new clone/execve events with memory fields and page faults