sys_bpf
asmlinkage long sys_bpf(int cmd, union bpf_attr __user *attr, unsigned int size);
__SYSCALL(__NR_bpf, sys_bpf)
FN(sys_bpf, 166, ##ctx) \
__SYSCALL(__NR_bpf, sys_bpf)
FN(sys_bpf, 166, ##ctx) \
ret = sys_bpf(BPF_PROG_TEST_RUN, &attr, attr_sz);
err = sys_bpf(cmd, &attr, attr_sz);
err = sys_bpf(BPF_OBJ_GET_INFO_BY_FD, &attr, attr_sz);
err = sys_bpf(BPF_TASK_FD_QUERY, &attr, attr_sz);
ret = sys_bpf(BPF_PROG_BIND_MAP, &attr, attr_sz);
err = sys_bpf(BPF_PROG_STREAM_READ_BY_FD, &attr, attr_sz);
err = sys_bpf(BPF_PROG_ASSOC_STRUCT_OPS, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_UPDATE_ELEM, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_LOOKUP_ELEM, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_LOOKUP_ELEM, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_LOOKUP_AND_DELETE_ELEM, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_LOOKUP_AND_DELETE_ELEM, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_DELETE_ELEM, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_DELETE_ELEM, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_GET_NEXT_KEY, &attr, attr_sz);
ret = sys_bpf(BPF_MAP_FREEZE, &attr, attr_sz);
ret = sys_bpf(cmd, &attr, attr_sz);
ret = sys_bpf(BPF_OBJ_PIN, &attr, attr_sz);
ret = sys_bpf(BPF_PROG_ATTACH, &attr, attr_sz);
ret = sys_bpf(BPF_PROG_DETACH, &attr, attr_sz);
fd = sys_bpf(cmd, attr, size);
ret = sys_bpf(BPF_LINK_DETACH, &attr, attr_sz);
ret = sys_bpf(BPF_LINK_UPDATE, &attr, attr_sz);
ret = sys_bpf(BPF_PROG_QUERY, &attr, attr_sz);
CASE(KPROBE, sys_bpf, false),
CASE(SYSCALL, sys_bpf, true),