On Thu, 2024-10-24 at 15:28 -0700, Alexei Starovoitov wrote: [...] > > call->imm is BTF id, call->off is ID of the BTF itself. > > it's actually offset in fd_array Sure. > > I asked Vadim to add this check to make sure that imm points to the > > kernel BTF. > > makes sense. > > is_fastcall_kfunc_call(&meta) && meta.btf == btf_vmlinux && .. > > would have been much more obvious. Yes, this one looks better.