Home | History | Annotate | Line # | Download | only in kern
      1 /*	$NetBSD: kern_softint.c,v 1.77 2026/07/17 02:13:34 thorpej Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 2007, 2008, 2019, 2020 The NetBSD Foundation, Inc.
      5  * All rights reserved.
      6  *
      7  * This code is derived from software contributed to The NetBSD Foundation
      8  * by Andrew Doran.
      9  *
     10  * Redistribution and use in source and binary forms, with or without
     11  * modification, are permitted provided that the following conditions
     12  * are met:
     13  * 1. Redistributions of source code must retain the above copyright
     14  *    notice, this list of conditions and the following disclaimer.
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in the
     17  *    documentation and/or other materials provided with the distribution.
     18  *
     19  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     20  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     21  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     22  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     23  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     24  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     25  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     26  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     27  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     28  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     29  * POSSIBILITY OF SUCH DAMAGE.
     30  */
     31 
     32 /*
     33  * Generic software interrupt framework.
     34  *
     35  * Overview
     36  *
     37  *	The soft interrupt framework provides a mechanism to schedule a
     38  *	low priority callback that runs with thread context.  It allows
     39  *	for dynamic registration of software interrupts, and for fair
     40  *	queueing and prioritization of those interrupts.  The callbacks
     41  *	can be scheduled to run from nearly any point in the kernel: by
     42  *	code running with thread context, by code running from a
     43  *	hardware interrupt handler, and at any interrupt priority
     44  *	level.
     45  *
     46  * Priority levels
     47  *
     48  *	Since soft interrupt dispatch can be tied to the underlying
     49  *	architecture's interrupt dispatch code, it can be limited
     50  *	both by the capabilities of the hardware and the capabilities
     51  *	of the interrupt dispatch code itself.  The number of priority
     52  *	levels is restricted to four.  In order of priority (lowest to
     53  *	highest) the levels are: clock, bio, net, serial.
     54  *
     55  *	The names are symbolic and in isolation do not have any direct
     56  *	connection with a particular kind of device activity: they are
     57  *	only meant as a guide.
     58  *
     59  *	The four priority levels map directly to scheduler priority
     60  *	levels, and where the architecture implements 'fast' software
     61  *	interrupts, they also map onto interrupt priorities.  The
     62  *	interrupt priorities are intended to be hidden from machine
     63  *	independent code, which should use thread-safe mechanisms to
     64  *	synchronize with software interrupts (for example: mutexes).
     65  *
     66  * Capabilities
     67  *
     68  *	Software interrupts run with limited machine context.  In
     69  *	particular, they do not posess any address space context.  They
     70  *	should not try to operate on user space addresses, or to use
     71  *	virtual memory facilities other than those noted as interrupt
     72  *	safe.
     73  *
     74  *	Unlike hardware interrupts, software interrupts do have thread
     75  *	context.  They may block on synchronization objects, sleep, and
     76  *	resume execution at a later time.
     77  *
     78  *	Since software interrupts are a limited resource and run with
     79  *	higher priority than most other LWPs in the system, all
     80  *	block-and-resume activity by a software interrupt must be kept
     81  *	short to allow further processing at that level to continue.  By
     82  *	extension, code running with process context must take care to
     83  *	ensure that any lock that may be taken from a software interrupt
     84  *	can not be held for more than a short period of time.
     85  *
     86  *	The kernel does not allow software interrupts to use facilities
     87  *	or perform actions that may block for a significant amount of
     88  *	time.  This means that it's not valid for a software interrupt
     89  *	to sleep on condition variables	or wait for resources to become
     90  *	available (for example,	memory).
     91  *
     92  * Per-CPU operation
     93  *
     94  *	If a soft interrupt is triggered on a CPU, it can only be
     95  *	dispatched on the same CPU.  Each LWP dedicated to handling a
     96  *	soft interrupt is bound to its home CPU, so if the LWP blocks
     97  *	and needs to run again, it can only run there.  Nearly all data
     98  *	structures used to manage software interrupts are per-CPU.
     99  *
    100  *	The per-CPU requirement is intended to reduce "ping-pong" of
    101  *	cache lines between CPUs: lines occupied by data structures
    102  *	used to manage the soft interrupts, and lines occupied by data
    103  *	items being passed down to the soft interrupt.  As a positive
    104  *	side effect, this also means that the soft interrupt dispatch
    105  *	code does not need to to use spinlocks to synchronize.
    106  *
    107  * Generic implementation
    108  *
    109  *	A generic, low performance implementation is provided that
    110  *	works across all architectures, with no machine-dependent
    111  *	modifications needed.  This implementation uses the scheduler,
    112  *	and so has a number of restrictions:
    113  *
    114  *	1) The software interrupts are not currently preemptive, so
    115  *	must wait for the currently executing LWP to yield the CPU.
