Assume that I have a tracepoint eBPF probe that hooks into the chown function.
SEC("tracepoint/syscalls/sys_enter_chown") int bpf_prog(void *ctx) {