I'd just like to add this:

The pack templates you're after are "p" and "P", which produce a pointer in a packed integer (much like "L").

Make sure you don't change the scalar you're pointing to between pack and syscall, or that scalar might move, and the pointer will point somewhere invalid.