[Feature] Replace context structs for tracepoint/syscall programs

[tsint]

Search before asking

• [X] I had searched in the issues and found no similar feature requirement.

Description

Referencing this issue comment, to avoid the impact of buggy kernels, it is recommended to use struct syscall_trace_exit to prevent issues where incorrect offset calculations lead to the verifier rejecting the BPF progs loading.

Use case

replace struct trace_point_common_exit with struct syscall_trace_exit

Related issues

No response

Are you willing to submit a pull request to implement this on your own?

• [X] Yes I am willing to submit a pull request on my own!

Code of Conduct

• [X] I agree to follow this project's Code of Conduct

[wu-sheng]

@mrproliu Here is another proposal.

[mrproliu]

Yes, we can do this. Please go ahead on this, thanks.