diff --git a/tapset/nd_syscalls2.stp b/tapset/nd_syscalls2.stp
index 5819cfb..f72f2f4 100644
--- a/tapset/nd_syscalls2.stp
+++ b/tapset/nd_syscalls2.stp
@@ -4268,3 +4268,30 @@ probe nd_syscall.writev.return = kprobe.function("compat_sys_writev").return ?,
 	name = "writev"
 	retstr = returnstr(1)
 }
+
+# perf_event_open ____________________________________________
+#
+# SYSCALL_DEFINE5(perf_event_open,
+#               struct perf_event_attr __user *, attr_uptr,
+#               pid_t, pid, int, cpu, int, group_fd, unsigned long, flags)
+probe nd_syscall.perf_event_open = kprobe.function("sys_perf_event_open") ?
+{
+        name = "perf_event_open"
+        asmlinkage()
+        attr_uaddr = pointer_arg(1)
+        pid = int_arg(2)
+        cpu = int_arg(3)
+        group_fd = int_arg(4)
+        flags = ulong_arg(5)
+        flags_str = _perf_event_open_flags_str(flags)
+        argstr = sprintf("%p, %d, %d, %d, %s", attr_uaddr, pid, cpu, group_fd,
+                         _perf_event_open_flags_str(flags))
+}
+probe nd_syscall.perf_event_open.return =
+        kprobe.function("sys_perf_event_open").return ?
+{
+        name = "perf_event_open"
+        retstr = returnstr(1)
+}
+
+
diff --git a/tapset/syscalls2.stp b/tapset/syscalls2.stp
index 828077b..99e2d8f 100644
--- a/tapset/syscalls2.stp
+++ b/tapset/syscalls2.stp
@@ -3592,3 +3592,29 @@ probe syscall.writev.return = kernel.function("compat_sys_writev").return ?,
 	name = "writev"
 	retstr = return_str(1, $return)
 }
+
+# perf_event_open ____________________________________________
+#
+# SYSCALL_DEFINE5(perf_event_open,
+#               struct perf_event_attr __user *, attr_uptr,
+#               pid_t, pid, int, cpu, int, group_fd, unsigned long, flags)
+probe syscall.perf_event_open = kernel.function("sys_perf_event_open").call ?
+{
+        name = "perf_event_open"
+        attr_uaddr = $attr_uptr
+        pid = __int32($pid)
+        cpu = __int32($cpu)
+        group_fd = __int32($group_fd)
+        flags = __int32($flags)
+        flags_str = _perf_event_open_flags_str(flags)
+        argstr = sprintf("%p, %d, %d, %d, %s", attr_uaddr, pid, cpu, group_fd,
+                         _perf_event_open_flags_str(flags))
+}
+
+probe syscall.perf_event_open.return =
+        kernel.function("sys_perf_event_open").return ?
+{
+        name = "perf_event_open"
+        retstr = return_str(1, $return)
+}
+