diff --git a/content/en/docs/reference/rules/supported-events/supported-events.md b/content/en/docs/reference/rules/supported-events/supported-events.md
index d6e467733..b36c1c52e 100644
--- a/content/en/docs/reference/rules/supported-events/supported-events.md
+++ b/content/en/docs/reference/rules/supported-events/supported-events.md
@@ -1,4 +1,4 @@
-The events below are valid for Falco *Schema Version*: 2.0.0
+The events below are valid for Falco *Schema Version*: 3.5.0
 ## Syscall events
 
 Default | Dir | Name | Params 
@@ -8,17 +8,17 @@ Yes | `<` | `open` | FD **fd**, FSPATH **name**, FLAGS32 **flags**: *O_LARGEFILE
 Yes | `>` | `close` | FD **fd**
 Yes | `<` | `close` | ERRNO **res**
 No | `>` | `read` | FD **fd**, UINT32 **size**
-No | `<` | `read` | ERRNO **res**, BYTEBUF **data**
+No | `<` | `read` | ERRNO **res**, BYTEBUF **data**, FD **fd**, UINT32 **size**
 No | `>` | `write` | FD **fd**, UINT32 **size**
 No | `<` | `write` | ERRNO **res**, BYTEBUF **data**
 Yes | `>` | `socket` | ENUMFLAGS32 **domain**: *AF_NFC*, *AF_ALG*, *AF_CAIF*, *AF_IEEE802154*, *AF_PHONET*, *AF_ISDN*, *AF_RXRPC*, *AF_IUCV*, *AF_BLUETOOTH*, *AF_TIPC*, *AF_CAN*, *AF_LLC*, *AF_WANPIPE*, *AF_PPPOX*, *AF_IRDA*, *AF_SNA*, *AF_RDS*, *AF_ATMSVC*, *AF_ECONET*, *AF_ASH*, *AF_PACKET*, *AF_ROUTE*, *AF_NETLINK*, *AF_KEY*, *AF_SECURITY*, *AF_NETBEUI*, *AF_DECnet*, *AF_ROSE*, *AF_INET6*, *AF_X25*, *AF_ATMPVC*, *AF_BRIDGE*, *AF_NETROM*, *AF_APPLETALK*, *AF_IPX*, *AF_AX25*, *AF_INET*, *AF_LOCAL*, *AF_UNIX*, *AF_UNSPEC*, UINT32 **type**, UINT32 **proto**
-Yes | `<` | `socket` | FD **fd**
+Yes | `<` | `socket` | FD **fd**, ENUMFLAGS32 **domain**: *AF_NFC*, *AF_ALG*, *AF_CAIF*, *AF_IEEE802154*, *AF_PHONET*, *AF_ISDN*, *AF_RXRPC*, *AF_IUCV*, *AF_BLUETOOTH*, *AF_TIPC*, *AF_CAN*, *AF_LLC*, *AF_WANPIPE*, *AF_PPPOX*, *AF_IRDA*, *AF_SNA*, *AF_RDS*, *AF_ATMSVC*, *AF_ECONET*, *AF_ASH*, *AF_PACKET*, *AF_ROUTE*, *AF_NETLINK*, *AF_KEY*, *AF_SECURITY*, *AF_NETBEUI*, *AF_DECnet*, *AF_ROSE*, *AF_INET6*, *AF_X25*, *AF_ATMPVC*, *AF_BRIDGE*, *AF_NETROM*, *AF_APPLETALK*, *AF_IPX*, *AF_AX25*, *AF_INET*, *AF_LOCAL*, *AF_UNIX*, *AF_UNSPEC*, UINT32 **type**, UINT32 **proto**
 Yes | `>` | `bind` | FD **fd**
-Yes | `<` | `bind` | ERRNO **res**, SOCKADDR **addr**
+Yes | `<` | `bind` | ERRNO **res**, SOCKADDR **addr**, FD **fd**
 Yes | `>` | `connect` | FD **fd**, SOCKADDR **addr**
 Yes | `<` | `connect` | ERRNO **res**, SOCKTUPLE **tuple**, FD **fd**
 Yes | `>` | `listen` | FD **fd**, INT32 **backlog**
-Yes | `<` | `listen` | ERRNO **res**
+Yes | `<` | `listen` | ERRNO **res**, FD **fd**, INT32 **backlog**
 No | `>` | `send` | FD **fd**, UINT32 **size**
 No | `<` | `send` | ERRNO **res**, BYTEBUF **data**
 Yes | `>` | `sendto` | FD **fd**, UINT32 **size**, SOCKTUPLE **tuple**
@@ -29,41 +29,41 @@ Yes | `>` | `recvfrom` | FD **fd**, UINT32 **size**
 Yes | `<` | `recvfrom` | ERRNO **res**, BYTEBUF **data**, SOCKTUPLE **tuple**
 Yes | `>` | `shutdown` | FD **fd**, ENUMFLAGS8 **how**: *SHUT_UNKNOWN*, *SHUT_RDWR*, *SHUT_WR*, *SHUT_RD*
 Yes | `<` | `shutdown` | ERRNO **res**
-Yes | `>` | `getsockname` |
-Yes | `<` | `getsockname` |
-Yes | `>` | `getpeername` |
-Yes | `<` | `getpeername` |
+Yes | `>` | `getsockname` | 
+Yes | `<` | `getsockname` | 
+Yes | `>` | `getpeername` | 
+Yes | `<` | `getpeername` | 
 Yes | `>` | `socketpair` | ENUMFLAGS32 **domain**: *AF_NFC*, *AF_ALG*, *AF_CAIF*, *AF_IEEE802154*, *AF_PHONET*, *AF_ISDN*, *AF_RXRPC*, *AF_IUCV*, *AF_BLUETOOTH*, *AF_TIPC*, *AF_CAN*, *AF_LLC*, *AF_WANPIPE*, *AF_PPPOX*, *AF_IRDA*, *AF_SNA*, *AF_RDS*, *AF_ATMSVC*, *AF_ECONET*, *AF_ASH*, *AF_PACKET*, *AF_ROUTE*, *AF_NETLINK*, *AF_KEY*, *AF_SECURITY*, *AF_NETBEUI*, *AF_DECnet*, *AF_ROSE*, *AF_INET6*, *AF_X25*, *AF_ATMPVC*, *AF_BRIDGE*, *AF_NETROM*, *AF_APPLETALK*, *AF_IPX*, *AF_AX25*, *AF_INET*, *AF_LOCAL*, *AF_UNIX*, *AF_UNSPEC*, UINT32 **type**, UINT32 **proto**
 Yes | `<` | `socketpair` | ERRNO **res**, FD **fd1**, FD **fd2**, UINT64 **source**, UINT64 **peer**
-Yes | `>` | `setsockopt` |
+Yes | `>` | `setsockopt` | 
 Yes | `<` | `setsockopt` | ERRNO **res**, FD **fd**, ENUMFLAGS8 **level**: *SOL_SOCKET*, *SOL_TCP*, *UNKNOWN*, ENUMFLAGS8 **optname**: *SO_COOKIE*, *SO_MEMINFO*, *SO_PEERGROUPS*, *SO_ATTACH_BPF*, *SO_INCOMING_CPU*, *SO_BPF_EXTENSIONS*, *SO_MAX_PACING_RATE*, *SO_BUSY_POLL*, *SO_SELECT_ERR_QUEUE*, *SO_LOCK_FILTER*, *SO_NOFCS*, *SO_PEEK_OFF*, *SO_WIFI_STATUS*, *SO_RXQ_OVFL*, *SO_DOMAIN*, *SO_PROTOCOL*, *SO_TIMESTAMPING*, *SO_MARK*, *SO_TIMESTAMPNS*, *SO_PASSSEC*, *SO_PEERSEC*, *SO_ACCEPTCONN*, *SO_TIMESTAMP*, *SO_PEERNAME*, *SO_DETACH_FILTER*, *SO_ATTACH_FILTER*, *SO_BINDTODEVICE*, *SO_SECURITY_ENCRYPTION_NETWORK*, *SO_SECURITY_ENCRYPTION_TRANSPORT*, *SO_SECURITY_AUTHENTICATION*, *SO_SNDTIMEO*, *SO_RCVTIMEO*, *SO_SNDLOWAT*, *SO_RCVLOWAT*, *SO_PEERCRED*, *SO_PASSCRED*, *SO_REUSEPORT*, *SO_BSDCOMPAT*, *SO_LINGER*, *SO_PRIORITY*, *SO_NO_CHECK*, *SO_OOBINLINE*, *SO_KEEPALIVE*, *SO_RCVBUFFORCE*, *SO_SNDBUFFORCE*, *SO_RCVBUF*, *SO_SNDBUF*, *SO_BROADCAST*, *SO_DONTROUTE*, *SO_ERROR*, *SO_TYPE*, *SO_REUSEADDR*, *SO_DEBUG*, *UNKNOWN*, DYNAMIC **val**, UINT32 **optlen**
-Yes | `>` | `getsockopt` |
+Yes | `>` | `getsockopt` | 
 Yes | `<` | `getsockopt` | ERRNO **res**, FD **fd**, ENUMFLAGS8 **level**: *SOL_SOCKET*, *SOL_TCP*, *UNKNOWN*, ENUMFLAGS8 **optname**: *SO_COOKIE*, *SO_MEMINFO*, *SO_PEERGROUPS*, *SO_ATTACH_BPF*, *SO_INCOMING_CPU*, *SO_BPF_EXTENSIONS*, *SO_MAX_PACING_RATE*, *SO_BUSY_POLL*, *SO_SELECT_ERR_QUEUE*, *SO_LOCK_FILTER*, *SO_NOFCS*, *SO_PEEK_OFF*, *SO_WIFI_STATUS*, *SO_RXQ_OVFL*, *SO_DOMAIN*, *SO_PROTOCOL*, *SO_TIMESTAMPING*, *SO_MARK*, *SO_TIMESTAMPNS*, *SO_PASSSEC*, *SO_PEERSEC*, *SO_ACCEPTCONN*, *SO_TIMESTAMP*, *SO_PEERNAME*, *SO_DETACH_FILTER*, *SO_ATTACH_FILTER*, *SO_BINDTODEVICE*, *SO_SECURITY_ENCRYPTION_NETWORK*, *SO_SECURITY_ENCRYPTION_TRANSPORT*, *SO_SECURITY_AUTHENTICATION*, *SO_SNDTIMEO*, *SO_RCVTIMEO*, *SO_SNDLOWAT*, *SO_RCVLOWAT*, *SO_PEERCRED*, *SO_PASSCRED*, *SO_REUSEPORT*, *SO_BSDCOMPAT*, *SO_LINGER*, *SO_PRIORITY*, *SO_NO_CHECK*, *SO_OOBINLINE*, *SO_KEEPALIVE*, *SO_RCVBUFFORCE*, *SO_SNDBUFFORCE*, *SO_RCVBUF*, *SO_SNDBUF*, *SO_BROADCAST*, *SO_DONTROUTE*, *SO_ERROR*, *SO_TYPE*, *SO_REUSEADDR*, *SO_DEBUG*, *UNKNOWN*, DYNAMIC **val**, UINT32 **optlen**
 Yes | `>` | `sendmsg` | FD **fd**, UINT32 **size**, SOCKTUPLE **tuple**
 Yes | `<` | `sendmsg` | ERRNO **res**, BYTEBUF **data**
-No | `>` | `sendmmsg` |
-No | `<` | `sendmmsg` |
+Yes | `>` | `sendmmsg` | 
+Yes | `<` | `sendmmsg` | ERRNO **res**, FD **fd**, UINT32 **size**, BYTEBUF **data**, SOCKTUPLE **tuple**
 Yes | `>` | `recvmsg` | FD **fd**
 Yes | `<` | `recvmsg` | ERRNO **res**, UINT32 **size**, BYTEBUF **data**, SOCKTUPLE **tuple**, BYTEBUF **msgcontrol**
-No | `>` | `recvmmsg` |
-No | `<` | `recvmmsg` |
+Yes | `>` | `recvmmsg` | 
+Yes | `<` | `recvmmsg` | ERRNO **res**, FD **fd**, UINT32 **size**, BYTEBUF **data**, SOCKTUPLE **tuple**, BYTEBUF **msgcontrol**
 Yes | `>` | `creat` | FSPATH **name**, UINT32 **mode**
 Yes | `<` | `creat` | FD **fd**, FSPATH **name**, UINT32 **mode**, UINT32 **dev**, UINT64 **ino**, FLAGS16 **creat_flags**: *FD_UPPER_LAYER_CREAT*, *FD_LOWER_LAYER_CREAT*
-Yes | `>` | `pipe` |
+Yes | `>` | `pipe` | 
 Yes | `<` | `pipe` | ERRNO **res**, FD **fd1**, FD **fd2**, UINT64 **ino**
 Yes | `>` | `eventfd` | UINT64 **initval**, UINT32 **flags**
 Yes | `<` | `eventfd` | FD **res**
 Yes | `>` | `futex` | UINT64 **addr**, FLAGS16 **op**: *FUTEX_CLOCK_REALTIME*, *FUTEX_PRIVATE_FLAG*, *FUTEX_CMP_REQUEUE_PI*, *FUTEX_WAIT_REQUEUE_PI*, *FUTEX_WAKE_BITSET*, *FUTEX_WAIT_BITSET*, *FUTEX_TRYLOCK_PI*, *FUTEX_UNLOCK_PI*, *FUTEX_LOCK_PI*, *FUTEX_WAKE_OP*, *FUTEX_CMP_REQUEUE*, *FUTEX_REQUEUE*, *FUTEX_FD*, *FUTEX_WAKE*, *FUTEX_WAIT*, UINT64 **val**
 Yes | `<` | `futex` | ERRNO **res**
-Yes | `>` | `stat` |
+Yes | `>` | `stat` | 
 Yes | `<` | `stat` | ERRNO **res**, FSPATH **path**
-Yes | `>` | `lstat` |
+Yes | `>` | `lstat` | 
 Yes | `<` | `lstat` | ERRNO **res**, FSPATH **path**
 Yes | `>` | `fstat` | FD **fd**
 Yes | `<` | `fstat` | ERRNO **res**
-Yes | `>` | `stat64` |
+Yes | `>` | `stat64` | 
 Yes | `<` | `stat64` | ERRNO **res**, FSPATH **path**
-Yes | `>` | `lstat64` |
+Yes | `>` | `lstat64` | 
 Yes | `<` | `lstat64` | ERRNO **res**, FSPATH **path**
 Yes | `>` | `fstat64` | FD **fd**
 Yes | `<` | `fstat64` | ERRNO **res**
@@ -71,20 +71,20 @@ Yes | `>` | `epoll_wait` | ERRNO **maxevents**
 Yes | `<` | `epoll_wait` | ERRNO **res**
 Yes | `>` | `poll` | FDLIST **fds**, INT64 **timeout**
 Yes | `<` | `poll` | ERRNO **res**, FDLIST **fds**
-Yes | `>` | `select` |
+Yes | `>` | `select` | 
 Yes | `<` | `select` | ERRNO **res**
 Yes | `>` | `lseek` | FD **fd**, UINT64 **offset**, ENUMFLAGS8 **whence**: *SEEK_END*, *SEEK_CUR*, *SEEK_SET*
 Yes | `<` | `lseek` | ERRNO **res**
 Yes | `>` | `llseek` | FD **fd**, UINT64 **offset**, ENUMFLAGS8 **whence**: *SEEK_END*, *SEEK_CUR*, *SEEK_SET*
 Yes | `<` | `llseek` | ERRNO **res**
-Yes | `>` | `getcwd` |
+Yes | `>` | `getcwd` | 
 Yes | `<` | `getcwd` | ERRNO **res**, CHARBUF **path**
-Yes | `>` | `chdir` |
+Yes | `>` | `chdir` | 
 Yes | `<` | `chdir` | ERRNO **res**, CHARBUF **path**
 Yes | `>` | `fchdir` | FD **fd**
 Yes | `<` | `fchdir` | ERRNO **res**
 No | `>` | `pread` | FD **fd**, UINT32 **size**, UINT64 **pos**
-No | `<` | `pread` | ERRNO **res**, BYTEBUF **data**
+No | `<` | `pread` | ERRNO **res**, BYTEBUF **data**, FD **fd**, UINT32 **size**, UINT64 **pos**
 No | `>` | `pwrite` | FD **fd**, UINT32 **size**, UINT64 **pos**
 No | `<` | `pwrite` | ERRNO **res**, BYTEBUF **data**
 No | `>` | `readv` | FD **fd**
@@ -131,13 +131,13 @@ Yes | `>` | `ptrace` | ENUMFLAGS16 **request**: *PTRACE_SINGLEBLOCK*, *PTRACE_SY
 Yes | `<` | `ptrace` | ERRNO **res**, DYNAMIC **addr**, DYNAMIC **data**
 Yes | `>` | `ioctl` | FD **fd**, UINT64 **request**, UINT64 **argument**
 Yes | `<` | `ioctl` | ERRNO **res**
-Yes | `>` | `rename` |
+Yes | `>` | `rename` | 
 Yes | `<` | `rename` | ERRNO **res**, FSPATH **oldpath**, FSPATH **newpath**
-Yes | `>` | `renameat` |
+Yes | `>` | `renameat` | 
 Yes | `<` | `renameat` | ERRNO **res**, FD **olddirfd**, FSRELPATH **oldpath**, FD **newdirfd**, FSRELPATH **newpath**
-Yes | `>` | `symlink` |
+Yes | `>` | `symlink` | 
 Yes | `<` | `symlink` | ERRNO **res**, CHARBUF **target**, FSPATH **linkpath**
-Yes | `>` | `symlinkat` |
+Yes | `>` | `symlinkat` | 
 Yes | `<` | `symlinkat` | ERRNO **res**, CHARBUF **target**, FD **linkdirfd**, FSRELPATH **linkpath**
 No | `>` | `sendfile` | FD **out_fd**, FD **in_fd**, UINT64 **offset**, UINT64 **size**
 No | `<` | `sendfile` | ERRNO **res**, UINT64 **offset**
@@ -151,23 +151,23 @@ Yes | `>` | `setuid` | UID **uid**
 Yes | `<` | `setuid` | ERRNO **res**
 Yes | `>` | `setgid` | GID **gid**
 Yes | `<` | `setgid` | ERRNO **res**
-Yes | `>` | `getuid` |
+Yes | `>` | `getuid` | 
 Yes | `<` | `getuid` | UID **uid**
-Yes | `>` | `geteuid` |
+Yes | `>` | `geteuid` | 
 Yes | `<` | `geteuid` | UID **euid**
-Yes | `>` | `getgid` |
+Yes | `>` | `getgid` | 
 Yes | `<` | `getgid` | GID **gid**
-Yes | `>` | `getegid` |
+Yes | `>` | `getegid` | 
 Yes | `<` | `getegid` | GID **egid**
-Yes | `>` | `getresuid` |
+Yes | `>` | `getresuid` | 
 Yes | `<` | `getresuid` | ERRNO **res**, UID **ruid**, UID **euid**, UID **suid**
-Yes | `>` | `getresgid` |
+Yes | `>` | `getresgid` | 
 Yes | `<` | `getresgid` | ERRNO **res**, GID **rgid**, GID **egid**, GID **sgid**
-Yes | `>` | `clone` |
+Yes | `>` | `clone` | 
 Yes | `<` | `clone` | PID **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, INT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, FLAGS32 **flags**: *CLONE_FILES*, *CLONE_FS*, *CLONE_IO*, *CLONE_NEWIPC*, *CLONE_NEWNET*, *CLONE_NEWNS*, *CLONE_NEWPID*, *CLONE_NEWUTS*, *CLONE_PARENT*, *CLONE_PARENT_SETTID*, *CLONE_PTRACE*, *CLONE_SIGHAND*, *CLONE_SYSVSEM*, *CLONE_THREAD*, *CLONE_UNTRACED*, *CLONE_VM*, *CLONE_INVERTED*, *NAME_CHANGED*, *CLOSED*, *CLONE_NEWUSER*, *CLONE_CHILD_CLEARTID*, *CLONE_CHILD_SETTID*, *CLONE_SETTLS*, *CLONE_STOPPED*, *CLONE_VFORK*, *CLONE_NEWCGROUP*, UINT32 **uid**, UINT32 **gid**, PID **vtid**, PID **vpid**, UINT64 **pidns_init_start_ts**
