From: Yonghong Song <yonghong.song@linux.dev>
To: bot+bpf-ci@kernel.org, bpf@vger.kernel.org
Cc: ast@kernel.org, andrii@kernel.org, daniel@iogearbox.net,
eddyz87@gmail.com, kernel-team@fb.com, martin.lau@kernel.org,
mason@kernel.org, ihor.solodrai@linux.dev
Subject: Re: [PATCH bpf-next 13/20] libbpf: Resolve the compiler's _Unwind_Resume to the kernel's kfunc
Date: Thu, 17 Sep 2026 20:40:46 -0700 [thread overview]
Message-ID: <c2bed9c0-bd41-4045-ae25-2e3c9a8dbd8e@linux.dev> (raw)
In-Reply-To: <19251f166b31c6b7bc6212d2d9008f3f5b06ff7726b1d3c08c7f54467bb0dbc4@mail.kernel.org>
On 9/17/26 12:00 AM, bot+bpf-ci@kernel.org wrote:
>> diff --git tools/lib/bpf/libbpf.c tools/lib/bpf/libbpf.c
>> index 613afae265199..ea1c09fa37939 100644
>> --- tools/lib/bpf/libbpf.c
>> +++ tools/lib/bpf/libbpf.c
>> @@ -8346,6 +8346,15 @@ static void fixup_verifier_log(struct bpf_program *prog, char *buf, size_t buf_s
>> }
>> }
>>
>> +/* LLVM terminates a cleanup landing pad with a call to _Unwind_Resume, the
>> + * base unwind ABI's entry point for carrying an unwind on once a frame's
>> + * cleanups have run. The kernel knows it as bpf_unwind_resume.
>> + */
>> +static const char *kern_extern_name(const char *name)
>> +{
>> + return strcmp(name, "_Unwind_Resume") ? name : "bpf_unwind_resume";
>> +}
>> +
>> static int bpf_program_record_relos(struct bpf_program *prog)
>> {
>> struct bpf_object *obj = prog->obj;
> Is the kern_extern_name() mapping applied on the light skeleton load
> path?
>
> Looking at bpf_program_record_relos() below kern_extern_name(), the
> RELO_EXTERN_CALL case records ext->name directly without calling
> kern_extern_name():
>
> static int bpf_program_record_relos(struct bpf_program *prog)
> {
> ...
> case RELO_EXTERN_CALL:
> bpf_gen__record_extern(obj->gen_loader, ext->name,
> ext->is_weak, false, false, BTF_KIND_FUNC,
> relo->insn_idx);
> break;
> ...
> }
>
> This means the generated loader program would ask the kernel for
> BTF_KIND_FUNC '_Unwind_Resume', which doesn't exist in vmlinux BTF. The
> kernel only knows bpf_unwind_resume per BTF_ID_FLAGS(func,
> bpf_unwind_resume) in kernel/bpf/helpers.c.
>
> For comparison, the direct BPF_PROG_LOAD path does use the mapping:
>
> bpf_object__resolve_ksym_func_btf_id() calls kern_extern_name() at
> libbpf.c:8824, but that resolution is deliberately skipped when
> obj->gen_loader is set:
>
> bpf_object__resolve_ksyms_btf_id() {
> ...
> if (obj->gen_loader) {
> ext->is_set = true;
> ext->ksym.kernel_btf_obj_fd = 0;
> ext->ksym.kernel_btf_id = 0;
> continue;
> }
> ...
> }
>
> On the light skeleton path, bpf_btf_find_by_name_kind() would return
> -ESRCH for '_Unwind_Resume', causing emit_check_err() to jump to cleanup
> and fail the load. If the extern were weak, insn->imm/off would be
> stored as 0, which the verifier would reject as an invalid kfunc call.
>
> The test added later in the series
> (selftests/bpf/progs/exceptions_cleanup_light.c) writes 'call
> bpf_unwind_resume' directly in inline asm, so it uses the kernel name
> and never exercises the mapping.
Indeed, later patch in selftests/bpf/progs/exceptions_cleanup_light.c
fixed the issue with bpf_undiwn_resume properly. So this is not really
a bug. But we can do better than this. We can change from ext->name to
bpf_unwind_resume in file selftests/bpf/progs/exceptions_cleanup_light.c
for this patch. This will make things easier to understand.
