PT_REGS_PARM3_CORE_SYSCALL
#define ___bpf_syswrap_args3(x, args...) ___bpf_syswrap_args2(args), (unsigned long long)PT_REGS_PARM3_CORE_SYSCALL(regs)
arg3_core = PT_REGS_PARM3_CORE_SYSCALL(real_regs);