On Sun, Jun 20, 2021 at 7:01 PM Michael Schmitz <schmitzmic@xxxxxxxxx> wrote: > > instrumenting get_reg on m68k and using a similar patch to yours to warn > when unsaved registers are accessed on the switch stack, I get a hit > from getegid and getegid32, just by running a simple ptrace on ls. > > Going to wack those two moles now ... I don't see what's going on. Those system calls don't use the register state, afaik. What's the call chain, exactly? Linus