PTRACE_SYSCALL_ENTER
report_syscall(regs, PTRACE_SYSCALL_ENTER);
saved_reg = ptrace_save_reg(regs, PTRACE_SYSCALL_ENTER, ®no);