* [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create
@ 2026-10-20 15:27 Leon Hwang
2026-10-20 15:27 ` [PATCH bpf-next v3 1/6] bpf: Add syscall common attrs support for link_create Leon Hwang
` (6 more replies)
0 siblings, 7 replies; 10+ messages in thread
From: Leon Hwang @ 2026-10-20 15:27 UTC (permalink / raw)
To: bpf
Cc: Andrew Lunn, David S . Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Alexei Starovoitov, Daniel Borkmann,
Andrii Nakryiko, Eduard Zingerman, Kumar Kartikeya Dwivedi,
Martin KaFai Lau, Song Liu, Yonghong Song, Jiri Olsa,
Emil Tsalapatis, Ihor Solodrai, Jesper Dangaard Brouer,
John Fastabend, Stanislav Fomichev, Steven Rostedt,
Masami Hiramatsu, Mathieu Desnoyers, Shuah Khan,
Kuniyuki Iwashima, Hangbin Liu, Martin Karsten, Masashi Honma,
linux-kernel, netdev, linux-trace-kernel, linux-kselftest,
Leon Hwang
I'm planning to add syscall common attrs support for LINK_CREATE cmd.
This is the first series for the plan, that adds syscall common attrs
support for xdp LINK_CREATE.
Thereafter, retire the tracepoint bpf_xdp_link_attach_failed, because
the underlying driver's error can be back-propagated to user space via
the syscall common attrs.
Changes:
v2 -> v3:
* Drop bpf_log_attr_report_size() helper. (Alexei)
* Drop 2nd write for log_true_size and the put_prog label. (Alexei)
* v2: https://lore.kernel.org/bpf/20261019153628.15912-1-leon.hwang@linux.dev/
v1 -> v2:
* Add log for invalid prog type in link_create().
* Reject log_opts for fallback bpf_raw_tracepoint_open() in libbpf.
* Report log_true_size as 0 before creating concrete link, and report
the actual log_true_size when fail to create the concrete link.
(Sashiko)
* Add stub bpf_log() when CONFIG_BPF_SYSCALL is not set. (bots)
* Check 'extack._msg' before adding 'extack._msg' to log buffer.
(Sashiko, bot+bpf-ci)
* Change __bpf_sys_fd to __sys_bpf_fd in the subject and body of
patch 4. (bot+bpf-ci)
* Move OPTS_VALID(opts, bpf_link_create_opts) to __sys_bpf_fd(). (Sashiko)
* Move bpf_link_create_log to the LIBBPF_1.9.0 section. (Sashiko)
* Update patch msg with a concrete case in patch 5. (bot+bpf-ci)
* Factor out helpers to simplify the tests code. (bot+bpf-ci)
* v1: https://lore.kernel.org/bpf/20261017142649.51047-1-leon.hwang@linux.dev/
Leon Hwang (6):
bpf: Add syscall common attrs support for link_create
bpf: Add syscall common attrs support for xdp link_create
bpf: Retire tracepoint bpf_xdp_link_attach_failed
libbpf: Factor out __sys_bpf_fd helper
libbpf: Add bpf_link_create_log API
selftests/bpf: Add tests to verify link_create logs
include/linux/bpf_verifier.h | 5 +
include/linux/netdevice.h | 3 +-
include/trace/events/xdp.h | 17 ---
kernel/bpf/syscall.c | 36 +++++--
net/core/dev.c | 8 +-
tools/lib/bpf/bpf.c | 69 ++++++++----
tools/lib/bpf/bpf.h | 5 +
tools/lib/bpf/libbpf.map | 2 +
.../selftests/bpf/prog_tests/xdp_attach.c | 65 -----------
.../selftests/bpf/prog_tests/xdp_link.c | 101 ++++++++++++++++++
.../bpf/progs/test_xdp_attach_fail.c | 54 ----------
11 files changed, 198 insertions(+), 167 deletions(-)
delete mode 100644 tools/testing/selftests/bpf/progs/test_xdp_attach_fail.c
--
2.55.0
^ permalink raw reply [flat|nested] 10+ messages in thread
* [PATCH bpf-next v3 1/6] bpf: Add syscall common attrs support for link_create
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
@ 2026-10-20 15:27 ` Leon Hwang
2026-10-20 15:44 ` sashiko-bot
2026-10-20 15:28 ` [PATCH bpf-next v3 2/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
` (5 subsequent siblings)
6 siblings, 1 reply; 10+ messages in thread
From: Leon Hwang @ 2026-10-20 15:27 UTC (permalink / raw)
To: bpf
Cc: Andrew Lunn, David S . Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Alexei Starovoitov, Daniel Borkmann,
Andrii Nakryiko, Eduard Zingerman, Kumar Kartikeya Dwivedi,
Martin KaFai Lau, Song Liu, Yonghong Song, Jiri Olsa,
Emil Tsalapatis, Ihor Solodrai, Jesper Dangaard Brouer,
John Fastabend, Stanislav Fomichev, Steven Rostedt,
Masami Hiramatsu, Mathieu Desnoyers, Shuah Khan,
Kuniyuki Iwashima, Hangbin Liu, Martin Karsten, Masashi Honma,
linux-kernel, netdev, linux-trace-kernel, linux-kselftest,
Leon Hwang
Similar to the syscall common attrs support for map_create [1], add the
syscall common attrs support for link_create.
Create and finalize the internal verifier log instance.
Then, report the error messages for invalid prog fd, invalid attach type,
and invalid prog type.
