System call instrumentation on Linux/x86-64 using memory-indirect calls (in vain?), part one (opens in new tab)

My ud2, which generates a SIGILL trap. Then we run the system call itself from within the signal handler, causing a second trap and some . There has been some interesting research in this space in recent years, including the , the closely related (though both not specifically about system call instrumentation), later the (which definitely is), and some follow-ups for making the latter more robust (The core problem that all these approaches are solving is a pure accident of the Intel instructi...