tracehook: vfork-done