kprobes: Use rethook for kretprobe if possible