摘自:http://blog.k0nashi.cn/2021/09/14/syscall-table/

Numsyscall%eaxarg0 (%ebx)arg1 (%ecx)arg2 (%edx)arg3 (%esi)arg4 (%edi)arg5 (%ebp)
0restart_syscall0x00------
1exit0x01int error_code-----
2fork0x02------
3read0x03unsigned int fdchar *bufsize_t count---
4write0x04unsigned int fdconst char *bufsize_t count---
5open0x05const char *filenameint flagsumode_t mode---
6close0x06unsigned int fd-----
7waitpid0x07pid_t pidint *stat_addrint options---
8creat0x08const char *pathnameumode_t mode----
9link0x09const char *oldnameconst char *newname----
10unlink0x0aconst char *pathname-----
11execve0x0bconst char *filenameconst char *const *argvconst char *const *envp---
12chdir0x0cconst char *filename-----
13time0x0dtime_t *tloc-----
14mknod0x0econst char *filenameumode_t modeunsigned dev---
15chmod0x0fconst char *filenameumode_t mode----
16lchown0x10const char *filenameuid_t usergid_t group---
17break0x11??????
18oldstat0x12??????
19lseek0x13unsigned int fdoff_t offsetunsigned int whence---
20getpid0x14------
21mount0x15char *dev_namechar *dir_namechar *typeunsigned long flagsvoid *data-
22umount0x16char *nameint flags----
23setuid0x17uid_t uid-----
24getuid0x18------
25stime0x19time_t *tptr-----
26ptrace0x1along requestlong pidunsigned long addrunsigned long data--
27alarm0x1bunsigned int seconds-----
28oldfstat0x1c??????
29pause0x1d------
30utime0x1echar *filenamestruct utimbuf *times----
31stty0x1f??????
32gtty0x20??????
33access0x21const char *filenameint mode----
34nice0x22int increment-----
35ftime0x23??????
36sync0x24------
37kill0x25pid_t pidint sig----
38rename0x26const char *oldnameconst char *newname----
39mkdir0x27const char *pathnameumode_t mode----
40rmdir0x28const char *pathname-----
41dup0x29unsigned int fildes-----
42pipe0x2aint *fildes-----
43times0x2bstruct tms *tbuf-----
44prof0x2c??????
45brk0x2dunsigned long brk-----
46setgid0x2egid_t gid-----
47getgid0x2f------
48signal0x30int sig__sighandler_t handler----
49geteuid0x31------
50getegid0x32------
51acct0x33const char *name-----
52umount20x34??????
53lock0x35??????
54ioctl0x36unsigned int fdunsigned int cmdunsigned long arg---
55fcntl0x37unsigned int fdunsigned int cmdunsigned long arg---
56mpx0x38??????
57setpgid0x39pid_t pidpid_t pgid----
58ulimit0x3a??????
59oldolduname0x3b??????
60umask0x3cint mask-----
61chroot0x3dconst char *filename-----
62ustat0x3eunsigned devstruct ustat *ubuf----
63dup20x3funsigned int oldfdunsigned int newfd----
64getppid0x40------
65getpgrp0x41------
66setsid0x42------
67sigaction0x43intconst struct old_sigaction *struct old_sigaction *---
68sgetmask0x44------
69ssetmask0x45int newmask-----
70setreuid0x46uid_t ruiduid_t euid----
71setregid0x47gid_t rgidgid_t egid----
72sigsuspend0x48int unused1int unused2old_sigset_t mask---
73sigpending0x49old_sigset_t *uset-----
74sethostname0x4achar *nameint len----
75setrlimit0x4bunsigned int resourcestruct rlimit *rlim----
76getrlimit0x4cunsigned int resourcestruct rlimit *rlim----
77getrusage0x4dint whostruct rusage *ru----
78gettimeofday0x4estruct timeval *tvstruct timezone *tz----
79settimeofday0x4fstruct timeval *tvstruct timezone *tz----
80getgroups0x50int gidsetsizegid_t *grouplist----
81setgroups0x51int gidsetsizegid_t *grouplist----
82select0x52int nfd_set *inpfd_set *outpfd_set *expstruct timeval *tvp-
83symlink0x53const char *oldconst char *new----
84oldlstat0x54??????
