From patchwork Wed Nov 2 20:26:34 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kumar Kartikeya Dwivedi X-Patchwork-Id: 13028936 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 00B86C433FE for ; Wed, 2 Nov 2022 20:27:12 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229531AbiKBU1L (ORCPT ); Wed, 2 Nov 2022 16:27:11 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:54628 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230293AbiKBU1K (ORCPT ); Wed, 2 Nov 2022 16:27:10 -0400 Received: from mail-pg1-x542.google.com (mail-pg1-x542.google.com [IPv6:2607:f8b0:4864:20::542]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id A3FF71017 for ; Wed, 2 Nov 2022 13:27:08 -0700 (PDT) Received: by mail-pg1-x542.google.com with SMTP id 78so17200380pgb.13 for ; Wed, 02 Nov 2022 13:27:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=t9co4fNGwvGQEosLJL7sPKX/5mHsYoEivL06EKn5glE=; b=O6MzQXe3t27+1Rok+wfSNprd91p3PNASNiRQrPzH1eZsjlt/um02gfwKwjG4kuNY71 qaHuteVFr5i08c1VVh7roCN8zJNMWyDo9DEoXo9pNWUgm3MM7A1W/keBO3Lh1Kmuh6tx OeVOvER08WxfYa4FN9IrI7TdvFRY/pwk5yyWopUL/n87OrKExQzkZhyfrOk9VhPRD9I/ 42tlWZueA/JcG33peV0ZGWOHwweuGdDSYOzYilghnEVlsoy4ekcNv3dsJSj82PollTgS C+Bv8/B2l06qFYlvRbvHCOnn/jXXjYFM+eVY25zgsbaAq72ktFFj2ScNnEk6m8nMmbOr nk/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=t9co4fNGwvGQEosLJL7sPKX/5mHsYoEivL06EKn5glE=; b=ZdmGOxM+3QqvCj5xGkvR+svuNu5EcXPHfDLcTfpNzREbWZeinsac8jxJLPkcDb/fCN OwQ2oFEstPGKhST+Sc80x707qmZJsIZbZwPZTJxtaWM7o16D2jkVESA4YxHv0x+57eCN slouymE/1EwyBV2qhdmWp5KrzeX7ea1mABbiST11GFmz75Z12KoB1NWTwZvaDa4qePXu 2+JrSS8FDUHYPGh0UyBpre2v0UL414SFYEIMBi6N/79fmk0x5J/zKsrY+RCTiA3jZegJ Eyt15paq112etnXySvkGsfB9UF8HOPKPDGRzyo46LavYVXH5qx9KNcWtalB+XCog6wfb VMAQ== X-Gm-Message-State: ACrzQf3e1+dpCAk4ZsPOCBhMvpSAq4z0ZfR8a7730AAKaQc5GHaypjeJ dPyeiJ1diyHw+O6CmGIbXYR8XZfy/ly+AQ== X-Google-Smtp-Source: AMsMyM6Qzp4iz7oganxc4+rO1y/e3rKSxhOwhgXkIKHszeKA1h8ETj1GmgiqFFuUmwuLkt173m29Uw== X-Received: by 2002:a63:c65:0:b0:470:cb4:aca3 with SMTP id 37-20020a630c65000000b004700cb4aca3mr3415394pgm.389.1667420827855; Wed, 02 Nov 2022 13:27:07 -0700 (PDT) Received: from localhost ([59.152.80.69]) by smtp.gmail.com with ESMTPSA id x129-20020a623187000000b0056da073b2b7sm5258867pfx.210.2022.11.02.13.27.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 02 Nov 2022 13:27:07 -0700 (PDT) From: Kumar Kartikeya Dwivedi To: bpf@vger.kernel.org Cc: Alexei Starovoitov , Andrii Nakryiko , Daniel Borkmann , Martin KaFai Lau , Dave Marchevsky , Delyan Kratunov Subject: [PATCH bpf-next v3 00/24] Local kptrs, BPF linked lists Date: Thu, 3 Nov 2022 01:56:34 +0530 Message-Id: <20221102202658.963008-1-memxor@gmail.com> X-Mailer: git-send-email 2.38.1 MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=9443; i=memxor@gmail.com; h=from:subject; bh=urjeSdLe1Mv+J6716xP1Fw1qcU1n/93ap2nNIrK1pQU=; b=owEBbQKS/ZANAwAIAUzgyIZIvxHKAcsmYgBjYtICDWjn0dDIwf5FzUXjmV2nKas+qKQgjuK6HwDN zuBG00OJAjMEAAEIAB0WIQRLvip+Buz51YI8YRFM4MiGSL8RygUCY2LSAgAKCRBM4MiGSL8RyiPGEA CBbSDOXsme9lxnhzKJ9tOGxpBhwcUpzuLNszYupxx6DFGqrZ02ZnVfrWKpTAKeqjmXzK3oxIBnCXjI 