldnamestr syscall.sync syscall.syncfilerange fd, flags, flagsstr, nbytes, offset syscall.syncfs fd syscall.sysctl args syscall.sysfs arg1, arg2, option syscall.sysinfo infostr, infouaddr syscall.syslog bufpuaddr, len, type syscall.tee fdin, fdout, flags, len syscall.tgkill pid, sig, sigstr, tgid syscall.time tuaddr syscall.timercreate clockid, clockidstr, evpuaddr, timeriduaddr syscall.timerdelete timerid syscall.timergetoverrun timerid syscall.timergettime timerid, valueuaddr syscall.timersettime flags, ovalueuaddr, timerid, valuestr, valueuaddr syscall.timerfdcreate clockid, clockidstr, flags, flagsstr syscall.timerfdgettime fd, valueuaddr syscall.timerfdsettime fd, flags, flagsstr, ovalueuaddr, valuestr, valueuaddr syscall.times bufstr, bufuaddr syscall.tkill pid, sig, sigstr syscall.truncate length, path, pathuaddr syscall.umask mask syscall.umount flags, flagsstr, target syscall.uname nameuaddr syscall.unlink pathname, pathnameuaddr syscall.unlinkat dfd, dfdstr, flag, flagstr, pathname, path‐ namestr syscall.unshare unshareflags, unshareflagsstr syscall.userfaultfd flags, flagsstr syscall.ustat dev, ubufuaddr syscall.ustat32 dev, ubufuaddr syscall.utime actime, bufuaddr, filename, filenameuaddr, mod‐ time syscall.utimensat dfd, dfdstr, filename, filenameuaddr, flags, flagsstr, tspstr, tspuaddr syscall.utimes filename, filenameuaddr, tvpuaddr, tvpuaddrstr syscall.vfork syscall.vhangup syscall.vmsplice fd, flags, flagsstr, iov, nrsegs syscall.wait4 options, optionsstr, pid, rusageuaddr, sta‐ tusuaddr syscall.waitid infopuaddr, options, optionsstr, pid, rusageuaddr, which, whichstr syscall.waitpid options, optionsstr, pid, statusuaddr syscall.write bufstr, bufuaddr, count, fd syscall.writev count, fd, vectoruaddr SEE ALSO stap(1), stapprobes(3stap) Systemtap Tapset Reference June 2018 TAPSET::SYSCALLS(3stap)