Constant TRACE_SYSCALLS 

pub const TRACE_SYSCALLS: &[i64];

Syscalls that take a ptrace stop so their arguments can be edited in place.

inotify_add_watch is here because a watch can only be added to the tracee’s own inotify descriptor, so the path is rewritten in place.