arch_ptrace...syscall_exit(9)

💅 arch_ptrace...syscall_exit — Kernel API Manual 🎀

okay so bestie, buckle up, because we're diving into arch_ptrace_report_syscall_exit and honestly? it's giving niche-but-iconic. this is the architecture-specific hook for ptrace_report_syscall_exit(), and yes, the page header is literally arch_ptrace...syscall_exit(9) because the kernel devs love an abbreviated moment. ✨

---

🌸 NAME 🌸

arch_ptrace_report_syscall_exit — the architecture-specific version of ptrace_report_syscall_exit(). lowkey the whole personality of the page. 💖

---

🦋 SYNOPSIS 🦋

void arch_ptrace_report_syscall_exit (struct pt_regs *regs , int step );

that's it. that's the whole signature. no cap. 🫶

---

🎀 ARGUMENTS 🎀

• regs — a pointer to the register state at syscall exit. think of it as the receipts of what the registers were doing when the syscall clocked out. 💅
• step — tells you whether this is a single-step exit rather than a normal syscall exit. like, is this a solo walk or a regular syscall departure? main character energy either way. ⭐

---

💜 DESCRIPTION 💜

so here's the vibe: this function exists so that architectures can have their very own, custom ptrace_report_syscall_exit implementations. bespoke. tailored. iykyk. 🔥

and if your architecture doesn't define one? no stress — it falls back to ptrace_report_syscall_exit. the default is always there to catch you. 😭🫶

---

🌈 SEE ALSO 🌈

• the kernel file ./include/linux/entry-common.h — go read it, it's right there 👑
• arch_ptrace_report_syscall_permit_entry(9)
• syscall_enter_from_user_mode_work(9)
• enter_from_user_mode_randomize_stack(9)
• syscall_enter_from_user_mode_randomize_stack(9) — yes bestie, it's listed twice. that's how it is in the original and i refuse to erase her 💀
• syscall_exit_work(9)
• syscall_exit_to_user_mode_work(9)
• syscall_exit_to_user_mode(9)

---

quick reminder: step is doing real work here, distinguishing a single-step exit from a normal syscall exit — don't sleep on it. 🧚

---

and that's the whole page, bestie. 🍓 this lil gem lives in ./include/linux and is dated October 2026, served up fresh from the Kernel API Manual. periodt. 💅✨🦋