[jeff_vader]

Can't you achieve same thing with uprobe[1]?

[1]: https://brendangregg.com/blog/2015-06-28/linux-ftrace-uprobe...

[citronneur]

You need uretprobe but also need to read an arg by ref so no I don't think so... But thanks for the tip