    116  *	This can introduce latency.
    117  *
    118  *	2) An expensive context switch is required for a software
    119  *	interrupt to be handled.
    120  *
    121  * 'Fast' software interrupts
    122  *
    123  *	If an architectures defines __HAVE_FAST_SOFTINTS, it implements
    124  *	the fast mechanism.  Threads running either in the kernel or in
    125  *	userspace will be interrupted, but will not be preempted.  When
    126  *	the soft interrupt completes execution, the interrupted LWP
    127  *	is resumed.  Interrupt dispatch code must provide the minimum
    128  *	level of context necessary for the soft interrupt to block and
    129  *	be resumed at a later time.  The machine-dependent dispatch
    130  *	path looks something like the following:
    131  *
    132  *	softintr()
    133  *	{
    134  *		go to IPL_HIGH if necessary for switch;
    135  *		save any necessary registers in a format that can be
    136  *		    restored by cpu_switchto if the softint blocks;
    137  *		arrange for cpu_switchto() to restore into the
    138  *		    trampoline function;
    139  *		identify LWP to handle this interrupt;
    140  *		switch to the LWP's stack;
    141  *		switch register stacks, if necessary;
    142  *		assign new value of curlwp;
    143  *		call MI softint_dispatch, passing old curlwp and IPL
    144  *		    to execute interrupt at;
    145  *		switch back to old stack;
    146  *		switch back to old register stack, if necessary;
    147  *		restore curlwp;
    148  *		return to interrupted LWP;
    149  *	}
    150  *
    151  *	If the soft interrupt blocks, a trampoline function is returned
    152  *	to in the context of the interrupted LWP, as arranged for by
    153  *	softint():
    154  *
    155  *	softint_ret()
    156  *	{
    157  *		unlock soft interrupt LWP;
    158  *		resume interrupt processing, likely returning to
    159  *		    interrupted LWP or dispatching another, different
    160  *		    interrupt;
    161  *	}
    162  *
    163  *	Once the soft interrupt has fired (and even if it has blocked),
    164  *	no further soft interrupts at that level will be triggered by
    165  *	MI code until the soft interrupt handler has ceased execution.
    166  *	If a soft interrupt handler blocks and is resumed, it resumes
    167  *	execution as a normal LWP (kthread) and gains VM context.  Only
    168  *	when it has completed and is ready to fire again will it
    169  *	interrupt other threads.
    170  */
    171 
    172 #include "opt_multiprocessor.h"
    173 
    174 #include <sys/cdefs.h>
    175 __KERNEL_RCSID(0, "$NetBSD: kern_softint.c,v 1.77 2026/07/17 02:13:34 thorpej Exp $");
    176 
    177 #include <sys/param.h>
    178 #include <sys/proc.h>
    179 #include <sys/intr.h>
    180 #include <sys/ipi.h>
    181 #include <sys/lock.h>
    182 #include <sys/mutex.h>
    183 #include <sys/kernel.h>
    184 #include <sys/kthread.h>
    185 #include <sys/evcnt.h>
    186 #include <sys/cpu.h>
    187 #include <sys/xcall.h>
    188 #include <sys/psref.h>
    189 #include <sys/sdt.h>
    190 
    191 #include <uvm/uvm_extern.h>
    192 
    193 /* This could overlap with signal info in struct lwp. */
    194 typedef struct softint {
    195 	SIMPLEQ_HEAD(, softhand) si_q;
    196 	struct lwp		*si_lwp;
    197 	struct cpu_info		*si_cpu;
    198 	uintptr_t		si_machdep;
    199 	struct evcnt		si_evcnt;
    200 	struct evcnt		si_evcnt_block;
    201 	volatile int		si_active;
    202 	int			si_ipl;
    203 	char			si_name[8];
    204 	char			si_name_block[8+6];
    205 } softint_t;
    206 
    207 typedef struct softhand {
    208 	SIMPLEQ_ENTRY(softhand)	sh_q;
    209 	void			(*sh_func)(void *);
    210 	void			*sh_arg;
    211 	softint_t		*sh_isr;
    212 	u_int			sh_flags;
    213 	u_int			sh_ipi_id;
    214 } softhand_t;
    215 
    216 typedef struct softcpu {
    217 	struct cpu_info		*sc_cpu;
    218 	softint_t		sc_int[SOFTINT_COUNT];
    219 	softhand_t		sc_hand[1];
    220 } softcpu_t;
    221 
    222 static void	softint_thread(void *);
    223 
    224 u_int		softint_bytes = 32768;
    225 u_int		softint_timing;
    226 static u_int	softint_max;
    227 static kmutex_t	softint_lock;