85readlink0x55const char *pathchar *bufint bufsiz---
86uselib0x56const char *library-----
87swapon0x57const char *specialfileint swap_flags----
88reboot0x58int magic1int magic2unsigned int cmdvoid *arg--
89readdir0x59??????
90mmap0x5a??????
91munmap0x5bunsigned long addrsize_t len----
92truncate0x5cconst char *pathlong length----
93ftruncate0x5dunsigned int fdunsigned long length----
94fchmod0x5eunsigned int fdumode_t mode----
95fchown0x5funsigned int fduid_t usergid_t group---
96getpriority0x60int whichint who----
97setpriority0x61int whichint whoint niceval---
98profil0x62??????
99statfs0x63const char * pathstruct statfs *buf----
100fstatfs0x64unsigned int fdstruct statfs *buf----
101ioperm0x65unsigned long fromunsigned long numint on---
102socketcall0x66int callunsigned long *args----
103syslog0x67int typechar *bufint len---
104setitimer0x68int whichstruct itimerval *valuestruct itimerval *ovalue---
105getitimer0x69int whichstruct itimerval *value----
106stat0x6aconst char *filenamestruct __old_kernel_stat *statbuf----
107lstat0x6bconst char *filenamestruct __old_kernel_stat *statbuf----
108fstat0x6cunsigned int fdstruct __old_kernel_stat *statbuf----
109olduname0x6dstruct oldold_utsname *-----
110iopl0x6e??????
111vhangup0x6f------
112idle0x70??????
113vm86old0x71??????
114wait40x72pid_t pidint *stat_addrint optionsstruct rusage *ru--
115swapoff0x73const char *specialfile-----
116sysinfo0x74struct sysinfo *info-----
117ipc0x75unsigned int callint firstunsigned long secondunsigned long thirdvoid *ptrlong fifth
118fsync0x76unsigned int fd-----
119sigreturn0x77??????
120clone0x78unsigned longunsigned longint *int *unsigned long-
121setdomainname0x79char *nameint len----
122uname0x7astruct old_utsname *-----
123modify_ldt0x7b??????
124adjtimex0x7cstruct timex *txc_p-----
125mprotect0x7dunsigned long startsize_t lenunsigned long prot---
126sigprocmask0x7eint howold_sigset_t *setold_sigset_t *oset---
127create_module0x7f??????
128init_module0x80void *umodunsigned long lenconst char *uargs---
129delete_module0x81const char *name_userunsigned int flags----
130get_kernel_syms0x82??????
131quotactl0x83unsigned int cmdconst char *specialqid_t idvoid *addr--
132getpgid0x84pid_t pid-----
133fchdir0x85unsigned int fd-----
134bdflush0x86int funclong data----
135sysfs0x87int optionunsigned long arg1unsigned long arg2---
136personality0x88unsigned int personality-----
137afs_syscall0x89??????
138setfsuid0x8auid_t uid-----
139setfsgid0x8bgid_t gid-----
140_llseek0x8c??????
141getdents0x8dunsigned int fdstruct linux_dirent *direntunsigned int count---
142_newselect0x8e??????
143flock0x8funsigned int fdunsigned int cmd----
144msync0x90unsigned long startsize_t lenint flags---
145readv0x91unsigned long fdconst struct iovec *vecunsigned long vlen---
146writev0x92unsigned long fdconst struct iovec *vecunsigned long vlen---
147getsid0x93pid_t pid-----
148fdatasync0x94unsigned int fd-----
149_sysctl0x95??????
150mlock0x96unsigned long startsize_t len----
151munlock0x97unsigned long startsize_t len----
152mlockall0x98int flags-----
153munlockall0x99------
154sched_setparam0x9apid_t pidstruct sched_param *param----
155sched_getparam0x9bpid_t pidstruct sched_param *param----
156sched_setscheduler0x9cpid_t pidint policystruct sched_param *param---
157sched_getscheduler0x9dpid_t pid-----
158sched_yield0x9e------
159sched_get_priority_max0x9fint policy-----
160sched_get_priority_min0xa0int policy-----
161sched_rr_get_interval0xa1pid_t pidstruct timespec *interval----
162nanosleep0xa2struct __kernel_timespec *rqtpstruct __kernel_timespec *rmtp----
163mremap0xa3unsigned long addrunsigned long old_lenunsigned long new_lenunsigned long flagsunsigned long new_addr-
164setresuid0xa4uid_t ruiduid_t euiduid_t suid---
165getresuid0xa5uid_t *ruiduid_t *euiduid_t *suid---
166vm860xa6??????
