@Override
	public boolean added(Program program, AddressSetView set, TaskMonitor monitor, MessageLog log) 
			throws CancelledException {
		
		AddressSpace syscallSpace = program.getAddressFactory().getAddressSpace(SYSCALL_ADDRSPACE_NAME);
		
		AddressSetView syscallSet = set.intersectRange(syscallSpace.getMinAddress(), syscallSpace.getMaxAddress());
		if (syscallSet.isEmpty()) {
			return true;
		}
		
		// Clear disassembly errors within syscall space
        BookmarkManager bookmarkMgr = program.getBookmarkManager();
        bookmarkMgr.removeBookmarks(syscallSet, BookmarkType.ERROR, monitor);
        
        eBPFHelperDataTypes helperDataTypes = eBPFHelperDataTypes.get(program, log);
		if (helperDataTypes == null) {
			return false;
		}
		
		for (Function f : program.getFunctionManager().getFunctions(syscallSet, true)) {
			monitor.checkCancelled();
			if (f.getSymbol().getSource() != SourceType.DEFAULT) {
				continue;
			}
			applySyscallSignature(f, helperDataTypes);
		}
		return true;
	}
Following the creation of a function this analyzer applies a function signature to default
function if contains within the syscall space.
@throws CancelledException if analysis is cancelled
Ghidra/Processors/eBPF/src/main/java/ghidra/app/plugin/core/analysis/eBPFSyscallAnalyzer.java