TAPSET::SYSCALLS(3stap) TAPSET::SYSCALLS(3stap)

# [NAME](#NAME)

tapset::syscalls - systemtap syscall tapset

# [DESCRIPTION](#DESCRIPTION)

Following is an overview of available syscall probes and convenience variables they offer. By default, each syscall probe has name and argstr convenience variables, which are not included in the overview in order to keep it short. Non dwarf-based nd\_syscall probes are supposed to have the same convenience variables.

[**syscall.accept**](#syscall.accept)

addr\_uaddr, addrlen\_uaddr, sockfd

[**syscall.accept4**](#syscall.accept4)

addr\_uaddr, addrlen\_uaddr, flags, flags\_str, sockfd

[**syscall.access**](#syscall.access)

mode, mode\_str, pathname, pathname\_unquoted

[**syscall.acct**](#syscall.acct)

filename, filename\_unquoted

[**syscall.add\_key**](#syscall.add_key)

description\_uaddr, payload\_uaddr, plen, ringid, type\_uaddr

[**syscall.adjtimex**](#syscall.adjtimex)

buf\_str, buf\_uaddr

[**syscall.alarm**](#syscall.alarm)

seconds

[**syscall.arch\_prctl**](#syscall.arch_prctl)

addr, code, code\_str

[**syscall.bdflush**](#syscall.bdflush)

$id, $regs, data, data\_str, func, int, pt\_regs*

[**syscall.bind**](#syscall.bind)

addrlen, my\_addr\_uaddr, sockfd, uaddr\_af, uaddr\_ip, uaddr\_ip\_port, uaddr\_ipv6\_flowinfo, uaddr\_ipv6\_scope\_id

[**syscall.bpf**](#syscall.bpf)

attr\_uaddr, cmd, cmd\_str, size

[**syscall.brk**](#syscall.brk)

brk

[**syscall.capget**](#syscall.capget)

data\_uaddr, header\_uaddr

[**syscall.capset**](#syscall.capset)

data\_uaddr, header\_uaddr

[**syscall.chdir**](#syscall.chdir)

path, path\_unquoted

[**syscall.chmod**](#syscall.chmod)

mode, path, path\_unquoted

[**syscall.chown**](#syscall.chown)

group, owner, path, path\_unquoted

[**syscall.chown16**](#syscall.chown16)

group, owner, path, path\_unquoted

[**syscall.chroot**](#syscall.chroot)

path, path\_unquoted

[**syscall.clock\_adjtime**](#syscall.clock_adjtime)

clk\_id, clk\_id\_str, tx\_uaddr, tx\_uaddr\_str

[**syscall.clock\_getres**](#syscall.clock_getres)

clk\_id, clk\_id\_str, res\_uaddr

[**syscall.clock\_gettime**](#syscall.clock_gettime)

clk\_id, clk\_id\_str, tp\_uaddr

[**syscall.clock\_nanosleep**](#syscall.clock_nanosleep)

clk\_id, clk\_id\_str, flags, flags\_str, rem\_uaddr, req\_str, req\_uaddr

[**syscall.clock\_settime**](#syscall.clock_settime)

clk\_id, clk\_id\_str, tp\_uaddr, tp\_uaddr\_str

[**syscall.clone**](#syscall.clone)

$id, $regs, child\_tid\_uaddr, clone\_flags, int, parent\_tid\_uaddr, pt\_regs\*, stack\_start

[**syscall.close**](#syscall.close)

fd

[**syscall.compat\_adjtimex**](#syscall.compat_adjtimex)

$id, $regs, buf\_str, buf\_uaddr, int, pt\_regs*

[**syscall.compat\_clock\_nanosleep**](#syscall.compat_clock_nanosleep)

$id, $regs, clk\_id, clk\_id\_str, flags, flags\_str, int, pt\_regs\*, rem\_uaddr, req\_str, req\_uaddr

[**syscall.compat\_execve**](#syscall.compat_execve)

args, env\_str, filename

[**syscall.compat\_execveat**](#syscall.compat_execveat)

args, dirfd, dirfd\_str, env\_str, filename, flags, flags\_str

[**syscall.compat\_fadvise64**](#syscall.compat_fadvise64)

$id, $regs, advice, advice\_str, fd, int, len, offset, pt\_regs*

[**syscall.compat\_fadvise64\_64**](#syscall.compat_fadvise64_64)

$id, $regs, advice, advice\_str, fd, int, len, offset, pt\_regs*

[**syscall.compat\_fallocate**](#syscall.compat_fallocate)

$id, $regs, fd, int, len, mode, mode\_str, offset, pt\_regs*

[**syscall.compat\_ftruncate64**](#syscall.compat_ftruncate64)

$id, $regs, fd, int, length, pt\_regs*

[**syscall.compat\_futex**](#syscall.compat_futex)

$id, $regs, futex\_uaddr, int, op, pt\_regs\*, uaddr2\_uaddr, utime\_uaddr, val3, val

[**syscall.compat\_futimesat**](#syscall.compat_futimesat)

$id, $regs, dirfd, dirfd\_str, filename, filename\_uaddr, filename\_unquoted, int, pt\_regs\*, tvp\_str, tvp\_uaddr

[**syscall.compat\_getitimer**](#syscall.compat_getitimer)

value\_uaddr, which

[**syscall.compat\_lookup\_dcookie**](#syscall.compat_lookup_dcookie)

$id, $regs, buffer\_uaddr, cookie, int, len, pt\_regs*

[**syscall.compat\_nanosleep**](#syscall.compat_nanosleep)

$id, $regs, int, pt\_regs\*, rem\_uaddr, req\_str, req\_uaddr

[**syscall.compat\_ppoll**](#syscall.compat_ppoll)

$id, $regs, fds\_uaddr, int, nfds, pt\_regs\*, sigmask, sigsetsize, tsp, tsp\_str

[**syscall.compat\_pselect6**](#syscall.compat_pselect6)

