--- /tmp/ptrace.c	2014-05-26 21:47:08.494660970 +0200
+++ arch/x86/kernel/ptrace.c	2014-05-26 19:16:50.157737037 +0200
@@ -1489,7 +1489,7 @@
 
 	if (IS_IA32)
 		audit_syscall_entry(AUDIT_ARCH_I386,
-				    regs->orig_ax,
+				    regs->orig_ax & __SYSCALL_MASK,
 				    regs->bx, regs->cx,
 				    regs->dx, regs->si);
 #ifdef CONFIG_X86_64