790 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in kprobe_ret__do_filp_open()  local
791 	if (!filemod_data)  in kprobe_ret__do_filp_open()
797 	filemod_data->meta.type = FILEMOD_EVENT;  in kprobe_ret__do_filp_open()
798 	filemod_data->fmod_type = FMOD_OPEN;  in kprobe_ret__do_filp_open()
799 	filemod_data->dst_flags = flags;  in kprobe_ret__do_filp_open()
800 	filemod_data->src_inode = 0;  in kprobe_ret__do_filp_open()
801 	filemod_data->dst_inode = file_ino;  in kprobe_ret__do_filp_open()
802 	filemod_data->src_device_id = 0;  in kprobe_ret__do_filp_open()
803 	filemod_data->dst_device_id = device_id;  in kprobe_ret__do_filp_open()
804 	filemod_data->src_filepath_length = 0;  in kprobe_ret__do_filp_open()
805 	filemod_data->dst_filepath_length = 0;  in kprobe_ret__do_filp_open()
807 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in kprobe_ret__do_filp_open()
808 					      filemod_data->payload);  in kprobe_ret__do_filp_open()
809 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in kprobe_ret__do_filp_open()
816 		filemod_data->dst_filepath_length = len;  in kprobe_ret__do_filp_open()
818 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in kprobe_ret__do_filp_open()
819 	unsigned long data_len = payload - (void*)filemod_data;  in kprobe_ret__do_filp_open()
820 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in kprobe_ret__do_filp_open()
821 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in kprobe_ret__do_filp_open()
845 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in BPF_KPROBE()  local
846 	if (!filemod_data)  in BPF_KPROBE()
852 	filemod_data->meta.type = FILEMOD_EVENT;  in BPF_KPROBE()
853 	filemod_data->fmod_type = FMOD_LINK;  in BPF_KPROBE()
854 	filemod_data->dst_flags = 0;  in BPF_KPROBE()
855 	filemod_data->src_inode = src_file_ino;  in BPF_KPROBE()
856 	filemod_data->dst_inode = dst_file_ino;  in BPF_KPROBE()
857 	filemod_data->src_device_id = src_device_id;  in BPF_KPROBE()
858 	filemod_data->dst_device_id = dst_device_id;  in BPF_KPROBE()
859 	filemod_data->src_filepath_length = 0;  in BPF_KPROBE()
860 	filemod_data->dst_filepath_length = 0;  in BPF_KPROBE()
862 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in BPF_KPROBE()
863 					      filemod_data->payload);  in BPF_KPROBE()
864 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in BPF_KPROBE()
871 		filemod_data->src_filepath_length = len;  in BPF_KPROBE()
879 		filemod_data->dst_filepath_length = len;  in BPF_KPROBE()
882 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in BPF_KPROBE()
883 	unsigned long data_len = payload - (void*)filemod_data;  in BPF_KPROBE()
884 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in BPF_KPROBE()
885 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in BPF_KPROBE()
904 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in BPF_KPROBE()  local
905 	if (!filemod_data)  in BPF_KPROBE()
911 	filemod_data->meta.type = FILEMOD_EVENT;  in BPF_KPROBE()
912 	filemod_data->fmod_type = FMOD_SYMLINK;  in BPF_KPROBE()
913 	filemod_data->dst_flags = 0;  in BPF_KPROBE()
914 	filemod_data->src_inode = 0;  in BPF_KPROBE()
915 	filemod_data->dst_inode = dst_file_ino;  in BPF_KPROBE()
916 	filemod_data->src_device_id = 0;  in BPF_KPROBE()
917 	filemod_data->dst_device_id = dst_device_id;  in BPF_KPROBE()
918 	filemod_data->src_filepath_length = 0;  in BPF_KPROBE()
919 	filemod_data->dst_filepath_length = 0;  in BPF_KPROBE()
921 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in BPF_KPROBE()
922 					      filemod_data->payload);  in BPF_KPROBE()
923 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in BPF_KPROBE()
930 		filemod_data->src_filepath_length = len;  in BPF_KPROBE()
937 		filemod_data->dst_filepath_length = len;  in BPF_KPROBE()
939 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in BPF_KPROBE()
940 	unsigned long data_len = payload - (void*)filemod_data;  in BPF_KPROBE()
941 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in BPF_KPROBE()
942 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in BPF_KPROBE()