$id, $regs, exceptfds, int, nfds, pt\_regs\*, readfds, sigmask, timeout, timeout\_str, writefds

[**syscall.compat\_readahead**](#syscall.compat_readahead)

$id, $regs, count, fd, int, offset, pt\_regs*

[**syscall.compat\_recvmmsg**](#syscall.compat_recvmmsg)

$id, $regs, flags, flags\_str, int, mmsg\_uaddr, pt\_regs\*, s, timeout\_str, timeout\_uaddr, vlen

[**syscall.compat\_select**](#syscall.compat_select)

exceptfds\_uaddr, n, readfds\_uaddr, timeout\_str, timeout\_uaddr, writefds\_uaddr

[**syscall.compat\_setitimer**](#syscall.compat_setitimer)

ovalue\_uaddr, value\_str, value\_uaddr, which, which\_str

[**syscall.compat\_signalfd**](#syscall.compat_signalfd)

flags

[**syscall.compat\_sys\_msgctl**](#syscall.compat_sys_msgctl)

buf\_uaddr, cmd, cmd\_str, msqid

[**syscall.compat\_sys\_msgrcv**](#syscall.compat_sys_msgrcv)

msgflg, msgflg\_str, msgp\_uaddr, msgsz, msgtyp, msqid

[**syscall.compat\_sys\_msgsnd**](#syscall.compat_sys_msgsnd)

msgflg, msgflg\_str, msgp\_uaddr, msgsz, msqid

[**syscall.compat\_sys\_recvmsg**](#syscall.compat_sys_recvmsg)

flags, flags\_str, msg\_uaddr, s

[**syscall.compat\_sys\_semctl**](#syscall.compat_sys_semctl)

arg, cmd, cmdstr, semid, semnum

[**syscall.compat\_sys\_semtimedop**](#syscall.compat_sys_semtimedop)

nsops, semid, sops\_uaddr, timeout\_str, timeout\_uaddr

[**syscall.compat\_sys\_sendmsg**](#syscall.compat_sys_sendmsg)

flags, flags\_str, msg\_uaddr, s

[**syscall.compat\_sys\_shmat**](#syscall.compat_sys_shmat)

shmaddr\_uaddr, shmflg, shmflg\_str, shmid

[**syscall.compat\_sys\_shmctl**](#syscall.compat_sys_shmctl)

buf\_uaddr, cmd, cmd\_str, shmid

[**syscall.compat\_sys\_utimes**](#syscall.compat_sys_utimes)

$id, $regs, filename, filename\_unquoted, int, pt\_regs\*, timeval, tvp\_uaddr\_str

[**syscall.compat\_truncate64**](#syscall.compat_truncate64)

$id, $regs, int, length, path, path\_uaddr, path\_unquoted, pt\_regs*

[**syscall.compat\_utime**](#syscall.compat_utime)

$id, $regs, actime, buf\_uaddr, filename, filename\_uaddr, filename\_unquoted, int, modtime, pt\_regs*

[**syscall.compat\_utimensat**](#syscall.compat_utimensat)

$id, $regs, dfd, dfd\_str, filename, filename\_uaddr, filename\_unquoted, flags, flags\_str, int, pt\_regs\*, tsp\_str, tsp\_uaddr

[**syscall.compat\_vmsplice**](#syscall.compat_vmsplice)

$id, $regs, fd, flags, flags\_str, int, iov, nr\_segs, pt\_regs*

[**syscall.connect**](#syscall.connect)

addrlen, serv\_addr\_uaddr, sockfd, uaddr\_af, uaddr\_ip, uaddr\_ip\_port, uaddr\_ipv6\_flowinfo, uaddr\_ipv6\_scope\_id

[**syscall.copy\_file\_range**](#syscall.copy_file_range)

fd\_in, fd\_out, flags, len, off\_in, off\_out

[**syscall.creat**](#syscall.creat)

mode, pathname, pathname\_unquoted

[**syscall.delete\_module**](#syscall.delete_module)

flags, flags\_str, name\_user, name\_user\_unquoted

[**syscall.dup**](#syscall.dup)

oldfd

[**syscall.dup2**](#syscall.dup2)

flags, flags\_str, newfd, oldfd

[**syscall.dup3**](#syscall.dup3)

flags, flags\_str, newfd, oldfd

[**syscall.epoll\_create**](#syscall.epoll_create)

flags, size

[**syscall.epoll\_ctl**](#syscall.epoll_ctl)

epfd, event\_uaddr, fd, op, op\_str

[**syscall.epoll\_pwait**](#syscall.epoll_pwait)

epfd, events\_uaddr, maxevents, sigmask\_uaddr, sigsetsize, timeout

[**syscall.epoll\_wait**](#syscall.epoll_wait)

epfd, events\_uaddr, maxevents, timeout

[**syscall.eventfd**](#syscall.eventfd)

count, flags, flags\_str

[**syscall.execve**](#syscall.execve)

args, env\_str, filename

[**syscall.execveat**](#syscall.execveat)

args, dirfd, dirfd\_str, env\_str, filename, flags, flags\_str

[**syscall.exit**](#syscall.exit)

status

[**syscall.exit\_group**](#syscall.exit_group)

status

[**syscall.faccessat**](#syscall.faccessat)

dirfd, dirfd\_str, mode, mode\_str, pathname, pathname\_unquoted

[**syscall.faccessat2**](#syscall.faccessat2)

dirfd, dirfd\_str, flags, flags\_str, mode, mode\_str, pathname, pathname\_unquoted

[**syscall.fadvise64**](#syscall.fadvise64)

advice, advice\_str, fd, len, offset

[**syscall.fadvise64\_64**](#syscall.fadvise64_64)

$id, $regs, advice, advice\_str, fd, int, len, offset, pt\_regs*

[**syscall.fallocate**](#syscall.fallocate)

fd, len, mode, mode\_str, offset

[**syscall.fanotify\_init**](#syscall.fanotify_init)

event\_f\_flags, event\_f\_flags\_str, flags, flags\_str

[**syscall.fanotify\_mark**](#syscall.fanotify_mark)

dirfd, dirfd\_str, fanotify\_fd, flags, flags\_str, mask, mask\_str, pathname, pathname\_unquoted

