kprobe:crypto_authenc_esn_decrypt /comm == "copyfail_poc"/ { $req = (struct aead_request *)arg0; printf("authencesn_decrypt: assoclen=0x%x cryptlen=0x%x\n", $req->assoclen, $req->cryptlen); }