Re: [RFC, v2, 1/1] audit: speed up syscall rule match while exiting syscall