[**syscall.fchdir**](#syscall.fchdir)

fd

[**syscall.fchmod**](#syscall.fchmod)

fildes, mode

[**syscall.fchmodat**](#syscall.fchmodat)

dirfd, dirfd\_str, mode, pathname, pathname\_unquoted

[**syscall.fchown**](#syscall.fchown)

fd, group, owner

[**syscall.fchown16**](#syscall.fchown16)

fd, group, owner

[**syscall.fchownat**](#syscall.fchownat)

dirfd, dirfd\_str, flags, flags\_str, group, owner, pathname, pathname\_unquoted

[**syscall.fcntl**](#syscall.fcntl)

arg, cmd, cmd\_str, fd

[**syscall.fdatasync**](#syscall.fdatasync)

fd

[**syscall.fgetxattr**](#syscall.fgetxattr)

filedes, name\_str, name\_str\_unquoted, size, value\_uaddr

[**syscall.file\_getattr**](#syscall.file_getattr)

at\_flags, dfd, dfd\_str, dfd\_str\_unquoted, filename, filename\_str, filename\_str\_unquoted, ufattr, usize

[**syscall.file\_setattr**](#syscall.file_setattr)

at\_flags, dfd, dfd\_str, dfd\_str\_unquoted, filename, filename\_str, filename\_str\_unquoted, ufattr, usize

[**syscall.finit\_module**](#syscall.finit_module)

fd, flags, flags\_str, uargs, uargs\_unquoted

[**syscall.flistxattr**](#syscall.flistxattr)

filedes, list\_uaddr, size

[**syscall.flock**](#syscall.flock)

fd, operation

[**syscall.fork**](#syscall.fork)

[**syscall.fremovexattr**](#syscall.fremovexattr)

filedes, name\_str, name\_str\_unquoted, name\_uaddr

[**syscall.fsetxattr**](#syscall.fsetxattr)

filedes, flags, flags\_str, name\_str, name\_str\_unquoted, name\_uaddr, size, value\_str, value\_uaddr

[**syscall.fstat**](#syscall.fstat)

buf\_uaddr, filedes

[**syscall.fstatat**](#syscall.fstatat)

buf\_uaddr, dirfd, dirfd\_str, flags, flags\_str, path, path\_unquoted

[**syscall.fstatfs**](#syscall.fstatfs)

buf\_uaddr, fd

[**syscall.fstatfs64**](#syscall.fstatfs64)

buf\_uaddr, fd, sz

[**syscall.fsync**](#syscall.fsync)

fd

[**syscall.ftruncate**](#syscall.ftruncate)

fd, length

[**syscall.ftruncate64**](#syscall.ftruncate64)

$id, $regs, fd, int, length, pt\_regs*

[**syscall.futex**](#syscall.futex)

futex\_uaddr, op, uaddr2\_uaddr, utime\_uaddr, val3, val

[**syscall.futimesat**](#syscall.futimesat)

dirfd, dirfd\_str, filename, filename\_uaddr, filename\_unquoted, tvp\_str, tvp\_uaddr

[**syscall.get\_mempolicy**](#syscall.get_mempolicy)

addr, flags, flags\_str, maxnode, nmask\_uaddr, policy\_uaddr

[**syscall.get\_robust\_list**](#syscall.get_robust_list)

len\_uaddr, list\_head\_uaddr, pid

[**syscall.get\_thread\_area**](#syscall.get_thread_area)

u\_info\_str, u\_info\_uaddr

[**syscall.getcpu**](#syscall.getcpu)

cpu\_uaddr, node\_uaddr, tcache\_uaddr

[**syscall.getcwd**](#syscall.getcwd)

buf\_uaddr, size

[**syscall.getdents**](#syscall.getdents)

count, dirp\_uaddr, fd

[**syscall.getegid**](#syscall.getegid)

[**syscall.geteuid**](#syscall.geteuid)

[**syscall.getgid**](#syscall.getgid)

[**syscall.getgroups**](#syscall.getgroups)

list\_uaddr, size

[**syscall.getitimer**](#syscall.getitimer)

value\_uaddr, which

[**syscall.getpeername**](#syscall.getpeername)

name\_uaddr, namelen\_uaddr, s

[**syscall.getpgid**](#syscall.getpgid)

pid

[**syscall.getpgrp**](#syscall.getpgrp)

[**syscall.getpid**](#syscall.getpid)

[**syscall.getppid**](#syscall.getppid)

[**syscall.getpriority**](#syscall.getpriority)

which, who

[**syscall.getrandom**](#syscall.getrandom)

buf, buf\_unquoted, count, flags, flags\_str

[**syscall.getresgid**](#syscall.getresgid)

egid\_uaddr, rgid\_uaddr, sgid\_uaddr

[**syscall.getresuid**](#syscall.getresuid)

euid\_uaddr, ruid\_uaddr, suid\_uaddr

[**syscall.getrlimit**](#syscall.getrlimit)

resource, rlim\_uaddr

[**syscall.getrusage**](#syscall.getrusage)

usage\_uaddr, who, who\_str

[**syscall.getsid**](#syscall.getsid)

pid

[**syscall.getsockname**](#syscall.getsockname)

name\_uaddr, namelen\_uaddr, s

[**syscall.getsockopt**](#syscall.getsockopt)

fd, level, level\_str, optlen\_uaddr, optname, optname\_str, optval\_uaddr

[**syscall.gettid**](#syscall.gettid)

[**syscall.gettimeofday**](#syscall.gettimeofday)

tv\_uaddr, tz\_uaddr

[**syscall.getuid**](#syscall.getuid)