167query_module0xa7??????
168poll0xa8struct pollfd *ufdsunsigned int nfdsint timeout---
169nfsservctl0xa9??????
170setresgid0xaagid_t rgidgid_t egidgid_t sgid---
171getresgid0xabgid_t *rgidgid_t *egidgid_t *sgid---
172prctl0xacint optionunsigned long arg2unsigned long arg3unsigned long arg4unsigned long arg5-
173rt_sigreturn0xad??????
174rt_sigaction0xaeintconst struct sigaction *struct sigaction *size_t--
175rt_sigprocmask0xafint howsigset_t *setsigset_t *osetsize_t sigsetsize--
176rt_sigpending0xb0sigset_t *setsize_t sigsetsize----
177rt_sigtimedwait0xb1const sigset_t *uthesesiginfo_t *uinfoconst struct timespec *utssize_t sigsetsize--
178rt_sigqueueinfo0xb2pid_t pidint sigsiginfo_t *uinfo---
179rt_sigsuspend0xb3sigset_t *unewsetsize_t sigsetsize----
180pread640xb4unsigned int fdchar *bufsize_t countloff_t pos--
181pwrite640xb5unsigned int fdconst char *bufsize_t countloff_t pos--
182chown0xb6const char *filenameuid_t usergid_t group---
183getcwd0xb7char *bufunsigned long size----
184capget0xb8cap_user_header_t headercap_user_data_t dataptr----
185capset0xb9cap_user_header_t headerconst cap_user_data_t data----
186sigaltstack0xbaconst struct sigaltstack *ussstruct sigaltstack *uoss----
187sendfile0xbbint out_fdint in_fdoff_t *offsetsize_t count--
188getpmsg0xbc??????
189putpmsg0xbd??????
190vfork0xbe------
191ugetrlimit0xbf??????
192mmap20xc0??????
193truncate640xc1const char *pathloff_t length----
194ftruncate640xc2unsigned int fdloff_t length----
195stat640xc3const char *filenamestruct stat64 *statbuf----
196lstat640xc4const char *filenamestruct stat64 *statbuf----
197fstat640xc5unsigned long fdstruct stat64 *statbuf----
198lchown320xc6??????
199getuid320xc7??????
200getgid320xc8??????
201geteuid320xc9??????
202getegid320xca??????
203setreuid320xcb??????
204setregid320xcc??????
205getgroups320xcd??????
206setgroups320xce??????
207fchown320xcf??????
208setresuid320xd0??????
209getresuid320xd1??????
210setresgid320xd2??????
211getresgid320xd3??????
212chown320xd4??????
213setuid320xd5??????
214setgid320xd6??????
215setfsuid320xd7??????
216setfsgid320xd8??????
217pivot_root0xd9const char *new_rootconst char *put_old----
218mincore0xdaunsigned long startsize_t lenunsigned char * vec---
219madvise0xdbunsigned long startsize_t lenint behavior---
220getdents640xdcunsigned int fdstruct linux_dirent64 *direntunsigned int count---
221fcntl640xddunsigned int fdunsigned int cmdunsigned long arg---
222not implemented0xde
223not implemented0xdf
224gettid0xe0------
225readahead0xe1int fdloff_t offsetsize_t count---
226setxattr0xe2const char *pathconst char *nameconst void *valuesize_t sizeint flags-
227lsetxattr0xe3const char *pathconst char *nameconst void *valuesize_t sizeint flags-
228fsetxattr0xe4int fdconst char *nameconst void *valuesize_t sizeint flags-
229getxattr0xe5const char *pathconst char *namevoid *valuesize_t size--
230lgetxattr0xe6const char *pathconst char *namevoid *valuesize_t size--
231fgetxattr0xe7int fdconst char *namevoid *valuesize_t size--
232listxattr0xe8const char *pathchar *listsize_t size---
233llistxattr0xe9const char *pathchar *listsize_t size---
234flistxattr0xeaint fdchar *listsize_t size---
235removexattr0xebconst char *pathconst char *name----
236lremovexattr0xecconst char *pathconst char *name----
237fremovexattr0xedint fdconst char *name----
238tkill0xeepid_t pidint sig----
239sendfile640xefint out_fdint in_fdloff_t *offsetsize_t count--
240futex0xf0u32 *uaddrint opu32 valstruct timespec *utimeu32 *uaddr2u32 val3
241sched_setaffinity0xf1pid_t pidunsigned int lenunsigned long *user_mask_ptr---
242sched_getaffinity0xf2pid_t pidunsigned int lenunsigned long *user_mask_ptr---
243set_thread_area0xf3??????
