p:kprobes/s1execve_enter do_execve filename=+0(%di):string arg0=+0(+0(%si)):string arg1=+0(+8(%si)):string arg2=+0(+16(%si)):string arg3=+0(+24(%si)):string arg4=+0(+32(%si)):string arg5=+0(+40(%si)):string arg6=+0(+48(%si)):string arg7=+0(+56(%si)):string arg8=+0(+64(%si)):string arg9=+0(+72(%si)):string arg10=+0(+80(%si)):string arg11=+0(+88(%si)):string
r:kprobes/s1execve_exit do_execve ret=%ax:s32
p:kprobes/s1compatexecve_enter compat_do_execve filename=+0(%di):string
r:kprobes/s1compatexecve_exit compat_do_execve ret=%ax:s32
p:kprobes/s1dsoenter do_sys_open dfd=%di:s32 filename=+0(%si):string flags=%dx:s32 mode=%cx:s32
p:kprobes/s1fcreate fsnotify mask=%si:u32
p:kprobes/s1unlinkenter sys_unlink filename=+0(%di):string
p:kprobes/s1unlinkatenter sys_unlinkat dfd=%di:s32 filename=+0(%si):string flags=%dx:s32
p:kprobes/s1renameenter sys_rename oldname=+0(%di):string newname=+0(%si):string
p:kprobes/s1renameatenter sys_renameat olddirfd=%di:s32 oldname=+0(%si):string newdirfd=%dx:s32 newname=+0(%cx):string
p:kprobes/s1dofchmodatenter do_fchmodat dfd=%di:s32 filename=+0(%si):string mode=%dx:s32
r:kprobes/s1dofchmodatexit do_fchmodat ret=%ax:s32
p:kprobes/s1dofilpopen_enter do_filp_open filename=+0(+0(%si)):string flags=+0(%dx):s32
r:kprobes/s1dofilpopen_exit do_filp_open ret=%ax:u64 mode=+64(%ax):u32 inode_mode=+0(+32(%ax)):u16
p:kprobes/s1chdirenter sys_chdir path=+0(%di):string
r:kprobes/s1dsoexit do_sys_open ret=%ax:s64
p:kprobes/s1fchdir_enter sys_fchdir fd=%di:s64