[**syscall.getxattr**](#syscall.getxattr)

name\_str, name\_str\_unquoted, path, path\_unquoted, size, value\_uaddr

[**syscall.init\_module**](#syscall.init_module)

len, uargs, uargs\_unquoted, umod\_uaddr

[**syscall.inotify\_add\_watch**](#syscall.inotify_add_watch)

fd, mask, mask\_str, path, path\_uaddr, path\_unquoted

[**syscall.inotify\_init**](#syscall.inotify_init)

flags

[**syscall.inotify\_rm\_watch**](#syscall.inotify_rm_watch)

fd, wd

[**syscall.io\_cancel**](#syscall.io_cancel)

ctx\_id, iocb\_uaddr, result\_uaddr

[**syscall.io\_destroy**](#syscall.io_destroy)

ctx

[**syscall.io\_getevents**](#syscall.io_getevents)

ctx\_id, events\_uaddr, min\_nr, nr, timeout\_uaddr, timestr

[**syscall.io\_setup**](#syscall.io_setup)

ctxp\_uaddr, maxevents

[**syscall.io\_submit**](#syscall.io_submit)

ctx\_id, iocbpp\_uaddr, nr

[**syscall.ioctl**](#syscall.ioctl)

argp, fd, request

[**syscall.ioperm**](#syscall.ioperm)

from, num, turn\_on

[**syscall.iopl**](#syscall.iopl)

level

[**syscall.ioprio\_get**](#syscall.ioprio_get)

which, which\_str, who

[**syscall.ioprio\_set**](#syscall.ioprio_set)

ioprio, ioprio\_str, which, which\_str, who

[**syscall.kcmp**](#syscall.kcmp)

idx1, idx2, pid1, pid2, type, type\_str

[**syscall.kexec\_file\_load**](#syscall.kexec_file_load)

cmdline, cmdline\_len, cmdline\_unquoted, flags, flags\_str, initrd\_fd, kernel\_fd

[**syscall.kexec\_load**](#syscall.kexec_load)

entry, flags, flags\_str, nr\_segments, segments\_uaddr

[**syscall.keyctl**](#syscall.keyctl)

arg2, arg3, arg4, arg5, option

[**syscall.kill**](#syscall.kill)

pid, sig, sig\_name

[**syscall.lchown**](#syscall.lchown)

group, owner, path, path\_unquoted

[**syscall.lchown16**](#syscall.lchown16)

group, owner, path, path\_unquoted

[**syscall.lgetxattr**](#syscall.lgetxattr)

name\_str, name\_str\_unquoted, path, path\_unquoted, size, value\_uaddr

[**syscall.link**](#syscall.link)

newpath, newpath\_unquoted, oldpath, oldpath\_unquoted

[**syscall.linkat**](#syscall.linkat)

flags, flags\_str, newdirfd, newdirfd\_str, newpath, newpath\_unquoted, olddirfd, olddirfd\_str, oldpath, oldpath\_unquoted

[**syscall.listen**](#syscall.listen)

backlog, sockfd

[**syscall.listxattr**](#syscall.listxattr)

list\_uaddr, path, path\_uaddr, path\_unquoted, size

[**syscall.llistxattr**](#syscall.llistxattr)

list\_uaddr, path, path\_uaddr, path\_unquoted, size

[**syscall.llseek**](#syscall.llseek)

fd, offset\_high, offset\_low, result\_uaddr, whence, whence\_str

[**syscall.lookup\_dcookie**](#syscall.lookup_dcookie)

$id, $regs, buffer\_uaddr, cookie, int, len, pt\_regs*

[**syscall.lremovexattr**](#syscall.lremovexattr)

name\_str, name\_str\_unquoted, name\_uaddr, path, path\_uaddr, path\_unquoted

[**syscall.lseek**](#syscall.lseek)

fildes, offset, whence, whence\_str

[**syscall.lsetxattr**](#syscall.lsetxattr)

flags, flags\_str, name\_str, name\_str\_unquoted, name\_uaddr, path, path\_uaddr, path\_unquoted, size, value\_str, value\_uaddr

[**syscall.lsm\_get\_self\_attr**](#syscall.lsm_get_self_attr)

$id, $regs, attr, ctx, flags, int, pt\_regs\*, size

[**syscall.lsm\_set\_self\_attr**](#syscall.lsm_set_self_attr)

$id, $regs, attr, ctx, flags, int, pt\_regs\*, size

[**syscall.lstat**](#syscall.lstat)

buf\_uaddr, path, path\_unquoted

[**syscall.madvise**](#syscall.madvise)

advice, advice\_str, length, start

[**syscall.mbind**](#syscall.mbind)

flags, flags\_str, len, maxnode, mode, mode\_str, nmask\_uaddr, start

[**syscall.membarrier**](#syscall.membarrier)

cmd, cmd\_str, flags

[**syscall.memfd\_create**](#syscall.memfd_create)

flags, flags\_str, uname, uname\_unquoted

[**syscall.memfd\_secret**](#syscall.memfd_secret)

flags, flags\_str

[**syscall.migrate\_pages**](#syscall.migrate_pages)

maxnode, new\_nodes, old\_nodes, pid

[**syscall.mincore**](#syscall.mincore)

length, start, vec\_uaddr

[**syscall.mkdir**](#syscall.mkdir)

mode, pathname, pathname\_uaddr, pathname\_unquoted

[**syscall.mkdirat**](#syscall.mkdirat)

dirfd, dirfd\_str, mode, pathname, pathname\_unquoted

[**syscall.mknod**](#syscall.mknod)

dev, mode, mode\_str, pathname, pathname\_unquoted

[**syscall.mknodat**](#syscall.mknodat)

dev, dirfd, dirfd\_str, mode, mode\_str, pathname, pathname\_unquoted

[**syscall.mlock**](#syscall.mlock)

addr, len

[**syscall.mlock2**](#syscall.mlock2)

addr, flags, flags\_str, len

[**syscall.mlockall**](#syscall.mlockall)

flags, flags\_str

[**syscall.mmap2**](#syscall.mmap2)

fd, flags, flags\_str, length, pgoffset, prot, prot\_str, start

[**syscall.modify\_ldt**](#syscall.modify_ldt)

bytecount, func, ptr\_uaddr

[**syscall.mount**](#syscall.mount)

data, data\_unquoted, filesystemtype, filesystemtype\_unquoted, mountflags, mountflags\_str, source, source\_unquoted, target, target\_unquoted