244get_thread_area0xf4??????
245io_setup0xf5unsigned nr_reqsaio_context_t *ctx----
246io_destroy0xf6aio_context_t ctx-----
247io_getevents0xf7aio_context_t ctx_idlong min_nrlong nrstruct io_event *eventsstruct timespec *timeout-
248io_submit0xf8aio_context_tlongstruct iocb * *---
249io_cancel0xf9aio_context_t ctx_idstruct iocb *iocbstruct io_event *result---
250fadvise640xfaint fdloff_t offsetsize_t lenint advice--
251not implemented0xfb
252exit_group0xfcint error_code-----
253lookup_dcookie0xfdu64 cookie64char *bufsize_t len---
254epoll_create0xfeint size-----
255epoll_ctl0xffint epfdint opint fdstruct epoll_event *event--
256epoll_wait0x100int epfdstruct epoll_event *eventsint maxeventsint timeout--
257remap_file_pages0x101unsigned long startunsigned long sizeunsigned long protunsigned long pgoffunsigned long flags-
258set_tid_address0x102int *tidptr-----
259timer_create0x103clockid_t which_clockstruct sigevent *timer_event_spectimer_t * created_timer_id---
260timer_settime0x104timer_t timer_idint flagsconst struct __kernel_itimerspec *new_settingstruct itimerspec *old_setting--
261timer_gettime0x105timer_t timer_idstruct __kernel_itimerspec *setting----
262timer_getoverrun0x106timer_t timer_id-----
263timer_delete0x107timer_t timer_id-----
264clock_settime0x108clockid_t which_clockconst struct __kernel_timespec *tp----
265clock_gettime0x109clockid_t which_clockstruct __kernel_timespec *tp----
266clock_getres0x10aclockid_t which_clockstruct __kernel_timespec *tp----
267clock_nanosleep0x10bclockid_t which_clockint flagsconst struct __kernel_timespec *rqtpstruct __kernel_timespec *rmtp--
268statfs640x10cconst char *pathsize_t szstruct statfs64 *buf---
269fstatfs640x10dunsigned int fdsize_t szstruct statfs64 *buf---
270tgkill0x10epid_t tgidpid_t pidint sig---
271utimes0x10fchar *filenamestruct timeval *utimes----
272fadvise64_640x110int fdloff_t offsetloff_t lenint advice--
273vserver0x111??????
274mbind0x112unsigned long startunsigned long lenunsigned long modeconst unsigned long *nmaskunsigned long maxnodeunsigned flags
275get_mempolicy0x113int *policyunsigned long *nmaskunsigned long maxnodeunsigned long addrunsigned long flags-
276set_mempolicy0x114int modeconst unsigned long *nmaskunsigned long maxnode---
277mq_open0x115const char *nameint oflagumode_t modestruct mq_attr *attr--
278mq_unlink0x116const char *name-----
279mq_timedsend0x117mqd_t mqdesconst char *msg_ptrsize_t msg_lenunsigned int msg_prioconst struct __kernel_timespec *abs_timeout-
280mq_timedreceive0x118mqd_t mqdeschar *msg_ptrsize_t msg_lenunsigned int *msg_prioconst struct __kernel_timespec *abs_timeout-
281mq_notify0x119mqd_t mqdesconst struct sigevent *notification----
282mq_getsetattr0x11amqd_t mqdesconst struct mq_attr *mqstatstruct mq_attr *omqstat---
283kexec_load0x11bunsigned long entryunsigned long nr_segmentsstruct kexec_segment *segmentsunsigned long flags--
284waitid0x11cint whichpid_t pidstruct siginfo *infopint optionsstruct rusage *ru-
285not implemented0x11d
286add_key0x11econst char *_typeconst char *_descriptionconst void *_payloadsize_t plenkey_serial_t destringid-
287request_key0x11fconst char *_typeconst char *_descriptionconst char *_callout_infokey_serial_t destringid--
288keyctl0x120int cmdunsigned long arg2unsigned long arg3unsigned long arg4unsigned long arg5-
289ioprio_set0x121int whichint whoint ioprio---
290ioprio_get0x122int whichint who----
291inotify_init0x123------
292inotify_add_watch0x124int fdconst char *pathu32 mask---
293inotify_rm_watch0x125int fd__s32 wd----
294migrate_pages0x126pid_t pidunsigned long maxnodeconst unsigned long *fromconst unsigned long *to--
295openat0x127int dfdconst char *filenameint flagsumode_t mode--
296mkdirat0x128int dfdconst char * pathnameumode_t mode---
297mknodat0x129int dfdconst char * filenameumode_t modeunsigned dev--
298fchownat0x12aint dfdconst char *filenameuid_t usergid_t groupint flag-
299futimesat0x12bint dfdconst char *filenamestruct timeval *utimes---
300fstatat640x12cint dfdconst char *filenamestruct stat64 *statbufint flag--
301unlinkat0x12dint dfdconst char * pathnameint flag---
302renameat0x12eint olddfdconst char * oldnameint newdfdconst char * newname--
303linkat0x12fint olddfdconst char *oldnameint newdfdconst char *newnameint flags-
304symlinkat0x130const char * oldnameint newdfdconst char * newname---
305readlinkat0x131int dfdconst char *pathchar *bufint bufsiz--
306fchmodat0x132int dfdconst char * filenameumode_t mode---
307faccessat0x133int dfdconst char *filenameint mode---
308pselect60x134intfd_set *fd_set *fd_set *struct timespec *void *
309ppoll0x135struct pollfd *unsigned intstruct timespec *const sigset_t *size_t-
310unshare0x136unsigned long unshare_flags-----
311set_robust_list0x137struct robust_list_head *headsize_t len----
312get_robust_list0x138int pidstruct robust_list_head * *head_ptrsize_t *len_ptr---
313splice0x139int fd_inloff_t *off_inint fd_outloff_t *off_outsize_t lenunsigned int flags
314sync_file_range0x13aint fdloff_t offsetloff_t nbytesunsigned int flags--
315tee0x13bint fdinint fdoutsize_t lenunsigned int flags--
316vmsplice0x13cint fdconst struct iovec *iovunsigned long nr_segsunsigned int flags--
317move_pages0x13dpid_t pidunsigned long nr_pagesconst void * *pagesconst int *nodesint *statusint flags
318getcpu0x13eunsigned *cpuunsigned *nodestruct getcpu_cache *cache---
319epoll_pwait0x13fint epfdstruct epoll_event *eventsint maxeventsint timeoutconst sigset_t *sigmasksize_t sigsetsize
320utimensat0x140int dfdconst char *filenamestruct timespec *utimesint flags--
321signalfd0x141int ufdsigset_t *user_masksize_t sizemask---
322timerfd_create0x142int clockidint flags----
323eventfd0x143unsigned int count-----
324fallocate0x144int fdint modeloff_t offsetloff_t len--
325timerfd_settime0x145int ufdint flagsconst struct __kernel_itimerspec *utmrstruct __kernel_itimerspec *otmr--
326timerfd_gettime0x146int ufdstruct __kernel_itimerspec *otmr----
327signalfd40x147int ufdsigset_t *user_masksize_t sizemaskint flags--
328eventfd20x148unsigned int countint flags----
329epoll_create10x149int flags-----
330dup30x14aunsigned int oldfdunsigned int newfdint flags---
331pipe20x14bint *fildesint flags----
332inotify_init10x14cint flags-----
333preadv0x14dunsigned long fdconst struct iovec *vecunsigned long vlenunsigned long pos_lunsigned long pos_h-
334pwritev0x14eunsigned long fdconst struct iovec *vecunsigned long vlenunsigned long pos_lunsigned long pos_h-
335rt_tgsigqueueinfo0x14fpid_t tgidpid_t pidint sigsiginfo_t *uinfo--
336perf_event_open0x150struct perf_event_attr *attr_uptrpid_t pidint cpuint group_fdunsigned long flags-
337recvmmsg0x151int fdstruct mmsghdr *msgunsigned int vlenunsigned flagsstruct timespec *timeout-
338fanotify_init0x152unsigned int flagsunsigned int event_f_flags----
339fanotify_mark0x153int fanotify_fdunsigned int flagsu64 maskint fdconst char *pathname-
340prlimit640x154pid_t pidunsigned int resourceconst struct rlimit64 *new_rlimstruct rlimit64 *old_rlim--
341name_to_handle_at0x155int dfdconst char *namestruct file_handle *handleint *mnt_idint flag-
342open_by_handle_at0x156int mountdirfdstruct file_handle *handleint flags---
343clock_adjtime0x157clockid_t which_clockstruct timex *tx----
344syncfs0x158int fd-----
345sendmmsg0x159int fdstruct mmsghdr *msgunsigned int vlenunsigned flags--
346setns0x15aint fdint nstype----
347process_vm_readv0x15bpid_t pidconst struct iovec *lvecunsigned long liovcntconst struct iovec *rvecunsigned long riovcntunsigned long flags
348process_vm_writev0x15cpid_t pidconst struct iovec *lvecunsigned long liovcntconst struct iovec *rvecunsigned long riovcntunsigned long flags
349kcmp0x15dpid_t pid1pid_t pid2int typeunsigned long idx1unsigned long idx2-
350finit_module0x15eint fdconst char *uargsint flags---
351sched_setattr0x15fpid_t pidstruct sched_attr *attrunsigned int flags---
352sched_getattr0x160pid_t pidstruct sched_attr *attrunsigned int sizeunsigned int flags--
353renameat20x161int olddfdconst char *oldnameint newdfdconst char *newnameunsigned int flags-
354seccomp0x162unsigned int opunsigned int flagsconst char *uargs---
355getrandom0x163char *bufsize_t countunsigned int flags---
356memfd_create0x164const char *uname_ptrunsigned int flags----
357bpf0x165int cmdunion bpf_attr *attrunsigned int size---
358execveat0x166int dfdconst char *filenameconst char *const *argvconst char *const *envpint flags-
359socket0x167intintint---
360socketpair0x168intintintint *--
361bind0x169intstruct sockaddr *int---
362connect0x16aintstruct sockaddr *int---
363listen0x16bintint----
364accept40x16cintstruct sockaddr *int *int--
365getsockopt0x16dint fdint levelint optnamechar *optvalint *optlen-
366setsockopt0x16eint fdint levelint optnamechar *optvalint optlen-
367getsockname0x16fintstruct sockaddr *int *---
368getpeername0x170intstruct sockaddr *int *---
369sendto0x171intvoid *size_tunsignedstruct sockaddr *int
370sendmsg0x172int fdstruct user_msghdr *msgunsigned flags---
371recvfrom0x173intvoid *size_tunsignedstruct sockaddr *int *
372recvmsg0x174int fdstruct user_msghdr *msgunsigned flags---
373shutdown0x175intint----
374userfaultfd0x176int flags-----
375membarrier0x177int cmdint flags----
376mlock20x178unsigned long startsize_t lenint flags---
377copy_file_range0x179int fd_inloff_t *off_inint fd_outloff_t *off_outsize_t lenunsigned int flags
378preadv20x17aunsigned long fdconst struct iovec *vecunsigned long vlenunsigned long pos_lunsigned long pos_hrwf_t flags
379pwritev20x17bunsigned long fdconst struct iovec *vecunsigned long vlenunsigned long pos_lunsigned long pos_hrwf_t flags
380pkey_mprotect0x17cunsigned long startsize_t lenunsigned long protint pkey--
381pkey_alloc0x17dunsigned long flagsunsigned long init_val----
382pkey_free0x17eint pkey-----
383statx0x17fint dfdconst char *pathunsigned flagsunsigned maskstruct statx *buffer-
384arch_prctl0x180??????