SYS_open
error = rsys_syscall(SYS_open, &callarg, sizeof(callarg), retval);
case SYS_open:
[SYS_open] = &filemon_sys_open,