tracing the mount syscall