Branch: refs/heads/gh-readonly-queue/master/pr-7988-9d4697fa960ded60dcae970f268819169452120a
Home:
https://github.com/google/syzkaller
Commit: 9aa7554b2a86718308dd26cb11e767e3550d3aad
https://github.com/google/syzkaller/commit/9aa7554b2a86718308dd26cb11e767e3550d3aad
Author: Aleksandr Nogikh <
nog...@google.com>
Date: 2026-10-08 (Thu, 08 Oct 2026)
Changed paths:
M executor/common_linux.h
Log Message:
-----------
executor: support newer BTF kinds in syz_btf_id_by_name
syz_btf_id_by_name masks BTF_INFO_KIND with 0x0f instead of 0x7f, which
truncates BTF kinds (>= 16) introduced in newer kernels. When parsing
vmlinux BTF containing BTF_KIND_ENUM64 (19), it misinterprets the entry
as BTF_KIND_ARRAY (3) and skips the wrong number of bytes, corrupting
all subsequent type offsets.
Update the BTF_INFO_KIND and BTF_INFO_VLEN masks to match uapi/linux/btf.h,
handle the trailing data for BTF_KIND_DECL_TAG and BTF_KIND_ENUM64, and
close the vmlinux BTF file descriptor after reading.
Commit: 723be09bfdd37d8da250b439c90ef0df1c5d5275
https://github.com/google/syzkaller/commit/723be09bfdd37d8da250b439c90ef0df1c5d5275
Author: Aleksandr Nogikh <
nog...@google.com>
Date: 2026-10-08 (Thu, 08 Oct 2026)
Changed paths:
M sys/linux/bpf.txt
M sys/linux/bpf_prog.txt
A sys/linux/test/bpf_arena
A sys/linux/test/bpf_maps
Log Message:
-----------
sys/linux: fix BTF int size, ringbuf helper map fd, and arena map args
btf_type_int hardcodes size to 0 (always rejected by btf_int_check_meta),
bpf_insn_ringbuf_query/output pass tail_call_map_fd instead of
ringbuf_map_fd, and BPF_MAP_TYPE_ARENA lacks a map creation variant with
zero key/value sizes. Fix these descriptions and add a seed test.
Compare:
https://github.com/google/syzkaller/compare/9aa7554b2a86%5E...723be09bfdd3
To unsubscribe from these emails, change your notification settings at
https://github.com/google/syzkaller/settings/notifications