[**syscall.move\_pages**](#syscall.move_pages)

flags, flags\_str, nodes, nr\_pages, pages, pid, status

[**syscall.mprotect**](#syscall.mprotect)

addr, len, prot, prot\_str

[**syscall.mq\_getsetattr**](#syscall.mq_getsetattr)

mqdes, u\_mqstat\_uaddr, u\_omqstat\_uaddr

[**syscall.mq\_notify**](#syscall.mq_notify)

mqdes, notification\_uaddr

[**syscall.mq\_open**](#syscall.mq_open)

filename, filename\_unquoted, mode, name\_uaddr, oflag, oflag\_str, u\_attr\_uaddr

[**syscall.mq\_timedreceive**](#syscall.mq_timedreceive)

abs\_timeout\_uaddr, mqdes, msg\_len, msg\_prio\_uaddr, msg\_ptr\_uaddr

[**syscall.mq\_timedsend**](#syscall.mq_timedsend)

abs\_timeout\_uaddr, mqdes, msg\_len, msg\_prio, msg\_ptr\_uaddr

[**syscall.mq\_unlink**](#syscall.mq_unlink)

u\_name, u\_name\_uaddr, u\_name\_unquoted

[**syscall.mremap**](#syscall.mremap)

flags, flags\_str, new\_address, new\_size, old\_address, old\_size

[**syscall.msgctl**](#syscall.msgctl)

buf\_uaddr, cmd, cmd\_str, msqid

[**syscall.msgget**](#syscall.msgget)

key, key\_str, msgflg, msgflg\_str

[**syscall.msgrcv**](#syscall.msgrcv)

msgflg, msgflg\_str, msgp\_uaddr, msgsz, msgtyp, msqid

[**syscall.msgsnd**](#syscall.msgsnd)

msgflg, msgflg\_str, msgp\_uaddr, msgsz, msqid

[**syscall.msync**](#syscall.msync)

flags, flags\_str, length, start

[**syscall.munlock**](#syscall.munlock)

addr, len

[**syscall.munlockall**](#syscall.munlockall)

[**syscall.munmap**](#syscall.munmap)

length, start

[**syscall.name\_to\_handle\_at**](#syscall.name_to_handle_at)

dfd, dfd\_str, flags, flags\_str, handle\_uaddr, mnt\_id\_uaddr, pathname, pathname\_unquoted

[**syscall.nanosleep**](#syscall.nanosleep)

rem\_uaddr, req\_str, req\_uaddr

[**syscall.ni\_syscall**](#syscall.ni_syscall)

[**syscall.nice**](#syscall.nice)

inc

[**syscall.open**](#syscall.open)

filename, filename\_unquoted, flags, flags\_str, mode

[**syscall.open\_by\_handle\_at**](#syscall.open_by_handle_at)

flags, flags\_str, handle\_uaddr, mount\_dfd, mount\_dfd\_str

[**syscall.openat**](#syscall.openat)

dfd, dfd\_str, filename, filename\_unquoted, flags, flags\_str, mode

[**syscall.pause**](#syscall.pause)

[**syscall.perf\_event\_open**](#syscall.perf_event_open)

attr\_uaddr, cpu, flags, flags\_str, group\_fd, pid

[**syscall.personality**](#syscall.personality)

persona

[**syscall.pipe**](#syscall.pipe)

fildes\_uaddr, flag\_str, flags, pipe0, pipe1

[**syscall.pivot\_root**](#syscall.pivot_root)

new\_root\_str, new\_root\_str\_unquoted, old\_root\_str, old\_root\_str\_unquoted

[**syscall.pkey\_alloc**](#syscall.pkey_alloc)

flags, init\_val, init\_val\_str

[**syscall.pkey\_free**](#syscall.pkey_free)

pkey

[**syscall.pkey\_mprotect**](#syscall.pkey_mprotect)

addr, len, pkey, prot, prot\_str

[**syscall.poll**](#syscall.poll)

nfds, timeout, ufds\_uaddr

[**syscall.ppoll**](#syscall.ppoll)

fds\_uaddr, nfds, sigmask, sigsetsize, tsp, tsp\_str

[**syscall.prctl**](#syscall.prctl)

arg2, arg3, arg4, arg5, option

[**syscall.pread**](#syscall.pread)

buf\_uaddr, count, fd, offset

[**syscall.preadv**](#syscall.preadv)

count, fd, offset, vector\_uaddr

[**syscall.preadv2**](#syscall.preadv2)

count, fd, flags, flags\_str, offset, vector\_uaddr

[**syscall.prlimit64**](#syscall.prlimit64)

new\_rlim\_str, new\_rlim\_uaddr, old\_rlim\_uaddr, pid, resource, resource\_str

[**syscall.process\_vm\_readv**](#syscall.process_vm_readv)

flags, liovcnt, local\_iov\_uaddr, pid, remote\_iov\_uaddr, riovcnt

[**syscall.process\_vm\_writev**](#syscall.process_vm_writev)

flags, liovcnt, local\_iov\_uaddr, pid, remote\_iov\_uaddr, riovcnt

[**syscall.pselect6**](#syscall.pselect6)

exceptfds, nfds, readfds, sigmask, timeout, timeout\_str, writefds

[**syscall.ptrace**](#syscall.ptrace)

addr, data, pid, request

[**syscall.pwrite**](#syscall.pwrite)

buf\_str, buf\_uaddr, count, fd, offset

[**syscall.pwrite32**](#syscall.pwrite32)

$id, $regs, buf\_str, buf\_uaddr, count, fd, int, offset, pt\_regs*

[**syscall.pwritev**](#syscall.pwritev)

count, fd, offset, vector\_uaddr

[**syscall.pwritev2**](#syscall.pwritev2)

count, fd, flags, flags\_str, offset, vector\_uaddr

[**syscall.quotactl**](#syscall.quotactl)

addr\_uaddr, cmd, cmd\_str, id, special, special\_str, special\_str\_unquoted

[**syscall.read**](#syscall.read)

buf\_uaddr, count, fd

[**syscall.readahead**](#syscall.readahead)

count, fd, offset

[**syscall.readdir**](#syscall.readdir)

count, dirent, fd

[**syscall.readlink**](#syscall.readlink)

buf\_uaddr, bufsiz, path, path\_unquoted

[**syscall.readlinkat**](#syscall.readlinkat)

buf\_uaddr, bufsiz, dfd, dfd\_str, path, path\_unquoted

[**syscall.readv**](#syscall.readv)

count, fd, vector\_uaddr

[**syscall.reboot**](#syscall.reboot)

arg\_uaddr, flag, flag\_str, magic2, magic2\_str, magic, magic\_str

[**syscall.recv**](#syscall.recv)

buf\_uaddr, flags, flags\_str, len, s

[**syscall.recvfrom**](#syscall.recvfrom)

addr\_uaddr, addrlen\_uaddr, buf\_uaddr, flags, flags\_str, len, s

[**syscall.recvmmsg**](#syscall.recvmmsg)

flags, flags\_str, mmsg\_uaddr, s, timeout\_str, timeout\_uaddr, vlen

[**syscall.recvmsg**](#syscall.recvmsg)

flags, flags\_str, msg\_uaddr, s

[**syscall.remap\_file\_pages**](#syscall.remap_file_pages)

flags, flags\_str, pgoff, prot, prot\_str, size, start

[**syscall.removexattr**](#syscall.removexattr)

name\_str, name\_str\_unquoted, path, path\_unquoted

[**syscall.rename**](#syscall.rename)

newpath, newpath\_unquoted, oldpath, oldpath\_unquoted

[**syscall.renameat**](#syscall.renameat)

newdfd, newdfd\_str, newname, newname\_str, newname\_str\_unquoted, olddfd, olddfd\_str, oldname, oldname\_str, oldname\_str\_unquoted

[**syscall.renameat2**](#syscall.renameat2)

flags, flags\_str, newdfd, newdfd\_str, newname, newname\_str, newname\_str\_unquoted, olddfd, olddfd\_str, oldname, oldname\_str, oldname\_str\_unquoted

[**syscall.request\_key**](#syscall.request_key)

callout\_info\_uaddr, description\_str, description\_str\_unquoted, description\_uaddr, destringid, type\_str, type\_str\_unquoted, type\_uaddr

[**syscall.restart\_syscall**](#syscall.restart_syscall)

[**syscall.rmdir**](#syscall.rmdir)

pathname, pathname\_unquoted

[**syscall.rt\_sigaction**](#syscall.rt_sigaction)

act\_str, act\_uaddr, oact\_uaddr, sig, sig\_str, sigsetsize

[**syscall.rt\_sigaction32**](#syscall.rt_sigaction32)

act\_str, act\_uaddr, oact\_uaddr, sig, sig\_str, sigsetsize

[**syscall.rt\_sigpending**](#syscall.rt_sigpending)

set\_uaddr, sigsetsize

[**syscall.rt\_sigprocmask**](#syscall.rt_sigprocmask)

how, how\_str, oldset\_uaddr, set\_str, set\_uaddr, sigsetsize

[**syscall.rt\_sigqueueinfo**](#syscall.rt_sigqueueinfo)

pid, sig, sig\_name, siginfo\_str, uinfo\_uaddr

[**syscall.rt\_sigsuspend**](#syscall.rt_sigsuspend)

set\_str, set\_uaddr, sigsetsize

[**syscall.rt\_sigtimedwait**](#syscall.rt_sigtimedwait)

sigsetsize, uinfo\_str, uinfo\_uaddr, uthese\_str, uthese\_uaddr, uts\_str, uts\_uaddr

[**syscall.rt\_tgsigqueueinfo**](#syscall.rt_tgsigqueueinfo)

sig, sig\_str, tgid, tid, uinfo\_str, uinfo\_uaddr

[**syscall.sched\_get\_priority\_max**](#syscall.sched_get_priority_max)

policy, policy\_str

[**syscall.sched\_get\_priority\_min**](#syscall.sched_get_priority_min)

policy, policy\_str

[**syscall.sched\_getaffinity**](#syscall.sched_getaffinity)

len, mask\_uaddr, pid

[**syscall.sched\_getattr**](#syscall.sched_getattr)

flags, pid, sched\_attr\_str, sched\_attr\_uaddr, size

[**syscall.sched\_getparam**](#syscall.sched_getparam)

p\_uaddr, pid

[**syscall.sched\_getscheduler**](#syscall.sched_getscheduler)

pid

[**syscall.sched\_rr\_get\_interval**](#syscall.sched_rr_get_interval)

pid, tp\_uaddr

[**syscall.sched\_setaffinity**](#syscall.sched_setaffinity)

len, mask\_uaddr, pid

[**syscall.sched\_setattr**](#syscall.sched_setattr)

flags, pid, sched\_attr\_str, sched\_attr\_uaddr

[**syscall.sched\_setparam**](#syscall.sched_setparam)

p\_uaddr, pid

[**syscall.sched\_setscheduler**](#syscall.sched_setscheduler)

p\_uaddr, pid, policy, policy\_str

[**syscall.sched\_yield**](#syscall.sched_yield)

[**syscall.seccomp**](#syscall.seccomp)

flags, flags\_str, op, op\_str, uargs\_uaddr

[**syscall.select**](#syscall.select)

exceptfds\_uaddr, n, readfds\_uaddr, timeout\_str, timeout\_uaddr, writefds\_uaddr

