PT_REGS_PARM2_CORE_SYSCALL
#define ___bpf_syswrap_args2(x, args...) ___bpf_syswrap_args1(args), (unsigned long long)PT_REGS_PARM2_CORE_SYSCALL(regs)
arg2_core = PT_REGS_PARM2_CORE_SYSCALL(real_regs);