subr_lockdebug.c revision 1.32 1 1.32 yamt /* $NetBSD: subr_lockdebug.c,v 1.32 2008/05/03 06:24:55 yamt Exp $ */
2 1.2 ad
3 1.2 ad /*-
4 1.28 ad * Copyright (c) 2006, 2007, 2008 The NetBSD Foundation, Inc.
5 1.2 ad * All rights reserved.
6 1.2 ad *
7 1.2 ad * This code is derived from software contributed to The NetBSD Foundation
8 1.2 ad * by Andrew Doran.
9 1.2 ad *
10 1.2 ad * Redistribution and use in source and binary forms, with or without
11 1.2 ad * modification, are permitted provided that the following conditions
12 1.2 ad * are met:
13 1.2 ad * 1. Redistributions of source code must retain the above copyright
14 1.2 ad * notice, this list of conditions and the following disclaimer.
15 1.2 ad * 2. Redistributions in binary form must reproduce the above copyright
16 1.2 ad * notice, this list of conditions and the following disclaimer in the
17 1.2 ad * documentation and/or other materials provided with the distribution.
18 1.2 ad *
19 1.2 ad * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 1.2 ad * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 1.2 ad * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 1.2 ad * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 1.2 ad * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 1.2 ad * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 1.2 ad * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 1.2 ad * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 1.2 ad * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 1.2 ad * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 1.2 ad * POSSIBILITY OF SUCH DAMAGE.
30 1.2 ad */
31 1.2 ad
32 1.2 ad /*
33 1.11 ad * Basic lock debugging code shared among lock primitives.
34 1.2 ad */
35 1.2 ad
36 1.9 dsl #include <sys/cdefs.h>
37 1.32 yamt __KERNEL_RCSID(0, "$NetBSD: subr_lockdebug.c,v 1.32 2008/05/03 06:24:55 yamt Exp $");
38 1.9 dsl
39 1.2 ad #include "opt_ddb.h"
40 1.2 ad
41 1.2 ad #include <sys/param.h>
42 1.2 ad #include <sys/proc.h>
43 1.2 ad #include <sys/systm.h>
44 1.10 ad #include <sys/kernel.h>
45 1.2 ad #include <sys/kmem.h>
46 1.2 ad #include <sys/lockdebug.h>
47 1.2 ad #include <sys/sleepq.h>
48 1.10 ad #include <sys/cpu.h>
49 1.22 ad #include <sys/atomic.h>
50 1.26 ad #include <sys/lock.h>
51 1.2 ad
52 1.16 yamt #include <lib/libkern/rb.h>
53 1.16 yamt
54 1.25 ad #include <machine/lock.h>
55 1.25 ad
56 1.28 ad unsigned int ld_panic;
57 1.28 ad
58 1.2 ad #ifdef LOCKDEBUG
59 1.2 ad
60 1.2 ad #define LD_BATCH_SHIFT 9
61 1.2 ad #define LD_BATCH (1 << LD_BATCH_SHIFT)
62 1.2 ad #define LD_BATCH_MASK (LD_BATCH - 1)
63 1.2 ad #define LD_MAX_LOCKS 1048576
64 1.2 ad #define LD_SLOP 16
65 1.2 ad
66 1.2 ad #define LD_LOCKED 0x01
67 1.2 ad #define LD_SLEEPER 0x02
68 1.2 ad
69 1.23 ad #define LD_WRITE_LOCK 0x80000000
70 1.23 ad
71 1.2 ad typedef union lockdebuglk {
72 1.2 ad struct {
73 1.23 ad u_int lku_lock;
74 1.23 ad int lku_oldspl;
75 1.2 ad } ul;
76 1.29 ad uint8_t lk_pad[COHERENCY_UNIT];
77 1.29 ad } volatile __aligned(COHERENCY_UNIT) lockdebuglk_t;
78 1.2 ad
79 1.2 ad #define lk_lock ul.lku_lock
80 1.2 ad #define lk_oldspl ul.lku_oldspl
81 1.2 ad
82 1.2 ad typedef struct lockdebug {
83 1.16 yamt struct rb_node ld_rb_node; /* must be the first member */
84 1.2 ad _TAILQ_ENTRY(struct lockdebug, volatile) ld_chain;
85 1.2 ad _TAILQ_ENTRY(struct lockdebug, volatile) ld_achain;
86 1.2 ad volatile void *ld_lock;
87 1.2 ad lockops_t *ld_lockops;
88 1.2 ad struct lwp *ld_lwp;
89 1.2 ad uintptr_t ld_locked;
90 1.2 ad uintptr_t ld_unlocked;
91 1.10 ad uintptr_t ld_initaddr;
92 1.2 ad uint16_t ld_shares;
93 1.2 ad uint16_t ld_cpu;
94 1.2 ad uint8_t ld_flags;
95 1.2 ad uint8_t ld_shwant; /* advisory */
96 1.2 ad uint8_t ld_exwant; /* advisory */
97 1.2 ad uint8_t ld_unused;
98 1.2 ad } volatile lockdebug_t;
99 1.2 ad
100 1.2 ad typedef _TAILQ_HEAD(lockdebuglist, struct lockdebug, volatile) lockdebuglist_t;
101 1.2 ad
102 1.16 yamt lockdebuglk_t ld_tree_lk;
103 1.15 matt lockdebuglk_t ld_sleeper_lk;
104 1.15 matt lockdebuglk_t ld_spinner_lk;
105 1.15 matt lockdebuglk_t ld_free_lk;
106 1.2 ad
107 1.13 matt lockdebuglist_t ld_sleepers = TAILQ_HEAD_INITIALIZER(ld_sleepers);
