--- name: "tapset::syscalls" section: "3stap" platform: "linux" package: "systemtap-doc" version: "5.1-5" release: "Debian 13 (Trixie)" platforms: ["linux"] url: "https://new.carta.tech/tapset::syscalls" --- # tapset::syscalls(3stap) systemtap syscall tapset ## NAME tapset::syscalls - systemtap syscall tapset ## DESCRIPTION Following is an overview of available syscall probes and convenience variables they offer. By default, each syscall probe has name and argstr convenience variables, which are not included in the overview in order to keep it short. Non dwarf-based nd\_syscall probes are supposed to have the same convenience variables. - - - **syscall.accept** addr\_uaddr, addrlen\_uaddr, sockfd - **syscall.accept4** addr\_uaddr, addrlen\_uaddr, flags, flags\_str, sockfd - **syscall.access** mode, mode\_str, pathname, pathname\_unquoted - **syscall.acct** filename, filename\_unquoted - **syscall.add\_key** description\_uaddr, payload\_uaddr, plen, ringid, type\_uaddr - **syscall.adjtimex** buf\_str, buf\_uaddr - **syscall.alarm** seconds - **syscall.arch\_prctl** addr, code, code\_str - **syscall.bdflush** $id, $regs, data, data\_str, func, int, pt\_regs\* - **syscall.bind** addrlen, my\_addr\_uaddr, sockfd, uaddr\_af, uaddr\_ip, uaddr\_ip\_port, uaddr\_ipv6\_flowinfo, uaddr\_ipv6\_scope\_id - **syscall.bpf** attr\_uaddr, cmd, cmd\_str, size - **syscall.brk** brk - **syscall.capget** data\_uaddr, header\_uaddr - **syscall.capset** data\_uaddr, header\_uaddr - **syscall.chdir** path, path\_unquoted - **syscall.chmod** mode, path, path\_unquoted - **syscall.chown** group, owner, path, path\_unquoted - **syscall.chown16** group, owner, path, path\_unquoted - **syscall.chroot** path, path\_unquoted - **syscall.clock\_adjtime** clk\_id, clk\_id\_str, tx\_uaddr, tx\_uaddr\_str - **syscall.clock\_getres** clk\_id, clk\_id\_str, res\_uaddr - **syscall.clock\_gettime** clk\_id, clk\_id\_str, tp\_uaddr - **syscall.clock\_nanosleep** clk\_id, clk\_id\_str, flags, flags\_str, rem\_uaddr, req\_str, req\_uaddr - **syscall.clock\_settime** clk\_id, clk\_id\_str, tp\_uaddr, tp\_uaddr\_str - **syscall.clone** $id, $regs, child\_tid\_uaddr, clone\_flags, int, parent\_tid\_uaddr, pt\_regs\*, stack\_start - **syscall.close** fd - **syscall.compat\_adjtimex** $id, $regs, buf\_str, buf\_uaddr, int, pt\_regs\* - **syscall.compat\_clock\_nanosleep** $id, $regs, clk\_id, clk\_id\_str, flags, flags\_str, int, pt\_regs\*, rem\_uaddr, req\_str, req\_uaddr - **syscall.compat\_execve** args, env\_str, filename - **syscall.compat\_execveat** args, dirfd, dirfd\_str, env\_str, filename, flags, flags\_str - **syscall.compat\_fadvise64** $id, $regs, advice, advice\_str, fd, int, len, offset, pt\_regs\* - **syscall.compat\_fadvise64\_64** $id, $regs, advice, advice\_str, fd, int, len, offset, pt\_regs\* - **syscall.compat\_fallocate** $id, $regs, fd, int, len, mode, mode\_str, offset, pt\_regs\* - **syscall.compat\_ftruncate64** $id, $regs, fd, int, length, pt\_regs\* - **syscall.compat\_futex** $id, $regs, futex\_uaddr, int, op, pt\_regs\*, uaddr2\_uaddr, utime\_uaddr, val3, val - **syscall.compat\_futimesat** $id, $regs, dirfd, dirfd\_str, filename, filename\_uaddr, filename\_unquoted, int, pt\_regs\*, tvp\_str, tvp\_uaddr - **syscall.compat\_getitimer** value\_uaddr, which - **syscall.compat\_lookup\_dcookie** $id, $regs, buffer\_uaddr, cookie, int, len, pt\_regs\* - **syscall.compat\_nanosleep** $id, $regs, int, pt\_regs\*, rem\_uaddr, req\_str, req\_uaddr - **syscall.compat\_ppoll** $id, $regs, fds\_uaddr, int, nfds, pt\_regs\*, sigmask, sigsetsize, tsp, tsp\_str - **syscall.compat\_pselect6** $id, $regs, exceptfds, int, nfds, pt\_regs\*, readfds, sigmask, timeout, timeout\_str, writefds - **syscall.compat\_readahead** $id, $regs, count, fd, int, offset, pt\_regs\* - **syscall.compat\_recvmmsg** $id, $regs, flags, flags\_str, int, mmsg\_uaddr, pt\_regs\*, s, timeout\_str, timeout\_uaddr, vlen - **syscall.compat\_select** exceptfds\_uaddr, n, readfds\_uaddr, timeout\_str, timeout\_uaddr, writefds\_uaddr - **syscall.compat\_setitimer** ovalue\_uaddr, value\_str, value\_uaddr, which, which\_str - **syscall.compat\_signalfd** flags - **syscall.compat\_sys\_msgctl** buf\_uaddr, cmd, cmd\_str, msqid - **syscall.compat\_sys\_msgrcv** msgflg, msgflg\_str, msgp\_uaddr, msgsz, msgtyp, msqid - **syscall.compat\_sys\_msgsnd** msgflg, msgflg\_str, msgp\_uaddr, msgsz, msqid - **syscall.compat\_sys\_recvmsg** flags, flags\_str, msg\_uaddr, s - **syscall.compat\_sys\_semctl** arg, cmd, cmdstr, semid, semnum - **syscall.compat\_sys\_semtimedop** nsops, semid, sops\_uaddr, timeout\_str, timeout\_uaddr - **syscall.compat\_sys\_sendmsg** flags, flags\_str, msg\_uaddr, s - **syscall.compat\_sys\_shmat** shmaddr\_uaddr, shmflg, shmflg\_str, shmid - **syscall.compat\_sys\_shmctl** buf\_uaddr, cmd, cmd\_str, shmid - **syscall.compat\_sys\_utimes** $id, $regs, filename, filename\_unquoted, int, pt\_regs\*, timeval, tvp\_uaddr\_str - **syscall.compat\_truncate64** $id, $regs, int, length, path, path\_uaddr, path\_unquoted, pt\_regs\* - **syscall.compat\_utime** $id, $regs, actime, buf\_uaddr, filename, filename\_uaddr, filename\_unquoted, int, modtime, pt\_regs\* - **syscall.compat\_utimensat** $id, $regs, dfd, dfd\_str, filename, filename\_uaddr, filename\_unquoted, flags, flags\_str, int, pt\_regs\*, tsp\_str, tsp\_uaddr - **syscall.compat\_vmsplice** $id, $regs, fd, flags, flags\_str, int, iov, nr\_segs, pt\_regs\* - **syscall.connect** addrlen, serv\_addr\_uaddr, sockfd, uaddr\_af, uaddr\_ip, uaddr\_ip\_port, uaddr\_ipv6\_flowinfo, uaddr\_ipv6\_scope\_id - **syscall.copy\_file\_range** fd\_in, fd\_out, flags, len, off\_in, off\_out - **syscall.creat** mode, pathname, pathname\_unquoted - **syscall.delete\_module** flags, flags\_str, name\_user, name\_user\_unquoted - **syscall.dup** oldfd - **syscall.dup2** flags, flags\_str, newfd, oldfd - **syscall.dup3** flags, flags\_str, newfd, oldfd - **syscall.epoll\_create** flags, size - **syscall.epoll\_ctl** epfd, event\_uaddr, fd, op, op\_str - **syscall.epoll\_pwait** epfd, events\_uaddr, maxevents, sigmask\_uaddr, sigsetsize, timeout - **syscall.epoll\_wait** epfd, events\_uaddr, maxevents, timeout - **syscall.eventfd** count, flags, flags\_str - **syscall.execve** args, env\_str, filename - **syscall.execveat** args, dirfd, dirfd\_str, env\_str, filename, flags, flags\_str - **syscall.exit** status - **syscall.exit\_group** status - **syscall.faccessat** dirfd, dirfd\_str, mode, mode\_str, pathname, pathname\_unquoted - **syscall.faccessat2** dirfd, dirfd\_str, flags, flags\_str, mode, mode\_str, pathname, pathname\_unquoted - **syscall.fadvise64** advice, advice\_str, fd, len, offset - **syscall.fadvise64\_64** $id, $regs, advice, advice\_str, fd, int, len, offset, pt\_regs\* - **syscall.fallocate** fd, len, mode, mode\_str, offset - **syscall.fanotify\_init** event\_f\_flags, event\_f\_flags\_str, flags, flags\_str - **syscall.fanotify\_mark** dirfd, dirfd\_str, fanotify\_fd, flags, flags\_str, mask, mask\_str, pathname, pathname\_unquoted - **syscall.fchdir** fd - **syscall.fchmod** fildes, mode - **syscall.fchmodat** dirfd, dirfd\_str, mode, pathname, pathname\_unquoted - **syscall.fchown** fd, group, owner - **syscall.fchown16** fd, group, owner - **syscall.fchownat** dirfd, dirfd\_str, flags, flags\_str, group, owner, pathname, pathname\_unquoted - **syscall.fcntl** arg, cmd, cmd\_str, fd - **syscall.fdatasync** fd - **syscall.fgetxattr** filedes, name\_str, name\_str\_unquoted, size, value\_uaddr - **syscall.finit\_module** fd, flags, flags\_str, uargs, uargs\_unquoted - **syscall.flistxattr** filedes, list\_uaddr, size - **syscall.flock** fd, operation - **syscall.fork** - **syscall.fremovexattr** filedes, name\_str, name\_str\_unquoted, name\_uaddr - **syscall.fsetxattr** filedes, flags, flags\_str, name\_str, name\_str\_unquoted, name\_uaddr, size, value\_str, value\_uaddr - **syscall.fstat** buf\_uaddr, filedes - **syscall.fstatat** buf\_uaddr, dirfd, dirfd\_str, flags, flags\_str, path, path\_unquoted - **syscall.fstatfs** buf\_uaddr, fd - **syscall.fstatfs64** buf\_uaddr, fd, sz - **syscall.fsync** fd - **syscall.ftruncate** fd, length - **syscall.ftruncate64** $id, $regs, fd, int, length, pt\_regs\* - **syscall.futex** futex\_uaddr, op, uaddr2\_uaddr, utime\_uaddr, val3, val - **syscall.futimesat** dirfd, dirfd\_str, filename, filename\_uaddr, filename\_unquoted, tvp\_str, tvp\_uaddr - **syscall.get\_mempolicy** addr, flags, flags\_str, maxnode, nmask\_uaddr, policy\_uaddr - **syscall.get\_robust\_list** len\_uaddr, list\_head\_uaddr, pid - **syscall.get\_thread\_area** u\_info\_str, u\_info\_uaddr - **syscall.getcpu** cpu\_uaddr, node\_uaddr, tcache\_uaddr - **syscall.getcwd** buf\_uaddr, size - **syscall.getdents** count, dirp\_uaddr, fd - **syscall.getegid** - **syscall.geteuid** - **syscall.getgid** - **syscall.getgroups** list\_uaddr, size - **syscall.getitimer** value\_uaddr, which - **syscall.getpeername** name\_uaddr, namelen\_uaddr, s - **syscall.getpgid** pid - **syscall.getpgrp** - **syscall.getpid** - **syscall.getppid** - **syscall.getpriority** which, who - **syscall.getrandom** buf, buf\_unquoted, count, flags, flags\_str - **syscall.getresgid** egid\_uaddr, rgid\_uaddr, sgid\_uaddr - **syscall.getresuid** euid\_uaddr, ruid\_uaddr, suid\_uaddr - **syscall.getrlimit** resource, rlim\_uaddr - **syscall.getrusage** usage\_uaddr, who, who\_str - **syscall.getsid** pid - **syscall.getsockname** name\_uaddr, namelen\_uaddr, s - **syscall.getsockopt** fd, level, level\_str, optlen\_uaddr, optname, optname\_str, optval\_uaddr - **syscall.gettid** - **syscall.gettimeofday** tv\_uaddr, tz\_uaddr - **syscall.getuid** - **syscall.getxattr** name\_str, name\_str\_unquoted, path, path\_unquoted, size, value\_uaddr - **syscall.init\_module** len, uargs, uargs\_unquoted, umod\_uaddr - **syscall.inotify\_add\_watch** fd, mask, mask\_str, path, path\_uaddr, path\_unquoted - **syscall.inotify\_init** flags - **syscall.inotify\_rm\_watch** fd, wd - **syscall.io\_cancel** ctx\_id, iocb\_uaddr, result\_uaddr - **syscall.io\_destroy** ctx - **syscall.io\_getevents** ctx\_id, events\_uaddr, min\_nr, nr, timeout\_uaddr, timestr - **syscall.io\_setup** ctxp\_uaddr, maxevents - **syscall.io\_submit** ctx\_id, iocbpp\_uaddr, nr - **syscall.ioctl** argp, fd, request - **syscall.ioperm** from, num, turn\_on - **syscall.iopl** level - **syscall.ioprio\_get** which, which\_str, who - **syscall.ioprio\_set** ioprio, ioprio\_str, which, which\_str, who - **syscall.kcmp** idx1, idx2, pid1, pid2, type, type\_str - **syscall.kexec\_file\_load** cmdline, cmdline\_len, cmdline\_unquoted, flags, flags\_str, initrd\_fd, kernel\_fd - **syscall.kexec\_load** entry, flags, flags\_str, nr\_segments, segments\_uaddr - **syscall.keyctl** arg2, arg3, arg4, arg5, option - **syscall.kill** pid, sig, sig\_name - **syscall.lchown** group, owner, path, path\_unquoted - **syscall.lchown16** group, owner, path, path\_unquoted - **syscall.lgetxattr** name\_str, name\_str\_unquoted, path, path\_unquoted, size, value\_uaddr - **syscall.link** newpath, newpath\_unquoted, oldpath, oldpath\_unquoted - **syscall.linkat** flags, flags\_str, newdirfd, newdirfd\_str, newpath, newpath\_unquoted, olddirfd, olddirfd\_str, oldpath, oldpath\_unquoted - **syscall.listen** backlog, sockfd - **syscall.listxattr** list\_uaddr, path, path\_uaddr, path\_unquoted, size - **syscall.llistxattr** list\_uaddr, path, path\_uaddr, path\_unquoted, size - **syscall.llseek** fd, offset\_high, offset\_low, result\_uaddr, whence, whence\_str - **syscall.lookup\_dcookie** $id, $regs, buffer\_uaddr, cookie, int, len, pt\_regs\* - **syscall.lremovexattr** name\_str, name\_str\_unquoted, name\_uaddr, path, path\_uaddr, path\_unquoted - **syscall.lseek** fildes, offset, whence, whence\_str - **syscall.lsetxattr** flags, flags\_str, name\_str, name\_str\_unquoted, name\_uaddr, path, path\_uaddr, path\_unquoted, size, value\_str, value\_uaddr - **syscall.lstat** buf\_uaddr, path, path\_unquoted - **syscall.madvise** advice, advice\_str, length, start - **syscall.mbind** flags, flags\_str, len, maxnode, mode, mode\_str, nmask\_uaddr, start - **syscall.membarrier** cmd, cmd\_str, flags - **syscall.memfd\_create** flags, flags\_str, uname, uname\_unquoted - **syscall.memfd\_secret** flags, flags\_str - **syscall.migrate\_pages** maxnode, new\_nodes, old\_nodes, pid - **syscall.mincore** length, start, vec\_uaddr - **syscall.mkdir** mode, pathname, pathname\_uaddr, pathname\_unquoted - **syscall.mkdirat** dirfd, dirfd\_str, mode, pahtname\_unquoted, pathname - **syscall.mknod** dev, mode, mode\_str, pathname, pathname\_unquoted - **syscall.mknodat** dev, dirfd, dirfd\_str, mode, mode\_str, pathname, pathname\_unquoted - **syscall.mlock** addr, len - **syscall.mlock2** addr, flags, flags\_str, len - **syscall.mlockall** flags, flags\_str - **syscall.mmap2** fd, flags, flags\_str, length, pgoffset, prot, prot\_str, start - **syscall.modify\_ldt** bytecount, func, ptr\_uaddr - **syscall.mount** data, data\_unquoted, filesystemtype, filesystemtype\_unquoted, mountflags, mountflags\_str, source, source\_unquoted, target, target\_unquoted - **syscall.move\_pages** flags, flags\_str, nodes, nr\_pages, pages, pid, status - **syscall.mprotect** addr, len, prot, prot\_str - **syscall.mq\_getsetattr** mqdes, u\_mqstat\_uaddr, u\_omqstat\_uaddr - **syscall.mq\_notify** mqdes, notification\_uaddr - **syscall.mq\_open** filename, filename\_unquoted, mode, name\_uaddr, oflag, oflag\_str, u\_attr\_uaddr - **syscall.mq\_timedreceive** abs\_timeout\_uaddr, mqdes, msg\_len, msg\_prio\_uaddr, msg\_ptr\_uaddr - **syscall.mq\_timedsend** abs\_timeout\_uaddr, mqdes, msg\_len, msg\_prio, msg\_ptr\_uaddr - **syscall.mq\_unlink** u\_name, u\_name\_uaddr, u\_name\_unquoted - **syscall.mremap** flags, flags\_str, new\_address, new\_size, old\_address, old\_size - **syscall.msgctl** buf\_uaddr, cmd, cmd\_str, msqid - **syscall.msgget** key, key\_str, msgflg, msgflg\_str - **syscall.msgrcv** msgflg, msgflg\_str, msgp\_uaddr, msgsz, msgtyp, msqid - **syscall.msgsnd** msgflg, msgflg\_str, msgp\_uaddr, msgsz, msqid - **syscall.msync** flags, flags\_str, length, start - **syscall.munlock** addr, len - **syscall.munlockall** - **syscall.munmap** length, start - **syscall.name\_to\_handle\_at** dfd, dfd\_str, flags, flags\_str, handle\_uaddr, mnt\_id\_uaddr, pathname, pathname\_unquoted - **syscall.nanosleep** rem\_uaddr, req\_str, req\_uaddr - **syscall.ni\_syscall** - **syscall.nice** inc - **syscall.open** filename, filename\_unquoted, flags, flags\_str, mode - **syscall.open\_by\_handle\_at** flags, flags\_str, handle\_uaddr, mount\_dfd, mount\_dfd\_str - **syscall.openat** dfd, dfd\_str, filename, filename\_unquoted, flags, flags\_str, mode - **syscall.pause** - **syscall.perf\_event\_open** attr\_uaddr, cpu, flags, flags\_str, group\_fd, pid - **syscall.personality** persona - **syscall.pipe** fildes\_uaddr, flag\_str, flags, pipe0, pipe1 - **syscall.pivot\_root** new\_root\_str, new\_root\_str\_unquoted, old\_root\_str, old\_root\_str\_unquoted - **syscall.pkey\_alloc** flags, init\_val, init\_val\_str - **syscall.pkey\_free** pkey - **syscall.pkey\_mprotect** addr, len, pkey, prot, prot\_str - **syscall.poll** nfds, timeout, ufds\_uaddr - **syscall.ppoll** fds\_uaddr, nfds, sigmask, sigsetsize, tsp, tsp\_str - **syscall.prctl** arg2, arg3, arg4, arg5, option - **syscall.pread** buf\_uaddr, count, fd, offset - **syscall.preadv** count, fd, offset, vector\_uaddr - **syscall.preadv2** count, fd, flags, flags\_str, offset, vector\_uaddr - **syscall.prlimit64** new\_rlim\_str, new\_rlim\_uaddr, old\_rlim\_uaddr, pid, resource, resource\_str - **syscall.process\_vm\_readv** flags, liovcnt, local\_iov\_uaddr, pid, remote\_iov\_uaddr, riovcnt - **syscall.process\_vm\_writev** flags, liovcnt, local\_iov\_uaddr, pid, remote\_iov\_uaddr, riovcnt - **syscall.pselect6** exceptfds, nfds, readfds, sigmask, timeout, timeout\_str, writefds - **syscall.ptrace** addr, data, pid, request - **syscall.pwrite** buf\_str, buf\_uaddr, count, fd, offset - **syscall.pwrite32** $id, $regs, buf\_str, buf\_uaddr, count, fd, int, offset, pt\_regs\* - **syscall.pwritev** count, fd, offset, vector\_uaddr - **syscall.pwritev2** count, fd, flags, flags\_str, offset, vector\_uaddr - **syscall.quotactl** addr\_uaddr, cmd, cmd\_str, id, special, special\_str, special\_str\_unquoted - **syscall.read** buf\_uaddr, count, fd - **syscall.readahead** count, fd, offset - **syscall.readdir** count, dirent, fd - **syscall.readlink** buf\_uaddr, bufsiz, path, path\_unquoted - **syscall.readlinkat** buf\_uaddr, bufsiz, dfd, dfd\_str, path, path\_unquoted - **syscall.readv** count, fd, vector\_uaddr - **syscall.reboot** arg\_uaddr, flag, flag\_str, magic2, magic2\_str, magic, magic\_str - **syscall.recv** buf\_uaddr, flags, flags\_str, len, s - **syscall.recvfrom** addr\_uaddr, addrlen\_uaddr, buf\_uaddr, flags, flags\_str, len, s - **syscall.recvmmsg** flags, flags\_str, mmsg\_uaddr, s, timeout\_str, timeout\_uaddr, vlen - **syscall.recvmsg** flags, flags\_str, msg\_uaddr, s - **syscall.remap\_file\_pages** flags, flags\_str, pgoff, prot, prot\_str, size, start - **syscall.removexattr** name\_str, name\_str\_unquoted, path, path\_unquoted - **syscall.rename** newpath, newpath\_unquoted, oldpath, oldpath\_unquoted - **syscall.renameat** newdfd, newdfd\_str, newname, newname\_str, newname\_str\_unquoted, olddfd, olddfd\_str, oldname, oldname\_str, oldname\_str\_unquoted - **syscall.renameat2** flags, flags\_str, newdfd, newdfd\_str, newname, newname\_str, newname\_str\_unquoted, olddfd, olddfd\_str, oldname, oldname\_str, oldname\_str\_unquoted - **syscall.request\_key** callout\_info\_uaddr, description\_str, description\_str\_unquoted, description\_uaddr, destringid, type\_str, type\_str\_unquoted, type\_uaddr - **syscall.restart\_syscall** - **syscall.rmdir** pathname, pathname\_unquoted - **syscall.rt\_sigaction** act\_str, act\_uaddr, oact\_uaddr, sig, sig\_str, sigsetsize - **syscall.rt\_sigaction32** act\_str, act\_uaddr, oact\_uaddr, sig, sig\_str, sigsetsize - **syscall.rt\_sigpending** set\_uaddr, sigsetsize - **syscall.rt\_sigprocmask** how, how\_str, oldset\_uaddr, set\_str, set\_uaddr, sigsetsize - **syscall.rt\_sigqueueinfo** pid, sig, sig\_name, siginfo\_str, uinfo\_uaddr - **syscall.rt\_sigsuspend** set\_str, set\_uaddr, sigsetsize - **syscall.rt\_sigtimedwait** sigsetsize, uinfo\_str, uinfo\_uaddr, uthese\_str, uthese\_uaddr, uts\_str, uts\_uaddr - **syscall.rt\_tgsigqueueinfo** sig, sig\_str, tgid, tid, uinfo\_str, uinfo\_uaddr - **syscall.sched\_get\_priority\_max** policy, policy\_str - **syscall.sched\_get\_priority\_min** policy, policy\_str - **syscall.sched\_getaffinity** len, mask\_uaddr, pid - **syscall.sched\_getattr** flags, pid, sched\_attr\_str, sched\_attr\_uaddr, size - **syscall.sched\_getparam** p\_uaddr, pid - **syscall.sched\_getscheduler** pid - **syscall.sched\_rr\_get\_interval** pid, tp\_uaddr - **syscall.sched\_setaffinity** len, mask\_uaddr, pid - **syscall.sched\_setattr** flags, pid, sched\_attr\_str, sched\_attr\_uaddr - **syscall.sched\_setparam** p\_uaddr, pid - **syscall.sched\_setscheduler** p\_uaddr, pid, policy, policy\_str - **syscall.sched\_yield** - **syscall.seccomp** flags, flags\_str, op, op\_str, uargs\_uaddr - **syscall.select** exceptfds\_uaddr, n, readfds\_uaddr, timeout\_str, timeout\_uaddr, writefds\_uaddr - **syscall.semctl** arg, cmd, cmdstr, semid, semnum - **syscall.semget** key, key\_str, nsems, semflg, semflg\_str - **syscall.semop** nsops, semid, sops\_uaddr - **syscall.semtimedop** nsops, semid, sops\_uaddr, timeout\_str, timeout\_uaddr - **syscall.send** buf, buf\_uaddr, flags, flags\_str, len, s - **syscall.sendfile** count, in\_fd, offset\_uaddr, out\_fd - **syscall.sendmmsg** flags, flags\_str, mmsg\_uaddr, s, vlen - **syscall.sendmsg** flags, flags\_str, msg\_uaddr, s - **syscall.sendto** buf, buf\_uaddr, flags, flags\_str, len, s, to\_str, to\_uaddr, tolen - **syscall.set\_mempolicy** maxnode, mode, mode\_str, nmask\_uaddr - **syscall.set\_robust\_list** len, list\_head\_uaddr - **syscall.set\_thread\_area** u\_info\_str, u\_info\_uaddr - **syscall.set\_tid\_address** tidptr\_uaddr - **syscall.setdomainname** domainname\_str, domainname\_str\_unquoted, domainname\_uaddr, len - **syscall.setfsgid** fsgid - **syscall.setfsuid** fsuid - **syscall.setgid** gid - **syscall.setgroups** list\_uaddr, size - **syscall.sethostname** hostname\_uaddr, len, name\_str, name\_str\_unquoted - **syscall.setitimer** ovalue\_uaddr, value\_str, value\_uaddr, which, which\_str - **syscall.setns** fd, nstype, nstype\_str - **syscall.setpgid** pgid, pid - **syscall.setpriority** prio, which, which\_str, who - **syscall.setregid** egid, rgid - **syscall.setregid16** egid, rgid - **syscall.setresgid** egid, rgid, sgid - **syscall.setresgid16** egid, rgid, sgid - **syscall.setresuid** euid, ruid, suid - **syscall.setresuid16** euid, ruid, suid - **syscall.setreuid** euid, ruid - **syscall.setreuid16** euid, ruid - **syscall.setrlimit** resource, resource\_str, rlim\_str, rlim\_uaddr - **syscall.setsid** - **syscall.setsockopt** fd, level, level\_str, optlen, optname, optname\_str, optval\_uaddr - **syscall.settimeofday** tv\_str, tv\_uaddr, tz\_str, tz\_uaddr - **syscall.settimeofday32** tv\_str, tv\_uaddr, tz\_str, tz\_uaddr - **syscall.setuid** uid - **syscall.setxattr** flags, flags\_str, name\_str, name\_str\_unquoted, name\_uaddr, path, path\_uaddr, path\_unquoted, size, value\_str, value\_uaddr - **syscall.sgetmask** - **syscall.shmat** shmaddr\_uaddr, shmflg, shmflg\_str, shmid - **syscall.shmctl** buf\_uaddr, cmd, cmd\_str, shmid - **syscall.shmdt** shmaddr\_uaddr - **syscall.shmget** key, shmflg, shmflg\_str, size - **syscall.shutdown** how, how\_str, s - **syscall.sigaction** $id, $regs, act\_str, act\_uaddr, int, oact\_uaddr, pt\_regs\*, sig, sig\_str - **syscall.sigaction32** act\_str, act\_uaddr, oact\_uaddr, sig, sig\_str - **syscall.sigaltstack** uoss\_uaddr, uss\_str, uss\_uaddr - **syscall.signal** handler, handler\_str, sig, sig\_str - **syscall.signalfd** flags - **syscall.sigpending** set - **syscall.sigprocmask** how, how\_str, oldset\_uaddr, set\_uaddr - **syscall.sigsuspend** mask, mask\_str - **syscall.socket** family, family\_str, protocol, protocol\_str, type, type\_str - **syscall.socketpair** family, family\_str, protocol, protocol\_str, sv\_uaddr, type, type\_str - **syscall.splice** fd\_in, fd\_out, flags, flags\_str, len, off\_in, off\_out - **syscall.ssetmask** newmask, newmask\_str - **syscall.stat** buf\_uaddr, filename, filename\_uaddr, filename\_unquoted - **syscall.statfs** buf\_uaddr, path, path\_unquoted - **syscall.statfs64** buf\_uaddr, path, path\_unquoted, sz - **syscall.statx** buf\_uaddr, dfd, dfd\_str, filename, filename\_uaddr, filename\_unquoted, flags, flags\_str, mask, mask\_str - **syscall.stime** t\_uaddr - **syscall.swapoff** path, path\_uaddr, path\_unquoted - **syscall.swapon** path, path\_uaddr, path\_unquoted, swapflags, swapflags\_str - **syscall.symlink** newpath, oldpath, oldpath\_unquoted - **syscall.symlinkat** newdfd, newdfd\_str, newname, newname\_str, newname\_str\_unquoted, oldname, oldname\_str, oldname\_str\_unquoted - **syscall.sync** - **syscall.sync\_file\_range** fd, flags, flags\_str, nbytes, offset - **syscall.syncfs** fd - **syscall.sysctl** $id, $regs, args, int, pt\_regs\* - **syscall.sysfs** arg1, arg2, option - **syscall.sysinfo** info\_str, info\_uaddr - **syscall.syslog** bufp\_uaddr, len, type - **syscall.tee** fdin, fdout, flags, len - **syscall.tgkill** pid, sig, sig\_str, tgid - **syscall.time** t\_uaddr - **syscall.timer\_create** clockid, clockid\_str, evp\_uaddr, timerid\_uaddr - **syscall.timer\_delete** timerid - **syscall.timer\_getoverrun** timerid - **syscall.timer\_gettime** timerid, value\_uaddr - **syscall.timer\_settime** flags, ovalue\_uaddr, timerid, value\_str, value\_uaddr - **syscall.timerfd\_create** clockid, clockid\_str, flags, flags\_str - **syscall.timerfd\_gettime** fd, value\_uaddr - **syscall.timerfd\_settime** fd, flags, flags\_str, ovalue\_uaddr, value\_str, value\_uaddr - **syscall.times** buf\_str, buf\_uaddr - **syscall.tkill** pid, sig, sig\_str - **syscall.truncate** length, path, path\_uaddr, path\_unquoted - **syscall.umask** mask - **syscall.umount** flags, flags\_str, target, target\_unquoted - **syscall.uname** name\_uaddr - **syscall.unlink** pathname, pathname\_uaddr, pathname\_unquoted - **syscall.unlinkat** dfd, dfd\_str, flag, flag\_str, pathname, pathname\_str, pathname\_str\_unquoted - **syscall.unshare** unshare\_flags, unshare\_flags\_str - **syscall.uselib** $id, $regs, int, library, library\_uaddr, library\_unquoted, pt\_regs\* - **syscall.userfaultfd** flags, flags\_str - **syscall.ustat** dev, ubuf\_uaddr - **syscall.ustat32** dev, ubuf\_uaddr - **syscall.utime** actime, buf\_uaddr, filename, filename\_uaddr, filename\_unquoted, modtime - **syscall.utimensat** dfd, dfd\_str, filename, filename\_uaddr, filename\_unquoted, flags, flags\_str, tsp\_str, tsp\_uaddr - **syscall.utimes** filename, filename\_uaddr, filename\_unquoted, tvp\_uaddr, tvp\_uaddr\_str - **syscall.vfork** - **syscall.vhangup** - **syscall.vmsplice** fd, flags, flags\_str, iov, nr\_segs - **syscall.wait4** options, options\_str, pid, rusage\_uaddr, status\_uaddr - **syscall.waitid** infop\_uaddr, options, options\_str, pid, rusage\_uaddr, which, which\_str - **syscall.waitpid** options, options\_str, pid, status\_uaddr - **syscall.write** buf\_str, buf\_uaddr, count, fd - **syscall.writev** count, fd, vector\_uaddr ## SEE ALSO [*stap*(1)](/stap/1.md), [*stapprobes*(3stap)](/stapprobes/3stap.md)