782 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in kprobe_ret__do_filp_open()  local
783 	if (!filemod_data)  in kprobe_ret__do_filp_open()
789 	filemod_data->meta.type = FILEMOD_EVENT;  in kprobe_ret__do_filp_open()
790 	filemod_data->fmod_type = FMOD_OPEN;  in kprobe_ret__do_filp_open()
791 	filemod_data->dst_flags = flags;  in kprobe_ret__do_filp_open()
792 	filemod_data->src_inode = 0;  in kprobe_ret__do_filp_open()
793 	filemod_data->dst_inode = file_ino;  in kprobe_ret__do_filp_open()
794 	filemod_data->src_device_id = 0;  in kprobe_ret__do_filp_open()
795 	filemod_data->dst_device_id = device_id;  in kprobe_ret__do_filp_open()
796 	filemod_data->src_filepath_length = 0;  in kprobe_ret__do_filp_open()
797 	filemod_data->dst_filepath_length = 0;  in kprobe_ret__do_filp_open()
799 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in kprobe_ret__do_filp_open()
800 					      filemod_data->payload);  in kprobe_ret__do_filp_open()
801 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in kprobe_ret__do_filp_open()
806 		filemod_data->dst_filepath_length = len;  in kprobe_ret__do_filp_open()
808 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in kprobe_ret__do_filp_open()
809 	unsigned long data_len = payload - (void*)filemod_data;  in kprobe_ret__do_filp_open()
810 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in kprobe_ret__do_filp_open()
811 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in kprobe_ret__do_filp_open()
835 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in BPF_KPROBE()  local
836 	if (!filemod_data)  in BPF_KPROBE()
842 	filemod_data->meta.type = FILEMOD_EVENT;  in BPF_KPROBE()
843 	filemod_data->fmod_type = FMOD_LINK;  in BPF_KPROBE()
844 	filemod_data->dst_flags = 0;  in BPF_KPROBE()
845 	filemod_data->src_inode = src_file_ino;  in BPF_KPROBE()
846 	filemod_data->dst_inode = dst_file_ino;  in BPF_KPROBE()
847 	filemod_data->src_device_id = src_device_id;  in BPF_KPROBE()
848 	filemod_data->dst_device_id = dst_device_id;  in BPF_KPROBE()
849 	filemod_data->src_filepath_length = 0;  in BPF_KPROBE()
850 	filemod_data->dst_filepath_length = 0;  in BPF_KPROBE()
852 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in BPF_KPROBE()
853 					      filemod_data->payload);  in BPF_KPROBE()
854 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in BPF_KPROBE()
859 		filemod_data->src_filepath_length = len;  in BPF_KPROBE()
865 		filemod_data->dst_filepath_length = len;  in BPF_KPROBE()
868 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in BPF_KPROBE()
869 	unsigned long data_len = payload - (void*)filemod_data;  in BPF_KPROBE()
870 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in BPF_KPROBE()
871 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in BPF_KPROBE()
890 	struct var_filemod_data_t* filemod_data = bpf_map_lookup_elem(&data_heap, &zero);  in BPF_KPROBE()  local
891 	if (!filemod_data)  in BPF_KPROBE()
897 	filemod_data->meta.type = FILEMOD_EVENT;  in BPF_KPROBE()
898 	filemod_data->fmod_type = FMOD_SYMLINK;  in BPF_KPROBE()
899 	filemod_data->dst_flags = 0;  in BPF_KPROBE()
900 	filemod_data->src_inode = 0;  in BPF_KPROBE()
901 	filemod_data->dst_inode = dst_file_ino;  in BPF_KPROBE()
902 	filemod_data->src_device_id = 0;  in BPF_KPROBE()
903 	filemod_data->dst_device_id = dst_device_id;  in BPF_KPROBE()
904 	filemod_data->src_filepath_length = 0;  in BPF_KPROBE()
905 	filemod_data->dst_filepath_length = 0;  in BPF_KPROBE()
907 	void* payload = populate_var_metadata(&filemod_data->meta, task, pid,  in BPF_KPROBE()
908 					      filemod_data->payload);  in BPF_KPROBE()
909 	payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);  in BPF_KPROBE()
915 		filemod_data->src_filepath_length = len;  in BPF_KPROBE()
920 		filemod_data->dst_filepath_length = len;  in BPF_KPROBE()
922 	bpf_stats_pre_submit_var_perf_event(&stats_ctx, &filemod_data->meta);  in BPF_KPROBE()
923 	unsigned long data_len = payload - (void*)filemod_data;  in BPF_KPROBE()
924 	data_len = data_len > sizeof(*filemod_data) ? sizeof(*filemod_data) : data_len;  in BPF_KPROBE()
925 	bpf_perf_event_output(ctx, &events, BPF_F_CURRENT_CPU, filemod_data, data_len);  in BPF_KPROBE()