(1) can trace objs for all syscalls; (2) before test ltp