Is it possible for a tracepoint in eBPF to obtain both parameters and return values?

edit

Yes, it is possible for a tracepoint in eBPF to obtain both parameters and return values. Tracepoints in eBPF can be used to capture kernel events and the data associated with those events. This data can include both input parameters and return values of functions. To capture the return value, the BPF program can use the register that holds the return value after the function call. The function parameters can be accessed through the stack or through specific registers that hold parameter values. By capturing both parameters and return values, eBPF programs can provide detailed insights into the behavior of the kernel and the applications that run on it.