syscall_hook init