Links:
[1] https://lore.kernel.org/bpf/20260514004634.3DA09C19425@smtp.kernel.org/
Signed-off-by: Leon Hwang <leon.hwang@linux.dev>
---
kernel/bpf/syscall.c | 34 +++++++++++++++++++++++++++-------
1 file changed, 27 insertions(+), 7 deletions(-)
diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
index 849bc9136299..61d100e794b4 100644
--- a/kernel/bpf/syscall.c
+++ b/kernel/bpf/syscall.c
@@ -5856,8 +5856,11 @@ static int bpf_map_do_batch(const union bpf_attr *attr,
}
#define BPF_LINK_CREATE_LAST_FIELD link_create.uprobe_multi.path_fd
-static int link_create(union bpf_attr *attr, bpfptr_t uattr)
+static int link_create(union bpf_attr *attr, bpfptr_t uattr, struct bpf_common_attr *attr_common,
+ bpfptr_t uattr_common, u32 size_common)
{
+ struct bpf_verifier_log *log;
+ struct bpf_log_attr attr_log;
struct bpf_prog *prog;
int ret;
@@ -5867,14 +5870,24 @@ static int link_create(union bpf_attr *attr, bpfptr_t uattr)
if (attr->link_create.attach_type == BPF_STRUCT_OPS)
return bpf_struct_ops_link_create(attr);
+ log = bpf_log_attr_create_vlog(&attr_log, attr_common, uattr_common, size_common);
+ if (IS_ERR(log))
+ return PTR_ERR(log);
+
prog = bpf_prog_get(attr->link_create.prog_fd);
- if (IS_ERR(prog))
- return PTR_ERR(prog);
+ if (IS_ERR(prog)) {
+ bpf_log(log, "Invalid prog_fd.\n");
+ ret = PTR_ERR(prog);
+ prog = NULL;
+ goto out;
+ }
ret = bpf_prog_attach_check_attach_type(prog,
attr->link_create.attach_type);
- if (ret)
+ if (ret) {
+ bpf_log(log, "Invalid attach_type.\n");
goto out;
+ }
switch (prog->type) {
case BPF_PROG_TYPE_CGROUP_SKB:
@@ -5953,12 +5966,19 @@ static int link_create(union bpf_attr *attr, bpfptr_t uattr)
ret = bpf_uprobe_multi_link_attach(attr, prog);
break;
default:
+ bpf_log(log, "Invalid prog type.\n");
ret = -EINVAL;
}
out:
- if (ret < 0)
- bpf_prog_put(prog);
+ if (ret < 0) {
+ int err = bpf_log_attr_finalize(&attr_log, log);
+
+ ret = err ? err : ret;
+ if (prog)
+ bpf_prog_put(prog);
+ }
+ kfree(log);
return ret;
}
@@ -6530,7 +6550,7 @@ static int __sys_bpf(enum bpf_cmd cmd, bpfptr_t uattr, unsigned int size,
err = bpf_map_do_batch(&attr, uattr.user, BPF_MAP_DELETE_BATCH);
break;
case BPF_LINK_CREATE:
- err = link_create(&attr, uattr);
+ err = link_create(&attr, uattr, &attr_common, uattr_common, size_common);
break;
case BPF_LINK_UPDATE:
err = link_update(&attr);
--
2.55.0
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [PATCH bpf-next v3 2/6] bpf: Add syscall common attrs support for xdp link_create
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
2026-10-20 15:27 ` [PATCH bpf-next v3 1/6] bpf: Add syscall common attrs support for link_create Leon Hwang
@ 2026-10-20 15:28 ` Leon Hwang
2026-10-20 15:37 ` sashiko-bot
2026-10-20 15:28 ` [PATCH bpf-next v3 3/6] bpf: Retire tracepoint bpf_xdp_link_attach_failed Leon Hwang
` (4 subsequent siblings)
6 siblings, 1 reply; 10+ messages in thread
From: Leon Hwang @ 2026-10-20 15:28 UTC (permalink / raw)
To: bpf
Cc: Andrew Lunn, David S . Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Alexei Starovoitov, Daniel Borkmann,
Andrii Nakryiko, Eduard Zingerman, Kumar Kartikeya Dwivedi,
Martin KaFai Lau, Song Liu, Yonghong Song, Jiri Olsa,
Emil Tsalapatis, Ihor Solodrai, Jesper Dangaard Brouer,
John Fastabend, Stanislav Fomichev, Steven Rostedt,
Masami Hiramatsu, Mathieu Desnoyers, Shuah Khan,
Kuniyuki Iwashima, Hangbin Liu, Martin Karsten, Masashi Honma,
linux-kernel, netdev, linux-trace-kernel, linux-kselftest,
Leon Hwang
With the syscall common attrs support for link_create, add syscall common
attrs support for xdp link_create in order to report the invalid target
ifindex error and the underlying driver's error.
Define a stub bpf_log() when CONFIG_BPF_SYSCALL is not set. Afterwards,
bpf_log() can be called without CONFIG_BPF_SYSCALL guard in
net/core/dev.c.
Signed-off-by: Leon Hwang <leon.hwang@linux.dev>
---
include/linux/bpf_verifier.h | 5 +++++
include/linux/netdevice.h | 3 ++-
kernel/bpf/syscall.c | 2 +-
net/core/dev.c | 7 ++++++-
4 files changed, 14 insertions(+), 3 deletions(-)
diff --git a/include/linux/bpf_verifier.h b/include/linux/bpf_verifier.h
index 54481da4ed2d..5270d3688c69 100644
--- a/include/linux/bpf_verifier.h
+++ b/include/linux/bpf_verifier.h
@@ -1266,8 +1266,13 @@ __printf(2, 0) void bpf_verifier_vlog(struct bpf_verifier_log *log,
const char *fmt, va_list args);
__printf(2, 3) void bpf_verifier_log_write(struct bpf_verifier_env *env,
const char *fmt, ...);
+#ifdef CONFIG_BPF_SYSCALL
__printf(2, 3) void bpf_log(struct bpf_verifier_log *log,
const char *fmt, ...);
+#else
+__printf(2, 3) static inline void bpf_log(struct bpf_verifier_log *log,
+ const char *fmt, ...) {}
+#endif
int bpf_vlog_init(struct bpf_verifier_log *log, u32 log_level,
char __user *log_buf, u32 log_size);
void bpf_vlog_reset(struct bpf_verifier_log *log, u64 new_pos);
diff --git a/include/linux/netdevice.h b/include/linux/netdevice.h
index 3cff2174dc03..4548b0fd824d 100644
--- a/include/linux/netdevice.h
+++ b/include/linux/netdevice.h
@@ -4417,7 +4417,8 @@ struct sk_buff *validate_xmit_skb_list(struct sk_buff *skb, struct net_device *d
struct sk_buff *dev_hard_start_xmit(struct sk_buff *skb, struct net_device *dev,
struct netdev_queue *txq, int *ret);
-int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog);
+int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog,
+ struct bpf_verifier_log *log);
u8 dev_xdp_prog_count(struct net_device *dev);
int netif_xdp_propagate(struct net_device *dev, struct netdev_bpf *bpf);
int dev_xdp_propagate(struct net_device *dev, struct netdev_bpf *bpf);
diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
index 61d100e794b4..ebf5d7a6baa3 100644
--- a/kernel/bpf/syscall.c
+++ b/kernel/bpf/syscall.c
@@ -5938,7 +5938,7 @@ static int link_create(union bpf_attr *attr, bpfptr_t uattr, struct bpf_common_a
break;
#ifdef CONFIG_NET
case BPF_PROG_TYPE_XDP:
- ret = bpf_xdp_link_attach(attr, prog);
+ ret = bpf_xdp_link_attach(attr, prog, log);
break;
case BPF_PROG_TYPE_SCHED_CLS:
if (attr->link_create.attach_type == BPF_TCX_INGRESS ||
diff --git a/net/core/dev.c b/net/core/dev.c
index 18dc88990510..96be63b9331e 100644
--- a/net/core/dev.c
+++ b/net/core/dev.c
@@ -97,6 +97,7 @@
#include <linux/kthread.h>
#include <linux/bpf.h>
#include <linux/bpf_trace.h>
+#include <linux/bpf_verifier.h>
#include <net/net_namespace.h>
#include <net/sock.h>
#include <net/busy_poll.h>
@@ -10771,7 +10772,8 @@ static const struct bpf_link_ops bpf_xdp_link_lops = {
.update_prog = bpf_xdp_link_update,
};
-int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog)
+int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog,
+ struct bpf_verifier_log *log)
{
struct net *net = current->nsproxy->net_ns;
struct bpf_link_primer link_primer;
@@ -10784,6 +10786,7 @@ int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog)
dev = dev_get_by_index(net, attr->link_create.target_ifindex);
if (!dev) {
rtnl_unlock();
+ bpf_log(log, "Invalid target_ifindex.\n");
return -EINVAL;
}
@@ -10812,6 +10815,8 @@ int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog)
if (err) {
link->dev = NULL;
bpf_link_cleanup(&link_primer);
+ if (extack._msg)
+ bpf_log(log, "%s\n", extack._msg);
trace_bpf_xdp_link_attach_failed(extack._msg);
goto out_put_dev;
}
--
2.55.0
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [PATCH bpf-next v3 3/6] bpf: Retire tracepoint bpf_xdp_link_attach_failed
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
2026-10-20 15:27 ` [PATCH bpf-next v3 1/6] bpf: Add syscall common attrs support for link_create Leon Hwang
2026-10-20 15:28 ` [PATCH bpf-next v3 2/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
@ 2026-10-20 15:28 ` Leon Hwang
2026-10-20 15:28 ` [PATCH bpf-next v3 4/6] libbpf: Factor out __sys_bpf_fd helper Leon Hwang
` (3 subsequent siblings)
6 siblings, 0 replies; 10+ messages in thread
From: Leon Hwang @ 2026-10-20 15:28 UTC (permalink / raw)
To: bpf
Cc: Andrew Lunn, David S . Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Alexei Starovoitov, Daniel Borkmann,
Andrii Nakryiko, Eduard Zingerman, Kumar Kartikeya Dwivedi,
Martin KaFai Lau, Song Liu, Yonghong Song, Jiri Olsa,
Emil Tsalapatis, Ihor Solodrai, Jesper Dangaard Brouer,
John Fastabend, Stanislav Fomichev, Steven Rostedt,
Masami Hiramatsu, Mathieu Desnoyers, Shuah Khan,
Kuniyuki Iwashima, Hangbin Liu, Martin Karsten, Masashi Honma,
linux-kernel, netdev, linux-trace-kernel, linux-kselftest,
Leon Hwang
In the previous patch, it has a proper way to back-propagate the
underlying driver error message to user space via the BPF syscall common
attributes.
The tracepoint bpf_xdp_link_attach_failed seems redundant to report the
error message. And, the tracepoint doesn't report the ifindex alongside
the error message [1].
So, retire the tracepoint bpf_xdp_link_attach_failed and its selftest.
According to the tracepoint change discussion [2], please revert this
patch if users complain about the disappeared tracepoint
bpf_xdp_link_attach_failed in the future.
Links:
[1] https://lore.kernel.org/bpf/CAFk-A4mE9Jweo2hfX7y_85xbPyt0FqpMT1EvqX1OcYZ=LTLgRA@mail.gmail.com/
[2] https://lore.kernel.org/linux-mm/CY8PR11MB7134346A3E4BB28ECA28D6E989132@CY8PR11MB7134.namprd11.prod.outlook.com/
Signed-off-by: Leon Hwang <leon.hwang@linux.dev>
---
include/trace/events/xdp.h | 17 -----
net/core/dev.c | 1 -
.../selftests/bpf/prog_tests/xdp_attach.c | 65 -------------------
.../bpf/progs/test_xdp_attach_fail.c | 54 ---------------
4 files changed, 137 deletions(-)
delete mode 100644 tools/testing/selftests/bpf/progs/test_xdp_attach_fail.c
diff --git a/include/trace/events/xdp.h b/include/trace/events/xdp.h
index 18c0ac514fcb..f1d4d0702884 100644
--- a/include/trace/events/xdp.h
+++ b/include/trace/events/xdp.h
@@ -362,23 +362,6 @@ TRACE_EVENT(mem_connect,
)
);
-TRACE_EVENT(bpf_xdp_link_attach_failed,
-
- TP_PROTO(const char *msg),
-
- TP_ARGS(msg),
-
- TP_STRUCT__entry(
- __string(msg, msg)
- ),
-
- TP_fast_assign(
- __assign_str(msg);
- ),
-
- TP_printk("errmsg=%s", __get_str(msg))
-);
-
#endif /* _TRACE_XDP_H */
#include <trace/define_trace.h>
diff --git a/net/core/dev.c b/net/core/dev.c
index 96be63b9331e..a142613536b0 100644
--- a/net/core/dev.c
+++ b/net/core/dev.c
@@ -10817,7 +10817,6 @@ int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog,
bpf_link_cleanup(&link_primer);
if (extack._msg)
bpf_log(log, "%s\n", extack._msg);
- trace_bpf_xdp_link_attach_failed(extack._msg);
goto out_put_dev;
}
diff --git a/tools/testing/selftests/bpf/prog_tests/xdp_attach.c b/tools/testing/selftests/bpf/prog_tests/xdp_attach.c
index e6bcb6051402..fa3cac5488f5 100644
--- a/tools/testing/selftests/bpf/prog_tests/xdp_attach.c
+++ b/tools/testing/selftests/bpf/prog_tests/xdp_attach.c
@@ -1,6 +1,5 @@
// SPDX-License-Identifier: GPL-2.0
#include <test_progs.h>
-#include "test_xdp_attach_fail.skel.h"
#define IFINDEX_LO 1
#define XDP_FLAGS_REPLACE (1U << 4)
@@ -86,74 +85,10 @@ static void test_xdp_attach(const char *file)
bpf_object__close(obj1);
}
-#define ERRMSG_LEN 64
-
-struct xdp_errmsg {
- char msg[ERRMSG_LEN];
-};
-
-static void on_xdp_errmsg(void *ctx, int cpu, void *data, __u32 size)
-{
- struct xdp_errmsg *ctx_errmg = ctx, *tp_errmsg = data;
-
- memcpy(&ctx_errmg->msg, &tp_errmsg->msg, ERRMSG_LEN);
-}
-
-static const char tgt_errmsg[] = "Invalid XDP flags for BPF link attachment";
-
-static void test_xdp_attach_fail(const char *file)
-{
- struct test_xdp_attach_fail *skel = NULL;
- struct xdp_errmsg errmsg = {};
- struct perf_buffer *pb = NULL;
- struct bpf_object *obj = NULL;
- int err, fd_xdp;
-
- LIBBPF_OPTS(bpf_link_create_opts, opts);
-
- skel = test_xdp_attach_fail__open_and_load();
- if (!ASSERT_OK_PTR(skel, "test_xdp_attach_fail__open_and_load"))
- goto out_close;
-
- err = test_xdp_attach_fail__attach(skel);
- if (!ASSERT_EQ(err, 0, "test_xdp_attach_fail__attach"))
- goto out_close;
-
- /* set up perf buffer */
- pb = perf_buffer__new(bpf_map__fd(skel->maps.xdp_errmsg_pb), 1,
- on_xdp_errmsg, NULL, &errmsg, NULL);
- if (!ASSERT_OK_PTR(pb, "perf_buffer__new"))
- goto out_close;
-
- err = bpf_prog_test_load(file, BPF_PROG_TYPE_XDP, &obj, &fd_xdp);
- if (!ASSERT_EQ(err, 0, "bpf_prog_test_load"))
- goto out_close;
-
- opts.flags = 0xFF; // invalid flags to fail to attach XDP prog
- err = bpf_link_create(fd_xdp, IFINDEX_LO, BPF_XDP, &opts);
- if (!ASSERT_EQ(err, -EINVAL, "bpf_link_create"))
- goto out_close;
-
- /* read perf buffer */
- err = perf_buffer__poll(pb, 100);
- if (!ASSERT_GT(err, -1, "perf_buffer__poll"))
- goto out_close;
-
- ASSERT_STRNEQ((const char *) errmsg.msg, tgt_errmsg,
- 42 /* strlen(tgt_errmsg) */, "check error message");
-
-out_close:
- perf_buffer__free(pb);
- bpf_object__close(obj);
- test_xdp_attach_fail__destroy(skel);
-}
-
void serial_test_xdp_attach(void)
{
if (test__start_subtest("xdp_attach"))
test_xdp_attach("./test_xdp.bpf.o");
if (test__start_subtest("xdp_attach_dynptr"))
test_xdp_attach("./test_xdp_dynptr.bpf.o");
- if (test__start_subtest("xdp_attach_failed"))
- test_xdp_attach_fail("./xdp_dummy.bpf.o");
}
diff --git a/tools/testing/selftests/bpf/progs/test_xdp_attach_fail.c b/tools/testing/selftests/bpf/progs/test_xdp_attach_fail.c
deleted file mode 100644
index 2ff1b596e87e..000000000000
--- a/tools/testing/selftests/bpf/progs/test_xdp_attach_fail.c
+++ /dev/null
@@ -1,54 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0
-/* Copyright Leon Hwang */
-
-#include <linux/bpf.h>
-#include <bpf/bpf_helpers.h>
-
-#define ERRMSG_LEN 64
-
-struct xdp_errmsg {
- char msg[ERRMSG_LEN];
-};
-
-struct {
- __uint(type, BPF_MAP_TYPE_PERF_EVENT_ARRAY);
- __type(key, int);
- __type(value, int);