-Yes | `>` | `fork` |
+Yes | `>` | `fork` | 
 Yes | `<` | `fork` | PID **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, INT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, FLAGS32 **flags**: *CLONE_FILES*, *CLONE_FS*, *CLONE_IO*, *CLONE_NEWIPC*, *CLONE_NEWNET*, *CLONE_NEWNS*, *CLONE_NEWPID*, *CLONE_NEWUTS*, *CLONE_PARENT*, *CLONE_PARENT_SETTID*, *CLONE_PTRACE*, *CLONE_SIGHAND*, *CLONE_SYSVSEM*, *CLONE_THREAD*, *CLONE_UNTRACED*, *CLONE_VM*, *CLONE_INVERTED*, *NAME_CHANGED*, *CLOSED*, *CLONE_NEWUSER*, *CLONE_CHILD_CLEARTID*, *CLONE_CHILD_SETTID*, *CLONE_SETTLS*, *CLONE_STOPPED*, *CLONE_VFORK*, *CLONE_NEWCGROUP*, UINT32 **uid**, UINT32 **gid**, PID **vtid**, PID **vpid**, UINT64 **pidns_init_start_ts**
-Yes | `>` | `vfork` |
+Yes | `>` | `vfork` | 
 Yes | `<` | `vfork` | PID **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, INT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, FLAGS32 **flags**: *CLONE_FILES*, *CLONE_FS*, *CLONE_IO*, *CLONE_NEWIPC*, *CLONE_NEWNET*, *CLONE_NEWNS*, *CLONE_NEWPID*, *CLONE_NEWUTS*, *CLONE_PARENT*, *CLONE_PARENT_SETTID*, *CLONE_PTRACE*, *CLONE_SIGHAND*, *CLONE_SYSVSEM*, *CLONE_THREAD*, *CLONE_UNTRACED*, *CLONE_VM*, *CLONE_INVERTED*, *NAME_CHANGED*, *CLOSED*, *CLONE_NEWUSER*, *CLONE_CHILD_CLEARTID*, *CLONE_CHILD_SETTID*, *CLONE_SETTLS*, *CLONE_STOPPED*, *CLONE_VFORK*, *CLONE_NEWCGROUP*, UINT32 **uid**, UINT32 **gid**, PID **vtid**, PID **vpid**, UINT64 **pidns_init_start_ts**
 Yes | `>` | `getdents` | FD **fd**
 Yes | `<` | `getdents` | ERRNO **res**
@@ -177,7 +177,7 @@ Yes | `>` | `setns` | FD **fd**, FLAGS32 **nstype**: *CLONE_FILES*, *CLONE_FS*,
 Yes | `<` | `setns` | ERRNO **res**
 Yes | `>` | `flock` | FD **fd**, FLAGS32 **operation**: *LOCK_SH*, *LOCK_EX*, *LOCK_NB*, *LOCK_UN*, *LOCK_NONE*
 Yes | `<` | `flock` | ERRNO **res**
-Yes | `>` | `accept` |
+Yes | `>` | `accept` | 
 Yes | `<` | `accept` | FD **fd**, SOCKTUPLE **tuple**, UINT8 **queuepct**, UINT32 **queuelen**, UINT32 **queuemax**
 Yes | `>` | `semop` | INT32 **semid**
 Yes | `<` | `semop` | ERRNO **res**, UINT32 **nsops**, UINT16 **sem_num_0**, INT16 **sem_op_0**, FLAGS16 **sem_flg_0**: *IPC_NOWAIT*, *SEM_UNDO*, UINT16 **sem_num_1**, INT16 **sem_op_1**, FLAGS16 **sem_flg_1**: *IPC_NOWAIT*, *SEM_UNDO*
@@ -191,71 +191,71 @@ Yes | `>` | `semget` | INT32 **key**, INT32 **nsems**, FLAGS32 **semflg**: *IPC_
 Yes | `<` | `semget` | ERRNO **res**
 Yes | `>` | `access` | FLAGS32 **mode**: *F_OK*, *R_OK*, *W_OK*, *X_OK*
 Yes | `<` | `access` | ERRNO **res**, FSPATH **name**
-Yes | `>` | `chroot` |
+Yes | `>` | `chroot` | 
 Yes | `<` | `chroot` | ERRNO **res**, FSPATH **path**
-Yes | `>` | `setsid` |
+Yes | `>` | `setsid` | 
 Yes | `<` | `setsid` | PID **res**
 Yes | `>` | `mkdir` | UINT32 **mode**
 Yes | `<` | `mkdir` | ERRNO **res**, FSPATH **path**
-Yes | `>` | `rmdir` |
+Yes | `>` | `rmdir` | 
 Yes | `<` | `rmdir` | ERRNO **res**, FSPATH **path**
 Yes | `>` | `unshare` | FLAGS32 **flags**: *CLONE_FILES*, *CLONE_FS*, *CLONE_IO*, *CLONE_NEWIPC*, *CLONE_NEWNET*, *CLONE_NEWNS*, *CLONE_NEWPID*, *CLONE_NEWUTS*, *CLONE_PARENT*, *CLONE_PARENT_SETTID*, *CLONE_PTRACE*, *CLONE_SIGHAND*, *CLONE_SYSVSEM*, *CLONE_THREAD*, *CLONE_UNTRACED*, *CLONE_VM*, *CLONE_INVERTED*, *NAME_CHANGED*, *CLOSED*, *CLONE_NEWUSER*, *CLONE_CHILD_CLEARTID*, *CLONE_CHILD_SETTID*, *CLONE_SETTLS*, *CLONE_STOPPED*, *CLONE_VFORK*, *CLONE_NEWCGROUP*
 Yes | `<` | `unshare` | ERRNO **res**
 Yes | `>` | `execve` | FSPATH **filename**
-Yes | `<` | `execve` | ERRNO **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, UINT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, BYTEBUF **env**, UINT32 **tty**, PID **pgid**, UID **loginuid**, FLAGS32 **flags**: *EXE_WRITABLE*, *EXE_UPPER_LAYER*, *EXE_FROM_MEMFD*, *EXE_LOWER_LAYER*, UINT64 **cap_inheritable**, UINT64 **cap_permitted**, UINT64 **cap_effective**, UINT64 **exe_ino**, ABSTIME **exe_ino_ctime**, ABSTIME **exe_ino_mtime**, UID **uid**, FSPATH **trusted_exepath**
+Yes | `<` | `execve` | ERRNO **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, UINT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, BYTEBUF **env**, UINT32 **tty**, PID **vpgid**, UID **loginuid**, FLAGS32 **flags**: *EXE_WRITABLE*, *EXE_UPPER_LAYER*, *EXE_FROM_MEMFD*, *EXE_LOWER_LAYER*, UINT64 **cap_inheritable**, UINT64 **cap_permitted**, UINT64 **cap_effective**, UINT64 **exe_ino**, ABSTIME **exe_ino_ctime**, ABSTIME **exe_ino_mtime**, UID **uid**, FSPATH **trusted_exepath**, PID **pgid**, GID **gid**
 Yes | `>` | `setpgid` | PID **pid**, PID **pgid**
 Yes | `<` | `setpgid` | PID **res**
 Yes | `>` | `seccomp` | UINT64 **op**, UINT64 **flags**
 Yes | `<` | `seccomp` | ERRNO **res**
-Yes | `>` | `unlink` |
+Yes | `>` | `unlink` | 
 Yes | `<` | `unlink` | ERRNO **res**, FSPATH **path**
-Yes | `>` | `unlinkat` |
+Yes | `>` | `unlinkat` | 
 Yes | `<` | `unlinkat` | ERRNO **res**, FD **dirfd**, FSRELPATH **name**, FLAGS32 **flags**: *AT_REMOVEDIR*
-Yes | `>` | `mkdirat` |
+Yes | `>` | `mkdirat` | 
 Yes | `<` | `mkdirat` | ERRNO **res**, FD **dirfd**, FSRELPATH **path**, UINT32 **mode**
 Yes | `>` | `openat` | FD **dirfd**, FSRELPATH **name**, FLAGS32 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*, UINT32 **mode**
 Yes | `<` | `openat` | FD **fd**, FD **dirfd**, FSRELPATH **name**, FLAGS32 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*, UINT32 **mode**, UINT32 **dev**, UINT64 **ino**
-Yes | `>` | `link` |
+Yes | `>` | `link` | 
 Yes | `<` | `link` | ERRNO **res**, FSPATH **oldpath**, FSPATH **newpath**
-Yes | `>` | `linkat` |
+Yes | `>` | `linkat` | 
 Yes | `<` | `linkat` | ERRNO **res**, FD **olddir**, FSRELPATH **oldpath**, FD **newdir**, FSRELPATH **newpath**, FLAGS32 **flags**: *AT_SYMLINK_FOLLOW*, *AT_EMPTY_PATH*
-Yes | `>` | `fchmodat` |
+Yes | `>` | `fchmodat` | 
 Yes | `<` | `fchmodat` | ERRNO **res**, FD **dirfd**, FSRELPATH **filename**, MODE **mode**
-Yes | `>` | `chmod` |
+Yes | `>` | `chmod` | 
 Yes | `<` | `chmod` | ERRNO **res**, FSPATH **filename**, MODE **mode**
-Yes | `>` | `fchmod` |
+Yes | `>` | `fchmod` | 
 Yes | `<` | `fchmod` | ERRNO **res**, FD **fd**, MODE **mode**
-Yes | `>` | `renameat2` |
+Yes | `>` | `renameat2` | 
 Yes | `<` | `renameat2` | ERRNO **res**, FD **olddirfd**, FSRELPATH **oldpath**, FD **newdirfd**, FSRELPATH **newpath**, FLAGS32 **flags**: *RENAME_NOREPLACE*, *RENAME_EXCHANGE*, *RENAME_WHITEOUT*
-Yes | `>` | `userfaultfd` |
+Yes | `>` | `userfaultfd` | 
 Yes | `<` | `userfaultfd` | ERRNO **res**, FLAGS32 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*
 Yes | `>` | `openat2` | FD **dirfd**, FSRELPATH **name**, FLAGS32 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*, UINT32 **mode**, FLAGS32 **resolve**: *RESOLVE_BENEATH*, *RESOLVE_IN_ROOT*, *RESOLVE_NO_MAGICLINKS*, *RESOLVE_NO_SYMLINKS*, *RESOLVE_NO_XDEV*, *RESOLVE_CACHED*
 Yes | `<` | `openat2` | FD **fd**, FD **dirfd**, FSRELPATH **name**, FLAGS32 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*, UINT32 **mode**, FLAGS32 **resolve**: *RESOLVE_BENEATH*, *RESOLVE_IN_ROOT*, *RESOLVE_NO_MAGICLINKS*, *RESOLVE_NO_SYMLINKS*, *RESOLVE_NO_XDEV*, *RESOLVE_CACHED*, UINT32 **dev**, UINT64 **ino**
 Yes | `>` | `mprotect` | UINT64 **addr**, UINT64 **length**, FLAGS32 **prot**: *PROT_READ*, *PROT_WRITE*, *PROT_EXEC*, *PROT_SEM*, *PROT_GROWSDOWN*, *PROT_GROWSUP*, *PROT_SAO*, *PROT_NONE*
 Yes | `<` | `mprotect` | ERRNO **res**
 Yes | `>` | `execveat` | FD **dirfd**, FSRELPATH **pathname**, FLAGS32 **flags**: *AT_EMPTY_PATH*, *AT_SYMLINK_NOFOLLOW*
-Yes | `<` | `execveat` | ERRNO **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, UINT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, BYTEBUF **env**, UINT32 **tty**, PID **pgid**, UID **loginuid**, FLAGS32 **flags**: *EXE_WRITABLE*, *EXE_UPPER_LAYER*, *EXE_FROM_MEMFD*, *EXE_LOWER_LAYER*, UINT64 **cap_inheritable**, UINT64 **cap_permitted**, UINT64 **cap_effective**, UINT64 **exe_ino**, ABSTIME **exe_ino_ctime**, ABSTIME **exe_ino_mtime**, UID **uid**, FSPATH **trusted_exepath**
+Yes | `<` | `execveat` | ERRNO **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, UINT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, BYTEBUF **env**, UINT32 **tty**, PID **vpgid**, UID **loginuid**, FLAGS32 **flags**: *EXE_WRITABLE*, *EXE_UPPER_LAYER*, *EXE_FROM_MEMFD*, *EXE_LOWER_LAYER*, UINT64 **cap_inheritable**, UINT64 **cap_permitted**, UINT64 **cap_effective**, UINT64 **exe_ino**, ABSTIME **exe_ino_ctime**, ABSTIME **exe_ino_mtime**, UID **uid**, FSPATH **trusted_exepath**, PID **pgid**, GID **gid**
 Yes | `>` | `copy_file_range` | FD **fdin**, UINT64 **offin**, UINT64 **len**
 Yes | `<` | `copy_file_range` | ERRNO **res**, FD **fdout**, UINT64 **offout**
-Yes | `>` | `clone3` |
+Yes | `>` | `clone3` | 
 Yes | `<` | `clone3` | PID **res**, CHARBUF **exe**, BYTEBUF **args**, PID **tid**, PID **pid**, PID **ptid**, CHARBUF **cwd**, INT64 **fdlimit**, UINT64 **pgft_maj**, UINT64 **pgft_min**, UINT32 **vm_size**, UINT32 **vm_rss**, UINT32 **vm_swap**, CHARBUF **comm**, BYTEBUF **cgroups**, FLAGS32 **flags**: *CLONE_FILES*, *CLONE_FS*, *CLONE_IO*, *CLONE_NEWIPC*, *CLONE_NEWNET*, *CLONE_NEWNS*, *CLONE_NEWPID*, *CLONE_NEWUTS*, *CLONE_PARENT*, *CLONE_PARENT_SETTID*, *CLONE_PTRACE*, *CLONE_SIGHAND*, *CLONE_SYSVSEM*, *CLONE_THREAD*, *CLONE_UNTRACED*, *CLONE_VM*, *CLONE_INVERTED*, *NAME_CHANGED*, *CLOSED*, *CLONE_NEWUSER*, *CLONE_CHILD_CLEARTID*, *CLONE_CHILD_SETTID*, *CLONE_SETTLS*, *CLONE_STOPPED*, *CLONE_VFORK*, *CLONE_NEWCGROUP*, UINT32 **uid**, UINT32 **gid**, PID **vtid**, PID **vpid**, UINT64 **pidns_init_start_ts**
-Yes | `>` | `open_by_handle_at` |
+Yes | `>` | `open_by_handle_at` | 
 Yes | `<` | `open_by_handle_at` | FD **fd**, FD **mountfd**, FLAGS32 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*, FSPATH **path**, UINT32 **dev**, UINT64 **ino**
-Yes | `>` | `io_uring_setup` |
+Yes | `>` | `io_uring_setup` | 
 Yes | `<` | `io_uring_setup` | ERRNO **res**, UINT32 **entries**, UINT32 **sq_entries**, UINT32 **cq_entries**, FLAGS32 **flags**: *IORING_SETUP_IOPOLL*, *IORING_SETUP_SQPOLL*, *IORING_SQ_NEED_WAKEUP*, *IORING_SETUP_SQ_AFF*, *IORING_SETUP_CQSIZE*, *IORING_SETUP_CLAMP*, *IORING_SETUP_ATTACH_RW*, *IORING_SETUP_R_DISABLED*, UINT32 **sq_thread_cpu**, UINT32 **sq_thread_idle**, FLAGS32 **features**: *IORING_FEAT_SINGLE_MMAP*, *IORING_FEAT_NODROP*, *IORING_FEAT_SUBMIT_STABLE*, *IORING_FEAT_RW_CUR_POS*, *IORING_FEAT_CUR_PERSONALITY*, *IORING_FEAT_FAST_POLL*, *IORING_FEAT_POLL_32BITS*, *IORING_FEAT_SQPOLL_NONFIXED*, *IORING_FEAT_ENTER_EXT_ARG*, *IORING_FEAT_NATIVE_WORKERS*, *IORING_FEAT_RSRC_TAGS*
-Yes | `>` | `io_uring_enter` |
+Yes | `>` | `io_uring_enter` | 
 Yes | `<` | `io_uring_enter` | ERRNO **res**, FD **fd**, UINT32 **to_submit**, UINT32 **min_complete**, FLAGS32 **flags**: *IORING_ENTER_GETEVENTS*, *IORING_ENTER_SQ_WAKEUP*, *IORING_ENTER_SQ_WAIT*, *IORING_ENTER_EXT_ARG*, SIGSET **sig**
-Yes | `>` | `io_uring_register` |
+Yes | `>` | `io_uring_register` | 
 Yes | `<` | `io_uring_register` | ERRNO **res**, FD **fd**, ENUMFLAGS16 **opcode**: *IORING_REGISTER_BUFFERS*, *IORING_UNREGISTER_BUFFERS*, *IORING_REGISTER_FILES*, *IORING_UNREGISTER_FILES*, *IORING_REGISTER_EVENTFD*, *IORING_UNREGISTER_EVENTFD*, *IORING_REGISTER_FILES_UPDATE*, *IORING_REGISTER_EVENTFD_ASYNC*, *IORING_REGISTER_PROBE*, *IORING_REGISTER_PERSONALITY*, *IORING_UNREGISTER_PERSONALITY*, *IORING_REGISTER_RESTRICTIONS*, *IORING_REGISTER_ENABLE_RINGS*, *IORING_REGISTER_FILES2*, *IORING_REGISTER_FILES_UPDATE2*, *IORING_REGISTER_BUFFERS2*, *IORING_REGISTER_BUFFERS_UPDATE*, *IORING_REGISTER_IOWQ_AFF*, *IORING_UNREGISTER_IOWQ_AFF*, *IORING_REGISTER_IOWQ_MAX_WORKERS*, *IORING_REGISTER_RING_FDS*, *IORING_UNREGISTER_RING_FDS*, UINT64 **arg**, UINT32 **nr_args**
-Yes | `>` | `mlock` |
+Yes | `>` | `mlock` | 
 Yes | `<` | `mlock` | ERRNO **res**, UINT64 **addr**, UINT64 **len**
-Yes | `>` | `munlock` |
+Yes | `>` | `munlock` | 
