and use that for system call single-step events.

This one also gets the user mode test right, and makes sure
the siginfo is not leaking any stack contents.