From: Rong Tao <rongtao@xxxxxxxx> kernel arm64/kernel/sys.c macro __SYSCALL() adds a prefix __arm64_, we should support it for aarch64. The following is the output of the bpftrace script: $ sudo bpftrace -l | grep sys_write ... kprobe:__arm64_sys_write kprobe:__arm64_sys_writev ... Signed-off-by: Rong Tao <rongtao@xxxxxxxx> --- samples/bpf/trace_common.h | 2 ++ 1 file changed, 2 insertions(+) diff --git a/samples/bpf/trace_common.h b/samples/bpf/trace_common.h index 8cb5400aed1f..fafc699af0a3 100644 --- a/samples/bpf/trace_common.h +++ b/samples/bpf/trace_common.h @@ -6,6 +6,8 @@ #define SYSCALL(SYS) "__x64_" __stringify(SYS) #elif defined(__s390x__) #define SYSCALL(SYS) "__s390x_" __stringify(SYS) +#elif defined(__aarch64__) +#define SYSCALL(SYS) "__arm64_" __stringify(SYS) #else #define SYSCALL(SYS) __stringify(SYS) #endif -- 2.39.1