Hooked syscalls now send their syscall_id, inode_nr and pid to the userspace application.