[**syscall.semctl**](#syscall.semctl)

arg, cmd, cmdstr, semid, semnum

[**syscall.semget**](#syscall.semget)

key, key\_str, nsems, semflg, semflg\_str

[**syscall.semop**](#syscall.semop)

nsops, semid, sops\_uaddr

[**syscall.semtimedop**](#syscall.semtimedop)

nsops, semid, sops\_uaddr, timeout\_str, timeout\_uaddr

[**syscall.send**](#syscall.send)

buf, buf\_uaddr, flags, flags\_str, len, s

[**syscall.sendfile**](#syscall.sendfile)

count, in\_fd, offset\_uaddr, out\_fd

[**syscall.sendmmsg**](#syscall.sendmmsg)

flags, flags\_str, mmsg\_uaddr, s, vlen

[**syscall.sendmsg**](#syscall.sendmsg)

flags, flags\_str, msg\_uaddr, s

[**syscall.sendto**](#syscall.sendto)

buf, buf\_uaddr, flags, flags\_str, len, s, to\_str, to\_uaddr, tolen

[**syscall.set\_mempolicy**](#syscall.set_mempolicy)

maxnode, mode, mode\_str, nmask\_uaddr

[**syscall.set\_robust\_list**](#syscall.set_robust_list)

len, list\_head\_uaddr

[**syscall.set\_thread\_area**](#syscall.set_thread_area)

u\_info\_str, u\_info\_uaddr

[**syscall.set\_tid\_address**](#syscall.set_tid_address)

tidptr\_uaddr

[**syscall.setdomainname**](#syscall.setdomainname)

domainname\_str, domainname\_str\_unquoted, domainname\_uaddr, len

[**syscall.setfsgid**](#syscall.setfsgid)

fsgid

[**syscall.setfsuid**](#syscall.setfsuid)

fsuid

[**syscall.setgid**](#syscall.setgid)

gid

[**syscall.setgroups**](#syscall.setgroups)

list\_uaddr, size

[**syscall.sethostname**](#syscall.sethostname)

hostname\_uaddr, len, name\_str, name\_str\_unquoted

[**syscall.setitimer**](#syscall.setitimer)

ovalue\_uaddr, value\_str, value\_uaddr, which, which\_str

[**syscall.setns**](#syscall.setns)

fd, nstype, nstype\_str

[**syscall.setpgid**](#syscall.setpgid)

pgid, pid

[**syscall.setpriority**](#syscall.setpriority)

prio, which, which\_str, who

[**syscall.setregid**](#syscall.setregid)

egid, rgid

[**syscall.setregid16**](#syscall.setregid16)

egid, rgid

[**syscall.setresgid**](#syscall.setresgid)

egid, rgid, sgid

[**syscall.setresgid16**](#syscall.setresgid16)

egid, rgid, sgid

[**syscall.setresuid**](#syscall.setresuid)

euid, ruid, suid

[**syscall.setresuid16**](#syscall.setresuid16)

euid, ruid, suid

[**syscall.setreuid**](#syscall.setreuid)

euid, ruid

[**syscall.setreuid16**](#syscall.setreuid16)

euid, ruid

[**syscall.setrlimit**](#syscall.setrlimit)

resource, resource\_str, rlim\_str, rlim\_uaddr

[**syscall.setsid**](#syscall.setsid)

[**syscall.setsockopt**](#syscall.setsockopt)

fd, level, level\_str, optlen, optname, optname\_str, optval\_uaddr

[**syscall.settimeofday**](#syscall.settimeofday)

tv\_str, tv\_uaddr, tz\_str, tz\_uaddr

[**syscall.settimeofday32**](#syscall.settimeofday32)

tv\_str, tv\_uaddr, tz\_str, tz\_uaddr

[**syscall.setuid**](#syscall.setuid)

uid

[**syscall.setxattr**](#syscall.setxattr)

flags, flags\_str, name\_str, name\_str\_unquoted, name\_uaddr, path, path\_uaddr, path\_unquoted, size, value\_str, value\_uaddr

[**syscall.sgetmask**](#syscall.sgetmask)

[**syscall.shmat**](#syscall.shmat)

shmaddr\_uaddr, shmflg, shmflg\_str, shmid

[**syscall.shmctl**](#syscall.shmctl)

buf\_uaddr, cmd, cmd\_str, shmid

[**syscall.shmdt**](#syscall.shmdt)

shmaddr\_uaddr

[**syscall.shmget**](#syscall.shmget)

key, shmflg, shmflg\_str, size

[**syscall.shutdown**](#syscall.shutdown)

how, how\_str, s

[**syscall.sigaction**](#syscall.sigaction)

$id, $regs, act\_str, act\_uaddr, int, oact\_uaddr, pt\_regs\*, sig, sig\_str

[**syscall.sigaction32**](#syscall.sigaction32)

act\_str, act\_uaddr, oact\_uaddr, sig, sig\_str

[**syscall.sigaltstack**](#syscall.sigaltstack)

uoss\_uaddr, uss\_str, uss\_uaddr

[**syscall.signal**](#syscall.signal)

handler, handler\_str, sig, sig\_str

[**syscall.signalfd**](#syscall.signalfd)

flags

[**syscall.sigpending**](#syscall.sigpending)

set

[**syscall.sigprocmask**](#syscall.sigprocmask)

how, how\_str, oldset\_uaddr, set\_uaddr

[**syscall.sigsuspend**](#syscall.sigsuspend)

mask, mask\_str

[**syscall.socket**](#syscall.socket)

family, family\_str, protocol, protocol\_str, type, type\_str

[**syscall.socketpair**](#syscall.socketpair)

family, family\_str, protocol, protocol\_str, sv\_uaddr, type, type\_str

[**syscall.splice**](#syscall.splice)

fd\_in, fd\_out, flags, flags\_str, len, off\_in, off\_out

[**syscall.ssetmask**](#syscall.ssetmask)

newmask, newmask\_str

[**syscall.stat**](#syscall.stat)

buf\_uaddr, filename, filename\_uaddr, filename\_unquoted

[**syscall.statfs**](#syscall.statfs)

buf\_uaddr, path, path\_unquoted

[**syscall.statfs64**](#syscall.statfs64)

buf\_uaddr, path, path\_unquoted, sz

[**syscall.statx**](#syscall.statx)

buf\_uaddr, dfd, dfd\_str, filename, filename\_uaddr, filename\_unquoted, flags, flags\_str, mask, mask\_str

[**syscall.stime**](#syscall.stime)

t\_uaddr

[**syscall.swapoff**](#syscall.swapoff)

path, path\_uaddr, path\_unquoted

[**syscall.swapon**](#syscall.swapon)

path, path\_uaddr, path\_unquoted, swapflags, swapflags\_str

[**syscall.symlink**](#syscall.symlink)

newpath, oldpath, oldpath\_unquoted

[**syscall.symlinkat**](#syscall.symlinkat)

newdfd, newdfd\_str, newname, newname\_str, newname\_str\_unquoted, oldname, oldname\_str, oldname\_str\_unquoted

[**syscall.sync**](#syscall.sync)

[**syscall.sync\_file\_range**](#syscall.sync_file_range)

fd, flags, flags\_str, nbytes, offset

[**syscall.syncfs**](#syscall.syncfs)

fd

[**syscall.sysctl**](#syscall.sysctl)

$id, $regs, args, int, pt\_regs*

[**syscall.sysfs**](#syscall.sysfs)

arg1, arg2, option

[**syscall.sysinfo**](#syscall.sysinfo)

info\_str, info\_uaddr

[**syscall.syslog**](#syscall.syslog)

bufp\_uaddr, len, type

[**syscall.tee**](#syscall.tee)

fdin, fdout, flags, len

[**syscall.tgkill**](#syscall.tgkill)

pid, sig, sig\_str, tgid

[**syscall.time**](#syscall.time)

t\_uaddr

[**syscall.timer\_create**](#syscall.timer_create)

clockid, clockid\_str, evp\_uaddr, timerid\_uaddr

[**syscall.timer\_delete**](#syscall.timer_delete)

timerid

[**syscall.timer\_getoverrun**](#syscall.timer_getoverrun)

timerid

[**syscall.timer\_gettime**](#syscall.timer_gettime)

timerid, value\_uaddr

[**syscall.timer\_settime**](#syscall.timer_settime)

flags, ovalue\_uaddr, timerid, value\_str, value\_uaddr

[**syscall.timerfd\_create**](#syscall.timerfd_create)

clockid, clockid\_str, flags, flags\_str

[**syscall.timerfd\_gettime**](#syscall.timerfd_gettime)

fd, value\_uaddr

[**syscall.timerfd\_settime**](#syscall.timerfd_settime)

fd, flags, flags\_str, ovalue\_uaddr, value\_str, value\_uaddr

[**syscall.times**](#syscall.times)

buf\_str, buf\_uaddr

[**syscall.tkill**](#syscall.tkill)

pid, sig, sig\_str

[**syscall.truncate**](#syscall.truncate)

length, path, path\_uaddr, path\_unquoted

[**syscall.umask**](#syscall.umask)

mask

[**syscall.umount**](#syscall.umount)

flags, flags\_str, target, target\_unquoted

[**syscall.uname**](#syscall.uname)

name\_uaddr

[**syscall.unlink**](#syscall.unlink)

pathname, pathname\_uaddr, pathname\_unquoted

[**syscall.unlinkat**](#syscall.unlinkat)

dfd, dfd\_str, flag, flag\_str, pathname, pathname\_str, pathname\_str\_unquoted

[**syscall.unshare**](#syscall.unshare)

unshare\_flags, unshare\_flags\_str

[**syscall.uselib**](#syscall.uselib)

$id, $regs, int, library, library\_uaddr, library\_unquoted, pt\_regs*

[**syscall.userfaultfd**](#syscall.userfaultfd)

flags, flags\_str

[**syscall.ustat**](#syscall.ustat)

dev, ubuf\_uaddr

[**syscall.ustat32**](#syscall.ustat32)

dev, ubuf\_uaddr

[**syscall.utime**](#syscall.utime)

actime, buf\_uaddr, filename, filename\_uaddr, filename\_unquoted, modtime

[**syscall.utimensat**](#syscall.utimensat)

dfd, dfd\_str, filename, filename\_uaddr, filename\_unquoted, flags, flags\_str, tsp\_str, tsp\_uaddr

[**syscall.utimes**](#syscall.utimes)

filename, filename\_uaddr, filename\_unquoted, tvp\_uaddr, tvp\_uaddr\_str

[**syscall.vfork**](#syscall.vfork)

[**syscall.vhangup**](#syscall.vhangup)

[**syscall.vmsplice**](#syscall.vmsplice)

fd, flags, flags\_str, iov, nr\_segs

[**syscall.wait4**](#syscall.wait4)

options, options\_str, pid, rusage\_uaddr, status\_uaddr

[**syscall.waitid**](#syscall.waitid)

infop\_uaddr, options, options\_str, pid, rusage\_uaddr, which, which\_str

[**syscall.waitpid**](#syscall.waitpid)

options, options\_str, pid, status\_uaddr

[**syscall.write**](#syscall.write)

buf\_str, buf\_uaddr, count, fd

[**syscall.writev**](#syscall.writev)

count, fd, vector\_uaddr

# [SEE ALSO](#SEE_ALSO)

[*stap*(1)](/man/enterprise-packages/systemtap/stap.1), [*stapprobes*(3stap)](/man/enterprise-packages/systemtap/stapprobes.3stap)

September 2026 Systemtap Tapset Reference

---

Document: tapset::syscalls(3stap) from systemtap 5.6-r0 (Chainguard OS)
Source: https://sourceware.org/git/systemtap.git