 Yes | `<` | `munlock` | ERRNO **res**, UINT64 **addr**, UINT64 **len**
-Yes | `>` | `mlockall` |
+Yes | `>` | `mlockall` | 
 Yes | `<` | `mlockall` | ERRNO **res**, FLAGS32 **flags**: *MCL_CURRENT*, *MCL_FUTURE*, *MCL_ONFAULT*
-Yes | `>` | `munlockall` |
+Yes | `>` | `munlockall` | 
 Yes | `<` | `munlockall` | ERRNO **res**
-Yes | `>` | `capset` |
+Yes | `>` | `capset` | 
 Yes | `<` | `capset` | ERRNO **res**, UINT64 **cap_inheritable**, UINT64 **cap_permitted**, UINT64 **cap_effective**
 Yes | `>` | `dup2` | FD **fd**
 Yes | `<` | `dup2` | FD **res**, FD **oldfd**, FD **newfd**
@@ -265,592 +265,600 @@ Yes | `>` | `dup` | FD **fd**
 Yes | `<` | `dup` | FD **res**, FD **oldfd**
 Yes | `>` | `bpf` | INT64 **cmd**
 Yes | `<` | `bpf` | FD **fd**, ENUMFLAGS32 **cmd**: *BPF_MAP_CREATE*, *BPF_MAP_LOOKUP_ELEM*, *BPF_MAP_UPDATE_ELEM*, *BPF_MAP_DELETE_ELEM*, *BPF_MAP_GET_NEXT_KEY*, *BPF_PROG_LOAD*, *BPF_OBJ_PIN*, *BPF_OBJ_GET*, *BPF_PROG_ATTACH*, *BPF_PROG_DETACH*, *BPF_PROG_TEST_RUN*, *BPF_PROG_RUN*, *BPF_PROG_GET_NEXT_ID*, *BPF_MAP_GET_NEXT_ID*, *BPF_PROG_GET_FD_BY_ID*, *BPF_MAP_GET_FD_BY_ID*, *BPF_OBJ_GET_INFO_BY_FD*, *BPF_PROG_QUERY*, *BPF_RAW_TRACEPOINT_OPEN*, *BPF_BTF_LOAD*, *BPF_BTF_GET_FD_BY_ID*, *BPF_TASK_FD_QUERY*, *BPF_MAP_LOOKUP_AND_DELETE_ELEM*, *BPF_MAP_FREEZE*, *BPF_BTF_GET_NEXT_ID*, *BPF_MAP_LOOKUP_BATCH*, *BPF_MAP_LOOKUP_AND_DELETE_BATCH*, *BPF_MAP_UPDATE_BATCH*, *BPF_MAP_DELETE_BATCH*, *BPF_LINK_CREATE*, *BPF_LINK_UPDATE*, *BPF_LINK_GET_FD_BY_ID*, *BPF_LINK_GET_NEXT_ID*, *BPF_ENABLE_STATS*, *BPF_ITER_CREATE*, *BPF_LINK_DETACH*, *BPF_PROG_BIND_MAP*
-Yes | `>` | `mlock2` |
+Yes | `>` | `mlock2` | 
 Yes | `<` | `mlock2` | ERRNO **res**, UINT64 **addr**, UINT64 **len**, FLAGS32 **flags**: *MLOCK_ONFAULT*
-Yes | `>` | `fsconfig` |
+Yes | `>` | `fsconfig` | 
 Yes | `<` | `fsconfig` | ERRNO **res**, FD **fd**, ENUMFLAGS32 **cmd**: *FSCONFIG_SET_FLAG*, *FSCONFIG_SET_STRING*, *FSCONFIG_SET_BINARY*, *FSCONFIG_SET_PATH*, *FSCONFIG_SET_PATH_EMPTY*, *FSCONFIG_SET_FD*, *FSCONFIG_CMD_CREATE*, *FSCONFIG_CMD_RECONFIGURE*, CHARBUF **key**, BYTEBUF **value_bytebuf**, CHARBUF **value_charbuf**, INT32 **aux**
 Yes | `>` | `epoll_create` | INT32 **size**
 Yes | `<` | `epoll_create` | ERRNO **res**
 Yes | `>` | `epoll_create1` | FLAGS32 **flags**: *EPOLL_CLOEXEC*
 Yes | `<` | `epoll_create1` | ERRNO **res**
-Yes | `>` | `chown` |
+Yes | `>` | `chown` | 
 Yes | `<` | `chown` | ERRNO **res**, FSPATH **path**, UINT32 **uid**, UINT32 **gid**
-Yes | `>` | `lchown` |
+Yes | `>` | `lchown` | 
 Yes | `<` | `lchown` | ERRNO **res**, FSPATH **path**, UINT32 **uid**, UINT32 **gid**
-Yes | `>` | `fchown` |
+Yes | `>` | `fchown` | 
 Yes | `<` | `fchown` | ERRNO **res**, FD **fd**, UINT32 **uid**, UINT32 **gid**
-Yes | `>` | `fchownat` |
+Yes | `>` | `fchownat` | 
 Yes | `<` | `fchownat` | ERRNO **res**, FD **dirfd**, FSRELPATH **pathname**, UINT32 **uid**, UINT32 **gid**, FLAGS32 **flags**: *AT_SYMLINK_NOFOLLOW*, *AT_EMPTY_PATH*
-Yes | `>` | `umount` |
+Yes | `>` | `umount` | 
 Yes | `<` | `umount` | ERRNO **res**, FSPATH **name**
 Yes | `>` | `accept4` | INT32 **flags**
 Yes | `<` | `accept4` | FD **fd**, SOCKTUPLE **tuple**, UINT8 **queuepct**, UINT32 **queuelen**, UINT32 **queuemax**
 Yes | `>` | `umount2` | FLAGS32 **flags**: *FORCE*, *DETACH*, *EXPIRE*, *NOFOLLOW*
 Yes | `<` | `umount2` | ERRNO **res**, FSPATH **name**
-Yes | `>` | `pipe2` |
+Yes | `>` | `pipe2` | 
 Yes | `<` | `pipe2` | ERRNO **res**, FD **fd1**, FD **fd2**, UINT64 **ino**, FLAGS32 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*
-Yes | `>` | `inotify_init1` |
+Yes | `>` | `inotify_init1` | 
 Yes | `<` | `inotify_init1` | FD **res**, FLAGS16 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*
 Yes | `>` | `eventfd2` | UINT64 **initval**
 Yes | `<` | `eventfd2` | FD **res**, FLAGS16 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*
 Yes | `>` | `signalfd4` | FD **fd**, UINT32 **mask**
 Yes | `<` | `signalfd4` | FD **res**, FLAGS16 **flags**: *O_LARGEFILE*, *O_DIRECTORY*, *O_DIRECT*, *O_TRUNC*, *O_SYNC*, *O_NONBLOCK*, *O_EXCL*, *O_DSYNC*, *O_APPEND*, *O_CREAT*, *O_RDWR*, *O_WRONLY*, *O_RDONLY*, *O_CLOEXEC*, *O_NONE*, *O_TMPFILE*, *O_F_CREATED*, *FD_UPPER_LAYER*, *FD_LOWER_LAYER*
-Yes | `>` | `prctl` |
+Yes | `>` | `prctl` | 
 Yes | `<` | `prctl` | ERRNO **res**, ENUMFLAGS32 **option**: *PR_GET_DUMPABLE*, *PR_SET_DUMPABLE*, *PR_GET_KEEPCAPS*, *PR_SET_KEEPCAPS*, *PR_SET_NAME*, *PR_GET_NAME*, *PR_GET_SECCOMP*, *PR_SET_SECCOMP*, *PR_CAPBSET_READ*, *PR_CAPBSET_DROP*, *PR_GET_SECUREBITS*, *PR_SET_SECUREBITS*, *PR_MCE_KILL*, *PR_MCE_KILL*, *PR_SET_MM*, *PR_SET_CHILD_SUBREAPER*, *PR_GET_CHILD_SUBREAPER*, *PR_SET_NO_NEW_PRIVS*, *PR_GET_NO_NEW_PRIVS*, *PR_GET_TID_ADDRESS*, *PR_SET_THP_DISABLE*, *PR_GET_THP_DISABLE*, *PR_CAP_AMBIENT*, CHARBUF **arg2_str**, INT64 **arg2_int**
-Yes | `>` | `memfd_create` |
+Yes | `>` | `memfd_create` | 
 Yes | `<` | `memfd_create` | FD **fd**, CHARBUF **name**, FLAGS32 **flags**: *MFD_CLOEXEC*, *MFD_ALLOW_SEALING*, *MFD_HUGETLB*
-Yes | `>` | `pidfd_getfd` |
+Yes | `>` | `pidfd_getfd` | 
 Yes | `<` | `pidfd_getfd` | FD **fd**, FD **pid_fd**, FD **target_fd**, UINT32 **flags**
-Yes | `>` | `pidfd_open` |
+Yes | `>` | `pidfd_open` | 
 Yes | `<` | `pidfd_open` | FD **fd**, PID **pid**, FLAGS32 **flags**: *PIDFD_NONBLOCK*
-Yes | `>` | `init_module` |
+Yes | `>` | `init_module` | 
 Yes | `<` | `init_module` | ERRNO **res**, BYTEBUF **img**, UINT64 **length**, CHARBUF **uargs**
-Yes | `>` | `finit_module` |
+Yes | `>` | `finit_module` | 
 Yes | `<` | `finit_module` | ERRNO **res**, FD **fd**, CHARBUF **uargs**, FLAGS32 **flags**: *MODULE_INIT_IGNORE_MODVERSIONS*, *MODULE_INIT_IGNORE_VERMAGIC*, *MODULE_INIT_COMPRESSED_FILE*
-Yes | `>` | `mknod` |
+Yes | `>` | `mknod` | 
 Yes | `<` | `mknod` | ERRNO **res**, FSPATH **path**, MODE **mode**, UINT32 **dev**
-Yes | `>` | `mknodat` |
+Yes | `>` | `mknodat` | 
 Yes | `<` | `mknodat` | ERRNO **res**, FD **dirfd**, FSRELPATH **path**, MODE **mode**, UINT32 **dev**
-Yes | `>` | `newfstatat` |
+Yes | `>` | `newfstatat` | 
 Yes | `<` | `newfstatat` | ERRNO **res**, FD **dirfd**, FSRELPATH **path**, FLAGS32 **flags**: *AT_EMPTY_PATH*, *AT_NO_AUTOMOUNT*, *AT_SYMLINK_NOFOLLOW*
-Yes | `>` | `process_vm_readv` |
+Yes | `>` | `process_vm_readv` | 
 Yes | `<` | `process_vm_readv` | INT64 **res**, PID **pid**, BYTEBUF **data**
-Yes | `>` | `process_vm_writev` |
+Yes | `>` | `process_vm_writev` | 
 Yes | `<` | `process_vm_writev` | INT64 **res**, PID **pid**, BYTEBUF **data**
-Yes | `>` | `delete_module` |
+Yes | `>` | `delete_module` | 
 Yes | `<` | `delete_module` | ERRNO **res**, CHARBUF **name**, FLAGS32 **flags**: *O_NONBLOCK*, *O_TRUNC*
-Yes | `>` | `setreuid` |
+Yes | `>` | `setreuid` | 
 Yes | `<` | `setreuid` | ERRNO **res**, UID **ruid**, UID **euid**
-Yes | `>` | `setregid` |
+Yes | `>` | `setregid` | 
 Yes | `<` | `setregid` | ERRNO **res**, UID **rgid**, UID **egid**
-Yes | `>` | `uretprobe` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `uretprobe` | SYSCALLID **ID**
-Yes | `>` | `lsm_list_modules` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `lsm_list_modules` | SYSCALLID **ID**
-Yes | `>` | `lsm_get_self_attr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `lsm_get_self_attr` | SYSCALLID **ID**
-Yes | `>` | `statmount` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `statmount` | SYSCALLID **ID**
-Yes | `>` | `listmount` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `listmount` | SYSCALLID **ID**
-Yes | `>` | `capget` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `capget` | SYSCALLID **ID**
-Yes | `>` | `inotify_rm_watch` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `inotify_rm_watch` | SYSCALLID **ID**
-Yes | `>` | `clock_getres` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `clock_getres` | SYSCALLID **ID**
-Yes | `>` | `kexec_load` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `kexec_load` | SYSCALLID **ID**
-Yes | `>` | `mq_notify` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mq_notify` | SYSCALLID **ID**
-Yes | `>` | `utimes` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `utimes` | SYSCALLID **ID**
-Yes | `>` | `set_robust_list` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `set_robust_list` | SYSCALLID **ID**
-Yes | `>` | `shmget` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `shmget` | SYSCALLID **ID**
-Yes | `>` | `fspick` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fspick` | SYSCALLID **ID**
-Yes | `>` | `timer_delete` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timer_delete` | SYSCALLID **ID**
-Yes | `>` | `sethostname` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sethostname` | SYSCALLID **ID**
-Yes | `>` | `exit_group` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `exit_group` | SYSCALLID **ID**
-Yes | `>` | `fsmount` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fsmount` | SYSCALLID **ID**
-Yes | `>` | `clock_gettime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `clock_gettime` | SYSCALLID **ID**
-Yes | `>` | `timerfd_gettime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timerfd_gettime` | SYSCALLID **ID**
-Yes | `>` | `timer_getoverrun` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timer_getoverrun` | SYSCALLID **ID**
-Yes | `>` | `s390_pci_mmio_write` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `s390_pci_mmio_write` | SYSCALLID **ID**
-Yes | `>` | `io_setup` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `io_setup` | SYSCALLID **ID**
-Yes | `>` | `inotify_add_watch` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `inotify_add_watch` | SYSCALLID **ID**
-Yes | `>` | `pidfd_send_signal` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pidfd_send_signal` | SYSCALLID **ID**
-Yes | `>` | `epoll_ctl` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `epoll_ctl` | SYSCALLID **ID**
-Yes | `>` | `get_thread_area` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `get_thread_area` | SYSCALLID **ID**
-Yes | `>` | `switch_endian` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `switch_endian` | SYSCALLID **ID**
-Yes | `>` | `setitimer` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `setitimer` | SYSCALLID **ID**
-Yes | `>` | `io_submit` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `io_submit` | SYSCALLID **ID**
-Yes | `>` | `sched_setaffinity` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_setaffinity` | SYSCALLID **ID**
-Yes | `>` | `request_key` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `request_key` | SYSCALLID **ID**
-Yes | `>` | `fanotify_init` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fanotify_init` | SYSCALLID **ID**
-Yes | `>` | `fsopen` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fsopen` | SYSCALLID **ID**
-Yes | `>` | `sched_setattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_setattr` | SYSCALLID **ID**
-Yes | `>` | `sched_getaffinity` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_getaffinity` | SYSCALLID **ID**
-Yes | `>` | `rt_sigqueueinfo` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rt_sigqueueinfo` | SYSCALLID **ID**
-Yes | `>` | `utimensat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `utimensat` | SYSCALLID **ID**
-Yes | `>` | `fremovexattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fremovexattr` | SYSCALLID **ID**
-Yes | `>` | `getgroups` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getgroups` | SYSCALLID **ID**
-Yes | `>` | `removexattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `removexattr` | SYSCALLID **ID**
-Yes | `>` | `llistxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `llistxattr` | SYSCALLID **ID**
-Yes | `>` | `waitid` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `waitid` | SYSCALLID **ID**
-Yes | `>` | `arch_prctl` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `arch_prctl` | SYSCALLID **ID**
-Yes | `>` | `sigaction` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sigaction` | SYSCALLID **ID**
-Yes | `>` | `mq_timedsend` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mq_timedsend` | SYSCALLID **ID**