3GYXuTKVwy3cWB2Jrl0yVGjnw9/fPwGO/6nRHaG2/iYAe8aEI7tRtoXBIKasn+IXZx22C/yikzWF1z c2kFkgMNtauburRyFA0o5JDFEmg5y/LFwHVwwyqzi2XJcaAspmWjmMOWabFs0aJK1qkyrqm7PEeWFf 7Ku0EZjkkZ5xcsH8xoQoTWiPN7g8o5RKEO/oO9q796NDHsZ7LA5oqbqPxa30FI0wTmPfcpYMe3J719 88JQjqpl2pB0WyHSBiim9gUzpfZyH1Atp1kwJc29NGALm8bZzrI5aTOjogR9yFzgsluOOMRlYPeJUa 2r6KdxyFWE6EjI2nZYN6uNLZkkIJZnqs0gWd/UkRzKOnrH/NgEM1uQ+WJ1wdZINdqiKAQYS/84jvtZ xE87aunw00wrefjmnC0+juL3aRxddraqzSdOCFhBWOuNURMikiwULeM7ogMRWzuo2aRdFZg6GHqeth GVW/DKcrYekYWtUnGYGSbtPlpu7FgGdBsY+wLjfX5GqoLoIkHy819OpYVaHvTkfsxhNSZ0aBcS0JVR ViuRLYjO8cYrNmwaU/ae+yLv6x/0Q0PnBL+6B3wKLpROVkxpyaBNHG/JY+aw== X-Developer-Key: i=memxor@gmail.com; a=openpgp; fpr=4BBE2A7E06ECF9D5823C61114CE0C88648BF11CA Precedence: bulk List-ID: X-Mailing-List: bpf@vger.kernel.org X-Patchwork-Delegate: bpf@iogearbox.net This series introduces user defined BPF objects, by introducing the idea of local kptrs. These are kptrs (strongly typed pointers) that refer to objects of a user defined type, hence called "local" kptrs. This allows BPF programs to allocate their own objects, build their own object hierarchies, and use the basic building blocks provided by BPF runtime to build their own data structures flexibly. Then, we introduce the support for single ownership BPF linked lists, which can be put inside BPF maps, or local kptrs, and hold such allocated local kptrs as elements. It works as an instrusive collection, which is done to allow making local kptrs part of multiple data structures at the same time in the future. The eventual goal of this and future patches is to allow one to do some limited form of kernel style programming in BPF C, and allow programmers to build their own complex data structures flexibly out of basic building blocks. The key difference will be that such programs are verified to be safe, preserve runtime integrity of the system, and are proven to be bug free as far as the invariants of BPF specific APIs are concerned. One immediate use case that will be using the entire infrastructure this series is introducing will be managing percpu NMI safe linked lists inside BPF programs. The other use case this will serve in the near future will be linking kernel structures like XDP frame and sk_buff directly into user data structures (rbtree, pifomap, etc.) for packet queueing. This will follow single ownership concept included in this series. The user has complete control of the internal locking, and hence also the batching of operations for each critical section. The features are: - Local kptrs - User defined kernel objects. - bpf_obj_new, bpf_obj_drop to allocate and free them. - Single ownership BPF linked lists. - Support for them in BPF maps. - Support for them in local kptrs. - Global spin locks. - Spin locks inside local kptrs. Some other notable things: - Completely static verification of locking. - Kfunc argument handling has been completely reworked. - Argument rewriting support for kfuncs. - Search pruning now understands non-size precise registers. - A new bpf_experimental.h header as a dumping ground for these APIs. Any functionality exposed in this series is NOT part of UAPI. It is only available through use of kfuncs, and structs that can be added to map value may also change their size or name in the future. Hence, every feature in this series must be considered experimental. Follow-ups: ----------- * Support for kptrs (local and kernel) in local storage and percpu maps + kptr tests * Fixes for helper access checks rebasing on top of this series Next steps: ----------- * NMI safe percpu single ownership linked lists (using local_t protection). * Lockless linked lists. * Allow RCU protected local kptrs. This then allows RCU protected list lookups, since spinlock protection for readers does not scale. * Introduce explicit RCU read sections (using kfuncs). * Introduce bpf_refcount for local kptrs, shared ownership. * Introduce shared ownership linked lists. * Documentation. Changelog: ---------- v2 -> v3 v2: https://lore.kernel.org/bpf/20221013062303.896469-1-memxor@gmail.com * Add ack from Dave for patch 5 * Rename btf_type_fields -> btf_record, btf_type_fields_off -> btf_field_offs, rename functions similarly (Alexei) * Remove 'kind' component from contains declaration tag (Alexei) * Move bpf_list_head, bpf_list_node definitions to UAPI bpf.h (Alexei) * Add note in commit log about modifying btf_struct_access API (Dave) * Downgrade WARN_ON_ONCE to verbose(env, "...") and return -EFAULT (Dave) * Add type_is_local_kptr wrapper to avoid noisy checks (Dave) * Remove unused flags parameter from bpf_kptr_new (Alexei) * Reword comment in ref_obj_id_set_release_on_unlock (Dave) * Fix return type of ref_obj_id_set_release_on_unlock (Dave) * Introduce is_bpf_list_api_kfunc to dedup checks (Dave) * Disallow BPF_WRITE to untrusted local kptrs * Add details about soundness of check_reg_allocation_locked logic * List untrusted local kptrs for PROBE_MEM handling v1 -> v2 v1: https://lore.kernel.org/bpf/20221011012240.3149-1-memxor@gmail.com * Rebase on bpf-next to resolve merge conflict in DENYLIST.s390x * Fix a couple of mental lapses in bpf_list_head_free RFC v1 -> v1 RFC v1: https://lore.kernel.org/bpf/20220904204145.3089-1-memxor@gmail.com * Mostly a complete rewrite of BTF parsing, refactor existing code (Kartikeya) * Rebase kfunc rewrite for bpf-next, add support for more changes * Cache type metadata in BTF to avoid recomputation inside verifier (Kartikeya) * Remove __kernel tag, make things similar to map values, reserve bpf_ prefix * Rename bpf_kptr_new -> bpf_obj_new, bpf_kptr_drop -> bpf_obj_drop (Alexei) * Rename precision state enum values (Alexei) * Drop explicit constructor/destructor support (Alexei) * Rewrite code for constructing/destructing objects and offload to runtime * Minimize duplication in bpf_map_value_off_desc handling (Alexei) * Expose global memory allocator (Alexei) * Address other nits from Alexei * Split out local kptrs in maps, more kptrs in maps support into a follow up Links: ------ * Dave's BPF RB-Tree RFC series v1 (Discussion thread) https://lore.kernel.org/bpf/20220722183438.3319790-1-davemarchevsky@fb.com v2 (With support for static locks) https://lore.kernel.org/bpf/20220830172759.4069786-1-davemarchevsky@fb.com * BPF Linked Lists Discussion https://lore.kernel.org/bpf/CAP01T74U30+yeBHEgmgzTJ-XYxZ0zj71kqCDJtTH9YQNfTK+Xw@mail.gmail.com * BPF Memory Allocator from Alexei https://lore.kernel.org/bpf/20220902211058.60789-1-alexei.starovoitov@gmail.com * BPF Memory Allocator UAPI Discussion https://lore.kernel.org/bpf/d3f76b27f4e55ec9e400ae8dcaecbb702a4932e8.camel@fb.com Kumar Kartikeya Dwivedi (24): bpf: Document UAPI details for special BPF types bpf: Allow specifying volatile type modifier for kptrs bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID bpf: Fix slot type check in check_stack_write_var_off bpf: Drop reg_type_may_be_refcounted_or_null bpf: Refactor kptr_off_tab into btf_record bpf: Consolidate spin_lock, timer management into btf_record bpf: Refactor map->off_arr handling bpf: Support bpf_list_head in map values bpf: Introduce local kptrs bpf: Recognize bpf_{spin_lock,list_head,list_node} in local kptrs bpf: Verify ownership relationships for user BTF types bpf: Support locking bpf_spin_lock in local kptr bpf: Allow locking bpf_spin_lock global variables bpf: Rewrite kfunc argument handling bpf: Drop kfunc bits from btf_check_func_arg_match bpf: Support constant scalar arguments for kfuncs bpf: Teach verifier about non-size constant arguments bpf: Introduce bpf_obj_new bpf: Introduce bpf_obj_drop bpf: Permit NULL checking pointer with non-zero fixed offset bpf: Introduce single ownership BPF linked list API selftests/bpf: Add __contains macro to bpf_experimental.h selftests/bpf: Add BPF linked list API tests Documentation/bpf/bpf_design_QA.rst | 44 + Documentation/bpf/kfuncs.rst | 30 + include/linux/bpf.h | 250 ++- include/linux/bpf_verifier.h | 22 +- include/linux/btf.h | 77 +- include/linux/filter.h | 8 +- include/uapi/linux/bpf.h | 10 + kernel/bpf/arraymap.c | 30 +- kernel/bpf/bpf_local_storage.c | 2 +- kernel/bpf/btf.c | 1205 +++++++------ kernel/bpf/core.c | 14 + kernel/bpf/hashtab.c | 38 +- kernel/bpf/helpers.c | 141 +- kernel/bpf/local_storage.c | 2 +- kernel/bpf/map_in_map.c | 19 +- kernel/bpf/syscall.c | 401 +++-- kernel/bpf/verifier.c | 1504 ++++++++++++++--- net/bpf/bpf_dummy_struct_ops.c | 14 +- net/core/bpf_sk_storage.c | 4 +- net/core/filter.c | 34 +- net/ipv4/bpf_tcp_ca.c | 13 +- net/netfilter/nf_conntrack_bpf.c | 17 +- tools/include/uapi/linux/bpf.h | 10 + tools/testing/selftests/bpf/DENYLIST.s390x | 1 + .../testing/selftests/bpf/bpf_experimental.h | 63 + .../bpf/prog_tests/kfunc_dynptr_param.c | 2 +- .../selftests/bpf/prog_tests/linked_list.c | 79 + .../testing/selftests/bpf/progs/linked_list.c | 330 ++++ tools/testing/selftests/bpf/verifier/calls.c | 4 +- .../selftests/bpf/verifier/ref_tracking.c | 4 +- 30 files changed, 3184 insertions(+), 1188 deletions(-) create mode 100644 tools/testing/selftests/bpf/bpf_experimental.h create mode 100644 tools/testing/selftests/bpf/prog_tests/linked_list.c create mode 100644 tools/testing/selftests/bpf/progs/linked_list.c base-commit: 3a07dcf8f57b9a90b1c07df3e9091fd04baa3036