    228 
    229 SDT_PROBE_DEFINE4(sdt, kernel, softint, establish,
    230     "void *"/*sih*/,
    231     "void (*)(void *)"/*func*/,
    232     "void *"/*arg*/,
    233     "unsigned"/*flags*/);
    234 
    235 SDT_PROBE_DEFINE1(sdt, kernel, softint, disestablish,
    236     "void *"/*sih*/);
    237 
    238 SDT_PROBE_DEFINE2(sdt, kernel, softint, schedule,
    239     "void *"/*sih*/,
    240     "struct cpu_info *"/*ci*/);
    241 
    242 SDT_PROBE_DEFINE4(sdt, kernel, softint, entry,
    243     "void *"/*sih*/,
    244     "void (*)(void *)"/*func*/,
    245     "void *"/*arg*/,
    246     "unsigned"/*flags*/);
    247 
    248 SDT_PROBE_DEFINE4(sdt, kernel, softint, return,
    249     "void *"/*sih*/,
    250     "void (*)(void *)"/*func*/,
    251     "void *"/*arg*/,
    252     "unsigned"/*flags*/);
    253 
    254 /*
    255  * softint_init_isr:
    256  *
    257  *	Initialize a single interrupt level for a single CPU.
    258  */
    259 static void
    260 softint_init_isr(softcpu_t *sc, const char *desc, pri_t pri, u_int level,
    261     int ipl)
    262 {
    263 	struct cpu_info *ci;
    264 	softint_t *si;
    265 	int error;
    266 
    267 	si = &sc->sc_int[level];
    268 	ci = sc->sc_cpu;
    269 	si->si_cpu = ci;
    270 
    271 	SIMPLEQ_INIT(&si->si_q);
    272 
    273 	error = kthread_create(pri, KTHREAD_MPSAFE | KTHREAD_INTR |
    274 	    KTHREAD_IDLE, ci, softint_thread, si, &si->si_lwp,
    275 	    "soft%s/%u", desc, ci->ci_index);
    276 	if (error != 0)
    277 		panic("softint_init_isr: error %d", error);
    278 
    279 	snprintf(si->si_name, sizeof(si->si_name), "%s/%u", desc,
    280 	    ci->ci_index);
    281 	evcnt_attach_dynamic(&si->si_evcnt, EVCNT_TYPE_MISC, NULL,
    282 	   "softint", si->si_name);
    283 	snprintf(si->si_name_block, sizeof(si->si_name_block), "%s block/%u",
    284 	    desc, ci->ci_index);
    285 	evcnt_attach_dynamic(&si->si_evcnt_block, EVCNT_TYPE_MISC, NULL,
    286 	   "softint", si->si_name_block);
    287 
    288 	si->si_ipl = ipl;
    289 	si->si_lwp->l_private = si;
    290 	softint_init_md(si->si_lwp, level, &si->si_machdep);
    291 }
    292 
    293 /*
    294  * softint_init:
    295  *
    296  *	Initialize per-CPU data structures.  Called from mi_cpu_attach().
    297  */
    298 void
    299 softint_init(struct cpu_info *ci)
    300 {
    301 	static struct cpu_info *first;
    302 	softcpu_t *sc, *scfirst;
    303 	softhand_t *sh, *shmax;
    304 
    305 	if (first == NULL) {
    306 		/* Boot CPU. */
    307 		first = ci;
    308 		mutex_init(&softint_lock, MUTEX_DEFAULT, IPL_NONE);
    309 		softint_bytes = round_page(softint_bytes);
    310 		softint_max = (softint_bytes - sizeof(softcpu_t)) /
    311 		    sizeof(softhand_t);
    312 	}
    313 
    314 	/* Use uvm_km(9) for persistent, page-aligned allocation. */
    315 	sc = (softcpu_t *)uvm_km_alloc(kernel_map, softint_bytes, 0,
    316 	    UVM_KMF_WIRED | UVM_KMF_ZERO);
    317 	if (sc == NULL)
    318 		panic("softint_init_cpu: cannot allocate memory");
    319 
    320 	ci->ci_data.cpu_softcpu = sc;
    321 	ci->ci_data.cpu_softints = 0;
    322 	sc->sc_cpu = ci;
    323 
    324 	softint_init_isr(sc, "net", PRI_SOFTNET, SOFTINT_NET,
    325 	    IPL_SOFTNET);
    326 	softint_init_isr(sc, "bio", PRI_SOFTBIO, SOFTINT_BIO,
    327 	    IPL_SOFTBIO);
    328 	softint_init_isr(sc, "clk", PRI_SOFTCLOCK, SOFTINT_CLOCK,
    329 	    IPL_SOFTCLOCK);
    330 	softint_init_isr(sc, "ser", PRI_SOFTSERIAL, SOFTINT_SERIAL,
    331 	    IPL_SOFTSERIAL);
    332 
    333 	if (first != ci) {
    334 		mutex_enter(&softint_lock);
    335 		scfirst = first->ci_data.cpu_softcpu;
    336 		sh = sc->sc_hand;
    337 		memcpy(sh, scfirst->sc_hand, sizeof(*sh) * softint_max);
    338 		/* Update pointers for this CPU. */
    339 		for (shmax = sh + softint_max; sh < shmax; sh++) {
    340 			if (sh->sh_func == NULL)
    341 				continue;
    342 			sh->sh_isr =
    343 			    &sc->sc_int[sh->sh_flags & SOFTINT_LVLMASK];
    344 		}
    345 		mutex_exit(&softint_lock);
    346 	}
    347 }
    348 
    349 /*
    350  * softint_establish:
    351  *
    352  *	Register a software interrupt handler.
    353  */
    354 void *
    355 softint_establish(u_int flags, void (*func)(void *), void *arg)
    356 {
    357 #ifdef MULTIPROCESSOR
    358 	CPU_INFO_ITERATOR cii;
    359 	struct cpu_info *ci;
    360 #endif
    361 	softcpu_t *sc;
    362 	softhand_t *sh;
    363 	u_int level, index;
    364 	u_int ipi_id = 0;
    365 	void *sih;
    366 
    367 	level = (flags & SOFTINT_LVLMASK);
    368 	KASSERT(level < SOFTINT_COUNT);
    369 	KASSERT((flags & SOFTINT_IMPMASK) == 0);
    370 
    371 	mutex_enter(&softint_lock);
    372 
    373 	/* Find a free slot. */
    374 	sc = curcpu()->ci_data.cpu_softcpu;
    375 	for (index = 1; index < softint_max; index++) {
    376 		if (sc->sc_hand[index].sh_func == NULL)
    377 			break;
    378 	}
    379 	if (index == softint_max) {
    380 		mutex_exit(&softint_lock);
    381 		printf("WARNING: softint_establish: table full, "
    382 		    "increase softint_bytes\n");
    383 		return NULL;
    384 	}
    385 	sih = (void *)((uint8_t *)&sc->sc_hand[index] - (uint8_t *)sc);
    386 
    387 #ifdef MULTIPROCESSOR
    388 	if (flags & SOFTINT_RCPU) {
    389 		if ((ipi_id = ipi_register(softint_schedule, sih)) == 0) {
    390 			mutex_exit(&softint_lock);
    391 			return NULL;
    392 		}
    393 	}
    394 #endif
    395 
    396 	/* Set up the handler on each CPU. */
    397 	if (ncpu < 2) {
    398 		/* XXX hack for machines with no CPU_INFO_FOREACH() early on */
    399 		sc = curcpu()->ci_data.cpu_softcpu;
    400 		sh = &sc->sc_hand[index];
    401 		sh->sh_isr = &sc->sc_int[level];
    402 		sh->sh_func = func;
    403 		sh->sh_arg = arg;
    404 		sh->sh_flags = flags;
    405 		sh->sh_ipi_id = ipi_id;
    406 	}
    407 #ifdef MULTIPROCESSOR
    408 	else for (CPU_INFO_FOREACH(cii, ci)) {
    409 		sc = ci->ci_data.cpu_softcpu;
    410 		sh = &sc->sc_hand[index];
    411 		sh->sh_isr = &sc->sc_int[level];
    412 		sh->sh_func = func;
    413 		sh->sh_arg = arg;
    414 		sh->sh_flags = flags;
    415 		sh->sh_ipi_id = ipi_id;
    416 	}
    417 #endif
    418 	mutex_exit(&softint_lock);
    419 
    420 	SDT_PROBE4(sdt, kernel, softint, establish,  sih, func, arg, flags);
    421 
    422 	return sih;
    423 }
    424 
    425 /*
    426  * softint_disestablish:
    427  *
    428  *	Unregister a software interrupt handler.  The soft interrupt could
    429  *	still be active at this point, but the caller commits not to try
    430  *	and trigger it again once this call is made.  The caller must not
    431  *	hold any locks that could be taken from soft interrupt context,
    432  *	because we will wait for the softint to complete if it's still
    433  *	running.
    434  */
    435 void
    436 softint_disestablish(void *arg)
    437 {
    438 	CPU_INFO_ITERATOR cii;
    439 	struct cpu_info *ci;
    440 	softcpu_t *sc;
    441 	softhand_t *sh;
    442 	uintptr_t offset;
    443 
    444 	offset = (uintptr_t)arg;
    445 	KASSERT(offset != 0);
    446 	KASSERTMSG(offset < softint_bytes, "%"PRIuPTR" %u",
    447 	    offset, softint_bytes);
    448 
    449 	/*
    450 	 * Unregister IPI handler if there is any.  Note: there is no need
    451 	 * to disable preemption here - ID is stable.
    452 	 */
    453 	sc = curcpu()->ci_data.cpu_softcpu;
    454 	sh = (softhand_t *)((uint8_t *)sc + offset);
    455 #ifdef MULTIPROCESSOR
    456 	if (sh->sh_ipi_id) {
    457 		ipi_unregister(sh->sh_ipi_id);
    458 	}
    459 #endif
    460 
    461 	/*
    462 	 * Run a dummy softint at the same level on all CPUs and wait for
    463 	 * completion, to make sure this softint is no longer running
    464 	 * anywhere.
    465 	 */
    466 	xc_barrier(XC_HIGHPRI_IPL(sh->sh_isr->si_ipl));
    467 
    468 	/*
    469 	 * Notify dtrace probe when the old softint can't be running
    470 	 * any more, but before it can be recycled for a new softint.
    471 	 */
    472 	SDT_PROBE1(sdt, kernel, softint, disestablish,  arg);
    473 
    474 	/* Clear the handler on each CPU. */
    475 	mutex_enter(&softint_lock);
    476 	for (CPU_INFO_FOREACH(cii, ci)) {
    477 		sc = ci->ci_data.cpu_softcpu;
    478 		sh = (softhand_t *)((uint8_t *)sc + offset);
    479 		KASSERT(sh->sh_func != NULL);
    480 		sh->sh_func = NULL;
    481 	}
    482 	mutex_exit(&softint_lock);
    483 }
    484 
    485 /*
    486  * softint_schedule:
    487  *
    488  *	Trigger a software interrupt.  Must be called from a hardware
    489  *	interrupt handler, or with preemption disabled (since we are
    490  *	using the value of curcpu()).
    491  */
    492 void
    493 softint_schedule(void *arg)
    494 {
    495 	softhand_t *sh;
    496 	softint_t *si;
    497 	uintptr_t offset;
    498 	int s;
    499 
    500 	SDT_PROBE2(sdt, kernel, softint, schedule,  arg, /*ci*/NULL);
    501 
    502 	/*
    503 	 * If this assert fires, rather than disabling preemption explicitly
    504 	 * to make it stop, consider that you are probably using a softint
    505 	 * when you don't need to.
    506 	 */
    507 	KASSERT(kpreempt_disabled());
    508 
    509 	/* Find the handler record for this CPU. */
    510 	offset = (uintptr_t)arg;
    511 	KASSERT(offset != 0);
    512 	KASSERTMSG(offset < softint_bytes, "%"PRIuPTR" %u",
    513 	    offset, softint_bytes);
    514 	sh = (softhand_t *)((uint8_t *)curcpu()->ci_data.cpu_softcpu + offset);
    515 
    516 	/* If it's already pending there's nothing to do. */
    517 	if ((sh->sh_flags & SOFTINT_PENDING) != 0) {
    518 		return;
    519 	}
    520 
    521 	/*
    522 	 * Enqueue the handler into the LWP's pending list.
    523 	 * If the LWP is completely idle, then make it run.
    524 	 */
    525 	s = splhigh();
    526 	if ((sh->sh_flags & SOFTINT_PENDING) == 0) {
    527 		si = sh->sh_isr;
    528 		sh->sh_flags |= SOFTINT_PENDING;
    529 		SIMPLEQ_INSERT_TAIL(&si->si_q, sh, sh_q);
    530 		if (si->si_active == 0) {
    531 			si->si_active = 1;
    532 			softint_trigger(si->si_machdep);
    533 		}
    534 	}
    535 	splx(s);
    536 }
    537 
    538 /*
    539  * softint_schedule_cpu:
    540  *
    541  *	Trigger a software interrupt on a target CPU.  This invokes
    542  *	softint_schedule() for the local CPU or send an IPI to invoke
    543  *	this routine on the remote CPU.  Preemption must be disabled.
    544  */
    545 void
    546 softint_schedule_cpu(void *arg, struct cpu_info *ci)
    547 {
    548 	KASSERT(kpreempt_disabled());
    549 
    550 #ifdef MULTIPROCESSOR
    551 	if (curcpu() != ci) {
    552 		const softcpu_t *sc = ci->ci_data.cpu_softcpu;
    553 		const uintptr_t offset = (uintptr_t)arg;
    554 		const softhand_t *sh;
    555 
    556 		SDT_PROBE2(sdt, kernel, softint, schedule,  arg, ci);
    557 		sh = (const softhand_t *)((const uint8_t *)sc + offset);
    558 		KASSERT((sh->sh_flags & SOFTINT_RCPU) != 0);
    559 		ipi_trigger(sh->sh_ipi_id, ci);
    560 		return;
    561 	}
    562 #else
    563 	KASSERT(ci == curcpu());
    564 #endif
    565 
    566 	/* Just a local CPU. */
    567 	softint_schedule(arg);
    568 }
    569 
    570 /*
    571  * softint_execute:
    572  *
    573  *	Invoke handlers for the specified soft interrupt.
    574  *	Must be entered at splhigh.  Will drop the priority
    575  *	to the level specified, but returns back at splhigh.
    576  */
    577 static inline void
    578 softint_execute(lwp_t *l, int s)
    579 {
    580 	softint_t *si = l->l_private;
    581 	softhand_t *sh;
    582 
    583 	KASSERT(si->si_lwp == curlwp);
    584 	KASSERT(si->si_cpu == curcpu());
    585 	KASSERT(si->si_lwp->l_wchan == NULL);
    586 	KASSERT(si->si_active);
    587 	KASSERTMSG(l->l_nopreempt == 0, "lwp %p nopreempt %d",
    588 	    l, l->l_nopreempt);
    589 
    590 	/*
    591 	 * Note: due to priority inheritance we may have interrupted a
    592 	 * higher priority LWP.  Since the soft interrupt must be quick
    593 	 * and is non-preemptable, we don't bother yielding.
    594 	 */
    595 
    596 	while (!SIMPLEQ_EMPTY(&si->si_q)) {
    597 		/*
    598 		 * Pick the longest waiting handler to run.  We block
    599 		 * interrupts but do not lock in order to do this, as
    600 		 * we are protecting against the local CPU only.
    601 		 */
    602 		sh = SIMPLEQ_FIRST(&si->si_q);
    603 		SIMPLEQ_REMOVE_HEAD(&si->si_q, sh_q);
    604 		KASSERT((sh->sh_flags & SOFTINT_PENDING) != 0);
    605 		sh->sh_flags ^= SOFTINT_PENDING;
    606 		splx(s);
    607 
    608 		/* Run the handler. */
    609 		SDT_PROBE4(sdt, kernel, softint, entry,
    610 		    ((const char *)sh -
    611 			(const char *)curcpu()->ci_data.cpu_softcpu),
    612 		    sh->sh_func, sh->sh_arg, sh->sh_flags);
    613 		if (__predict_true((sh->sh_flags & SOFTINT_MPSAFE) != 0)) {
    614 			(*sh->sh_func)(sh->sh_arg);
    615 		} else {
    616 			KERNEL_LOCK(1, l);
    617 			(*sh->sh_func)(sh->sh_arg);
    618 			KERNEL_UNLOCK_ONE(l);
    619 		}
    620 		SDT_PROBE4(sdt, kernel, softint, return,
    621 		    ((const char *)sh -
    622 			(const char *)curcpu()->ci_data.cpu_softcpu),
    623 		    sh->sh_func, sh->sh_arg, sh->sh_flags);
    624 
    625 		/* Diagnostic: check that spin-locks have not leaked. */
    626 		KASSERTMSG(curcpu()->ci_mtx_count == 0,
    627 		    "%s: ci_mtx_count (%d) != 0, sh_func %p\n",
    628 		    __func__, curcpu()->ci_mtx_count, sh->sh_func);
    629 		/* Diagnostic: check that psrefs have not leaked. */
    630 		KASSERTMSG(l->l_psrefs == 0, "%s: l_psrefs=%d, sh_func=%p\n",
    631 		    __func__, l->l_psrefs, sh->sh_func);
    632 		/* Diagnostic: check that biglocks have not leaked. */
    633 		KASSERTMSG(l->l_blcnt == 0,
    634 		    "%s: sh_func=%p leaked %d biglocks",
    635 		    __func__, sh->sh_func, curlwp->l_blcnt);
    636 		/* Diagnostic: check that LWP nopreempt remains zero. */
    637 		KASSERTMSG(l->l_nopreempt == 0,
    638 		    "%s: lwp %p nopreempt %d func %p",
    639 		    __func__, l, l->l_nopreempt, sh->sh_func);
    640 
    641 		(void)splhigh();
    642 	}
    643 
    644 	PSREF_DEBUG_BARRIER();
    645 
    646 	CPU_COUNT(CPU_COUNT_NSOFT, 1);
    647 
    648 	KASSERT(si->si_cpu == curcpu());
    649 	KASSERT(si->si_lwp->l_wchan == NULL);
    650 	KASSERT(si->si_active);
    651 	si->si_evcnt.ev_count++;
    652 	si->si_active = 0;
    653 }
    654 
    655 /*
    656  * softint_block:
    657  *
    658  *	Update statistics when the soft interrupt blocks.
