syscall.sh / x64 / uretprobe
uretprobe
execute pending return uprobes
sys_uretprobe(void)| number | 335 (0x14f) |
|---|---|
| abi | common |
| entry point | sys_uretprobe |
| since | Linux 6.11 |
| man page | uretprobe(2) |
| source | elixir.bootlin.com |
Registers
| register | value |
|---|---|
rax | 335, the syscall number |
rax | the return value |
Then run syscall to enter the kernel.
Same syscall on other architectures
- x32 1073742159
Get this as JSON: https://api.syscall.sh/v2/syscalls/x64/uretprobe