subr_lockdebug.c revision 1.35 1 1.35 ad /* $NetBSD: subr_lockdebug.c,v 1.35 2008/05/31 13:15:21 ad Exp $ */
2 1.2 ad
3 1.2 ad /*-
4 1.28 ad * Copyright (c) 2006, 2007, 2008 The NetBSD Foundation, Inc.
5 1.2 ad * All rights reserved.
6 1.2 ad *
7 1.2 ad * This code is derived from software contributed to The NetBSD Foundation
8 1.2 ad * by Andrew Doran.
9 1.2 ad *
10 1.2 ad * Redistribution and use in source and binary forms, with or without
11 1.2 ad * modification, are permitted provided that the following conditions
12 1.2 ad * are met:
13 1.2 ad * 1. Redistributions of source code must retain the above copyright
14 1.2 ad * notice, this list of conditions and the following disclaimer.
15 1.2 ad * 2. Redistributions in binary form must reproduce the above copyright
16 1.2 ad * notice, this list of conditions and the following disclaimer in the
17 1.2 ad * documentation and/or other materials provided with the distribution.
18 1.2 ad *
19 1.2 ad * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 1.2 ad * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 1.2 ad * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 1.2 ad * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 1.2 ad * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 1.2 ad * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 1.2 ad * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 1.2 ad * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 1.2 ad * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 1.2 ad * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 1.2 ad * POSSIBILITY OF SUCH DAMAGE.
30 1.2 ad */
31 1.2 ad
32 1.2 ad /*
33 1.11 ad * Basic lock debugging code shared among lock primitives.
34 1.2 ad */
35 1.2 ad
36 1.9 dsl #include <sys/cdefs.h>
37 1.35 ad __KERNEL_RCSID(0, "$NetBSD: subr_lockdebug.c,v 1.35 2008/05/31 13:15:21 ad Exp $");
38 1.9 dsl
39 1.2 ad #include "opt_ddb.h"
40 1.2 ad
41 1.2 ad #include <sys/param.h>
42 1.2 ad #include <sys/proc.h>
43 1.2 ad #include <sys/systm.h>
44 1.10 ad #include <sys/kernel.h>
45 1.2 ad #include <sys/kmem.h>
46 1.2 ad #include <sys/lockdebug.h>
47 1.2 ad #include <sys/sleepq.h>
48 1.10 ad #include <sys/cpu.h>
49 1.22 ad #include <sys/atomic.h>
50 1.26 ad #include <sys/lock.h>
51 1.2 ad
52 1.16 yamt #include <lib/libkern/rb.h>
53 1.16 yamt
54 1.25 ad #include <machine/lock.h>
55 1.25 ad
56 1.28 ad unsigned int ld_panic;
57 1.28 ad
58 1.2 ad #ifdef LOCKDEBUG
59 1.2 ad
60 1.2 ad #define LD_BATCH_SHIFT 9
61 1.2 ad #define LD_BATCH (1 << LD_BATCH_SHIFT)
62 1.2 ad #define LD_BATCH_MASK (LD_BATCH - 1)
63 1.2 ad #define LD_MAX_LOCKS 1048576
64 1.2 ad #define LD_SLOP 16
65 1.2 ad
66 1.2 ad #define LD_LOCKED 0x01
67 1.2 ad #define LD_SLEEPER 0x02
68 1.2 ad
69 1.23 ad #define LD_WRITE_LOCK 0x80000000
70 1.23 ad
71 1.2 ad typedef struct lockdebug {
72 1.16 yamt struct rb_node ld_rb_node; /* must be the first member */
73 1.34 ad __cpu_simple_lock_t ld_spinlock;
74 1.2 ad _TAILQ_ENTRY(struct lockdebug, volatile) ld_chain;
75 1.2 ad _TAILQ_ENTRY(struct lockdebug, volatile) ld_achain;
76 1.2 ad volatile void *ld_lock;
77 1.2 ad lockops_t *ld_lockops;
78 1.2 ad struct lwp *ld_lwp;
79 1.2 ad uintptr_t ld_locked;
80 1.2 ad uintptr_t ld_unlocked;
81 1.10 ad uintptr_t ld_initaddr;
82 1.2 ad uint16_t ld_shares;
83 1.2 ad uint16_t ld_cpu;
84 1.2 ad uint8_t ld_flags;
85 1.2 ad uint8_t ld_shwant; /* advisory */
86 1.2 ad uint8_t ld_exwant; /* advisory */
87 1.2 ad uint8_t ld_unused;
88 1.2 ad } volatile lockdebug_t;
89 1.2 ad
90 1.2 ad typedef _TAILQ_HEAD(lockdebuglist, struct lockdebug, volatile) lockdebuglist_t;
91 1.2 ad
92 1.34 ad __cpu_simple_lock_t ld_mod_lk;
93 1.13 matt lockdebuglist_t ld_free = TAILQ_HEAD_INITIALIZER(ld_free);
94 1.13 matt lockdebuglist_t ld_all = TAILQ_HEAD_INITIALIZER(ld_all);
95 1.2 ad int ld_nfree;
96 1.2 ad int ld_freeptr;
97 1.2 ad int ld_recurse;
98 1.5 ad bool ld_nomore;
99 1.2 ad lockdebug_t ld_prime[LD_BATCH];
100 1.2 ad
101 1.34 ad static void lockdebug_abort1(lockdebug_t *, int, const char *,
102 1.34 ad const char *, bool);
103 1.34 ad static int lockdebug_more(int);
104 1.5 ad static void lockdebug_init(void);
105 1.2 ad
106 1.16 yamt static signed int
107 1.16 yamt ld_rb_compare_nodes(const struct rb_node *n1, const struct rb_node *n2)
108 1.16 yamt {
109 1.16 yamt const lockdebug_t *ld1 = (const void *)n1;
110 1.16 yamt const lockdebug_t *ld2 = (const void *)n2;
111 1.20 yamt const uintptr_t a = (uintptr_t)ld1->ld_lock;
112 1.20 yamt const uintptr_t b = (uintptr_t)ld2->ld_lock;
113 1.20 yamt
114 1.20 yamt if (a < b)
115 1.20 yamt return 1;
116 1.20 yamt if (a > b)
117 1.16 yamt return -1;
118 1.16 yamt return 0;
119 1.16 yamt }
120 1.16 yamt
121 1.16 yamt static signed int
122 1.16 yamt ld_rb_compare_key(const struct rb_node *n, const void *key)
123 1.16 yamt {
124 1.16 yamt const lockdebug_t *ld = (const void *)n;
125 1.20 yamt const uintptr_t a = (uintptr_t)ld->ld_lock;
126 1.20 yamt const uintptr_t b = (uintptr_t)key;
127 1.20 yamt
128 1.20 yamt if (a < b)
129 1.20 yamt return 1;
130 1.20 yamt if (a > b)
131 1.16 yamt return -1;
132 1.16 yamt return 0;
133 1.16 yamt }
134 1.16 yamt
135 1.16 yamt static struct rb_tree ld_rb_tree;
136 1.16 yamt
137 1.16 yamt static const struct rb_tree_ops ld_rb_tree_ops = {
138 1.16 yamt .rb_compare_nodes = ld_rb_compare_nodes,
139 1.16 yamt .rb_compare_key = ld_rb_compare_key,
140 1.16 yamt };
141 1.16 yamt
142 1.34 ad static inline lockdebug_t *
143 1.34 ad lockdebug_lookup1(volatile void *lock)
144 1.23 ad {
145 1.34 ad lockdebug_t *ld;
146 1.34 ad struct cpu_info *ci;
147 1.23 ad
148 1.34 ad ci = curcpu();
149 1.34 ad __cpu_simple_lock(&ci->ci_data.cpu_ld_lock);
150 1.34 ad ld = (lockdebug_t *)rb_tree_find_node(&ld_rb_tree, __UNVOLATILE(lock));
151 1.34 ad __cpu_simple_unlock(&ci->ci_data.cpu_ld_lock);
152 1.34 ad if (ld == NULL) {
153 1.34 ad return NULL;
154 1.34 ad }
155 1.34 ad __cpu_simple_lock(&ld->ld_spinlock);
156 1.23 ad
157 1.34 ad return ld;
158 1.2 ad }
159 1.2 ad
160 1.23 ad static void
161 1.34 ad lockdebug_lock_cpus(void)
162 1.2 ad {
163 1.34 ad CPU_INFO_ITERATOR cii;
164 1.34 ad struct cpu_info *ci;
165 1.2 ad
166 1.34 ad for (CPU_INFO_FOREACH(cii, ci)) {
167 1.34 ad __cpu_simple_lock(&ci->ci_data.cpu_ld_lock);
168 1.34 ad }
169 1.23 ad }
170 1.23 ad
171 1.23 ad static void
172 1.34 ad lockdebug_unlock_cpus(void)
173 1.23 ad {
174 1.34 ad CPU_INFO_ITERATOR cii;
175 1.34 ad struct cpu_info *ci;
176 1.23 ad
177 1.34 ad for (CPU_INFO_FOREACH(cii, ci)) {
178 1.34 ad __cpu_simple_unlock(&ci->ci_data.cpu_ld_lock);
179 1.34 ad }
180 1.2 ad }
181 1.2 ad
182 1.2 ad /*
183 1.19 yamt * lockdebug_lookup:
184 1.19 yamt *
185 1.19 yamt * Find a lockdebug structure by a pointer to a lock and return it locked.
