Now, to track what the kernel is doing, while in a syscall, I can't remember a tool that would do that... maybe somebody else can help.