    659  */
    660 void
    661 softint_block(lwp_t *l)
    662 {
    663 	softint_t *si = l->l_private;
    664 
    665 	KASSERT((l->l_pflag & LP_INTR) != 0);
    666 	si->si_evcnt_block.ev_count++;
    667 }
    668 
    669 #ifndef __HAVE_FAST_SOFTINTS
    670 
    671 #ifdef __HAVE_PREEMPTION
    672 #error __HAVE_PREEMPTION requires __HAVE_FAST_SOFTINTS
    673 #endif
    674 
    675 /*
    676  * softint_init_md:
    677  *
    678  *	Slow path: perform machine-dependent initialization.
    679  */
    680 void
    681 softint_init_md(lwp_t *l, u_int level, uintptr_t *machdep)
    682 {
    683 	struct proc *p;
    684 	softint_t *si;
    685 
    686 	*machdep = (1 << level);
    687 	si = l->l_private;
    688 	p = l->l_proc;
    689 
    690 	mutex_enter(p->p_lock);
    691 	lwp_lock(l);
    692 	/* Cheat and make the KASSERT in softint_thread() happy. */
    693 	si->si_active = 1;
    694 	setrunnable(l);
    695 	/* LWP now unlocked */
    696 	mutex_exit(p->p_lock);
    697 }
    698 
    699 /*
    700  * softint_trigger:
    701  *
    702  *	Slow path: cause a soft interrupt handler to begin executing.
    703  *	Called at IPL_HIGH.
    704  */
    705 void
    706 softint_trigger(uintptr_t machdep)
    707 {
    708 	struct cpu_info *ci;
    709 	lwp_t *l;
    710 
    711 	ci = curcpu();
    712 	ci->ci_data.cpu_softints |= machdep;
    713 	l = ci->ci_onproc;
    714 
    715 	/*
    716 	 * Arrange for mi_switch() to be called.  If called from interrupt
    717 	 * mode, we don't know if curlwp is executing in kernel or user, so
    718 	 * post an AST and have it take a trip through userret().  If not in
    719 	 * interrupt mode, curlwp is running in kernel and will notice the
    720 	 * resched soon enough; avoid the AST.
    721 	 */
    722 	if (l == ci->ci_data.cpu_idlelwp) {
    723 		atomic_or_uint(&ci->ci_want_resched,
    724 		    RESCHED_IDLE | RESCHED_UPREEMPT);
    725 	} else {
    726 		atomic_or_uint(&ci->ci_want_resched, RESCHED_UPREEMPT);
    727 		if (cpu_intr_p()) {
    728 			cpu_signotify(l);
    729 		}
    730 	}
    731 }
    732 
    733 /*
    734  * softint_thread:
    735  *
    736  *	Slow path: MI software interrupt dispatch.
    737  */
    738 void
    739 softint_thread(void *cookie)
    740 {
    741 	softint_t *si;
    742 	lwp_t *l;
    743 	int s;
    744 
    745 	l = curlwp;
    746 	si = l->l_private;
    747 
    748 	for (;;) {
    749 		/* Clear pending status and run it. */
    750 		s = splhigh();
    751 		l->l_cpu->ci_data.cpu_softints &= ~si->si_machdep;
    752 		softint_execute(l, s);
    753 		splx(s);
    754 
    755 		/* Interrupts allowed to run again before switching. */
    756 		lwp_lock(l);
    757 		l->l_stat = LSIDL;
    758 		spc_lock(l->l_cpu);
    759 		mi_switch(l);
    760 	}
    761 }
    762 
    763 /*
    764  * softint_picklwp:
    765  *
    766  *	Slow path: called from mi_switch() to pick the highest priority
    767  *	soft interrupt LWP that needs to run.