-Yes | `>` | `setxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `setxattr` | SYSCALLID **ID**
-Yes | `>` | `shmdt` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `shmdt` | SYSCALLID **ID**
-Yes | `>` | `sigpending` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sigpending` | SYSCALLID **ID**
-Yes | `>` | `fgetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fgetxattr` | SYSCALLID **ID**
-Yes | `>` | `lgetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `lgetxattr` | SYSCALLID **ID**
-Yes | `>` | `fsync` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fsync` | SYSCALLID **ID**
-Yes | `>` | `spu_create` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `spu_create` | SYSCALLID **ID**
-Yes | `>` | `fsetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fsetxattr` | SYSCALLID **ID**
-Yes | `>` | `lsetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `lsetxattr` | SYSCALLID **ID**
-Yes | `>` | `idle` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `idle` | SYSCALLID **ID**
-Yes | `>` | `shmat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `shmat` | SYSCALLID **ID**
 Yes | `>` | `adjtimex` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `adjtimex` | SYSCALLID **ID**
-Yes | `>` | `query_module` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `query_module` | SYSCALLID **ID**
-Yes | `>` | `timer_create` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timer_create` | SYSCALLID **ID**
-Yes | `>` | `gettid` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `gettid` | SYSCALLID **ID**
-Yes | `>` | `membarrier` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `membarrier` | SYSCALLID **ID**
-Yes | `>` | `add_key` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `add_key` | SYSCALLID **ID**
-Yes | `>` | `swapoff` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `swapoff` | SYSCALLID **ID**
-Yes | `>` | `madvise` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `madvise` | SYSCALLID **ID**
-Yes | `>` | `s390_pci_mmio_read` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `s390_pci_mmio_read` | SYSCALLID **ID**
-Yes | `>` | `setfsgid` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `setfsgid` | SYSCALLID **ID**
-Yes | `>` | `setfsuid` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `setfsuid` | SYSCALLID **ID**
-Yes | `>` | `getpgrp` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getpgrp` | SYSCALLID **ID**
-Yes | `>` | `personality` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `personality` | SYSCALLID **ID**
-Yes | `>` | `getxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getxattr` | SYSCALLID **ID**
-Yes | `>` | `move_mount` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `move_mount` | SYSCALLID **ID**
-Yes | `>` | `get_mempolicy` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `get_mempolicy` | SYSCALLID **ID**
-Yes | `>` | `getpriority` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getpriority` | SYSCALLID **ID**
-Yes | `>` | `readlinkat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `readlinkat` | SYSCALLID **ID**
-Yes | `>` | `mount_setattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mount_setattr` | SYSCALLID **ID**
-Yes | `>` | `clock_settime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `clock_settime` | SYSCALLID **ID**
-Yes | `>` | `umask` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `umask` | SYSCALLID **ID**
-Yes | `>` | `lookup_dcookie` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `lookup_dcookie` | SYSCALLID **ID**
-Yes | `>` | `quotactl_fd` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `quotactl_fd` | SYSCALLID **ID**
-Yes | `>` | `timer_settime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timer_settime` | SYSCALLID **ID**
-Yes | `>` | `truncate` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `truncate` | SYSCALLID **ID**
-Yes | `>` | `mremap` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mremap` | SYSCALLID **ID**
-Yes | `>` | `rtas` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rtas` | SYSCALLID **ID**
-Yes | `>` | `lsm_set_self_attr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `lsm_set_self_attr` | SYSCALLID **ID**
-Yes | `>` | `syslog` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `syslog` | SYSCALLID **ID**
+Yes | `>` | `exit` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `exit` | SYSCALLID **ID**
+Yes | `>` | `sethostname` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sethostname` | SYSCALLID **ID**
+Yes | `>` | `getsid` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getsid` | SYSCALLID **ID**
 Yes | `>` | `fstatfs` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `fstatfs` | SYSCALLID **ID**
-Yes | `>` | `ioperm` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `ioperm` | SYSCALLID **ID**
-Yes | `>` | `riscv_flush_icache` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `riscv_flush_icache` | SYSCALLID **ID**
-Yes | `>` | `keyctl` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `keyctl` | SYSCALLID **ID**
-Yes | `>` | `uselib` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `uselib` | SYSCALLID **ID**
-Yes | `>` | `reboot` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `reboot` | SYSCALLID **ID**
-Yes | `>` | `futimesat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `futimesat` | SYSCALLID **ID**
-Yes | `>` | `timer_gettime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timer_gettime` | SYSCALLID **ID**
-Yes | `>` | `flistxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `flistxattr` | SYSCALLID **ID**
-Yes | `>` | `setgroups` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `setgroups` | SYSCALLID **ID**
-Yes | `>` | `sched_rr_get_interval` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_rr_get_interval` | SYSCALLID **ID**
-Yes | `>` | `gettimeofday` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `gettimeofday` | SYSCALLID **ID**
-Yes | `>` | `readlink` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `readlink` | SYSCALLID **ID**
-Yes | `>` | `syncfs` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `syncfs` | SYSCALLID **ID**
-Yes | `>` | `get_robust_list` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `get_robust_list` | SYSCALLID **ID**
-Yes | `>` | `listxattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `listxattr` | SYSCALLID **ID**
-Yes | `>` | `set_mempolicy` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `set_mempolicy` | SYSCALLID **ID**
-Yes | `>` | `s390_guarded_storage` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `s390_guarded_storage` | SYSCALLID **ID**
-Yes | `>` | `settimeofday` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `settimeofday` | SYSCALLID **ID**
-Yes | `>` | `mq_unlink` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mq_unlink` | SYSCALLID **ID**
+Yes | `>` | `pivot_root` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pivot_root` | SYSCALLID **ID**
+Yes | `>` | `oldstat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `oldstat` | SYSCALLID **ID**
+Yes | `>` | `umask` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `umask` | SYSCALLID **ID**
+Yes | `>` | `madvise` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `madvise` | SYSCALLID **ID**
+Yes | `>` | `statfs64` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `statfs64` | SYSCALLID **ID**
+Yes | `>` | `iopl` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `iopl` | SYSCALLID **ID**
 Yes | `>` | `swapon` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `swapon` | SYSCALLID **ID**
-Yes | `>` | `pselect6` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pselect6` | SYSCALLID **ID**
-Yes | `>` | `io_cancel` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `io_cancel` | SYSCALLID **ID**
-Yes | `>` | `ioprio_get` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `ioprio_get` | SYSCALLID **ID**
-Yes | `>` | `uname` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `uname` | SYSCALLID **ID**
-Yes | `>` | `shmctl` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `shmctl` | SYSCALLID **ID**
-Yes | `>` | `time` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `time` | SYSCALLID **ID**
-Yes | `>` | `pkey_free` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pkey_free` | SYSCALLID **ID**
-Yes | `>` | `readahead` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `readahead` | SYSCALLID **ID**
-Yes | `>` | `statfs` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `statfs` | SYSCALLID **ID**
-Yes | `>` | `fanotify_mark` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fanotify_mark` | SYSCALLID **ID**
-Yes | `>` | `ioprio_set` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `ioprio_set` | SYSCALLID **ID**
-Yes | `>` | `times` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `times` | SYSCALLID **ID**
-Yes | `>` | `process_madvise` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `process_madvise` | SYSCALLID **ID**
-Yes | `>` | `vmsplice` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `vmsplice` | SYSCALLID **ID**
-Yes | `>` | `rt_sigtimedwait` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rt_sigtimedwait` | SYSCALLID **ID**
-Yes | `>` | `preadv2` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `preadv2` | SYSCALLID **ID**
-Yes | `>` | `create_module` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `create_module` | SYSCALLID **ID**
-Yes | `>` | `remap_file_pages` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `remap_file_pages` | SYSCALLID **ID**
-Yes | `>` | `lremovexattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `lremovexattr` | SYSCALLID **ID**
-Yes | `>` | `landlock_create_ruleset` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `landlock_create_ruleset` | SYSCALLID **ID**
-Yes | `>` | `timerfd` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timerfd` | SYSCALLID **ID**
-Yes | `>` | `pause` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pause` | SYSCALLID **ID**
-Yes | `>` | `stime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `stime` | SYSCALLID **ID**
-Yes | `>` | `sched_setparam` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_setparam` | SYSCALLID **ID**
-Yes | `>` | `name_to_handle_at` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `name_to_handle_at` | SYSCALLID **ID**
 Yes | `>` | `utime` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `utime` | SYSCALLID **ID**
 Yes | `>` | `getpid` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `getpid` | SYSCALLID **ID**
-Yes | `>` | `sync` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sync` | SYSCALLID **ID**
-Yes | `>` | `clock_adjtime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `clock_adjtime` | SYSCALLID **ID**
-Yes | `>` | `restart_syscall` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `restart_syscall` | SYSCALLID **ID**
-Yes | `>` | `io_getevents` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `io_getevents` | SYSCALLID **ID**
-Yes | `>` | `sysfs` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sysfs` | SYSCALLID **ID**
-Yes | `>` | `get_kernel_syms` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `get_kernel_syms` | SYSCALLID **ID**
-Yes | `>` | `epoll_pwait` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `epoll_pwait` | SYSCALLID **ID**
-Yes | `>` | `futex_wait` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `futex_wait` | SYSCALLID **ID**
-Yes | `>` | `acct` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `acct` | SYSCALLID **ID**
 Yes | `>` | `setdomainname` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `setdomainname` | SYSCALLID **ID**
+Yes | `>` | `semtimedop` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `semtimedop` | SYSCALLID **ID**
+Yes | `>` | `mq_notify` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mq_notify` | SYSCALLID **ID**
+Yes | `>` | `nfsservctl` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `nfsservctl` | SYSCALLID **ID**
+Yes | `>` | `pkey_mprotect` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pkey_mprotect` | SYSCALLID **ID**
