BTF parsing leads to errors "can't read types: type id 5215: unknown kind: Unknown (19)"

[martinclauss]

Hey @Gui774ume 👋

I tried to run KRIE on different Linux distributions with different kernels. Sometimes there occur errors like:

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/6.6.2-arch1-1.btf.tar.xz: can't read types: type id 5215: unknown kind: Unknown (19)

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/6.5.12-200.fc38.x86_64.btf.tar.xz: can't read types: type id 1927: unknown kind: Unknown (19)

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/6.5.12-300.fc39.x86_64.btf.tar.xz: can't read types: type id 1973: unknown kind: Unknown (19)

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/6.5.0-kali3-amd64.btf.tar.xz: can't read types: type id 7392: unknown kind: Unknown (19)

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/6.6.2-1-default.btf.tar.xz: can't read types: type id 6568: unknown kind: Unknown (19)

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/5.14.0-386.el9.x86_64.btf.tar.xz: can't read types: type id 2747: unknown kind: Unknown (19)

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/6.1.0-13-amd64.btf.tar.xz: can't read types: type id 8989: unknown kind: Unknown (19)

Error: couldn't start: couldn't load kernel BTF specs, please try to provide one in the configuration: couldn't load /tmp/5.14.0-362.8.1.el9_3.x86_64.btf.tar.xz: can't read types: type id 3058: unknown kind: Unknown (19)

I attached the BTF files for reproduction.

Maybe you find the time to have a look :)

Thanks!
btf.zip

EDIT: torvalds/linux@6089fb3 BTF_KIND_ENUM64 = 19 was added there...

EDIT 2: probably, this should be fixed here: https://github.com/DataDog/btf-internals/blob/main/btf/btf_types.go#L15
Here is already a fixed version: https://github.com/cilium/ebpf/blob/0247b789ad7ebf30d36854658e12fbe020ca527b/btf/btf_types.go#L44