bpf on score
perform a command on an extended BPF map or program
sys_bpf(int cmd, union bpf_attr *attr, unsigned int size)| number | 280 (0x118) |
|---|---|
| abi | common |
| entry point | sys_bpf |
| since | Linux 3.18 |
| man page | bpf(2) |
| source | elixir.bootlin.com |
Registers
| register | value |
|---|---|
r27 | 280, the syscall number |
r4 | int cmd |
r5 | union bpf_attr *attr |
r6 | unsigned int size |
r4 | the return value |
Then run syscall to enter the kernel.
r7 is the error flag and r4 then holds the positive error number.
This architecture was removed from the Linux kernel in Linux 4.17. The newest release with a syscall table here is Linux 4.16. The other removed architectures live on the historical architectures page.
Same syscall on other architectures
- x64 321
- x86 357
- arm64 280
- arm 386
- riscv64 280
- ia32 357
- x32 1073742145
- loongarch64 280
- ppc64 361
- ppc 361
- s390x 351
- mips64 5315
- mipsn32 6319
- mipso32 4355
- alpha 515
- arc 280
- blackfin 391, removed in 4.17
- cris 358, removed in 4.17
- csky 280
- hexagon 280
- ia64 1341, removed in 6.7
- m68k 354
- metag 280, removed in 4.17
- microblaze 387
- nds32 280, removed in 5.18
- nios2 280
- openrisc 280
- parisc 341
- sh 375
- sparc 349
- sparc64 349
- tilegx 280, removed in 4.17
- tilepro 280, removed in 4.17
- xtensa 340
Get this as JSON: https://api.syscall.sh/v2/syscalls/score/bpf?kernel=all