788 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in kprobe_ret__do_filp_open()  local
789 	if (!filemod_data)  in kprobe_ret__do_filp_open()
795 	filemod_data->meta.type = FILEMOD_EVENT;  in kprobe_ret__do_filp_open()
796 	filemod_data->fmod_type = FMOD_OPEN;  in kprobe_ret__do_filp_open()
797 	filemod_data->dst_flags = flags;  in kprobe_ret__do_filp_open()
798 	filemod_data->src_inode = 0;  in kprobe_ret__do_filp_open()
799 	filemod_data->dst_inode = file_ino;  in kprobe_ret__do_filp_open()
800 	filemod_data->src_device_id = 0;  in kprobe_ret__do_filp_open()
801 	filemod_data->dst_device_id = device_id;  in kprobe_ret__do_filp_open()
802 	filemod_data->src_filepath_length = 0;  in kprobe_ret__do_filp_open()
803 	filemod_data->dst_filepath_length = 0;  in kprobe_ret__do_filp_open()
805 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in kprobe_ret__do_filp_open()
806 					      filemod_data->payload);  in kprobe_ret__do_filp_open()
807 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in kprobe_ret__do_filp_open()
814 		filemod_data->dst_filepath_length = len;  in kprobe_ret__do_filp_open()
816 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in kprobe_ret__do_filp_open()
817 	unsigned long data_len = payload - (void*)filemod_data;  in kprobe_ret__do_filp_open()
818 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in kprobe_ret__do_filp_open()
819 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in kprobe_ret__do_filp_open()
842 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in BPF_KPROBE()  local
843 	if (!filemod_data)  in BPF_KPROBE()
849 	filemod_data->meta.type = FILEMOD_EVENT;  in BPF_KPROBE()
850 	filemod_data->fmod_type = FMOD_LINK;  in BPF_KPROBE()
851 	filemod_data->dst_flags = 0;  in BPF_KPROBE()
852 	filemod_data->src_inode = src_file_ino;  in BPF_KPROBE()
853 	filemod_data->dst_inode = dst_file_ino;  in BPF_KPROBE()
854 	filemod_data->src_device_id = src_device_id;  in BPF_KPROBE()
855 	filemod_data->dst_device_id = dst_device_id;  in BPF_KPROBE()
856 	filemod_data->src_filepath_length = 0;  in BPF_KPROBE()
857 	filemod_data->dst_filepath_length = 0;  in BPF_KPROBE()
859 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in BPF_KPROBE()
860 					      filemod_data->payload);  in BPF_KPROBE()
861 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in BPF_KPROBE()
868 		filemod_data->src_filepath_length = len;  in BPF_KPROBE()
876 		filemod_data->dst_filepath_length = len;  in BPF_KPROBE()
879 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in BPF_KPROBE()
880 	unsigned long data_len = payload - (void*)filemod_data;  in BPF_KPROBE()
881 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in BPF_KPROBE()
882 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in BPF_KPROBE()
901 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in BPF_KPROBE()  local
902 	if (!filemod_data)  in BPF_KPROBE()
908 	filemod_data->meta.type = FILEMOD_EVENT;  in BPF_KPROBE()
909 	filemod_data->fmod_type = FMOD_SYMLINK;  in BPF_KPROBE()
910 	filemod_data->dst_flags = 0;  in BPF_KPROBE()
911 	filemod_data->src_inode = 0;  in BPF_KPROBE()
912 	filemod_data->dst_inode = dst_file_ino;  in BPF_KPROBE()
913 	filemod_data->src_device_id = 0;  in BPF_KPROBE()
914 	filemod_data->dst_device_id = dst_device_id;  in BPF_KPROBE()
915 	filemod_data->src_filepath_length = 0;  in BPF_KPROBE()
916 	filemod_data->dst_filepath_length = 0;  in BPF_KPROBE()
918 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in BPF_KPROBE()
919 					      filemod_data->payload);  in BPF_KPROBE()
920 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in BPF_KPROBE()
927 		filemod_data->src_filepath_length = len;  in BPF_KPROBE()
934 		filemod_data->dst_filepath_length = len;  in BPF_KPROBE()
936 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in BPF_KPROBE()
937 	unsigned long data_len = payload - (void*)filemod_data;  in BPF_KPROBE()
938 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in BPF_KPROBE()
939 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in BPF_KPROBE()