+Yes | `>` | `fgetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fgetxattr` | SYSCALLID **ID**
 Yes | `>` | `sysinfo` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `sysinfo` | SYSCALLID **ID**
-Yes | `>` | `msgsnd` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `msgsnd` | SYSCALLID **ID**
-Yes | `>` | `mincore` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mincore` | SYSCALLID **ID**
-Yes | `>` | `cachestat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `cachestat` | SYSCALLID **ID**
-Yes | `>` | `pivot_root` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pivot_root` | SYSCALLID **ID**
-Yes | `>` | `exit` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `exit` | SYSCALLID **ID**
+Yes | `>` | `uselib` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `uselib` | SYSCALLID **ID**
+Yes | `>` | `olduname` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `olduname` | SYSCALLID **ID**
+Yes | `>` | `set_mempolicy` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `set_mempolicy` | SYSCALLID **ID**
 Yes | `>` | `getppid` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `getppid` | SYSCALLID **ID**
-Yes | `>` | `io_destroy` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `io_destroy` | SYSCALLID **ID**
-Yes | `>` | `ustat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `ustat` | SYSCALLID **ID**
-Yes | `>` | `epoll_wait_old` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `epoll_wait_old` | SYSCALLID **ID**
-Yes | `>` | `vhangup` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `vhangup` | SYSCALLID **ID**
-Yes | `>` | `_sysctl` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `_sysctl` | SYSCALLID **ID**
-Yes | `>` | `alarm` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `alarm` | SYSCALLID **ID**
+Yes | `>` | `sched_yield` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_yield` | SYSCALLID **ID**
+Yes | `>` | `getrusage` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getrusage` | SYSCALLID **ID**
+Yes | `>` | `sigsuspend` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sigsuspend` | SYSCALLID **ID**
+Yes | `>` | `riscv_hwprobe` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `riscv_hwprobe` | SYSCALLID **ID**
+Yes | `>` | `bdflush` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `bdflush` | SYSCALLID **ID**
+Yes | `>` | `get_kernel_syms` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `get_kernel_syms` | SYSCALLID **ID**
+Yes | `>` | `pause` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pause` | SYSCALLID **ID**
+Yes | `>` | `getpmsg` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getpmsg` | SYSCALLID **ID**
+Yes | `>` | `clock_gettime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `clock_gettime` | SYSCALLID **ID**
+Yes | `>` | `mq_getsetattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mq_getsetattr` | SYSCALLID **ID**
+Yes | `>` | `spu_run` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `spu_run` | SYSCALLID **ID**
+Yes | `>` | `personality` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `personality` | SYSCALLID **ID**
+Yes | `>` | `request_key` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `request_key` | SYSCALLID **ID**
+Yes | `>` | `readlink` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `readlink` | SYSCALLID **ID**
+Yes | `>` | `times` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `times` | SYSCALLID **ID**
+Yes | `>` | `reboot` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `reboot` | SYSCALLID **ID**
+Yes | `>` | `syslog` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `syslog` | SYSCALLID **ID**
+Yes | `>` | `ipc` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `ipc` | SYSCALLID **ID**
+Yes | `>` | `create_module` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `create_module` | SYSCALLID **ID**
+Yes | `>` | `listxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `listxattr` | SYSCALLID **ID**
+Yes | `>` | `setxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `setxattr` | SYSCALLID **ID**
+Yes | `>` | `setpriority` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `setpriority` | SYSCALLID **ID**
+Yes | `>` | `sigreturn` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sigreturn` | SYSCALLID **ID**
+Yes | `>` | `setgroups` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `setgroups` | SYSCALLID **ID**
+Yes | `>` | `preadv2` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `preadv2` | SYSCALLID **ID**
+Yes | `>` | `setitimer` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `setitimer` | SYSCALLID **ID**
+Yes | `>` | `shmat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `shmat` | SYSCALLID **ID**
+Yes | `>` | `getitimer` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getitimer` | SYSCALLID **ID**
+Yes | `>` | `removexattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `removexattr` | SYSCALLID **ID**
+Yes | `>` | `msgget` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `msgget` | SYSCALLID **ID**
+Yes | `>` | `spu_create` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `spu_create` | SYSCALLID **ID**
+Yes | `>` | `capget` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `capget` | SYSCALLID **ID**
+Yes | `>` | `rt_sigsuspend` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rt_sigsuspend` | SYSCALLID **ID**
+Yes | `>` | `mseal` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mseal` | SYSCALLID **ID**
+Yes | `>` | `fanotify_init` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fanotify_init` | SYSCALLID **ID**
+Yes | `>` | `readdir` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `readdir` | SYSCALLID **ID**
+Yes | `>` | `getxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getxattr` | SYSCALLID **ID**
+Yes | `>` | `mq_timedreceive` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mq_timedreceive` | SYSCALLID **ID**
+Yes | `>` | `nice` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `nice` | SYSCALLID **ID**
+Yes | `>` | `fsopen` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fsopen` | SYSCALLID **ID**
+Yes | `>` | `rt_sigpending` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rt_sigpending` | SYSCALLID **ID**
+Yes | `>` | `sysfs` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sysfs` | SYSCALLID **ID**
+Yes | `>` | `acct` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `acct` | SYSCALLID **ID**
+Yes | `>` | `setfsgid` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `setfsgid` | SYSCALLID **ID**
+Yes | `>` | `sync` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sync` | SYSCALLID **ID**
+Yes | `>` | `clock_adjtime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `clock_adjtime` | SYSCALLID **ID**
+Yes | `>` | `io_getevents` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `io_getevents` | SYSCALLID **ID**
+Yes | `>` | `query_module` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `query_module` | SYSCALLID **ID**
+Yes | `>` | `remap_file_pages` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `remap_file_pages` | SYSCALLID **ID**
 Yes | `>` | `rt_sigprocmask` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `rt_sigprocmask` | SYSCALLID **ID**
-Yes | `>` | `rt_tgsigqueueinfo` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rt_tgsigqueueinfo` | SYSCALLID **ID**
-Yes | `>` | `rt_sigaction` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rt_sigaction` | SYSCALLID **ID**
-Yes | `>` | `fchmodat2` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fchmodat2` | SYSCALLID **ID**
-Yes | `>` | `wait4` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `wait4` | SYSCALLID **ID**
+Yes | `>` | `mincore` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mincore` | SYSCALLID **ID**
 Yes | `>` | `getpgid` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `getpgid` | SYSCALLID **ID**
-Yes | `>` | `sched_yield` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_yield` | SYSCALLID **ID**
-Yes | `>` | `signal` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `signal` | SYSCALLID **ID**
-Yes | `>` | `clock_nanosleep` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `clock_nanosleep` | SYSCALLID **ID**
-Yes | `>` | `pkey_mprotect` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pkey_mprotect` | SYSCALLID **ID**
-Yes | `>` | `fdatasync` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fdatasync` | SYSCALLID **ID**
-Yes | `>` | `getrusage` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getrusage` | SYSCALLID **ID**
-Yes | `>` | `futex_wake` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `futex_wake` | SYSCALLID **ID**
+Yes | `>` | `msgsnd` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `msgsnd` | SYSCALLID **ID**
 Yes | `>` | `sched_getparam` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `sched_getparam` | SYSCALLID **ID**
-Yes | `>` | `sched_setscheduler` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_setscheduler` | SYSCALLID **ID**
-Yes | `>` | `setpriority` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `setpriority` | SYSCALLID **ID**
-Yes | `>` | `mseal` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mseal` | SYSCALLID **ID**
-Yes | `>` | `open_tree` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `open_tree` | SYSCALLID **ID**
+Yes | `>` | `getgroups` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getgroups` | SYSCALLID **ID**
+Yes | `>` | `ustat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `ustat` | SYSCALLID **ID**
+Yes | `>` | `uname` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `uname` | SYSCALLID **ID**
+Yes | `>` | `epoll_ctl` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `epoll_ctl` | SYSCALLID **ID**
+Yes | `>` | `lgetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `lgetxattr` | SYSCALLID **ID**
+Yes | `>` | `_sysctl` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `_sysctl` | SYSCALLID **ID**
+Yes | `>` | `rt_sigtimedwait` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rt_sigtimedwait` | SYSCALLID **ID**
+Yes | `>` | `flistxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `flistxattr` | SYSCALLID **ID**
+Yes | `>` | `pkey_alloc` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pkey_alloc` | SYSCALLID **ID**
+Yes | `>` | `time` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `time` | SYSCALLID **ID**
 Yes | `>` | `kcmp` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `kcmp` | SYSCALLID **ID**
+Yes | `>` | `epoll_pwait` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `epoll_pwait` | SYSCALLID **ID**
+Yes | `>` | `oldlstat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `oldlstat` | SYSCALLID **ID**
+Yes | `>` | `sched_setscheduler` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_setscheduler` | SYSCALLID **ID**
+Yes | `>` | `statfs` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `statfs` | SYSCALLID **ID**
+Yes | `>` | `fdatasync` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fdatasync` | SYSCALLID **ID**
+Yes | `>` | `set_robust_list` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `set_robust_list` | SYSCALLID **ID**
+Yes | `>` | `swapoff` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `swapoff` | SYSCALLID **ID**
+Yes | `>` | `quotactl_fd` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `quotactl_fd` | SYSCALLID **ID**
+Yes | `>` | `exit_group` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `exit_group` | SYSCALLID **ID**
+Yes | `>` | `listmount` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `listmount` | SYSCALLID **ID**
+Yes | `>` | `timerfd_settime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timerfd_settime` | SYSCALLID **ID**
 Yes | `>` | `sched_getscheduler` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `sched_getscheduler` | SYSCALLID **ID**
 Yes | `>` | `sched_get_priority_min` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `sched_get_priority_min` | SYSCALLID **ID**
-Yes | `>` | `rt_sigsuspend` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rt_sigsuspend` | SYSCALLID **ID**
