Skip to contentSkip to conversation

0df1a55afa: WARNING:at_kernel/bpf/verifier.c:#do_misc_fixups

linux-next:master kernel test robot 1 participant 1 message Jul 16, 2025 BPF

lore
Share & tools
lore

kernel test robot

author build bot
#0 lore raw

Hello,

kernel test robot noticed "WARNING:at_kernel/bpf/verifier.c:#do_misc_fixups" on:

commit: 0df1a55afa832f463f9ad68ddc5de92230f1bc8a ("bpf: Warn on internal verifier errors")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

[test failed on fix commit 032547272eb0884470165e6a8fd73b80688e847f]

in testcase: boot

config: i386-randconfig-061-20250713
compiler: gcc-12
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G

(please refer to attached dmesg/kmsg for entire log/backtrace)

+--------------------------------------------------+------------+------------+
|                                                  | 26d0e53246 | 0df1a55afa |
+--------------------------------------------------+------------+------------+
| WARNING:at_kernel/bpf/verifier.c:#do_misc_fixups | 0          | 12         |
| EIP:do_misc_fixups                               | 0          | 12         |
+--------------------------------------------------+------------+------------+

If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <[email protected]>
| Closes: https://lore.kernel.org/oe-lkp/[email protected]

[    2.211140][    T1] ------------[ cut here ]------------
[    2.211550][    T1] verifier bug: not inlined functions bpf_probe_read_kernel#113 is missing func(1)
[ 2.212237][ T1] WARNING: CPU: 0 PID: 1 at kernel/bpf/verifier.c:22761 do_misc_fixups (kernel/bpf/verifier.c:22761 (discriminator 5)) 
[    2.212914][    T1] Modules linked in:
[    2.213195][    T1] CPU: 0 UID: 0 PID: 1 Comm: swapper Tainted: G                T   6.16.0-rc3-00236-g0df1a55afa83 #1 NONE  1dad33d35aae1f1fd176527507541458de5ac423
[    2.214260][    T1] Tainted: [T]=RANDSTRUCT
[ 2.214566][ T1] EIP: do_misc_fixups (kernel/bpf/verifier.c:22761 (discriminator 5)) 
[ 2.214935][ T1] Code: 89 bd fc fe ff ff b0 56 e9 bb ed ff ff 8b 5e 04 c6 05 fe 6c 42 c4 01 89 d8 e8 28 88 02 00 53 50 68 70 29 9e c3 e8 fc e7 ed ff <0f> 0b 83 c4 0c e9 ba fe ff ff 8b 85 ec fe ff ff 83 e8 19 83 f8 01
All code
========
   0:	89 bd fc fe ff ff    	mov    %edi,-0x104(%rbp)
   6:	b0 56                	mov    $0x56,%al
   8:	e9 bb ed ff ff       	jmp    0xffffffffffffedc8
   d:	8b 5e 04             	mov    0x4(%rsi),%ebx
  10:	c6 05 fe 6c 42 c4 01 	movb   $0x1,-0x3bbd9302(%rip)        # 0xffffffffc4426d15
  17:	89 d8                	mov    %ebx,%eax
  19:	e8 28 88 02 00       	call   0x28846
  1e:	53                   	push   %rbx
  1f:	50                   	push   %rax
  20:	68 70 29 9e c3       	push   $0xffffffffc39e2970
  25:	e8 fc e7 ed ff       	call   0xffffffffffede826
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	83 c4 0c             	add    $0xc,%esp
  2f:	e9 ba fe ff ff       	jmp    0xfffffffffffffeee
  34:	8b 85 ec fe ff ff    	mov    -0x114(%rbp),%eax
  3a:	83 e8 19             	sub    $0x19,%eax
  3d:	83 f8 01             	cmp    $0x1,%eax

Code starting with the faulting instruction
===========================================

   0:	0f 0b                	ud2
   2:	83 c4 0c             	add    $0xc,%esp
   5:	e9 ba fe ff ff       	jmp    0xfffffffffffffec4
   a:	8b 85 ec fe ff ff    	mov    -0x114(%rbp),%eax
  10:	83 e8 19             	sub    $0x19,%eax
  13:	83 f8 01             	cmp    $0x1,%eax
[    2.216327][    T1] EAX: 00000050 EBX: 00000071 ECX: 00000000 EDX: 00000000
[    2.216830][    T1] ESI: ef95c058 EDI: ef95c000 EBP: c5d19bdc ESP: c5d19abc
[    2.217332][    T1] DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010296
[    2.217883][    T1] CR0: 80050033 CR2: ffdaa000 CR3: 04568000 CR4: 000406d0
[    2.218388][    T1] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[    2.218897][    T1] DR6: fffe0ff0 DR7: 00000400
[    2.219229][    T1] Call Trace:
[ 2.219463][ T1] ? lock_acquire (kernel/locking/lockdep.c:473 kernel/locking/lockdep.c:5873) 
[ 2.219792][ T1] ? lock_acquire (kernel/locking/lockdep.c:473 kernel/locking/lockdep.c:5873) 
[ 2.220118][ T1] ? find_held_lock (kernel/locking/lockdep.c:5353) 
[ 2.220449][ T1] ? free_to_partial_list+0x12b/0x1b0 
[ 2.220904][ T1] ? __lock_release+0x58/0x180 
[ 2.221290][ T1] ? verifier_remove_insns (kernel/bpf/verifier.c:20889) 
[ 2.221727][ T1] bpf_check (kernel/bpf/verifier.c:24658) 
[ 2.222043][ T1] bpf_prog_load (kernel/bpf/syscall.c:2972) 
[ 2.222379][ T1] __sys_bpf (kernel/bpf/syscall.c:5978) 
[ 2.222681][ T1] ? kern_sys_bpf (kernel/bpf/syscall.c:6116 kernel/bpf/syscall.c:6164) 
[ 2.223010][ T1] kern_sys_bpf (kernel/bpf/syscall.c:6116 kernel/bpf/syscall.c:6164) 
[ 2.223320][ T1] ? kern_sys_bpf (kernel/bpf/syscall.c:6116 kernel/bpf/syscall.c:6164) 
[ 2.223640][ T1] bpf_load_and_run+0x116/0x250 
[ 2.224068][ T1] ? __kmalloc_cache_noprof (mm/slub.c:4354) 
[ 2.224448][ T1] ? crypto_kfunc_init (kernel/bpf/preload/bpf_preload_kern.c:75) 
[ 2.225339][ T1] ? crypto_kfunc_init (kernel/bpf/preload/bpf_preload_kern.c:75) 
[ 2.225698][ T1] load_skel (kernel/bpf/preload/bpf_preload_kern.c:46) 
[ 2.225996][ T1] ? crypto_kfunc_init (kernel/bpf/preload/bpf_preload_kern.c:75) 
[ 2.226345][ T1] load (kernel/bpf/preload/bpf_preload_kern.c:79) 
[ 2.226596][ T1] do_one_initcall (init/main.c:1274) 
[ 2.226933][ T1] do_initcalls (init/main.c:1335 init/main.c:1352) 
[ 2.227254][ T1] ? rest_init (init/main.c:1466) 
[ 2.227555][ T1] kernel_init_freeable (init/main.c:1588) 
[ 2.227918][ T1] kernel_init (init/main.c:1476) 
[ 2.228224][ T1] ret_from_fork (arch/x86/kernel/process.c:154) 
[ 2.228558][ T1] ? rest_init (init/main.c:1466) 
[ 2.228858][ T1] ? rest_init (init/main.c:1466) 
[ 2.229159][ T1] ret_from_fork_asm (arch/x86/entry/entry_32.S:737) 
[ 2.229528][ T1] entry_INT80_32 (arch/x86/entry/entry_32.S:945) 
[    2.229864][    T1] irq event stamp: 1526545
[ 2.230176][ T1] hardirqs last enabled at (1526553): __up_console_sem (arch/x86/include/asm/irqflags.h:26 (discriminator 1) arch/x86/include/asm/irqflags.h:109 (discriminator 1) arch/x86/include/asm/irqflags.h:151 (discriminator 1) kernel/printk/printk.c:344 (discriminator 1)) 
[ 2.230809][ T1] hardirqs last disabled at (1526560): __up_console_sem (kernel/printk/printk.c:342 (discriminator 1)) 
[ 2.231440][ T1] softirqs last enabled at (1526510): handle_softirqs (kernel/softirq.c:426 kernel/softirq.c:607) 
[ 2.232094][ T1] softirqs last disabled at (1526499): __do_softirq (kernel/softirq.c:614) 
[    2.232689][    T1] ---[ end trace 0000000000000000 ]---

The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20250716/[email protected]

Signature · 2 lines
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki