root/tools/testing/selftests/bpf/prog_tests/kprobe_multi_test.c
// SPDX-License-Identifier: GPL-2.0
#include <errno.h>
#include <sys/prctl.h>
#include <test_progs.h>
#include "kprobe_multi.skel.h"
#include "trace_helpers.h"
#include "kprobe_multi_empty.skel.h"
#include "kprobe_multi_override.skel.h"
#include "kprobe_multi_session.skel.h"
#include "kprobe_multi_session_cookie.skel.h"
#include "kprobe_multi_verifier.skel.h"
#include "kprobe_write_ctx.skel.h"
#include "bpf/libbpf_internal.h"
#include "bpf/hashmap.h"

static void kprobe_multi_test_run(struct kprobe_multi *skel, bool test_return)
{
        LIBBPF_OPTS(bpf_test_run_opts, topts);
        int err, prog_fd;

        prog_fd = bpf_program__fd(skel->progs.trigger);
        err = bpf_prog_test_run_opts(prog_fd, &topts);
        ASSERT_OK(err, "test_run");
        ASSERT_EQ(topts.retval, 0, "test_run");

        ASSERT_EQ(skel->bss->kprobe_test1_result, 1, "kprobe_test1_result");
        ASSERT_EQ(skel->bss->kprobe_test2_result, 1, "kprobe_test2_result");
        ASSERT_EQ(skel->bss->kprobe_test3_result, 1, "kprobe_test3_result");
        ASSERT_EQ(skel->bss->kprobe_test4_result, 1, "kprobe_test4_result");
        ASSERT_EQ(skel->bss->kprobe_test5_result, 1, "kprobe_test5_result");
        ASSERT_EQ(skel->bss->kprobe_test6_result, 1, "kprobe_test6_result");
        ASSERT_EQ(skel->bss->kprobe_test7_result, 1, "kprobe_test7_result");
        ASSERT_EQ(skel->bss->kprobe_test8_result, 1, "kprobe_test8_result");

        if (test_return) {
                ASSERT_EQ(skel->bss->kretprobe_test1_result, 1, "kretprobe_test1_result");
                ASSERT_EQ(skel->bss->kretprobe_test2_result, 1, "kretprobe_test2_result");
                ASSERT_EQ(skel->bss->kretprobe_test3_result, 1, "kretprobe_test3_result");
                ASSERT_EQ(skel->bss->kretprobe_test4_result, 1, "kretprobe_test4_result");
                ASSERT_EQ(skel->bss->kretprobe_test5_result, 1, "kretprobe_test5_result");
                ASSERT_EQ(skel->bss->kretprobe_test6_result, 1, "kretprobe_test6_result");
                ASSERT_EQ(skel->bss->kretprobe_test7_result, 1, "kretprobe_test7_result");
                ASSERT_EQ(skel->bss->kretprobe_test8_result, 1, "kretprobe_test8_result");
        }
}

static void test_skel_api(void)
{
        struct kprobe_multi *skel = NULL;
        int err;

        skel = kprobe_multi__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_multi__open_and_load"))
                goto cleanup;

        skel->bss->pid = getpid();
        err = kprobe_multi__attach(skel);
        if (!ASSERT_OK(err, "kprobe_multi__attach"))
                goto cleanup;

        kprobe_multi_test_run(skel, true);

cleanup:
        kprobe_multi__destroy(skel);
}

static void test_link_api(struct bpf_link_create_opts *opts)
{
        int prog_fd, link1_fd = -1, link2_fd = -1;
        struct kprobe_multi *skel = NULL;

        skel = kprobe_multi__open_and_load();
        if (!ASSERT_OK_PTR(skel, "fentry_raw_skel_load"))
                goto cleanup;

        skel->bss->pid = getpid();
        prog_fd = bpf_program__fd(skel->progs.test_kprobe);
        link1_fd = bpf_link_create(prog_fd, 0, BPF_TRACE_KPROBE_MULTI, opts);
        if (!ASSERT_GE(link1_fd, 0, "link_fd"))
                goto cleanup;

        opts->kprobe_multi.flags = BPF_F_KPROBE_MULTI_RETURN;
        prog_fd = bpf_program__fd(skel->progs.test_kretprobe);
        link2_fd = bpf_link_create(prog_fd, 0, BPF_TRACE_KPROBE_MULTI, opts);
        if (!ASSERT_GE(link2_fd, 0, "link_fd"))
                goto cleanup;

        kprobe_multi_test_run(skel, true);

cleanup:
        if (link1_fd != -1)
                close(link1_fd);
        if (link2_fd != -1)
                close(link2_fd);
        kprobe_multi__destroy(skel);
}

#define GET_ADDR(__sym, __addr) ({                                      \
        __addr = ksym_get_addr(__sym);                                  \
        if (!ASSERT_NEQ(__addr, 0, "kallsyms load failed for " #__sym)) \
                return;                                                 \
})

static void test_link_api_addrs(void)
{
        LIBBPF_OPTS(bpf_link_create_opts, opts);
        unsigned long long addrs[8];

        GET_ADDR("bpf_fentry_test1", addrs[0]);
        GET_ADDR("bpf_fentry_test2", addrs[1]);
        GET_ADDR("bpf_fentry_test3", addrs[2]);
        GET_ADDR("bpf_fentry_test4", addrs[3]);
        GET_ADDR("bpf_fentry_test5", addrs[4]);
        GET_ADDR("bpf_fentry_test6", addrs[5]);
        GET_ADDR("bpf_fentry_test7", addrs[6]);
        GET_ADDR("bpf_fentry_test8", addrs[7]);

        opts.kprobe_multi.addrs = (const unsigned long*) addrs;
        opts.kprobe_multi.cnt = ARRAY_SIZE(addrs);
        test_link_api(&opts);
}

static void test_link_api_syms(void)
{
        LIBBPF_OPTS(bpf_link_create_opts, opts);
        const char *syms[8] = {
                "bpf_fentry_test1",
                "bpf_fentry_test2",
                "bpf_fentry_test3",
                "bpf_fentry_test4",
                "bpf_fentry_test5",
                "bpf_fentry_test6",
                "bpf_fentry_test7",
                "bpf_fentry_test8",
        };

        opts.kprobe_multi.syms = syms;
        opts.kprobe_multi.cnt = ARRAY_SIZE(syms);
        test_link_api(&opts);
}

static void
test_attach_api(const char *pattern, struct bpf_kprobe_multi_opts *opts)
{
        struct bpf_link *link1 = NULL, *link2 = NULL;
        struct kprobe_multi *skel = NULL;

        skel = kprobe_multi__open_and_load();
        if (!ASSERT_OK_PTR(skel, "fentry_raw_skel_load"))
                goto cleanup;

        skel->bss->pid = getpid();
        link1 = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                      pattern, opts);
        if (!ASSERT_OK_PTR(link1, "bpf_program__attach_kprobe_multi_opts"))
                goto cleanup;

        if (opts) {
                opts->retprobe = true;
                link2 = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kretprobe_manual,
                                                              pattern, opts);
                if (!ASSERT_OK_PTR(link2, "bpf_program__attach_kprobe_multi_opts"))
                        goto cleanup;
        }

        kprobe_multi_test_run(skel, !!opts);

cleanup:
        bpf_link__destroy(link2);
        bpf_link__destroy(link1);
        kprobe_multi__destroy(skel);
}

static void test_attach_api_pattern(void)
{
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);

        test_attach_api("bpf_fentry_test*", &opts);
        test_attach_api("bpf_fentry_test?", NULL);
}

static void test_attach_api_addrs(void)
{
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        unsigned long long addrs[8];

        GET_ADDR("bpf_fentry_test1", addrs[0]);
        GET_ADDR("bpf_fentry_test2", addrs[1]);
        GET_ADDR("bpf_fentry_test3", addrs[2]);
        GET_ADDR("bpf_fentry_test4", addrs[3]);
        GET_ADDR("bpf_fentry_test5", addrs[4]);
        GET_ADDR("bpf_fentry_test6", addrs[5]);
        GET_ADDR("bpf_fentry_test7", addrs[6]);
        GET_ADDR("bpf_fentry_test8", addrs[7]);

        opts.addrs = (const unsigned long *) addrs;
        opts.cnt = ARRAY_SIZE(addrs);
        test_attach_api(NULL, &opts);
}

static void test_attach_api_syms(void)
{
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        const char *syms[8] = {
                "bpf_fentry_test1",
                "bpf_fentry_test2",
                "bpf_fentry_test3",
                "bpf_fentry_test4",
                "bpf_fentry_test5",
                "bpf_fentry_test6",
                "bpf_fentry_test7",
                "bpf_fentry_test8",
        };

        opts.syms = syms;
        opts.cnt = ARRAY_SIZE(syms);
        test_attach_api(NULL, &opts);
}

static void test_attach_api_fails(void)
{
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        struct kprobe_multi *skel = NULL;
        struct bpf_link *link = NULL;
        unsigned long long addrs[2];
        const char *syms[2] = {
                "bpf_fentry_test1",
                "bpf_fentry_test2",
        };
        __u64 cookies[2];
        int saved_error;

        addrs[0] = ksym_get_addr("bpf_fentry_test1");
        addrs[1] = ksym_get_addr("bpf_fentry_test2");

        if (!ASSERT_FALSE(!addrs[0] || !addrs[1], "ksym_get_addr"))
                goto cleanup;

        skel = kprobe_multi__open_and_load();
        if (!ASSERT_OK_PTR(skel, "fentry_raw_skel_load"))
                goto cleanup;

        skel->bss->pid = getpid();

        /* fail_1 - pattern and opts NULL */
        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     NULL, NULL);
        saved_error = -errno;
        if (!ASSERT_ERR_PTR(link, "fail_1"))
                goto cleanup;

        if (!ASSERT_EQ(saved_error, -EINVAL, "fail_1_error"))
                goto cleanup;

        /* fail_2 - both addrs and syms set */
        opts.addrs = (const unsigned long *) addrs;
        opts.syms = syms;
        opts.cnt = ARRAY_SIZE(syms);
        opts.cookies = NULL;

        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     NULL, &opts);
        saved_error = -errno;
        if (!ASSERT_ERR_PTR(link, "fail_2"))
                goto cleanup;

        if (!ASSERT_EQ(saved_error, -EINVAL, "fail_2_error"))
                goto cleanup;

        /* fail_3 - pattern and addrs set */
        opts.addrs = (const unsigned long *) addrs;
        opts.syms = NULL;
        opts.cnt = ARRAY_SIZE(syms);
        opts.cookies = NULL;

        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     "ksys_*", &opts);
        saved_error = -errno;
        if (!ASSERT_ERR_PTR(link, "fail_3"))
                goto cleanup;

        if (!ASSERT_EQ(saved_error, -EINVAL, "fail_3_error"))
                goto cleanup;

        /* fail_4 - pattern and cnt set */
        opts.addrs = NULL;
        opts.syms = NULL;
        opts.cnt = ARRAY_SIZE(syms);
        opts.cookies = NULL;

        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     "ksys_*", &opts);
        saved_error = -errno;
        if (!ASSERT_ERR_PTR(link, "fail_4"))
                goto cleanup;

        if (!ASSERT_EQ(saved_error, -EINVAL, "fail_4_error"))
                goto cleanup;

        /* fail_5 - pattern and cookies */
        opts.addrs = NULL;
        opts.syms = NULL;
        opts.cnt = 0;
        opts.cookies = cookies;