>
>> @@ -8807,17 +8816,19 @@ static int bpf_object__resolve_ksym_func_btf_id(struct bpf_object *obj,
>> struct module_btf *mod_btf = NULL;
>> const struct btf_type *kern_func;
>> struct btf *kern_btf = NULL;
>> + const char *kern_name;
>> int ret;
>>
>> local_func_proto_id = ext->ksym.type_id;
>>
>> - kfunc_id = find_ksym_btf_id(obj, ext->essent_name ?: ext->name, BTF_KIND_FUNC, &kern_btf,
>> - &mod_btf);
>> + kern_name = kern_extern_name(ext->essent_name ?: ext->name);
>> +
>> + kfunc_id = find_ksym_btf_id(obj, kern_name, BTF_KIND_FUNC, &kern_btf, &mod_btf);
>> if (kfunc_id < 0) {
>> if (kfunc_id == -ESRCH && ext->is_weak)
>> return 0;
>> pr_warn("extern (func ksym) '%s': not found in kernel or module BTFs\n",
>> - ext->name);
>> + strcmp(kern_name, "bpf_unwind_resume") ? ext->name : kern_name);
>> return kfunc_id;
>> }
>
> ---
> AI reviewed your patch. Please fix the bug or email reply why it's not a bug.
> See: https://github.com/kernel-patches/vmtest/blob/master/ci/claude/README.md
>
> CI run summary: https://github.com/kernel-patches/bpf/actions/runs/35188619605
next prev parent reply other threads:[~2026-09-18 3:40 UTC|newest]
Thread overview: 40+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-17 5:56 [PATCH bpf-next 00/20] bpf: Run exception cleanup landing pads when bpf_throw() unwinds Yonghong Song
2026-09-17 5:56 ` [PATCH bpf-next 01/20] bpf: Accept the compiler's exception cleanup table at program load Yonghong Song
2026-09-17 5:56 ` [PATCH bpf-next 02/20] bpf: Add the bpf_unwind_resume() kfunc Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 03/20] bpf: Add lookups for exception cleanup resumes and landing pads Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 04/20] bpf: Mark the call sites an exception cleanup table covers Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 05/20] bpf: Make exception landing pads reachable in the CFG Yonghong Song
2026-09-17 6:22 ` sashiko-bot
2026-09-18 3:36 ` Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 06/20] bpf: Explore the landing pads no call site reaches Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 07/20] bpf: Refuse exception cleanup shapes bpf_throw() cannot dispatch Yonghong Song
2026-09-19 4:57 ` Alexei Starovoitov
2026-09-19 17:32 ` Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 08/20] bpf: Walk the exception unwind in the verifier Yonghong Song
2026-09-19 4:57 ` Alexei Starovoitov
2026-09-19 17:36 ` Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 09/20] bpf: Refuse a private stack for a program with an exception cleanup table Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 10/20] bpf: Dispatch exception cleanup pads from bpf_throw() Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 11/20] bpf, x86: Dispatch exception cleanup pads at run time Yonghong Song
2026-09-19 5:02 ` Alexei Starovoitov
2026-09-19 19:13 ` Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 12/20] bpf, arm64: " Yonghong Song
2026-09-17 5:57 ` [PATCH bpf-next 13/20] libbpf: Resolve the compiler's _Unwind_Resume to the kernel's kfunc Yonghong Song
2026-09-17 6:08 ` sashiko-bot
2026-09-17 7:00 ` bot+bpf-ci
2026-09-18 3:40 ` Yonghong Song [this message]
2026-09-17 5:57 ` [PATCH bpf-next 14/20] libbpf: Add cleanup_info to bpf_prog_load_opts Yonghong Song
2026-09-17 5:58 ` [PATCH bpf-next 15/20] libbpf: Collect .bpf_cleanup records and pass them to the kernel Yonghong Song
2026-09-17 6:12 ` sashiko-bot
2026-09-18 3:44 ` Yonghong Song
2026-09-17 5:58 ` [PATCH bpf-next 16/20] libbpf: Carry the exception cleanup table through the light skeleton Yonghong Song
2026-09-17 6:18 ` sashiko-bot
2026-09-18 3:52 ` Yonghong Song
2026-09-17 5:58 ` [PATCH bpf-next 17/20] libbpf: Let the static linker carry .bpf_cleanup relocations Yonghong Song
2026-09-17 6:16 ` sashiko-bot
2026-09-18 3:58 ` Yonghong Song
2026-09-17 5:58 ` [PATCH bpf-next 18/20] selftests/bpf: Add an end-to-end .bpf_cleanup exception test Yonghong Song
2026-09-17 6:12 ` sashiko-bot
2026-09-17 5:58 ` [PATCH bpf-next 19/20] selftests/bpf: Cover the exception cleanup shapes the chain does not reach Yonghong Song
2026-09-17 6:16 ` sashiko-bot
2026-09-17 5:58 ` [PATCH bpf-next 20/20] selftests/bpf: Load an exception cleanup program from a light skeleton Yonghong Song
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=c2bed9c0-bd41-4045-ae25-2e3c9a8dbd8e@linux.dev \
--to=yonghong.song@linux.dev \
--cc=andrii@kernel.org \
--cc=ast@kernel.org \
--cc=bot+bpf-ci@kernel.org \
--cc=bpf@vger.kernel.org \
--cc=daniel@iogearbox.net \
--cc=eddyz87@gmail.com \
--cc=ihor.solodrai@linux.dev \
--cc=kernel-team@fb.com \
--cc=martin.lau@kernel.org \
--cc=mason@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox