> + event_nr = align_ptr(((void *) (nl + 1)) + strlen(hc->name) + 1); If my understanding is correct, (nl + 1) differs between 32-bit and 64-bit kernels (as the structure contains of one 8-byte and one 4-byte field), so this logic is probably broken for compat.