-Yes | `>` | `rt_sigpending` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rt_sigpending` | SYSCALLID **ID**
-Yes | `>` | `semtimedop` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `semtimedop` | SYSCALLID **ID**
-Yes | `>` | `getitimer` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getitimer` | SYSCALLID **ID**
-Yes | `>` | `timerfd_settime` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `timerfd_settime` | SYSCALLID **ID**
-Yes | `>` | `sync_file_range2` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sync_file_range2` | SYSCALLID **ID**
-Yes | `>` | `ipc` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `ipc` | SYSCALLID **ID**
+Yes | `>` | `ftruncate` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `ftruncate` | SYSCALLID **ID**
+Yes | `>` | `pkey_free` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pkey_free` | SYSCALLID **ID**
+Yes | `>` | `sched_rr_get_interval` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_rr_get_interval` | SYSCALLID **ID**
+Yes | `>` | `open_tree` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `open_tree` | SYSCALLID **ID**
+Yes | `>` | `idle` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `idle` | SYSCALLID **ID**
+Yes | `>` | `mremap` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mremap` | SYSCALLID **ID**
+Yes | `>` | `rt_sigaction` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rt_sigaction` | SYSCALLID **ID**
+Yes | `>` | `stime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `stime` | SYSCALLID **ID**
+Yes | `>` | `sched_getattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_getattr` | SYSCALLID **ID**
+Yes | `>` | `rt_sigqueueinfo` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rt_sigqueueinfo` | SYSCALLID **ID**
+Yes | `>` | `sync_file_range` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sync_file_range` | SYSCALLID **ID**
+Yes | `>` | `mq_unlink` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mq_unlink` | SYSCALLID **ID**
+Yes | `>` | `alarm` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `alarm` | SYSCALLID **ID**
+Yes | `>` | `inotify_rm_watch` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `inotify_rm_watch` | SYSCALLID **ID**
+Yes | `>` | `lsetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `lsetxattr` | SYSCALLID **ID**
+Yes | `>` | `timer_delete` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timer_delete` | SYSCALLID **ID**
+Yes | `>` | `msync` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `msync` | SYSCALLID **ID**
+Yes | `>` | `timer_settime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timer_settime` | SYSCALLID **ID**
+Yes | `>` | `sigprocmask` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sigprocmask` | SYSCALLID **ID**
+Yes | `>` | `lremovexattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `lremovexattr` | SYSCALLID **ID**
+Yes | `>` | `fremovexattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fremovexattr` | SYSCALLID **ID**
+Yes | `>` | `sched_setaffinity` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_setaffinity` | SYSCALLID **ID**
+Yes | `>` | `fsetxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fsetxattr` | SYSCALLID **ID**
+Yes | `>` | `settimeofday` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `settimeofday` | SYSCALLID **ID**
+Yes | `>` | `gettimeofday` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `gettimeofday` | SYSCALLID **ID**
+Yes | `>` | `io_setup` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `io_setup` | SYSCALLID **ID**
+Yes | `>` | `llistxattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `llistxattr` | SYSCALLID **ID**
+Yes | `>` | `fsync` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fsync` | SYSCALLID **ID**
+Yes | `>` | `pidfd_send_signal` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pidfd_send_signal` | SYSCALLID **ID**
+Yes | `>` | `getrandom` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getrandom` | SYSCALLID **ID**
+Yes | `>` | `s390_sthyi` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `s390_sthyi` | SYSCALLID **ID**
+Yes | `>` | `io_destroy` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `io_destroy` | SYSCALLID **ID**
+Yes | `>` | `sigaltstack` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sigaltstack` | SYSCALLID **ID**
+Yes | `>` | `riscv_flush_icache` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `riscv_flush_icache` | SYSCALLID **ID**
+Yes | `>` | `mount_setattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mount_setattr` | SYSCALLID **ID**
+Yes | `>` | `getpgrp` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getpgrp` | SYSCALLID **ID**
+Yes | `>` | `vhangup` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `vhangup` | SYSCALLID **ID**
+Yes | `>` | `set_tid_address` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `set_tid_address` | SYSCALLID **ID**
+Yes | `>` | `timer_create` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timer_create` | SYSCALLID **ID**
+Yes | `>` | `timer_gettime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timer_gettime` | SYSCALLID **ID**
+Yes | `>` | `timer_getoverrun` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timer_getoverrun` | SYSCALLID **ID**
+Yes | `>` | `clock_settime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `clock_settime` | SYSCALLID **ID**
+Yes | `>` | `clock_getres` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `clock_getres` | SYSCALLID **ID**
+Yes | `>` | `utimes` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `utimes` | SYSCALLID **ID**
+Yes | `>` | `vm86` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `vm86` | SYSCALLID **ID**
+Yes | `>` | `lsm_set_self_attr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `lsm_set_self_attr` | SYSCALLID **ID**
+Yes | `>` | `clock_nanosleep` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `clock_nanosleep` | SYSCALLID **ID**
+Yes | `>` | `futimesat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `futimesat` | SYSCALLID **ID**
+Yes | `>` | `signal` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `signal` | SYSCALLID **ID**
 Yes | `>` | `mq_open` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `mq_open` | SYSCALLID **ID**
+Yes | `>` | `keyctl` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `keyctl` | SYSCALLID **ID**
+Yes | `>` | `ioprio_set` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `ioprio_set` | SYSCALLID **ID**
+Yes | `>` | `landlock_add_rule` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `landlock_add_rule` | SYSCALLID **ID**
+Yes | `>` | `add_key` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `add_key` | SYSCALLID **ID**
+Yes | `>` | `set_thread_area` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `set_thread_area` | SYSCALLID **ID**
+Yes | `>` | `ioprio_get` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `ioprio_get` | SYSCALLID **ID**
+Yes | `>` | `sync_file_range2` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sync_file_range2` | SYSCALLID **ID**
+Yes | `>` | `ioperm` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `ioperm` | SYSCALLID **ID**
+Yes | `>` | `sigaction` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sigaction` | SYSCALLID **ID**
+Yes | `>` | `inotify_add_watch` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `inotify_add_watch` | SYSCALLID **ID**
+Yes | `>` | `fallocate` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fallocate` | SYSCALLID **ID**
+Yes | `>` | `get_thread_area` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `get_thread_area` | SYSCALLID **ID**
+Yes | `>` | `readlinkat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `readlinkat` | SYSCALLID **ID**
+Yes | `>` | `name_to_handle_at` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `name_to_handle_at` | SYSCALLID **ID**
+Yes | `>` | `perf_event_open` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `perf_event_open` | SYSCALLID **ID**
+Yes | `>` | `kexec_load` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `kexec_load` | SYSCALLID **ID**
+Yes | `>` | `truncate` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `truncate` | SYSCALLID **ID**
+Yes | `>` | `faccessat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `faccessat` | SYSCALLID **ID**
+Yes | `>` | `mq_timedsend` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `mq_timedsend` | SYSCALLID **ID**
+Yes | `>` | `restart_syscall` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `restart_syscall` | SYSCALLID **ID**
+Yes | `>` | `map_shadow_stack` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `map_shadow_stack` | SYSCALLID **ID**
+Yes | `>` | `pselect6` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pselect6` | SYSCALLID **ID**
+Yes | `>` | `epoll_ctl_old` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `epoll_ctl_old` | SYSCALLID **ID**
+Yes | `>` | `get_robust_list` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `get_robust_list` | SYSCALLID **ID**
+Yes | `>` | `tee` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `tee` | SYSCALLID **ID**
+Yes | `>` | `vmsplice` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `vmsplice` | SYSCALLID **ID**
 Yes | `>` | `getcpu` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `getcpu` | SYSCALLID **ID**
-Yes | `>` | `epoll_pwait2` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `epoll_pwait2` | SYSCALLID **ID**
-Yes | `>` | `perf_event_open` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `perf_event_open` | SYSCALLID **ID**
-Yes | `>` | `msgrcv` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `msgrcv` | SYSCALLID **ID**
-Yes | `>` | `process_mrelease` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `process_mrelease` | SYSCALLID **ID**
-Yes | `>` | `bdflush` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `bdflush` | SYSCALLID **ID**
+Yes | `>` | `utimensat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `utimensat` | SYSCALLID **ID**
+Yes | `>` | `rseq` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rseq` | SYSCALLID **ID**
+Yes | `>` | `timerfd_gettime` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timerfd_gettime` | SYSCALLID **ID**
+Yes | `>` | `syncfs` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `syncfs` | SYSCALLID **ID**
 Yes | `>` | `msgctl` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `msgctl` | SYSCALLID **ID**
-Yes | `>` | `statfs64` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `statfs64` | SYSCALLID **ID**
-Yes | `>` | `fstatfs64` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fstatfs64` | SYSCALLID **ID**
+Yes | `>` | `io_submit` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `io_submit` | SYSCALLID **ID**
+Yes | `>` | `oldolduname` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `oldolduname` | SYSCALLID **ID**
+Yes | `>` | `shmdt` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `shmdt` | SYSCALLID **ID**
+Yes | `>` | `sched_getaffinity` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_getaffinity` | SYSCALLID **ID**
 Yes | `>` | `fstatat64` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `fstatat64` | SYSCALLID **ID**
-Yes | `>` | `sigprocmask` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sigprocmask` | SYSCALLID **ID**
 Yes | `>` | `socketcall` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `socketcall` | SYSCALLID **ID**
-Yes | `>` | `sys_debug_setcontext` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sys_debug_setcontext` | SYSCALLID **ID**
-Yes | `>` | `set_tid_address` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `set_tid_address` | SYSCALLID **ID**
-Yes | `>` | `_newselect` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `_newselect` | SYSCALLID **ID**
-Yes | `>` | `map_shadow_stack` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `map_shadow_stack` | SYSCALLID **ID**
+Yes | `>` | `waitid` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `waitid` | SYSCALLID **ID**
 Yes | `>` | `sgetmask` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `sgetmask` | SYSCALLID **ID**