        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     "ksys_*", &opts);
        saved_error = -errno;
        if (!ASSERT_ERR_PTR(link, "fail_5"))
                goto cleanup;

        if (!ASSERT_EQ(saved_error, -EINVAL, "fail_5_error"))
                goto cleanup;

        /* fail_6 - abnormal cnt */
        opts.addrs = (const unsigned long *) addrs;
        opts.syms = NULL;
        opts.cnt = INT_MAX;
        opts.cookies = NULL;

        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     NULL, &opts);
        saved_error = -errno;
        if (!ASSERT_ERR_PTR(link, "fail_6"))
                goto cleanup;

        if (!ASSERT_EQ(saved_error, -E2BIG, "fail_6_error"))
                goto cleanup;

cleanup:
        bpf_link__destroy(link);
        kprobe_multi__destroy(skel);
}

static void test_session_skel_api(void)
{
        struct kprobe_multi_session *skel = NULL;
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        LIBBPF_OPTS(bpf_test_run_opts, topts);
        struct bpf_link *link = NULL;
        int i, err, prog_fd;

        skel = kprobe_multi_session__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_multi_session__open_and_load"))
                return;

        skel->bss->pid = getpid();

        err = kprobe_multi_session__attach(skel);
        if (!ASSERT_OK(err, " kprobe_multi_session__attach"))
                goto cleanup;

        prog_fd = bpf_program__fd(skel->progs.trigger);
        err = bpf_prog_test_run_opts(prog_fd, &topts);
        ASSERT_OK(err, "test_run");
        ASSERT_EQ(topts.retval, 0, "test_run");

        /* bpf_fentry_test1-4 trigger return probe, result is 2 */
        for (i = 0; i < 4; i++)
                ASSERT_EQ(skel->bss->kprobe_session_result[i], 2, "kprobe_session_result");

        /* bpf_fentry_test5-8 trigger only entry probe, result is 1 */
        for (i = 4; i < 8; i++)
                ASSERT_EQ(skel->bss->kprobe_session_result[i], 1, "kprobe_session_result");

cleanup:
        bpf_link__destroy(link);
        kprobe_multi_session__destroy(skel);
}

static void test_session_cookie_skel_api(void)
{
        struct kprobe_multi_session_cookie *skel = NULL;
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        LIBBPF_OPTS(bpf_test_run_opts, topts);
        struct bpf_link *link = NULL;
        int err, prog_fd;

        skel = kprobe_multi_session_cookie__open_and_load();
        if (!ASSERT_OK_PTR(skel, "fentry_raw_skel_load"))
                return;

        skel->bss->pid = getpid();

        err = kprobe_multi_session_cookie__attach(skel);
        if (!ASSERT_OK(err, " kprobe_multi_wrapper__attach"))
                goto cleanup;

        prog_fd = bpf_program__fd(skel->progs.trigger);
        err = bpf_prog_test_run_opts(prog_fd, &topts);
        ASSERT_OK(err, "test_run");
        ASSERT_EQ(topts.retval, 0, "test_run");

        ASSERT_EQ(skel->bss->test_kprobe_1_result, 1, "test_kprobe_1_result");
        ASSERT_EQ(skel->bss->test_kprobe_2_result, 2, "test_kprobe_2_result");
        ASSERT_EQ(skel->bss->test_kprobe_3_result, 3, "test_kprobe_3_result");

cleanup:
        bpf_link__destroy(link);
        kprobe_multi_session_cookie__destroy(skel);
}

static void test_unique_match(void)
{
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        struct kprobe_multi *skel = NULL;
        struct bpf_link *link = NULL;

        skel = kprobe_multi__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_multi__open_and_load"))
                return;

        opts.unique_match = true;
        skel->bss->pid = getpid();
        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     "bpf_fentry_test*", &opts);
        if (!ASSERT_ERR_PTR(link, "bpf_program__attach_kprobe_multi_opts"))
                bpf_link__destroy(link);

        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_manual,
                                                     "bpf_fentry_test8*", &opts);
        if (ASSERT_OK_PTR(link, "bpf_program__attach_kprobe_multi_opts"))
                bpf_link__destroy(link);

        kprobe_multi__destroy(skel);
}

static void do_bench_test(struct kprobe_multi_empty *skel, struct bpf_kprobe_multi_opts *opts)
{
        long attach_start_ns, attach_end_ns;
        long detach_start_ns, detach_end_ns;
        double attach_delta, detach_delta;
        struct bpf_link *link = NULL;

        attach_start_ns = get_time_ns();
        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_kprobe_empty,
                                                     NULL, opts);
        attach_end_ns = get_time_ns();

        if (!ASSERT_OK_PTR(link, "bpf_program__attach_kprobe_multi_opts"))
                return;

        detach_start_ns = get_time_ns();
        bpf_link__destroy(link);
        detach_end_ns = get_time_ns();

        attach_delta = (attach_end_ns - attach_start_ns) / 1000000000.0;
        detach_delta = (detach_end_ns - detach_start_ns) / 1000000000.0;

        printf("%s: found %lu functions\n", __func__, opts->cnt);
        printf("%s: attached in %7.3lfs\n", __func__, attach_delta);
        printf("%s: detached in %7.3lfs\n", __func__, detach_delta);
}

static void test_kprobe_multi_bench_attach(bool kernel)
{
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        struct kprobe_multi_empty *skel = NULL;
        struct ksyms *ksyms = NULL;

        if (!ASSERT_OK(bpf_get_ksyms(&ksyms, kernel), "bpf_get_ksyms"))
                return;

        skel = kprobe_multi_empty__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_multi_empty__open_and_load"))
                goto cleanup;

        opts.syms = (const char **)ksyms->filtered_syms;
        opts.cnt = ksyms->filtered_cnt;

        do_bench_test(skel, &opts);

cleanup:
        kprobe_multi_empty__destroy(skel);
        free_kallsyms_local(ksyms);
}

static void test_kprobe_multi_bench_attach_addr(bool kernel)
{
        LIBBPF_OPTS(bpf_kprobe_multi_opts, opts);
        struct kprobe_multi_empty *skel = NULL;
        unsigned long *addrs = NULL;
        size_t cnt = 0;
        int err;

        err = bpf_get_addrs(&addrs, &cnt, kernel);
        if (err == -ENOENT) {
                test__skip();
                return;
        }

        if (!ASSERT_OK(err, "bpf_get_addrs"))
                return;

        skel = kprobe_multi_empty__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_multi_empty__open_and_load"))
                goto cleanup;

        opts.addrs = addrs;
        opts.cnt = cnt;

        do_bench_test(skel, &opts);

cleanup:
        kprobe_multi_empty__destroy(skel);
        free(addrs);
}

static void test_attach_override(void)
{
        struct kprobe_multi_override *skel = NULL;
        struct bpf_link *link = NULL;

        skel = kprobe_multi_override__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_multi_empty__open_and_load"))
                goto cleanup;

        /* The test_override calls bpf_override_return so it should fail
         * to attach to bpf_fentry_test1 function, which is not on error
         * injection list.
         */
        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_override,
                                                     "bpf_fentry_test1", NULL);
        if (!ASSERT_ERR_PTR(link, "override_attached_bpf_fentry_test1")) {
                bpf_link__destroy(link);
                goto cleanup;
        }

        /* The should_fail_bio function is on error injection list,
         * attach should succeed.
         */
        link = bpf_program__attach_kprobe_multi_opts(skel->progs.test_override,
                                                     "should_fail_bio", NULL);
        if (!ASSERT_OK_PTR(link, "override_attached_should_fail_bio"))
                goto cleanup;

        bpf_link__destroy(link);

cleanup:
        kprobe_multi_override__destroy(skel);
}

static void test_override(void)
{
        struct kprobe_multi_override *skel = NULL;
        int err;

        skel = kprobe_multi_override__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_multi_empty__open_and_load"))
                goto cleanup;

        skel->bss->pid = getpid();

        /* no override */
        err = prctl(0xffff, 0);
        ASSERT_EQ(err, -1, "err");

        /* kprobe.multi override */
        skel->links.test_override = bpf_program__attach_kprobe_multi_opts(skel->progs.test_override,
                                                SYS_PREFIX "sys_prctl", NULL);
        if (!ASSERT_OK_PTR(skel->links.test_override, "bpf_program__attach_kprobe_multi_opts"))
                goto cleanup;

        err = prctl(0xffff, 0);
        ASSERT_EQ(err, 123, "err");

        bpf_link__destroy(skel->links.test_override);
        skel->links.test_override = NULL;

        /* kprobe override */
        skel->links.test_kprobe_override = bpf_program__attach_kprobe(skel->progs.test_kprobe_override,
                                                        false, SYS_PREFIX "sys_prctl");
        if (!ASSERT_OK_PTR(skel->links.test_kprobe_override, "bpf_program__attach_kprobe"))
                goto cleanup;

        err = prctl(0xffff, 0);
        ASSERT_EQ(err, 123, "err");

cleanup:
        kprobe_multi_override__destroy(skel);
}

#ifdef __x86_64__
static void test_attach_write_ctx(void)
{
        struct kprobe_write_ctx *skel = NULL;
        struct bpf_link *link = NULL;

        skel = kprobe_write_ctx__open_and_load();
        if (!ASSERT_OK_PTR(skel, "kprobe_write_ctx__open_and_load"))
                return;

        link = bpf_program__attach_kprobe_opts(skel->progs.kprobe_multi_write_ctx,
                                                     "bpf_fentry_test1", NULL);
        if (!ASSERT_ERR_PTR(link, "bpf_program__attach_kprobe_opts"))
                bpf_link__destroy(link);

        kprobe_write_ctx__destroy(skel);
}
#else
static void test_attach_write_ctx(void)
{
        test__skip();
}
#endif

void serial_test_kprobe_multi_bench_attach(void)
{
        if (test__start_subtest("kernel"))
                test_kprobe_multi_bench_attach(true);
        if (test__start_subtest("modules"))
                test_kprobe_multi_bench_attach(false);
        if (test__start_subtest("kernel"))
                test_kprobe_multi_bench_attach_addr(true);
        if (test__start_subtest("modules"))
                test_kprobe_multi_bench_attach_addr(false);
}

void test_kprobe_multi_test(void)
{
        if (!ASSERT_OK(load_kallsyms(), "load_kallsyms"))
                return;

        if (test__start_subtest("skel_api"))
                test_skel_api();
        if (test__start_subtest("link_api_addrs"))
                test_link_api_syms();
        if (test__start_subtest("link_api_syms"))
                test_link_api_addrs();
        if (test__start_subtest("attach_api_pattern"))
                test_attach_api_pattern();
        if (test__start_subtest("attach_api_addrs"))
                test_attach_api_addrs();
        if (test__start_subtest("attach_api_syms"))
                test_attach_api_syms();
        if (test__start_subtest("attach_api_fails"))
                test_attach_api_fails();
        if (test__start_subtest("attach_override"))
                test_attach_override();
        if (test__start_subtest("override"))
                test_override();
        if (test__start_subtest("session"))
                test_session_skel_api();
        if (test__start_subtest("session_cookie"))
                test_session_cookie_skel_api();
        if (test__start_subtest("unique_match"))
                test_unique_match();
        if (test__start_subtest("attach_write_ctx"))
                test_attach_write_ctx();
        RUN_TESTS(kprobe_multi_verifier);
}