    768  */
    769 lwp_t *
    770 softint_picklwp(void)
    771 {
    772 	struct cpu_info *ci;
    773 	u_int mask;
    774 	softint_t *si;
    775 	lwp_t *l;
    776 
    777 	ci = curcpu();
    778 	si = ((softcpu_t *)ci->ci_data.cpu_softcpu)->sc_int;
    779 	mask = ci->ci_data.cpu_softints;
    780 
    781 	if ((mask & (1 << SOFTINT_SERIAL)) != 0) {
    782 		l = si[SOFTINT_SERIAL].si_lwp;
    783 	} else if ((mask & (1 << SOFTINT_NET)) != 0) {
    784 		l = si[SOFTINT_NET].si_lwp;
    785 	} else if ((mask & (1 << SOFTINT_BIO)) != 0) {
    786 		l = si[SOFTINT_BIO].si_lwp;
    787 	} else if ((mask & (1 << SOFTINT_CLOCK)) != 0) {
    788 		l = si[SOFTINT_CLOCK].si_lwp;
    789 	} else {
    790 		panic("softint_picklwp");
    791 	}
    792 
    793 	return l;
    794 }
    795 
    796 #else	/*  !__HAVE_FAST_SOFTINTS */
    797 
    798 /*
    799  * softint_thread:
    800  *
    801  *	Fast path: the LWP is switched to without restoring any state,
    802  *	so we should not arrive here - there is a direct handoff between
    803  *	the interrupt stub and softint_dispatch().
    804  */
    805 void
    806 softint_thread(void *cookie)
    807 {
    808 
    809 	panic("softint_thread");
    810 }
    811 
    812 /*
    813  * softint_dispatch:
    814  *
    815  *	Fast path: entry point from machine-dependent code.
    816  */
    817 void
    818 softint_dispatch(lwp_t *pinned, int s)
    819 {
    820 	struct bintime now;
    821 	u_int timing;
    822 	lwp_t *l;
    823 
    824 #ifdef DIAGNOSTIC
    825 	if ((pinned->l_pflag & LP_RUNNING) == 0 || curlwp->l_stat != LSIDL) {
    826 		struct lwp *onproc = curcpu()->ci_onproc;
    827 		int s2 = splhigh();
    828 		printf("curcpu=%d, spl=%d curspl=%d\n"
    829 			"onproc=%p => l_stat=%d l_flag=%08x l_cpu=%d\n"
    830 			"curlwp=%p => l_stat=%d l_flag=%08x l_cpu=%d\n"
    831 			"pinned=%p => l_stat=%d l_flag=%08x l_cpu=%d\n",
    832 			cpu_index(curcpu()), s, s2, onproc, onproc->l_stat,
    833 			onproc->l_flag, cpu_index(onproc->l_cpu), curlwp,
    834 			curlwp->l_stat, curlwp->l_flag,
    835 			cpu_index(curlwp->l_cpu), pinned, pinned->l_stat,
    836 			pinned->l_flag, cpu_index(pinned->l_cpu));
    837 		splx(s2);
    838 		panic("softint screwup");
    839 	}
    840 #endif
    841 
    842 	/*
    843 	 * Note the interrupted LWP, and mark the current LWP as running
    844 	 * before proceeding.  Although this must as a rule be done with
    845 	 * the LWP locked, at this point no external agents will want to
    846 	 * modify the interrupt LWP's state.
    847 	 */
    848 	timing = softint_timing;
    849 	l = curlwp;
    850 	l->l_switchto = pinned;
    851 	l->l_stat = LSONPROC;
    852 
    853 	/*
    854 	 * Dispatch the interrupt.  If softints are being timed, charge
    855 	 * for it.
    856 	 */
    857 	if (timing) {
    858 		binuptime(&l->l_stime);
    859 		membar_producer();	/* for calcru */
    860 		l->l_pflag |= LP_TIMEINTR;
    861 	}
    862 	l->l_pflag |= LP_RUNNING;
    863 	softint_execute(l, s);
    864 	if (timing) {
    865 		binuptime(&now);
    866 		updatertime(l, &now);
    867 		l->l_pflag &= ~LP_TIMEINTR;
    868 	}
    869 
    870 	/*
    871 	 * If we blocked while handling the interrupt, the pinned LWP is
    872 	 * gone and we are now running as a kthread, so find another LWP to
    873 	 * run.  softint_dispatch() won't be reentered until the priority is
    874 	 * finally dropped to IPL_NONE on entry to the next LWP on this CPU.
    875 	 */
    876 	l->l_stat = LSIDL;
    877 	if (l->l_switchto == NULL) {
    878 		lwp_lock(l);
    879 		spc_lock(l->l_cpu);
    880 		mi_switch(l);
    881 		/* NOTREACHED */
    882 	}
    883 	l->l_switchto = NULL;
    884 	l->l_pflag &= ~LP_RUNNING;
    885 }
    886 
    887 #endif	/* !__HAVE_FAST_SOFTINTS */
    888