-Yes | `>` | `olduname` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `olduname` | SYSCALLID **ID**
-Yes | `>` | `mq_getsetattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mq_getsetattr` | SYSCALLID **ID**
-Yes | `>` | `nice` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `nice` | SYSCALLID **ID**
-Yes | `>` | `tee` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `tee` | SYSCALLID **ID**
+Yes | `>` | `io_cancel` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `io_cancel` | SYSCALLID **ID**
+Yes | `>` | `sched_setparam` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_setparam` | SYSCALLID **ID**
+Yes | `>` | `cachestat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `cachestat` | SYSCALLID **ID**
+Yes | `>` | `sched_setattr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_setattr` | SYSCALLID **ID**
+Yes | `>` | `ssetmask` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `ssetmask` | SYSCALLID **ID**
+Yes | `>` | `_newselect` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `_newselect` | SYSCALLID **ID**
+Yes | `>` | `setfsuid` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `setfsuid` | SYSCALLID **ID**
+Yes | `>` | `sigpending` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sigpending` | SYSCALLID **ID**
+Yes | `>` | `wait4` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `wait4` | SYSCALLID **ID**
+Yes | `>` | `process_mrelease` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `process_mrelease` | SYSCALLID **ID**
 Yes | `>` | `waitpid` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `waitpid` | SYSCALLID **ID**
-Yes | `>` | `fallocate` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `fallocate` | SYSCALLID **ID**
-Yes | `>` | `sigaltstack` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sigaltstack` | SYSCALLID **ID**
-Yes | `>` | `getrandom` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getrandom` | SYSCALLID **ID**
+Yes | `>` | `arch_prctl` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `arch_prctl` | SYSCALLID **ID**
+Yes | `>` | `rt_sigreturn` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rt_sigreturn` | SYSCALLID **ID**
 Yes | `>` | `fadvise64` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `fadvise64` | SYSCALLID **ID**
+Yes | `>` | `msgrcv` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `msgrcv` | SYSCALLID **ID**
+Yes | `>` | `move_mount` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `move_mount` | SYSCALLID **ID**
+Yes | `>` | `lookup_dcookie` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `lookup_dcookie` | SYSCALLID **ID**
+Yes | `>` | `fspick` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fspick` | SYSCALLID **ID**
+Yes | `>` | `shmget` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `shmget` | SYSCALLID **ID**
+Yes | `>` | `fsmount` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fsmount` | SYSCALLID **ID**
+Yes | `>` | `epoll_pwait2` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `epoll_pwait2` | SYSCALLID **ID**
+Yes | `>` | `move_pages` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `move_pages` | SYSCALLID **ID**
+Yes | `>` | `shmctl` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `shmctl` | SYSCALLID **ID**
 Yes | `>` | `memfd_secret` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `memfd_secret` | SYSCALLID **ID**
-Yes | `>` | `kexec_file_load` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `kexec_file_load` | SYSCALLID **ID**
-Yes | `>` | `close_range` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `close_range` | SYSCALLID **ID**
-Yes | `>` | `pkey_alloc` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pkey_alloc` | SYSCALLID **ID**
-Yes | `>` | `msgget` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `msgget` | SYSCALLID **ID**
 Yes | `>` | `landlock_restrict_self` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `landlock_restrict_self` | SYSCALLID **ID**
-Yes | `>` | `mq_timedreceive` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `mq_timedreceive` | SYSCALLID **ID**
-Yes | `>` | `landlock_add_rule` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `landlock_add_rule` | SYSCALLID **ID**
-Yes | `>` | `msync` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `msync` | SYSCALLID **ID**
-Yes | `>` | `modify_ldt` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `modify_ldt` | SYSCALLID **ID**
+Yes | `>` | `sched_get_priority_max` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sched_get_priority_max` | SYSCALLID **ID**
+Yes | `>` | `sys_debug_setcontext` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `sys_debug_setcontext` | SYSCALLID **ID**
+Yes | `>` | `kexec_file_load` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `kexec_file_load` | SYSCALLID **ID**
+Yes | `>` | `process_madvise` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `process_madvise` | SYSCALLID **ID**
+Yes | `>` | `landlock_create_ruleset` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `landlock_create_ruleset` | SYSCALLID **ID**
+Yes | `>` | `rt_tgsigqueueinfo` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rt_tgsigqueueinfo` | SYSCALLID **ID**
 Yes | `>` | `migrate_pages` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `migrate_pages` | SYSCALLID **ID**
-Yes | `>` | `futex_waitv` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `futex_waitv` | SYSCALLID **ID**
-Yes | `>` | `move_pages` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `move_pages` | SYSCALLID **ID**
+Yes | `>` | `fstatfs64` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fstatfs64` | SYSCALLID **ID**
+Yes | `>` | `pwritev2` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pwritev2` | SYSCALLID **ID**
 Yes | `>` | `mbind` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `mbind` | SYSCALLID **ID**
-Yes | `>` | `epoll_ctl_old` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `epoll_ctl_old` | SYSCALLID **ID**
+Yes | `>` | `modify_ldt` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `modify_ldt` | SYSCALLID **ID**
+Yes | `>` | `gettid` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `gettid` | SYSCALLID **ID**
 Yes | `>` | `statx` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `statx` | SYSCALLID **ID**
+Yes | `>` | `getpriority` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getpriority` | SYSCALLID **ID**
 Yes | `>` | `io_pgetevents` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `io_pgetevents` | SYSCALLID **ID**
+Yes | `>` | `listxattrat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `listxattrat` | SYSCALLID **ID**
 Yes | `>` | `set_mempolicy_home_node` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `set_mempolicy_home_node` | SYSCALLID **ID**
-Yes | `>` | `getpmsg` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getpmsg` | SYSCALLID **ID**
-Yes | `>` | `sigsuspend` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sigsuspend` | SYSCALLID **ID**
-Yes | `>` | `nfsservctl` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `nfsservctl` | SYSCALLID **ID**
-Yes | `>` | `rseq` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rseq` | SYSCALLID **ID**
-Yes | `>` | `pciconfig_read` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pciconfig_read` | SYSCALLID **ID**
-Yes | `>` | `sched_getattr` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_getattr` | SYSCALLID **ID**
+Yes | `>` | `readahead` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `readahead` | SYSCALLID **ID**
+Yes | `>` | `futex_waitv` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `futex_waitv` | SYSCALLID **ID**
+Yes | `>` | `epoll_wait_old` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `epoll_wait_old` | SYSCALLID **ID**
 Yes | `>` | `faccessat2` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `faccessat2` | SYSCALLID **ID**
-Yes | `>` | `sync_file_range` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sync_file_range` | SYSCALLID **ID**
-Yes | `>` | `readdir` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `readdir` | SYSCALLID **ID**
-Yes | `>` | `s390_sthyi` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `s390_sthyi` | SYSCALLID **ID**
+Yes | `>` | `get_mempolicy` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `get_mempolicy` | SYSCALLID **ID**
+Yes | `>` | `membarrier` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `membarrier` | SYSCALLID **ID**
+Yes | `>` | `pciconfig_iobase` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pciconfig_iobase` | SYSCALLID **ID**
+Yes | `>` | `close_range` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `close_range` | SYSCALLID **ID**
+Yes | `>` | `fanotify_mark` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fanotify_mark` | SYSCALLID **ID**
+Yes | `>` | `timerfd` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `timerfd` | SYSCALLID **ID**
+Yes | `>` | `s390_pci_mmio_read` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `s390_pci_mmio_read` | SYSCALLID **ID**
+Yes | `>` | `s390_pci_mmio_write` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `s390_pci_mmio_write` | SYSCALLID **ID**
 Yes | `>` | `s390_runtime_instr` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `s390_runtime_instr` | SYSCALLID **ID**
-Yes | `>` | `sigreturn` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sigreturn` | SYSCALLID **ID**
-Yes | `>` | `ftruncate` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `ftruncate` | SYSCALLID **ID**
-Yes | `>` | `riscv_hwprobe` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `riscv_hwprobe` | SYSCALLID **ID**
-Yes | `>` | `pwritev2` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pwritev2` | SYSCALLID **ID**
+Yes | `>` | `s390_guarded_storage` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `s390_guarded_storage` | SYSCALLID **ID**
+Yes | `>` | `fchmodat2` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `fchmodat2` | SYSCALLID **ID**
+Yes | `>` | `futex_wake` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `futex_wake` | SYSCALLID **ID**
 Yes | `>` | `futex_requeue` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `futex_requeue` | SYSCALLID **ID**
-Yes | `>` | `oldstat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `oldstat` | SYSCALLID **ID**
+Yes | `>` | `futex_wait` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `futex_wait` | SYSCALLID **ID**
+Yes | `>` | `switch_endian` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `switch_endian` | SYSCALLID **ID**
 Yes | `>` | `multiplexer` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `multiplexer` | SYSCALLID **ID**
-Yes | `>` | `oldlstat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `oldlstat` | SYSCALLID **ID**
 Yes | `>` | `oldfstat` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `oldfstat` | SYSCALLID **ID**
-Yes | `>` | `ssetmask` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `ssetmask` | SYSCALLID **ID**
-Yes | `>` | `spu_run` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `spu_run` | SYSCALLID **ID**
-Yes | `>` | `iopl` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `iopl` | SYSCALLID **ID**
-Yes | `>` | `getsid` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `getsid` | SYSCALLID **ID**
+Yes | `>` | `lsm_get_self_attr` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `lsm_get_self_attr` | SYSCALLID **ID**
 Yes | `>` | `swapcontext` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `swapcontext` | SYSCALLID **ID**
 Yes | `>` | `pciconfig_write` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `pciconfig_write` | SYSCALLID **ID**
-Yes | `>` | `vm86` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `vm86` | SYSCALLID **ID**
-Yes | `>` | `sched_get_priority_max` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `sched_get_priority_max` | SYSCALLID **ID**
-Yes | `>` | `oldolduname` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `oldolduname` | SYSCALLID **ID**
-Yes | `>` | `faccessat` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `faccessat` | SYSCALLID **ID**
-Yes | `>` | `set_thread_area` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `set_thread_area` | SYSCALLID **ID**
+Yes | `>` | `rtas` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `rtas` | SYSCALLID **ID**
+Yes | `>` | `pciconfig_read` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `pciconfig_read` | SYSCALLID **ID**
 Yes | `>` | `subpage_prot` | SYSCALLID **ID**, UINT16 **nativeID**
 Yes | `<` | `subpage_prot` | SYSCALLID **ID**
-Yes | `>` | `rt_sigreturn` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `rt_sigreturn` | SYSCALLID **ID**
-Yes | `>` | `pciconfig_iobase` | SYSCALLID **ID**, UINT16 **nativeID**
-Yes | `<` | `pciconfig_iobase` | SYSCALLID **ID**
+Yes | `>` | `statmount` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `statmount` | SYSCALLID **ID**
+Yes | `>` | `lsm_list_modules` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `lsm_list_modules` | SYSCALLID **ID**
+Yes | `>` | `uretprobe` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `uretprobe` | SYSCALLID **ID**
+Yes | `>` | `removexattrat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `removexattrat` | SYSCALLID **ID**
+Yes | `>` | `getxattrat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `getxattrat` | SYSCALLID **ID**
+Yes | `>` | `setxattrat` | SYSCALLID **ID**, UINT16 **nativeID**
+Yes | `<` | `setxattrat` | SYSCALLID **ID**
 
 
 ## Tracepoint events
diff --git a/content/en/docs/reference/rules/supported-fields/supported-fields.md b/content/en/docs/reference/rules/supported-fields/supported-fields.md
index 5842093f0..8c12307a2 100644
--- a/content/en/docs/reference/rules/supported-fields/supported-fields.md
+++ b/content/en/docs/reference/rules/supported-fields/supported-fields.md
@@ -87,12 +87,12 @@ Name | Type | Description
 `proc.exepath` | CHARBUF | The full executable path of a process, resolving to the canonical path for symlinks. This is primarily obtained from the kernel, or as a fallback, by reading /proc/PID/exe (in the latter case, the path is truncated after 1024 bytes). For eBPF drivers, due to verifier limits, path components may be truncated to 24 for legacy eBPF on kernel <5.2, 48 for legacy eBPF on kernel >=5.2, or 96 for modern eBPF.
 `proc.pexepath` | CHARBUF | The proc.exepath (full executable path) of the parent process.
 `proc.aexepath` | CHARBUF | The proc.exepath (full executable path) for a specific process ancestor. You can access different levels of ancestors by using indices. For example, proc.aexepath[1] retrieves the proc.exepath of the parent process, proc.aexepath[2] retrieves the proc.exepath of the grandparent process, and so on. The current process's proc.exepath line can be obtained using proc.aexepath[0]. When used without any arguments, proc.aexepath is applicable only in filters and matches any of the process ancestors. For instance, you can use `proc.aexepath endswith java` to match any process ancestor whose path ends with the term `java`.
-`proc.name` | CHARBUF | The process name (truncated after 16 characters) generating the event (task->comm). Truncation is determined by kernel settings and not by Falco. This field is collected from the syscalls args or, as a fallback, extracted from /proc/PID/status. The name of the process and the name of the executable file on disk (if applicable) can be different if a process is given a custom name which is often the case for example for java applications.
-`proc.pname` | CHARBUF | The proc.name truncated after 16 characters) of the process generating the event.
+`proc.name` | CHARBUF | The process name (truncated after 16 characters) generating the event (task->comm). Truncation is determined by kernel settings and not by Falco. This field is collected from the syscalls args or, as a fallback, extracted from /proc/PID/comm. The name of the process and the name of the executable file on disk (if applicable) can be different if a process is given a custom name which is often the case for example for java applications.
+`proc.pname` | CHARBUF | The proc.name (truncated after 16 characters) of the parent process.
 `proc.aname` | CHARBUF | The proc.name (truncated after 16 characters) for a specific process ancestor. You can access different levels of ancestors by using indices. For example, proc.aname[1] retrieves the proc.name of the parent process, proc.aname[2] retrieves the proc.name of the grandparent process, and so on. The current process's proc.name line can be obtained using proc.aname[0]. When used without any arguments, proc.aname is applicable only in filters and matches any of the process ancestors. For instance, you can use `proc.aname=bash` to match any process ancestor whose name is `bash`.
 `proc.args` | CHARBUF | The arguments passed on the command line when starting the process generating the event excluding argv[0] (truncated after 4096 bytes). This field is collected from the syscalls args or, as a fallback, extracted from /proc/PID/cmdline.
 `proc.cmdline` | CHARBUF | The concatenation of `proc.name + proc.args` (truncated after 4096 bytes) when starting the process generating the event.
-`proc.pcmdline` | CHARBUF | The proc.cmdline (full command line (proc.name + proc.args)) of the parent of the process generating the event.
+`proc.pcmdline` | CHARBUF | The proc.cmdline (full command line (proc.name + proc.args)) of the parent process.
 `proc.acmdline` | CHARBUF | The full command line (proc.name + proc.args) for a specific process ancestor. You can access different levels of ancestors by using indices. For example, proc.acmdline[1] retrieves the full command line of the parent process, proc.acmdline[2] retrieves the proc.cmdline of the grandparent process, and so on. The current process's full command line can be obtained using proc.acmdline[0]. When used without any arguments, proc.acmdline is applicable only in filters and matches any of the process ancestors. For instance, you can use `proc.acmdline contains base64` to match any process ancestor whose command line contains the term base64.
 `proc.cmdnargs` | UINT64 | The number of command line args (proc.args).
 `proc.cmdlenargs` | UINT64 | The total count of characters / length of the command line args (proc.args) combined excluding whitespaces between args.
@@ -115,6 +115,10 @@ Name | Type | Description
 `proc.vpgid.name` | CHARBUF | The name of the current process's process group leader. This is either the process with proc.vpgid == proc.vpid or the eldest ancestor that has the same vpgid as the current process. The description of `proc.is_vpgid_leader` offers additional insights.
 `proc.vpgid.exe` | CHARBUF | The first command line argument argv[0] (usually the executable name or a custom one) of the current process's process group leader. This is either the process with proc.vpgid == proc.vpid or the eldest ancestor that has the same vpgid as the current process. The description of `proc.is_vpgid_leader` offers additional insights.
 `proc.vpgid.exepath` | CHARBUF | The full executable path of the current process's process group leader. This is either the process with proc.vpgid == proc.vpid or the eldest ancestor that has the same vpgid as the current process. The description of `proc.is_vpgid_leader` offers additional insights.
+`proc.pgid` | INT64 | The process group id of the process generating the event, as seen from host PID namespace.
+`proc.pgid.name` | CHARBUF | The name of the current process's process group leader. This is either the process with proc.pgid == proc.pid or the eldest ancestor that has the same pgid as the current process. The description of `proc.is_pgid_leader` offers additional insights.
+`proc.pgid.exe` | CHARBUF | The first command line argument argv[0] (usually the executable name or a custom one) of the current process's process group leader. This is either the process with proc.pgid == proc.pid or the eldest ancestor that has the same pgid as the current process. The description of `proc.is_pgid_leader` offers additional insights.
+`proc.pgid.exepath` | CHARBUF | The full executable path of the current process's process group leader. This is either the process with proc.pgid == proc.pid or the eldest ancestor that has the same pgid as the current process. The description of `proc.is_pgid_leader` offers additional insights.
 `proc.duration` | RELTIME | Number of nanoseconds since the process started.
 `proc.ppid.duration` | RELTIME | Number of nanoseconds since the parent process started.
 `proc.pid.ts` | RELTIME | Start of process as epoch timestamp in nanoseconds.
@@ -125,6 +129,7 @@ Name | Type | Description
 `proc.is_exe_from_memfd` | BOOL | 'true' if the executable file of the current process is an anonymous file created using memfd_create() and is being executed by referencing its file descriptor (fd). This type of file exists only in memory and not on disk. Relevant to detect malicious in-memory code injection. Requires kernel version greater or equal to 3.17.0.
 `proc.is_sid_leader` | BOOL | 'true' if this process is the leader of the process session, proc.sid == proc.vpid. For host processes vpid reflects pid.
 `proc.is_vpgid_leader` | BOOL | 'true' if this process is the leader of the virtual process group, proc.vpgid == proc.vpid. For host processes vpgid and vpid reflect pgid and pid. Can help to distinguish if the process was 'directly' executed for instance in a tty (similar to bash history logging, `is_vpgid_leader` would be 'true') or executed as descendent process in the same process group which for example is the case when subprocesses are spawned from a script (`is_vpgid_leader` would be 'false').
+`proc.is_pgid_leader` | BOOL | 'true' if this process is the leader of the process group, proc.pgid == proc.pid. Can help to distinguish if the process was 'directly' executed for instance in a tty (similar to bash history logging, `is_pgid_leader` would be 'true') or executed as descendent process in the same process group which for example is the case when subprocesses are spawned from a script (`is_pgid_leader` would be 'false').
 `proc.exe_ino` | INT64 | The inode number of the executable file on disk. Can be correlated with fd.ino.
 `proc.exe_ino.ctime` | ABSTIME | Last status change time of executable file (inode->ctime) as epoch timestamp in nanoseconds. Time is changed by writing or by setting inode information e.g. owner, group, link count, mode etc.
 `proc.exe_ino.mtime` | ABSTIME | Last modification time of executable file (inode->mtime) as epoch timestamp in nanoseconds. Time is changed by file modifications, e.g. by mknod, truncate, utime, write of more than zero bytes etc. For tracking changes in owner, group, link count or mode, use proc.exe_ino.ctime instead.
@@ -221,6 +226,9 @@ Name | Type | Description
 `container.duration` | RELTIME | Number of nanoseconds since container.start_ts.
 `container.ip` | CHARBUF | The container's / pod's primary ip address as retrieved from the container engine. Only ipv4 addresses are tracked. Consider container.cni.json (CRI use case) for logging ip addresses for each network interface. In instances of userspace container engine lookup delays, this field may not be available yet.
 `container.cni.json` | CHARBUF | The container's / pod's CNI result field from the respective pod status info. It contains ip addresses for each network interface exposed as unparsed escaped JSON string. Supported for CRI container engine (containerd, cri-o runtimes), optimized for containerd (some non-critical JSON keys removed). Useful for tracking ips (ipv4 and ipv6, dual-stack support) for each network interface (multi-interface support). In instances of userspace container engine lookup delays, this field may not be available yet.
+`container.host_pid` | BOOL | 'true' if the container is running in the host PID namespace, 'false' otherwise.
+`container.host_network` | BOOL | 'true' if the container is running in the host network namespace, 'false' otherwise.
+`container.host_ipc` | BOOL | 'true' if the container is running in the host IPC namespace, 'false' otherwise.
 
 ### Field Class: fd