__NR_close
stub_syscall2(__NR_close, fd_map[--num_fds], 0);
BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K,__NR_close,
stub_syscall1(__NR_close, 0);
__SYSCALL(__NR_close, sys_close)
return my_syscall1(__NR_close, fd);
__SYSCALL(__NR_close, sys_close)