108 1.13 matt lockdebuglist_t ld_spinners = TAILQ_HEAD_INITIALIZER(ld_spinners);
109 1.13 matt lockdebuglist_t ld_free = TAILQ_HEAD_INITIALIZER(ld_free);
110 1.13 matt lockdebuglist_t ld_all = TAILQ_HEAD_INITIALIZER(ld_all);
111 1.2 ad int ld_nfree;
112 1.2 ad int ld_freeptr;
113 1.2 ad int ld_recurse;
114 1.5 ad bool ld_nomore;
115 1.2 ad lockdebug_t *ld_table[LD_MAX_LOCKS / LD_BATCH];
116 1.2 ad
117 1.2 ad lockdebug_t ld_prime[LD_BATCH];
118 1.2 ad
119 1.5 ad static void lockdebug_abort1(lockdebug_t *, lockdebuglk_t *lk,
120 1.10 ad const char *, const char *, bool);
121 1.5 ad static void lockdebug_more(void);
122 1.5 ad static void lockdebug_init(void);
123 1.2 ad
124 1.16 yamt static signed int
125 1.16 yamt ld_rb_compare_nodes(const struct rb_node *n1, const struct rb_node *n2)
126 1.16 yamt {
127 1.16 yamt const lockdebug_t *ld1 = (const void *)n1;
128 1.16 yamt const lockdebug_t *ld2 = (const void *)n2;
129 1.20 yamt const uintptr_t a = (uintptr_t)ld1->ld_lock;
130 1.20 yamt const uintptr_t b = (uintptr_t)ld2->ld_lock;
131 1.20 yamt
132 1.20 yamt if (a < b)
133 1.20 yamt return 1;
134 1.20 yamt if (a > b)
135 1.16 yamt return -1;
136 1.16 yamt return 0;
137 1.16 yamt }
138 1.16 yamt
139 1.16 yamt static signed int
140 1.16 yamt ld_rb_compare_key(const struct rb_node *n, const void *key)
141 1.16 yamt {
142 1.16 yamt const lockdebug_t *ld = (const void *)n;
143 1.20 yamt const uintptr_t a = (uintptr_t)ld->ld_lock;
144 1.20 yamt const uintptr_t b = (uintptr_t)key;
145 1.20 yamt
146 1.20 yamt if (a < b)
147 1.20 yamt return 1;
148 1.20 yamt if (a > b)
149 1.16 yamt return -1;
150 1.16 yamt return 0;
151 1.16 yamt }
152 1.16 yamt
153 1.16 yamt static struct rb_tree ld_rb_tree;
154 1.16 yamt
155 1.16 yamt static const struct rb_tree_ops ld_rb_tree_ops = {
156 1.16 yamt .rb_compare_nodes = ld_rb_compare_nodes,
157 1.16 yamt .rb_compare_key = ld_rb_compare_key,
158 1.16 yamt };
159 1.16 yamt
160 1.23 ad static void
161 1.23 ad lockdebug_lock_init(lockdebuglk_t *lk)
162 1.23 ad {
163 1.23 ad
164 1.23 ad lk->lk_lock = 0;
165 1.23 ad }
166 1.23 ad
167 1.23 ad static void
168 1.2 ad lockdebug_lock(lockdebuglk_t *lk)
169 1.2 ad {
170 1.2 ad int s;
171 1.2 ad
172 1.8 ad s = splhigh();
173 1.23 ad do {
174 1.23 ad while (lk->lk_lock != 0) {
175 1.23 ad SPINLOCK_SPIN_HOOK;
176 1.23 ad }
177 1.23 ad } while (atomic_cas_uint(&lk->lk_lock, 0, LD_WRITE_LOCK) != 0);
178 1.2 ad lk->lk_oldspl = s;
179 1.23 ad membar_enter();
180 1.2 ad }
181 1.2 ad
182 1.23 ad static void
183 1.2 ad lockdebug_unlock(lockdebuglk_t *lk)
184 1.2 ad {
185 1.2 ad int s;
186 1.2 ad
187 1.2 ad s = lk->lk_oldspl;
188 1.23 ad membar_exit();
189 1.23 ad lk->lk_lock = 0;
190 1.23 ad splx(s);
191 1.23 ad }
192 1.23 ad
193 1.23 ad static int
194 1.23 ad lockdebug_lock_rd(lockdebuglk_t *lk)
195 1.23 ad {
196 1.23 ad u_int val;
197 1.23 ad int s;
198 1.23 ad
199 1.23 ad s = splhigh();
200 1.23 ad do {
201 1.23 ad while ((val = lk->lk_lock) == LD_WRITE_LOCK){
202 1.23 ad SPINLOCK_SPIN_HOOK;
203 1.23 ad }
204 1.23 ad } while (atomic_cas_uint(&lk->lk_lock, val, val + 1) != val);
205 1.23 ad membar_enter();
206 1.23 ad return s;
207 1.23 ad }
208 1.23 ad
209 1.23 ad static void
210 1.23 ad lockdebug_unlock_rd(lockdebuglk_t *lk, int s)
211 1.23 ad {
212 1.23 ad
213 1.23 ad membar_exit();
214 1.23 ad atomic_dec_uint(&lk->lk_lock);
215 1.2 ad splx(s);
216 1.2 ad }
217 1.2 ad
218 1.2 ad static inline lockdebug_t *
219 1.19 yamt lockdebug_lookup1(volatile void *lock, lockdebuglk_t **lk)
220 1.2 ad {
221 1.16 yamt lockdebug_t *ld;
222 1.23 ad int s;
223 1.2 ad
224 1.23 ad s = lockdebug_lock_rd(&ld_tree_lk);
225 1.16 yamt ld = (lockdebug_t *)rb_tree_find_node(&ld_rb_tree, __UNVOLATILE(lock));
226 1.23 ad lockdebug_unlock_rd(&ld_tree_lk, s);
227 1.16 yamt if (ld == NULL)
228 1.19 yamt return NULL;
229 1.2 ad
230 1.2 ad if ((ld->ld_flags & LD_SLEEPER) != 0)
231 1.2 ad *lk = &ld_sleeper_lk;
232 1.2 ad else
233 1.2 ad *lk = &ld_spinner_lk;
234 1.2 ad
235 1.2 ad lockdebug_lock(*lk);
236 1.2 ad return ld;
237 1.2 ad }
238 1.2 ad
239 1.2 ad /*
240 1.19 yamt * lockdebug_lookup:
241 1.19 yamt *
242 1.19 yamt * Find a lockdebug structure by a pointer to a lock and return it locked.
243 1.19 yamt */
244 1.19 yamt static inline lockdebug_t *
245 1.19 yamt lockdebug_lookup(volatile void *lock, lockdebuglk_t **lk)
246 1.19 yamt {
247 1.19 yamt lockdebug_t *ld;
248 1.19 yamt
249 1.19 yamt ld = lockdebug_lookup1(lock, lk);
250 1.19 yamt if (ld == NULL)
251 1.19 yamt panic("lockdebug_lookup: uninitialized lock (lock=%p)", lock);
252 1.19 yamt return ld;
253 1.19 yamt }
254 1.19 yamt
255 1.19 yamt /*
256 1.2 ad * lockdebug_init:
257 1.2 ad *
258 1.2 ad * Initialize the lockdebug system. Allocate an initial pool of
259 1.2 ad * lockdebug structures before the VM system is up and running.
260 1.2 ad */
261 1.5 ad static void
262 1.2 ad lockdebug_init(void)
263 1.2 ad {
264 1.2 ad lockdebug_t *ld;
265 1.2 ad int i;
266 1.2 ad
267 1.23 ad lockdebug_lock_init(&ld_tree_lk);
268 1.23 ad lockdebug_lock_init(&ld_sleeper_lk);
269 1.23 ad lockdebug_lock_init(&ld_spinner_lk);
270 1.23 ad lockdebug_lock_init(&ld_free_lk);
271 1.15 matt
272 1.16 yamt rb_tree_init(&ld_rb_tree, &ld_rb_tree_ops);
273 1.16 yamt
274 1.2 ad ld = ld_prime;
275 1.2 ad ld_table[0] = ld;
276 1.2 ad for (i = 1, ld++; i < LD_BATCH; i++, ld++) {
277 1.2 ad TAILQ_INSERT_TAIL(&ld_free, ld, ld_chain);
278 1.2 ad TAILQ_INSERT_TAIL(&ld_all, ld, ld_achain);
279 1.2 ad }
280 1.2 ad ld_freeptr = 1;
281 1.2 ad ld_nfree = LD_BATCH - 1;
282 1.2 ad }
283 1.2 ad
284 1.2 ad /*
285 1.2 ad * lockdebug_alloc:
286 1.2 ad *
287 1.2 ad * A lock is being initialized, so allocate an associated debug
288 1.2 ad * structure.
289 1.2 ad */
290 1.16 yamt bool
291 1.10 ad lockdebug_alloc(volatile void *lock, lockops_t *lo, uintptr_t initaddr)
292 1.2 ad {
293 1.2 ad struct cpu_info *ci;
294 1.2 ad lockdebug_t *ld;
295 1.19 yamt lockdebuglk_t *lk;
296 1.2 ad
297 1.27 ad if (lo == NULL || panicstr != NULL || ld_panic)
298 1.16 yamt return false;
299 1.5 ad if (ld_freeptr == 0)
300 1.5 ad lockdebug_init();
301 1.2 ad
302 1.19 yamt if ((ld = lockdebug_lookup1(lock, &lk)) != NULL) {
303 1.19 yamt lockdebug_abort1(ld, lk, __func__, "already initialized", true);
304 1.27 ad return false;
305 1.19 yamt }
306 1.19 yamt
307 1.2 ad /*
308 1.2 ad * Pinch a new debug structure. We may recurse because we call
309 1.2 ad * kmem_alloc(), which may need to initialize new locks somewhere
310 1.7 skrll * down the path. If not recursing, we try to maintain at least
311 1.2 ad * LD_SLOP structures free, which should hopefully be enough to
312 1.2 ad * satisfy kmem_alloc(). If we can't provide a structure, not to
313 1.2 ad * worry: we'll just mark the lock as not having an ID.
314 1.2 ad */
315 1.2 ad lockdebug_lock(&ld_free_lk);
316 1.23 ad ci = curcpu();
317 1.2 ad ci->ci_lkdebug_recurse++;
318 1.2 ad
319 1.2 ad if (TAILQ_EMPTY(&ld_free)) {
320 1.5 ad if (ci->ci_lkdebug_recurse > 1 || ld_nomore) {
321 1.2 ad ci->ci_lkdebug_recurse--;
322 1.2 ad lockdebug_unlock(&ld_free_lk);
323 1.16 yamt return false;
324 1.2 ad }
325 1.2 ad lockdebug_more();
326 1.2 ad } else if (ci->ci_lkdebug_recurse == 1 && ld_nfree < LD_SLOP)
327 1.2 ad lockdebug_more();
328 1.2 ad
329 1.2 ad if ((ld = TAILQ_FIRST(&ld_free)) == NULL) {
330 1.2 ad lockdebug_unlock(&ld_free_lk);
331 1.16 yamt return false;
332 1.2 ad }
333 1.2 ad
334 1.2 ad TAILQ_REMOVE(&ld_free, ld, ld_chain);
335 1.2 ad ld_nfree--;
336 1.2 ad
337 1.2 ad ci->ci_lkdebug_recurse--;
338 1.2 ad lockdebug_unlock(&ld_free_lk);
339 1.2 ad
340 1.2 ad if (ld->ld_lock != NULL)
341 1.2 ad panic("lockdebug_alloc: corrupt table");
342 1.2 ad
343 1.2 ad if (lo->lo_sleeplock)
344 1.2 ad lockdebug_lock(&ld_sleeper_lk);
345 1.2 ad else
346 1.2 ad lockdebug_lock(&ld_spinner_lk);
347 1.2 ad
348 1.2 ad /* Initialise the structure. */
349 1.2 ad ld->ld_lock = lock;
350 1.2 ad ld->ld_lockops = lo;
351 1.2 ad ld->ld_locked = 0;
352 1.2 ad ld->ld_unlocked = 0;
353 1.2 ad ld->ld_lwp = NULL;
354 1.10 ad ld->ld_initaddr = initaddr;
355 1.2 ad
356 1.16 yamt lockdebug_lock(&ld_tree_lk);
357 1.16 yamt rb_tree_insert_node(&ld_rb_tree, __UNVOLATILE(&ld->ld_rb_node));
358 1.16 yamt lockdebug_unlock(&ld_tree_lk);
359 1.16 yamt
360 1.2 ad if (lo->lo_sleeplock) {
361 1.2 ad ld->ld_flags = LD_SLEEPER;
362 1.2 ad lockdebug_unlock(&ld_sleeper_lk);
363 1.2 ad } else {
364 1.2 ad ld->ld_flags = 0;
365 1.2 ad lockdebug_unlock(&ld_spinner_lk);
366 1.2 ad }
367 1.2 ad
368 1.16 yamt return true;
369 1.2 ad }
370 1.2 ad
371 1.2 ad /*
372 1.2 ad * lockdebug_free:
373 1.2 ad *
374 1.2 ad * A lock is being destroyed, so release debugging resources.
375 1.2 ad */
376 1.2 ad void
377 1.16 yamt lockdebug_free(volatile void *lock)
378 1.2 ad {
379 1.2 ad lockdebug_t *ld;
380 1.2 ad lockdebuglk_t *lk;
381 1.2 ad
382 1.27 ad if (panicstr != NULL || ld_panic)
383 1.2 ad return;
384 1.2 ad
385 1.16 yamt ld = lockdebug_lookup(lock, &lk);
386 1.16 yamt if (ld == NULL) {
387 1.2 ad panic("lockdebug_free: destroying uninitialized lock %p"
388 1.16 yamt "(ld_lock=%p)", lock, ld->ld_lock);
389 1.10 ad lockdebug_abort1(ld, lk, __func__, "lock record follows",
390 1.10 ad true);
391 1.27 ad return;
392 1.2 ad }
393 1.27 ad if ((ld->ld_flags & LD_LOCKED) != 0 || ld->ld_shares != 0) {
394 1.10 ad lockdebug_abort1(ld, lk, __func__, "is locked", true);
395 1.27 ad return;
396 1.27 ad }
397 1.16 yamt lockdebug_lock(&ld_tree_lk);
398 1.16 yamt rb_tree_remove_node(&ld_rb_tree, __UNVOLATILE(&ld->ld_rb_node));
399 1.16 yamt lockdebug_unlock(&ld_tree_lk);
400 1.2 ad ld->ld_lock = NULL;
401 1.2 ad lockdebug_unlock(lk);
402 1.2 ad
403 1.2 ad lockdebug_lock(&ld_free_lk);
404 1.2 ad TAILQ_INSERT_TAIL(&ld_free, ld, ld_chain);
405 1.2 ad ld_nfree++;
406 1.2 ad lockdebug_unlock(&ld_free_lk);
407 1.2 ad }
408 1.2 ad
409 1.2 ad /*
410 1.2 ad * lockdebug_more:
411 1.2 ad *
412 1.2 ad * Allocate a batch of debug structures and add to the free list.
413 1.2 ad * Must be called with ld_free_lk held.
414 1.2 ad */
415 1.5 ad static void
416 1.2 ad lockdebug_more(void)
417 1.2 ad {
418 1.2 ad lockdebug_t *ld;
419 1.2 ad void *block;
420 1.5 ad int i, base, m;
421 1.2 ad
422 1.2 ad while (ld_nfree < LD_SLOP) {
423 1.2 ad lockdebug_unlock(&ld_free_lk);
424 1.2 ad block = kmem_zalloc(LD_BATCH * sizeof(lockdebug_t), KM_SLEEP);
425 1.2 ad lockdebug_lock(&ld_free_lk);
426 1.2 ad
427 1.2 ad if (block == NULL)
428 1.2 ad return;
429 1.2 ad
430 1.2 ad if (ld_nfree > LD_SLOP) {
431 1.2 ad /* Somebody beat us to it. */
432 1.2 ad lockdebug_unlock(&ld_free_lk);
433 1.2 ad kmem_free(block, LD_BATCH * sizeof(lockdebug_t));
434 1.2 ad lockdebug_lock(&ld_free_lk);
435 1.2 ad continue;
436 1.2 ad }
437 1.2 ad
438 1.2 ad base = ld_freeptr;
439 1.2 ad ld_nfree += LD_BATCH;
440 1.2 ad ld = block;
441 1.2 ad base <<= LD_BATCH_SHIFT;
442 1.5 ad m = min(LD_MAX_LOCKS, base + LD_BATCH);
443 1.5 ad
444 1.5 ad if (m == LD_MAX_LOCKS)
445 1.5 ad ld_nomore = true;
446 1.2 ad
447 1.5 ad for (i = base; i < m; i++, ld++) {
448 1.2 ad TAILQ_INSERT_TAIL(&ld_free, ld, ld_chain);
449 1.2 ad TAILQ_INSERT_TAIL(&ld_all, ld, ld_achain);
450 1.2 ad }
451 1.2 ad
452 1.22 ad membar_producer();
453 1.2 ad ld_table[ld_freeptr++] = block;
454 1.2 ad }
455 1.2 ad }
456 1.2 ad
457 1.2 ad /*
458 1.2 ad * lockdebug_wantlock:
459 1.2 ad *
460 1.2 ad * Process the preamble to a lock acquire.
461 1.2 ad */
462 1.2 ad void
463 1.16 yamt lockdebug_wantlock(volatile void *lock, uintptr_t where, int shared)
464 1.2 ad {
465 1.2 ad struct lwp *l = curlwp;
466 1.2 ad lockdebuglk_t *lk;
467 1.2 ad lockdebug_t *ld;
468 1.3 thorpej bool recurse;
469 1.2 ad
470 1.2 ad (void)shared;
471 1.4 thorpej recurse = false;
472 1.2 ad
473 1.27 ad if (panicstr != NULL || ld_panic)
474 1.2 ad return;
475 1.2 ad
476 1.16 yamt if ((ld = lockdebug_lookup(lock, &lk)) == NULL)
477 1.2 ad return;
478 1.2 ad
479 1.32 yamt if ((ld->ld_flags & LD_LOCKED) != 0 || ld->ld_shares != 0) {
480 1.2 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
481 1.2 ad if (ld->ld_lwp == l)
482 1.4 thorpej recurse = true;
483 1.2 ad } else if (ld->ld_cpu == (uint16_t)cpu_number())
484 1.4 thorpej recurse = true;
485 1.2 ad }
486 1.2 ad
487 1.10 ad if (cpu_intr_p()) {
488 1.27 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
489 1.10 ad lockdebug_abort1(ld, lk, __func__,
490 1.10 ad "acquiring sleep lock from interrupt context",
491 1.10 ad true);
492 1.27 ad return;
493 1.27 ad }
494 1.10 ad }
495 1.10 ad
496 1.2 ad if (shared)
497 1.2 ad ld->ld_shwant++;
498 1.2 ad else
499 1.2 ad ld->ld_exwant++;
500 1.2 ad
501 1.27 ad if (recurse) {
502 1.10 ad lockdebug_abort1(ld, lk, __func__, "locking against myself",
503 1.10 ad true);
504 1.27 ad return;
505 1.27 ad }
506 1.2 ad
507 1.2 ad lockdebug_unlock(lk);
508 1.2 ad }
509 1.2 ad
510 1.2 ad /*
511 1.2 ad * lockdebug_locked:
512 1.2 ad *
513 1.2 ad * Process a lock acquire operation.
514 1.2 ad */
515 1.2 ad void
516 1.16 yamt lockdebug_locked(volatile void *lock, uintptr_t where, int shared)
517 1.2 ad {
518 1.2 ad struct lwp *l = curlwp;
519 1.2 ad lockdebuglk_t *lk;
520 1.2 ad lockdebug_t *ld;
521 1.2 ad
522 1.27 ad if (panicstr != NULL || ld_panic)
523 1.2 ad return;
524 1.2 ad
525 1.16 yamt if ((ld = lockdebug_lookup(lock, &lk)) == NULL)
526 1.2 ad return;
527 1.2 ad
528 1.2 ad if (shared) {
529 1.2 ad l->l_shlocks++;
530 1.2 ad ld->ld_shares++;
531 1.2 ad ld->ld_shwant--;
532 1.2 ad } else {
533 1.27 ad if ((ld->ld_flags & LD_LOCKED) != 0) {
534 1.2 ad lockdebug_abort1(ld, lk, __func__,
535 1.10 ad "already locked", true);
536 1.27 ad return;
537 1.27 ad }
538 1.2 ad
539 1.2 ad ld->ld_flags |= LD_LOCKED;
540 1.2 ad ld->ld_locked = where;
541 1.2 ad ld->ld_exwant--;
542 1.2 ad
543 1.2 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
544 1.2 ad l->l_exlocks++;
545 1.2 ad TAILQ_INSERT_TAIL(&ld_sleepers, ld, ld_chain);
546 1.2 ad } else {
547 1.2 ad curcpu()->ci_spin_locks2++;
548 1.2 ad TAILQ_INSERT_TAIL(&ld_spinners, ld, ld_chain);
549 1.2 ad }
550 1.2 ad }
551 1.32 yamt ld->ld_cpu = (uint16_t)cpu_number();
552 1.32 yamt ld->ld_lwp = l;
553 1.2 ad
554 1.2 ad lockdebug_unlock(lk);
555 1.2 ad }
556 1.2 ad
557 1.2 ad /*
558 1.2 ad * lockdebug_unlocked:
559 1.2 ad *
560 1.2 ad * Process a lock release operation.
561 1.2 ad */
562 1.2 ad void
563 1.16 yamt lockdebug_unlocked(volatile void *lock, uintptr_t where, int shared)
564 1.2 ad {
565 1.2 ad struct lwp *l = curlwp;
566 1.2 ad lockdebuglk_t *lk;
567 1.2 ad lockdebug_t *ld;
568 1.2 ad
569 1.27 ad if (panicstr != NULL || ld_panic)
570 1.2 ad return;
571 1.2 ad
572 1.16 yamt if ((ld = lockdebug_lookup(lock, &lk)) == NULL)
573 1.2 ad return;
574 1.2 ad
575 1.2 ad if (shared) {
576 1.27 ad if (l->l_shlocks == 0) {
577 1.2 ad lockdebug_abort1(ld, lk, __func__,
578 1.10 ad "no shared locks held by LWP", true);
579 1.27 ad return;
580 1.27 ad }
581 1.27 ad if (ld->ld_shares == 0) {
582 1.2 ad lockdebug_abort1(ld, lk, __func__,
583 1.10 ad "no shared holds on this lock", true);
584 1.27 ad return;
585 1.27 ad }
586 1.2 ad l->l_shlocks--;
587 1.2 ad ld->ld_shares--;
588 1.32 yamt if (ld->ld_lwp == l)
589 1.32 yamt ld->ld_lwp = NULL;
590 1.32 yamt if (ld->ld_cpu == (uint16_t)cpu_number())
591 1.32 yamt ld->ld_cpu = (uint16_t)-1;
592 1.2 ad } else {
593 1.27 ad if ((ld->ld_flags & LD_LOCKED) == 0) {
594 1.10 ad lockdebug_abort1(ld, lk, __func__, "not locked",
595 1.10 ad true);
596 1.27 ad return;
597 1.27 ad }
598 1.2 ad
599 1.2 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
600 1.27 ad if (ld->ld_lwp != curlwp) {
601 1.2 ad lockdebug_abort1(ld, lk, __func__,
602 1.10 ad "not held by current LWP", true);
603 1.27 ad return;
604 1.27 ad }
605 1.2 ad ld->ld_flags &= ~LD_LOCKED;
606 1.2 ad ld->ld_unlocked = where;
607 1.2 ad ld->ld_lwp = NULL;
608 1.2 ad curlwp->l_exlocks--;
609 1.2 ad TAILQ_REMOVE(&ld_sleepers, ld, ld_chain);
610 1.2 ad } else {
611 1.27 ad if (ld->ld_cpu != (uint16_t)cpu_number()) {
612 1.2 ad lockdebug_abort1(ld, lk, __func__,
613 1.10 ad "not held by current CPU", true);
614 1.27 ad return;
615 1.27 ad }
616 1.2 ad ld->ld_flags &= ~LD_LOCKED;
617 1.2 ad ld->ld_unlocked = where;
618 1.2 ad ld->ld_lwp = NULL;
619 1.2 ad curcpu()->ci_spin_locks2--;
620 1.2 ad TAILQ_REMOVE(&ld_spinners, ld, ld_chain);
621 1.2 ad }
622 1.2 ad }
623 1.2 ad
624 1.2 ad lockdebug_unlock(lk);
625 1.2 ad }
626 1.2 ad
627 1.2 ad /*
628 1.2 ad * lockdebug_barrier:
629 1.2 ad *
630 1.2 ad * Panic if we hold more than one specified spin lock, and optionally,
631 1.2 ad * if we hold sleep locks.
632 1.2 ad */
633 1.2 ad void
634 1.2 ad lockdebug_barrier(volatile void *spinlock, int slplocks)
635 1.2 ad {
636 1.2 ad struct lwp *l = curlwp;
637 1.2 ad lockdebug_t *ld;
638 1.2 ad uint16_t cpuno;
639 1.30 ad int s, s0;
640 1.2 ad
641 1.27 ad if (panicstr != NULL || ld_panic)
642 1.2 ad return;
643 1.2 ad
644 1.30 ad /*
645 1.30 ad * Use splsoftclock() and not a critical section to block preemption.
646 1.30 ad * kpreempt_disable() will skew preemption statistics by firing again
647 1.30 ad * in mi_switch(), while we are preempting!
648 1.30 ad */
649 1.30 ad s0 = splsoftclock();
650 1.23 ad
651 1.2 ad if (curcpu()->ci_spin_locks2 != 0) {
652 1.2 ad cpuno = (uint16_t)cpu_number();
653 1.2 ad
654 1.23 ad s = lockdebug_lock_rd(&ld_spinner_lk);
655 1.2 ad TAILQ_FOREACH(ld, &ld_spinners, ld_chain) {
656 1.2 ad if (ld->ld_lock == spinlock) {
657 1.27 ad if (ld->ld_cpu != cpuno) {
658 1.2 ad lockdebug_abort1(ld, &ld_spinner_lk,
659 1.2 ad __func__,
660 1.10 ad "not held by current CPU", true);
661 1.30 ad splx(s0);
662 1.27 ad return;
663 1.27 ad }
664 1.2 ad continue;
665 1.2 ad }
666 1.27 ad if (ld->ld_cpu == cpuno && (l->l_pflag & LP_INTR) == 0) {
667 1.2 ad lockdebug_abort1(ld, &ld_spinner_lk,
668 1.10 ad __func__, "spin lock held", true);
669 1.30 ad splx(s0);
670 1.27 ad return;
671 1.27 ad }
672 1.2 ad }
673 1.23 ad lockdebug_unlock_rd(&ld_spinner_lk, s);
674 1.2 ad }
675 1.2 ad
676 1.2 ad if (!slplocks) {
677 1.2 ad if (l->l_exlocks != 0) {
678 1.23 ad s = lockdebug_lock_rd(&ld_sleeper_lk);
679 1.2 ad TAILQ_FOREACH(ld, &ld_sleepers, ld_chain) {
680 1.27 ad if (ld->ld_lwp == l) {
681 1.2 ad lockdebug_abort1(ld, &ld_sleeper_lk,
682 1.10 ad __func__, "sleep lock held", true);
683 1.30 ad splx(s0);
684 1.27 ad return;
685 1.27 ad }
686 1.2 ad }
687 1.23 ad lockdebug_unlock_rd(&ld_sleeper_lk, s);
688 1.2 ad }
689 1.2 ad if (l->l_shlocks != 0)
690 1.2 ad panic("lockdebug_barrier: holding %d shared locks",
691 1.2 ad l->l_shlocks);
692 1.2 ad }
693 1.23 ad
694 1.30 ad splx(s0);
695 1.2 ad }
696 1.2 ad
697 1.2 ad /*
698 1.10 ad * lockdebug_mem_check:
699 1.10 ad *
700 1.10 ad * Check for in-use locks within a memory region that is
701 1.16 yamt * being freed.
702 1.10 ad */
703 1.10 ad void
704 1.10 ad lockdebug_mem_check(const char *func, void *base, size_t sz)
705 1.10 ad {
706 1.16 yamt lockdebug_t *ld;
707 1.10 ad lockdebuglk_t *lk;
708 1.23 ad int s;
709 1.10 ad
710 1.27 ad if (panicstr != NULL || ld_panic)
711 1.24 ad return;
712 1.24 ad
713 1.23 ad s = lockdebug_lock_rd(&ld_tree_lk);
714 1.16 yamt ld = (lockdebug_t *)rb_tree_find_node_geq(&ld_rb_tree, base);
715 1.23 ad if (ld != NULL) {
716 1.23 ad const uintptr_t lock = (uintptr_t)ld->ld_lock;
717 1.23 ad
718 1.23 ad if ((uintptr_t)base > lock)
719 1.23 ad panic("%s: corrupt tree ld=%p, base=%p, sz=%zu",
720 1.23 ad __func__, ld, base, sz);
721 1.23 ad if (lock >= (uintptr_t)base + sz)
722 1.23 ad ld = NULL;
723 1.23 ad }
724 1.23 ad lockdebug_unlock_rd(&ld_tree_lk, s);
725 1.16 yamt if (ld == NULL)
726 1.16 yamt return;
727 1.23 ad
728 1.16 yamt if ((ld->ld_flags & LD_SLEEPER) != 0)
729 1.16 yamt lk = &ld_sleeper_lk;
730 1.16 yamt else
731 1.16 yamt lk = &ld_spinner_lk;
732 1.10 ad
733 1.16 yamt lockdebug_lock(lk);
734 1.23 ad lockdebug_abort1(ld, lk, func,
735 1.23 ad "allocation contains active lock", !cold);
736 1.10 ad }
737 1.10 ad
738 1.10 ad /*
739 1.2 ad * lockdebug_dump:
740 1.2 ad *
741 1.2 ad * Dump information about a lock on panic, or for DDB.
742 1.2 ad */
743 1.2 ad static void
744 1.2 ad lockdebug_dump(lockdebug_t *ld, void (*pr)(const char *, ...))
745 1.2 ad {
746 1.2 ad int sleeper = (ld->ld_flags & LD_SLEEPER);
747 1.2 ad
748 1.2 ad (*pr)(
749 1.2 ad "lock address : %#018lx type : %18s\n"
750 1.2 ad "shared holds : %18u exclusive: %18u\n"
751 1.2 ad "shares wanted: %18u exclusive: %18u\n"
752 1.2 ad "current cpu : %18u last held: %18u\n"
753 1.2 ad "current lwp : %#018lx last held: %#018lx\n"
754 1.10 ad "last locked : %#018lx unlocked : %#018lx\n"
755 1.10 ad "initialized : %#018lx\n",
756 1.2 ad (long)ld->ld_lock, (sleeper ? "sleep/adaptive" : "spin"),
757 1.2 ad (unsigned)ld->ld_shares, ((ld->ld_flags & LD_LOCKED) != 0),
758 1.2 ad (unsigned)ld->ld_shwant, (unsigned)ld->ld_exwant,
759 1.2 ad (unsigned)cpu_number(), (unsigned)ld->ld_cpu,
760 1.2 ad (long)curlwp, (long)ld->ld_lwp,
761 1.10 ad (long)ld->ld_locked, (long)ld->ld_unlocked,
762 1.10 ad (long)ld->ld_initaddr);
763 1.2 ad
764 1.2 ad if (ld->ld_lockops->lo_dump != NULL)
765 1.2 ad (*ld->ld_lockops->lo_dump)(ld->ld_lock);
766 1.2 ad
767 1.2 ad if (sleeper) {
768 1.2 ad (*pr)("\n");
769 1.2 ad turnstile_print(ld->ld_lock, pr);
770 1.2 ad }
771 1.2 ad }
772 1.2 ad
773 1.2 ad /*
774 1.27 ad * lockdebug_abort1:
775 1.2 ad *
776 1.27 ad * An error has been trapped - dump lock info and panic.
777 1.2 ad */
778 1.5 ad static void
779 1.2 ad lockdebug_abort1(lockdebug_t *ld, lockdebuglk_t *lk, const char *func,
780 1.10 ad const char *msg, bool dopanic)
781 1.2 ad {
782 1.2 ad
783 1.27 ad /*
784 1.27 ad * Don't make the situation wose if the system is already going
785 1.27 ad * down in flames. Once a panic is triggered, lockdebug state
786 1.27 ad * becomes stale and cannot be trusted.
787 1.27 ad */
788 1.27 ad if (atomic_inc_uint_nv(&ld_panic) != 1) {
789 1.27 ad lockdebug_unlock(lk);
790 1.27 ad return;
791 1.27 ad }
792 1.27 ad
793 1.2 ad printf_nolog("%s error: %s: %s\n\n", ld->ld_lockops->lo_name,
794 1.2 ad func, msg);
795 1.2 ad lockdebug_dump(ld, printf_nolog);
796 1.2 ad lockdebug_unlock(lk);
797 1.2 ad printf_nolog("\n");
798 1.10 ad if (dopanic)
799 1.10 ad panic("LOCKDEBUG");
800 1.2 ad }
801 1.2 ad
802 1.2 ad #endif /* LOCKDEBUG */
803 1.2 ad
804 1.2 ad /*
805 1.2 ad * lockdebug_lock_print:
806 1.2 ad *
807 1.2 ad * Handle the DDB 'show lock' command.
808 1.2 ad */
809 1.2 ad #ifdef DDB
810 1.2 ad void
811 1.2 ad lockdebug_lock_print(void *addr, void (*pr)(const char *, ...))
812 1.2 ad {
813 1.2 ad #ifdef LOCKDEBUG
814 1.2 ad lockdebug_t *ld;
815 1.2 ad
816 1.2 ad TAILQ_FOREACH(ld, &ld_all, ld_achain) {
817 1.2 ad if (ld->ld_lock == addr) {
818 1.2 ad lockdebug_dump(ld, pr);
819 1.2 ad return;
820 1.2 ad }
821 1.2 ad }
822 1.2 ad (*pr)("Sorry, no record of a lock with address %p found.\n", addr);
823 1.2 ad #else
824 1.2 ad (*pr)("Sorry, kernel not built with the LOCKDEBUG option.\n");
825 1.2 ad #endif /* LOCKDEBUG */
826 1.2 ad }
827 1.2 ad #endif /* DDB */
828 1.2 ad
829 1.2 ad /*
830 1.2 ad * lockdebug_abort:
831 1.2 ad *
832 1.2 ad * An error has been trapped - dump lock info and call panic().
833 1.2 ad */
834 1.2 ad void
835 1.16 yamt lockdebug_abort(volatile void *lock, lockops_t *ops, const char *func,
836 1.16 yamt const char *msg)
837 1.2 ad {
838 1.2 ad #ifdef LOCKDEBUG
839 1.2 ad lockdebug_t *ld;
840 1.2 ad lockdebuglk_t *lk;
841 1.2 ad
842 1.16 yamt if ((ld = lockdebug_lookup(lock, &lk)) != NULL) {
843 1.10 ad lockdebug_abort1(ld, lk, func, msg, true);
844 1.2 ad /* NOTREACHED */
845 1.2 ad }
846 1.2 ad #endif /* LOCKDEBUG */
847 1.2 ad
848 1.27 ad /*
849 1.27 ad * Complain first on the occurrance only. Otherwise proceeed to
850 1.27 ad * panic where we will `rendezvous' with other CPUs if the machine
851 1.27 ad * is going down in flames.
852 1.27 ad */
853 1.27 ad if (atomic_inc_uint_nv(&ld_panic) == 1) {
854 1.27 ad printf_nolog("%s error: %s: %s\n\n"
855 1.27 ad "lock address : %#018lx\n"
856 1.27 ad "current cpu : %18d\n"
857 1.27 ad "current lwp : %#018lx\n",
858 1.27 ad ops->lo_name, func, msg, (long)lock, (int)cpu_number(),
859 1.27 ad (long)curlwp);
860 1.27 ad (*ops->lo_dump)(lock);
861 1.27 ad printf_nolog("\n");
862 1.27 ad }
863 1.2 ad
864 1.2 ad panic("lock error");
865 1.2 ad }
866