-} xdp_errmsg_pb SEC(".maps");
-
-struct xdp_attach_error_ctx {
- unsigned long unused;
-
- /*
- * bpf does not support tracepoint __data_loc directly.
- *
- * Actually, this field is a 32 bit integer whose value encodes
- * information on where to find the actual data. The first 2 bytes is
- * the size of the data. The last 2 bytes is the offset from the start
- * of the tracepoint struct where the data begins.
- * -- https://github.com/iovisor/bpftrace/pull/1542
- */
- __u32 msg; // __data_loc char[] msg;
-};
-
-/*
- * Catch the error message at the tracepoint.
- */
-
-SEC("tp/xdp/bpf_xdp_link_attach_failed")
-int tp__xdp__bpf_xdp_link_attach_failed(struct xdp_attach_error_ctx *ctx)
-{
- char *msg = (void *)(__u64) ((void *) ctx + (__u16) ctx->msg);
- struct xdp_errmsg errmsg = {};
-
- bpf_probe_read_kernel_str(&errmsg.msg, ERRMSG_LEN, msg);
- bpf_perf_event_output(ctx, &xdp_errmsg_pb, BPF_F_CURRENT_CPU, &errmsg,
- ERRMSG_LEN);
- return 0;
-}
-
-/*
- * Reuse the XDP program in xdp_dummy.c.
- */
-
-char LICENSE[] SEC("license") = "GPL";
--
2.55.0
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [PATCH bpf-next v3 4/6] libbpf: Factor out __sys_bpf_fd helper
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
` (2 preceding siblings ...)
2026-10-20 15:28 ` [PATCH bpf-next v3 3/6] bpf: Retire tracepoint bpf_xdp_link_attach_failed Leon Hwang
@ 2026-10-20 15:28 ` Leon Hwang
2026-10-20 15:28 ` [PATCH bpf-next v3 5/6] libbpf: Add bpf_link_create_log API Leon Hwang
` (2 subsequent siblings)
6 siblings, 0 replies; 10+ messages in thread
From: Leon Hwang @ 2026-10-20 15:28 UTC (permalink / raw)
To: bpf
Cc: Andrew Lunn, David S . Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Alexei Starovoitov, Daniel Borkmann,
Andrii Nakryiko, Eduard Zingerman, Kumar Kartikeya Dwivedi,
Martin KaFai Lau, Song Liu, Yonghong Song, Jiri Olsa,
Emil Tsalapatis, Ihor Solodrai, Jesper Dangaard Brouer,
John Fastabend, Stanislav Fomichev, Steven Rostedt,
Masami Hiramatsu, Mathieu Desnoyers, Shuah Khan,
Kuniyuki Iwashima, Hangbin Liu, Martin Karsten, Masashi Honma,
linux-kernel, netdev, linux-trace-kernel, linux-kselftest,
Leon Hwang
In the next patch, it also needs to use the extended BPF syscall to
receive the reported log.
So, factor out __sys_bpf_fd helper.
No functional changes intended.
Signed-off-by: Leon Hwang <leon.hwang@linux.dev>
---
tools/lib/bpf/bpf.c | 41 +++++++++++++++++++++++++----------------
1 file changed, 25 insertions(+), 16 deletions(-)
diff --git a/tools/lib/bpf/bpf.c b/tools/lib/bpf/bpf.c
index b49822d212ae..9a2107d4f6d8 100644
--- a/tools/lib/bpf/bpf.c
+++ b/tools/lib/bpf/bpf.c
@@ -203,6 +203,30 @@ int bump_rlimit_memlock(void)
return 0;
}
+static int __sys_bpf_fd(union bpf_attr *attr, const size_t attr_sz, enum bpf_cmd cmd,
+ struct bpf_log_opts *log_opts)
+{
+ const size_t attr_common_sz = sizeof(struct bpf_common_attr);
+ struct bpf_common_attr attr_common;
+ int fd;
+
+ if (!OPTS_VALID(log_opts, bpf_log_opts))
+ return libbpf_err(-EINVAL);
+
+ if (log_opts && feat_supported(NULL, FEAT_BPF_SYSCALL_COMMON_ATTRS)) {
+ memset(&attr_common, 0, attr_common_sz);
+ attr_common.log_buf = ptr_to_u64(OPTS_GET(log_opts, buf, NULL));
+ attr_common.log_size = OPTS_GET(log_opts, size, 0);
+ attr_common.log_level = OPTS_GET(log_opts, level, 0);
+ fd = sys_bpf_ext_fd(cmd, attr, attr_sz, &attr_common, attr_common_sz);
+ OPTS_SET(log_opts, true_size, attr_common.log_true_size);
+ } else {
+ fd = sys_bpf_fd(cmd, attr, attr_sz);
+ OPTS_SET(log_opts, true_size, 0);
+ }
+ return fd;
+}
+
int bpf_map_create(enum bpf_map_type map_type,
const char *map_name,
__u32 key_size,
@@ -211,8 +235,6 @@ int bpf_map_create(enum bpf_map_type map_type,
const struct bpf_map_create_opts *opts)
{
const size_t attr_sz = offsetofend(union bpf_attr, excl_prog_hash_size);
- const size_t attr_common_sz = sizeof(struct bpf_common_attr);
- struct bpf_common_attr attr_common;
struct bpf_log_opts *log_opts;
union bpf_attr attr;
int fd;
@@ -248,20 +270,7 @@ int bpf_map_create(enum bpf_map_type map_type,
attr.excl_prog_hash_size = OPTS_GET(opts, excl_prog_hash_size, 0);
log_opts = OPTS_GET(opts, log_opts, NULL);
- if (!OPTS_VALID(log_opts, bpf_log_opts))
- return libbpf_err(-EINVAL);
-
- if (log_opts && feat_supported(NULL, FEAT_BPF_SYSCALL_COMMON_ATTRS)) {
- memset(&attr_common, 0, attr_common_sz);
- attr_common.log_buf = ptr_to_u64(OPTS_GET(log_opts, buf, NULL));
- attr_common.log_size = OPTS_GET(log_opts, size, 0);
- attr_common.log_level = OPTS_GET(log_opts, level, 0);
- fd = sys_bpf_ext_fd(BPF_MAP_CREATE, &attr, attr_sz, &attr_common, attr_common_sz);
- OPTS_SET(log_opts, true_size, attr_common.log_true_size);
- } else {
- fd = sys_bpf_fd(BPF_MAP_CREATE, &attr, attr_sz);
- OPTS_SET(log_opts, true_size, 0);
- }
+ fd = __sys_bpf_fd(&attr, attr_sz, BPF_MAP_CREATE, log_opts);
return libbpf_err_errno(fd);
}
--
2.55.0
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [PATCH bpf-next v3 5/6] libbpf: Add bpf_link_create_log API
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
` (3 preceding siblings ...)
2026-10-20 15:28 ` [PATCH bpf-next v3 4/6] libbpf: Factor out __sys_bpf_fd helper Leon Hwang
@ 2026-10-20 15:28 ` Leon Hwang
2026-10-20 15:28 ` [PATCH bpf-next v3 6/6] selftests/bpf: Add tests to verify link_create logs Leon Hwang
2026-10-20 21:00 ` [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create patchwork-bot+netdevbpf
6 siblings, 0 replies; 10+ messages in thread
From: Leon Hwang @ 2026-10-20 15:28 UTC (permalink / raw)
To: bpf
Cc: Andrew Lunn, David S . Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Alexei Starovoitov, Daniel Borkmann,
Andrii Nakryiko, Eduard Zingerman, Kumar Kartikeya Dwivedi,
Martin KaFai Lau, Song Liu, Yonghong Song, Jiri Olsa,
Emil Tsalapatis, Ihor Solodrai, Jesper Dangaard Brouer,
John Fastabend, Stanislav Fomichev, Steven Rostedt,
Masami Hiramatsu, Mathieu Desnoyers, Shuah Khan,
Kuniyuki Iwashima, Hangbin Liu, Martin Karsten, Masashi Honma,
linux-kernel, netdev, linux-trace-kernel, linux-kselftest,
Leon Hwang
Add a new API to accept the log opts, instead of extending the existing
struct bpf_link_create_opts.
Appending log_opts to struct bpf_link_create_opts would place them after
attach-type-specific fields of varying sizes, making it difficult to
extend the struct while preserving forward compatibility.
For example, adding log_opts would prevent extending uprobe_multi
directly with a new build_id field. Instead, a separate union would
be needed:
struct bpf_link_create_opts {
/* ... */
union {
/* ... */
struct {
/* ... */
__u32 path_fd;
} uprobe_multi;
};
struct bpf_log_opts *log_opts;
union {
struct {
__u64 build_id;
} uprobe_multi_ext;
};
size_t :0;
};
Without log_opts, build_id could be added directly to uprobe_multi:
struct bpf_link_create_opts {
/* ... */
union {
/* ... */
struct {
/* ... */
__u32 path_fd;
__u64 build_id;
} uprobe_multi;
};
size_t :0;
};
Introduce bpf_link_create_log() to accept struct bpf_log_opts separately,
preserving the forward compatibility of struct bpf_link_create_opts.
Signed-off-by: Leon Hwang <leon.hwang@linux.dev>
---
tools/lib/bpf/bpf.c | 28 ++++++++++++++++++++++++----
tools/lib/bpf/bpf.h | 5 +++++
tools/lib/bpf/libbpf.map | 2 ++
3 files changed, 31 insertions(+), 4 deletions(-)
diff --git a/tools/lib/bpf/bpf.c b/tools/lib/bpf/bpf.c
index 9a2107d4f6d8..263a1d516a02 100644
--- a/tools/lib/bpf/bpf.c
+++ b/tools/lib/bpf/bpf.c
@@ -788,9 +788,10 @@ int bpf_prog_detach2(int prog_fd, int target_fd, enum bpf_attach_type type)
return bpf_prog_detach_opts(prog_fd, target_fd, type, NULL);
}
-int bpf_link_create(int prog_fd, int target_fd,
- enum bpf_attach_type attach_type,
- const struct bpf_link_create_opts *opts)
+static int __bpf_link_create(int prog_fd, int target_fd,
+ enum bpf_attach_type attach_type,
+ const struct bpf_link_create_opts *opts,
+ struct bpf_log_opts *log_opts)
{
const size_t attr_sz = offsetofend(union bpf_attr, link_create);
__u32 target_btf_id, iter_info_len, relative_id;
@@ -965,7 +966,7 @@ int bpf_link_create(int prog_fd, int target_fd,
break;
}
proceed:
- fd = sys_bpf_fd(BPF_LINK_CREATE, &attr, attr_sz);
+ fd = __sys_bpf_fd(&attr, attr_sz, BPF_LINK_CREATE, log_opts);
if (fd >= 0)
return fd;
/* we'll get EINVAL if LINK_CREATE doesn't support attaching fentry
@@ -975,6 +976,10 @@ int bpf_link_create(int prog_fd, int target_fd,
if (err != -EINVAL)
return libbpf_err(err);
+ /* bpf_raw_tracepoint_open() does not support log_opts */
+ if (log_opts)
+ return libbpf_err(err);
+
/* if user used features not supported by
* BPF_RAW_TRACEPOINT_OPEN command, then just give up immediately
*/
@@ -999,6 +1004,21 @@ int bpf_link_create(int prog_fd, int target_fd,
}
}
+int bpf_link_create(int prog_fd, int target_fd,
+ enum bpf_attach_type attach_type,
+ const struct bpf_link_create_opts *opts)
+{
+ return __bpf_link_create(prog_fd, target_fd, attach_type, opts, NULL);
+}
+
+int bpf_link_create_log(int prog_fd, int target_fd,
+ enum bpf_attach_type attach_type,
+ const struct bpf_link_create_opts *opts,
+ struct bpf_log_opts *log_opts)
+{
+ return __bpf_link_create(prog_fd, target_fd, attach_type, opts, log_opts);
+}
+
int bpf_link_detach(int link_fd)
{
const size_t attr_sz = offsetofend(union bpf_attr, link_detach);
diff --git a/tools/lib/bpf/bpf.h b/tools/lib/bpf/bpf.h
index 826d9cc9ab65..dedaf8086902 100644
--- a/tools/lib/bpf/bpf.h
+++ b/tools/lib/bpf/bpf.h
@@ -484,6 +484,11 @@ LIBBPF_API int bpf_link_create(int prog_fd, int target_fd,
enum bpf_attach_type attach_type,
const struct bpf_link_create_opts *opts);
+LIBBPF_API int bpf_link_create_log(int prog_fd, int target_fd,
+ enum bpf_attach_type attach_type,
+ const struct bpf_link_create_opts *opts,
+ struct bpf_log_opts *log_opts);
+
LIBBPF_API int bpf_link_detach(int link_fd);
struct bpf_link_update_opts {
diff --git a/tools/lib/bpf/libbpf.map b/tools/lib/bpf/libbpf.map
index eeba4072a5da..f6eb57151f7d 100644
--- a/tools/lib/bpf/libbpf.map
+++ b/tools/lib/bpf/libbpf.map
@@ -475,4 +475,6 @@ LIBBPF_1.8.0 {
} LIBBPF_1.7.0;
LIBBPF_1.9.0 {
+ global:
+ bpf_link_create_log;
} LIBBPF_1.8.0;
--
2.55.0
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [PATCH bpf-next v3 6/6] selftests/bpf: Add tests to verify link_create logs
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
` (4 preceding siblings ...)
2026-10-20 15:28 ` [PATCH bpf-next v3 5/6] libbpf: Add bpf_link_create_log API Leon Hwang
@ 2026-10-20 15:28 ` Leon Hwang
2026-10-20 21:00 ` [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create patchwork-bot+netdevbpf
6 siblings, 0 replies; 10+ messages in thread
From: Leon Hwang @ 2026-10-20 15:28 UTC (permalink / raw)
To: bpf
Cc: Andrew Lunn, David S . Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Alexei Starovoitov, Daniel Borkmann,
Andrii Nakryiko, Eduard Zingerman, Kumar Kartikeya Dwivedi,
Martin KaFai Lau, Song Liu, Yonghong Song, Jiri Olsa,
Emil Tsalapatis, Ihor Solodrai, Jesper Dangaard Brouer,
John Fastabend, Stanislav Fomichev, Steven Rostedt,
Masami Hiramatsu, Mathieu Desnoyers, Shuah Khan,
Kuniyuki Iwashima, Hangbin Liu, Martin Karsten, Masashi Honma,
linux-kernel, netdev, linux-trace-kernel, linux-kselftest,
Leon Hwang
Add tests to verify the new logs in link_create and xdp link_create,
including a log reported via extack when fail to create an xdp link.
Signed-off-by: Leon Hwang <leon.hwang@linux.dev>
---
.../selftests/bpf/prog_tests/xdp_link.c | 101 ++++++++++++++++++
1 file changed, 101 insertions(+)
diff --git a/tools/testing/selftests/bpf/prog_tests/xdp_link.c b/tools/testing/selftests/bpf/prog_tests/xdp_link.c
index e7e9f3c22edf..18c1f1039d4e 100644
--- a/tools/testing/selftests/bpf/prog_tests/xdp_link.c
+++ b/tools/testing/selftests/bpf/prog_tests/xdp_link.c
@@ -150,3 +150,104 @@ void serial_test_xdp_link(void)
test_xdp_link__destroy(skel1);
test_xdp_link__destroy(skel2);
}
+
+static void test_link_create(int prog_fd, int ifindex, enum bpf_attach_type attach_type,
+ struct bpf_link_create_opts *opts, int exp_err, const char *msg)
+{
+ char log_buf[128] = {};
+ int fd;
+ LIBBPF_OPTS(bpf_log_opts, log_opts,
+ .buf = log_buf,
+ .size = sizeof(log_buf),
+ .level = 1,
+ );
+
+ fd = bpf_link_create_log(prog_fd, ifindex, attach_type, opts, &log_opts);
+ if (!ASSERT_LT(fd, 0, "bpf_link_create_log")) {
+ close(fd);
+ return;
+ }
+
+ ASSERT_EQ(fd, exp_err, "fd");
+ ASSERT_STREQ(log_buf, msg, "log_buf");
+ ASSERT_EQ(log_opts.true_size, strlen(msg) + 1, "log_size");
+}
+
+static void test_link_create_invalid_prog_fd(void)
+{
+ const char *msg = "Invalid prog_fd.\n";
+
+ test_link_create(-1, IFINDEX_LO, BPF_XDP, NULL, -EBADF, msg);
+}
+
+static void test_link_create_invalid_prog_type(void)
+{
+ const struct bpf_insn insns[] = {
+ BPF_MOV64_IMM(BPF_REG_0, 0),
+ BPF_EXIT_INSN(),
+ };
+ const char *msg = "Invalid prog type.\n";
+ int prog_fd;
+
+ prog_fd = bpf_prog_load(BPF_PROG_TYPE_LIRC_MODE2, NULL, "GPL", insns,
+ ARRAY_SIZE(insns), NULL);
+ if (!ASSERT_GE(prog_fd, 0, "bpf_prog_load"))
+ return;
+
+ test_link_create(prog_fd, 0, BPF_LIRC_MODE2, NULL, -EINVAL, msg);
+
+ close(prog_fd);
+}
+
+static void test_link_create_attach(int ifindex, enum bpf_attach_type attach_type,
+ struct bpf_link_create_opts *opts, const char *msg)
+{
+ struct test_xdp_link *skel;
+
+ skel = test_xdp_link__open_and_load();
+ if (!ASSERT_OK_PTR(skel, "test_xdp_link__open_and_load"))
+ return;
+
+ test_link_create(bpf_program__fd(skel->progs.xdp_handler), ifindex, attach_type, opts,
+ -EINVAL, msg);
+
+ test_xdp_link__destroy(skel);
+}
+
+static void test_link_create_invalid_attach_type(void)
+{
+ const char *msg = "Invalid attach_type.\n";
+
+ test_link_create_attach(IFINDEX_LO, BPF_CGROUP_INET_INGRESS, NULL, msg);
+}
+
+static void test_link_create_xdp_invalid_target_ifindex(void)
+{
+ const char *msg = "Invalid target_ifindex.\n";
+
+ test_link_create_attach(0, BPF_XDP, NULL, msg);
+}
+
+static void test_link_create_xdp_extack(void)
+{
+ const char *msg = "Invalid XDP flags for BPF link attachment\n";
+ LIBBPF_OPTS(bpf_link_create_opts, opts,
+ .flags = XDP_FLAGS_REPLACE,
+ );
+
+ test_link_create_attach(IFINDEX_LO, BPF_XDP, &opts, msg);
+}
+
+void test_link_create_log(void)
+{
+ if (test__start_subtest("invalid_prog_fd"))
+ test_link_create_invalid_prog_fd();
+ if (test__start_subtest("invalid_prog_type"))
+ test_link_create_invalid_prog_type();
+ if (test__start_subtest("invalid_attach_type"))
+ test_link_create_invalid_attach_type();
+ if (test__start_subtest("xdp/invalid_target_ifindex"))
+ test_link_create_xdp_invalid_target_ifindex();
+ if (test__start_subtest("xdp/extack"))
+ test_link_create_xdp_extack();
+}
--
2.55.0
^ permalink raw reply related [flat|nested] 10+ messages in thread
* Re: [PATCH bpf-next v3 2/6] bpf: Add syscall common attrs support for xdp link_create
2026-10-20 15:28 ` [PATCH bpf-next v3 2/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
@ 2026-10-20 15:37 ` sashiko-bot
0 siblings, 0 replies; 10+ messages in thread
From: sashiko-bot @ 2026-10-20 15:37 UTC (permalink / raw)
To: Leon Hwang, bpf; +Cc: linux-trace-kernel
Thank you for your contribution! Sashiko AI review found 1 potential issue(s) to consider:
- [Low] net: missing struct bpf_verifier_log forward declaration in netdevice.h
--
commit 6d93234cac5f9d8bd1858f0479e625aeca6428c5
Author: Leon Hwang <leon.hwang@linux.dev>
bpf: Add syscall common attrs support for xdp link_create
This commit adds syscall common attributes support to bpf_xdp_link_attach() so
that invalid target_ifindex errors and underlying driver extack error messages
can be reported through bpf_log(). It also defines a no-op stub for bpf_log()
when CONFIG_BPF_SYSCALL is disabled.
> diff --git a/include/linux/netdevice.h b/include/linux/netdevice.h
> index 3cff2174dc03a..4548b0fd824db 100644
> --- a/include/linux/netdevice.h
> +++ b/include/linux/netdevice.h
> @@ -4417,7 +4417,8 @@ struct sk_buff *validate_xmit_skb_list(struct sk_buff *skb, struct net_device *d
> struct sk_buff *dev_hard_start_xmit(struct sk_buff *skb, struct net_device *dev,
> struct netdev_queue *txq, int *ret);
>
> -int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog);
> +int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog,
> + struct bpf_verifier_log *log);
[Severity: Low]
Does include/linux/netdevice.h need a forward declaration for
struct bpf_verifier_log alongside struct bpf_prog?
Without a file-scope forward declaration in include/linux/netdevice.h, any
translation unit that includes <linux/netdevice.h> before <linux/bpf.h>,
<linux/btf.h>, or <linux/bpf_verifier.h> declares struct bpf_verifier_log for
the first time inside the parameter list of bpf_xdp_link_attach(), triggering
-Wvisibility warnings.
In net/core/dev.c, <linux/netdevice.h> is included before <linux/bpf.h> and
<linux/bpf_verifier.h>:
#include <linux/netdevice.h>
...
#include <linux/bpf.h>
#include <linux/bpf_trace.h>
#include <linux/bpf_verifier.h>
This causes the prototype in include/linux/netdevice.h to use a
parameter-scoped struct bpf_verifier_log while the definition of
bpf_xdp_link_attach() in net/core/dev.c uses the file-scoped
struct bpf_verifier_log from <linux/bpf_verifier.h>, resulting in a
conflicting types compilation error.
[ ... ]
> diff --git a/net/core/dev.c b/net/core/dev.c
> index 18dc88990510a..96be63b9331e8 100644
> --- a/net/core/dev.c
> +++ b/net/core/dev.c
> @@ -97,6 +97,7 @@
> #include <linux/kthread.h>
> #include <linux/bpf.h>
> #include <linux/bpf_trace.h>
> +#include <linux/bpf_verifier.h>
> #include <net/net_namespace.h>
> #include <net/sock.h>
> #include <net/busy_poll.h>
> @@ -10771,7 +10772,8 @@ static const struct bpf_link_ops bpf_xdp_link_lops = {
> .update_prog = bpf_xdp_link_update,
> };
>
> -int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog)
> +int bpf_xdp_link_attach(const union bpf_attr *attr, struct bpf_prog *prog,
> + struct bpf_verifier_log *log)
> {
[ ... ]
> return fd;
[ ... ]
> }
[ ... ]
>
--
Sashiko AI review · https://sashiko.dev/#/patchset/20261020152804.39863-1-leon.hwang@linux.dev?part=2
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [PATCH bpf-next v3 1/6] bpf: Add syscall common attrs support for link_create
2026-10-20 15:27 ` [PATCH bpf-next v3 1/6] bpf: Add syscall common attrs support for link_create Leon Hwang
@ 2026-10-20 15:44 ` sashiko-bot
0 siblings, 0 replies; 10+ messages in thread
From: sashiko-bot @ 2026-10-20 15:44 UTC (permalink / raw)
To: Leon Hwang, bpf; +Cc: linux-trace-kernel
Thank you for your contribution! Sashiko AI review found 1 potential issue(s) to consider:
- [Medium] bpf: misreported attach_type and prog_type errors in link_create()
--
commit 64df6223de5ef67537b774b5db553b0530d3bf6e
Author: Leon Hwang <leon.hwang@linux.dev>
bpf: Add syscall common attrs support for link_create
This commit adds syscall common attributes support to link_create() so that
an internal verifier log instance is created and finalized to report error
messages for invalid prog_fd, invalid attach_type, and invalid prog type.
Link: https://lore.kernel.org/bpf/20260514004634.3DA09C19425@smtp.kernel.org/
> diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
> index 849bc9136299d..61d100e794b45 100644
> --- a/kernel/bpf/syscall.c
> +++ b/kernel/bpf/syscall.c
> @@ -5856,8 +5856,11 @@ static int bpf_map_do_batch(const union bpf_attr *attr,
> }
>
> #define BPF_LINK_CREATE_LAST_FIELD link_create.uprobe_multi.path_fd
> -static int link_create(union bpf_attr *attr, bpfptr_t uattr)
> +static int link_create(union bpf_attr *attr, bpfptr_t uattr, struct bpf_common_attr *attr_common,
> + bpfptr_t uattr_common, u32 size_common)
> {
> + struct bpf_verifier_log *log;
> + struct bpf_log_attr attr_log;
> struct bpf_prog *prog;
> int ret;
>
> @@ -5867,14 +5870,24 @@ static int link_create(union bpf_attr *attr, bpfptr_t uattr)
> if (attr->link_create.attach_type == BPF_STRUCT_OPS)
> return bpf_struct_ops_link_create(attr);
>
> + log = bpf_log_attr_create_vlog(&attr_log, attr_common, uattr_common, size_common);
> + if (IS_ERR(log))
> + return PTR_ERR(log);
> +
> prog = bpf_prog_get(attr->link_create.prog_fd);
> - if (IS_ERR(prog))
> - return PTR_ERR(prog);
> + if (IS_ERR(prog)) {
> + bpf_log(log, "Invalid prog_fd.\n");
> + ret = PTR_ERR(prog);
> + prog = NULL;
> + goto out;
> + }
>
> ret = bpf_prog_attach_check_attach_type(prog,
> attr->link_create.attach_type);
> - if (ret)
> + if (ret) {
> + bpf_log(log, "Invalid attach_type.\n");
> goto out;
> + }
>
> switch (prog->type) {
> case BPF_PROG_TYPE_CGROUP_SKB:
> @@ -5953,12 +5966,19 @@ static int link_create(union bpf_attr *attr, bpfptr_t uattr)
> ret = bpf_uprobe_multi_link_attach(attr, prog);
> break;
> default:
> + bpf_log(log, "Invalid prog type.\n");
> ret = -EINVAL;
> }
[Severity: Medium]
Does calling bpf_prog_attach_check_attach_type() before checking prog->type
in link_create() cause unsupported program types and permission errors to
be misreported as "Invalid attach_type." instead of reaching the default
"Invalid prog type." branch?
In kernel/bpf/syscall.c, bpf_prog_attach_check_attach_type() handles any
prog->type not explicitly listed in its switch via:
kernel/bpf/syscall.c:bpf_prog_attach_check_attach_type() {
...
case BPF_PROG_TYPE_CGROUP_SKB:
if (!bpf_token_capable(prog->aux->token, CAP_NET_ADMIN))
return -EPERM;
...
default:
ptype = attach_type_to_prog_type(attach_type);
if (ptype == BPF_PROG_TYPE_UNSPEC || ptype != prog->type)
return -EINVAL;
return 0;
}
This leads to three cases where the logged message does not match the actual
failure:
1. When a caller passes a valid prog_fd for an unsupported program type
(such as BPF_PROG_TYPE_SOCKET_FILTER, BPF_PROG_TYPE_SCHED_ACT,
BPF_PROG_TYPE_RAW_TRACEPOINT, or BPF_PROG_TYPE_SYSCALL),
attach_type_to_prog_type() never returns that prog->type. As a result,
bpf_prog_attach_check_attach_type() returns -EINVAL, and link_create() logs
"Invalid attach_type.\n" and jumps to out, leaving the default "Invalid prog
type.\n" branch unreachable for almost all unsupported program types (except
BPF_PROG_TYPE_LIRC_MODE2 when CONFIG_NET=y, or networking types when
CONFIG_NET=n).
2. For BPF_PROG_TYPE_CGROUP_SKB, bpf_prog_attach_check_attach_type() checks
!bpf_token_capable(prog->aux->token, CAP_NET_ADMIN) and returns -EPERM.
Because link_create() unconditionally logs "Invalid attach_type.\n" whenever
bpf_prog_attach_check_attach_type() returns non-zero, a permission failure
with a valid attach_type also logs "Invalid attach_type.\n".
3. Conversely, for BPF_PROG_TYPE_LSM and BPF_PROG_TYPE_TRACING,
bpf_prog_attach_check_attach_type() only verifies that
attach_type_to_prog_type(attach_type) == prog->type. If a caller passes an
attach_type in the same family that does not match prog->expected_attach_type
(for example, BPF_TRACE_FEXIT for a BPF_TRACE_FENTRY program), it passes
bpf_prog_attach_check_attach_type() and fails later in link_create():
case BPF_PROG_TYPE_LSM:
case BPF_PROG_TYPE_TRACING:
if (attr->link_create.attach_type != prog->expected_attach_type) {
ret = -EINVAL;
goto out;
}
which jumps to out without logging "Invalid attach_type.\n".
[ ... ]
> return ret;
> }
[ ... ]
>
> --
> 2.51.2
>
--
Sashiko AI review · https://sashiko.dev/#/patchset/20261020152804.39863-1-leon.hwang@linux.dev?part=1
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
` (5 preceding siblings ...)
2026-10-20 15:28 ` [PATCH bpf-next v3 6/6] selftests/bpf: Add tests to verify link_create logs Leon Hwang
@ 2026-10-20 21:00 ` patchwork-bot+netdevbpf
6 siblings, 0 replies; 10+ messages in thread
From: patchwork-bot+netdevbpf @ 2026-10-20 21:00 UTC (permalink / raw)
To: Leon Hwang
Cc: bpf, andrew+netdev, davem, edumazet, kuba, pabeni, horms, ast,
daniel, andrii, eddyz87, memxor, martin.lau, song, yonghong.song,
jolsa, emil, ihor.solodrai, hawk, john.fastabend, sdf, rostedt,
mhiramat, mathieu.desnoyers, shuah, kuniyu, liuhangbin, mkarsten,
masashi.honma, linux-kernel, netdev, linux-trace-kernel,
linux-kselftest
Hello:
This series was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@kernel.org>:
On Tue, 20 Oct 2026 23:27:58 +0800 you wrote:
> I'm planning to add syscall common attrs support for LINK_CREATE cmd.
>
> This is the first series for the plan, that adds syscall common attrs
> support for xdp LINK_CREATE.
>
> Thereafter, retire the tracepoint bpf_xdp_link_attach_failed, because
> the underlying driver's error can be back-propagated to user space via
> the syscall common attrs.
>
> [...]
Here is the summary with links:
- [bpf-next,v3,1/6] bpf: Add syscall common attrs support for link_create
https://git.kernel.org/bpf/bpf-next/c/c8e3a753a9ee
- [bpf-next,v3,2/6] bpf: Add syscall common attrs support for xdp link_create
https://git.kernel.org/bpf/bpf-next/c/d80d00835520
- [bpf-next,v3,3/6] bpf: Retire tracepoint bpf_xdp_link_attach_failed
https://git.kernel.org/bpf/bpf-next/c/278568acb588
- [bpf-next,v3,4/6] libbpf: Factor out __sys_bpf_fd helper
https://git.kernel.org/bpf/bpf-next/c/deb9732f53da
- [bpf-next,v3,5/6] libbpf: Add bpf_link_create_log API
https://git.kernel.org/bpf/bpf-next/c/1480f290d1f7
- [bpf-next,v3,6/6] selftests/bpf: Add tests to verify link_create logs
https://git.kernel.org/bpf/bpf-next/c/f23fa8f01ce3
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply [flat|nested] 10+ messages in thread
end of thread, other threads:[~2026-10-20 21:00 UTC | newest]
Thread overview: 10+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-20 15:27 [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
2026-10-20 15:27 ` [PATCH bpf-next v3 1/6] bpf: Add syscall common attrs support for link_create Leon Hwang
2026-10-20 15:44 ` sashiko-bot
2026-10-20 15:28 ` [PATCH bpf-next v3 2/6] bpf: Add syscall common attrs support for xdp link_create Leon Hwang
2026-10-20 15:37 ` sashiko-bot
2026-10-20 15:28 ` [PATCH bpf-next v3 3/6] bpf: Retire tracepoint bpf_xdp_link_attach_failed Leon Hwang
2026-10-20 15:28 ` [PATCH bpf-next v3 4/6] libbpf: Factor out __sys_bpf_fd helper Leon Hwang
2026-10-20 15:28 ` [PATCH bpf-next v3 5/6] libbpf: Add bpf_link_create_log API Leon Hwang
2026-10-20 15:28 ` [PATCH bpf-next v3 6/6] selftests/bpf: Add tests to verify link_create logs Leon Hwang
2026-10-20 21:00 ` [PATCH bpf-next v3 0/6] bpf: Add syscall common attrs support for xdp link_create patchwork-bot+netdevbpf
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.