syscall.sh / arm64 / ptrace

ptrace

process trace

sys_ptrace(long request, long pid, unsigned long addr, unsigned long data)
number117 (0x75)
abicommon
entry pointsys_ptrace
sinceLinux 3.7
man pageptrace(2)
sourceelixir.bootlin.com

Registers

registervalue
x8117, the syscall number
x0long request
x1long pid
x2unsigned long addr
x3unsigned long data
x0the return value

Then run svc #0 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/arm64/ptrace