186 1.19 yamt */
187 1.19 yamt static inline lockdebug_t *
188 1.34 ad lockdebug_lookup(volatile void *lock)
189 1.19 yamt {
190 1.19 yamt lockdebug_t *ld;
191 1.19 yamt
192 1.34 ad ld = lockdebug_lookup1(lock);
193 1.19 yamt if (ld == NULL)
194 1.19 yamt panic("lockdebug_lookup: uninitialized lock (lock=%p)", lock);
195 1.19 yamt return ld;
196 1.19 yamt }
197 1.19 yamt
198 1.19 yamt /*
199 1.2 ad * lockdebug_init:
200 1.2 ad *
201 1.2 ad * Initialize the lockdebug system. Allocate an initial pool of
202 1.2 ad * lockdebug structures before the VM system is up and running.
203 1.2 ad */
204 1.5 ad static void
205 1.2 ad lockdebug_init(void)
206 1.2 ad {
207 1.2 ad lockdebug_t *ld;
208 1.2 ad int i;
209 1.2 ad
210 1.34 ad TAILQ_INIT(&curcpu()->ci_data.cpu_ld_locks);
211 1.34 ad TAILQ_INIT(&curlwp->l_ld_locks);
212 1.34 ad __cpu_simple_lock_init(&curcpu()->ci_data.cpu_ld_lock);
213 1.34 ad __cpu_simple_lock_init(&ld_mod_lk);
214 1.15 matt
215 1.16 yamt rb_tree_init(&ld_rb_tree, &ld_rb_tree_ops);
216 1.16 yamt
217 1.2 ad ld = ld_prime;
218 1.2 ad for (i = 1, ld++; i < LD_BATCH; i++, ld++) {
219 1.34 ad __cpu_simple_lock_init(&ld->ld_spinlock);
220 1.2 ad TAILQ_INSERT_TAIL(&ld_free, ld, ld_chain);
221 1.2 ad TAILQ_INSERT_TAIL(&ld_all, ld, ld_achain);
222 1.2 ad }
223 1.2 ad ld_freeptr = 1;
224 1.2 ad ld_nfree = LD_BATCH - 1;
225 1.2 ad }
226 1.2 ad
227 1.2 ad /*
228 1.2 ad * lockdebug_alloc:
229 1.2 ad *
230 1.2 ad * A lock is being initialized, so allocate an associated debug
231 1.2 ad * structure.
232 1.2 ad */
233 1.16 yamt bool
234 1.10 ad lockdebug_alloc(volatile void *lock, lockops_t *lo, uintptr_t initaddr)
235 1.2 ad {
236 1.2 ad struct cpu_info *ci;
237 1.2 ad lockdebug_t *ld;
238 1.34 ad int s;
239 1.2 ad
240 1.27 ad if (lo == NULL || panicstr != NULL || ld_panic)
241 1.16 yamt return false;
242 1.5 ad if (ld_freeptr == 0)
243 1.5 ad lockdebug_init();
244 1.2 ad
245 1.34 ad s = splhigh();
246 1.34 ad __cpu_simple_lock(&ld_mod_lk);
247 1.34 ad if ((ld = lockdebug_lookup1(lock)) != NULL) {
248 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
249 1.34 ad lockdebug_abort1(ld, s, __func__, "already initialized", true);
250 1.27 ad return false;
251 1.19 yamt }
252 1.19 yamt
253 1.2 ad /*
254 1.2 ad * Pinch a new debug structure. We may recurse because we call
255 1.2 ad * kmem_alloc(), which may need to initialize new locks somewhere
256 1.7 skrll * down the path. If not recursing, we try to maintain at least
257 1.2 ad * LD_SLOP structures free, which should hopefully be enough to
258 1.2 ad * satisfy kmem_alloc(). If we can't provide a structure, not to
259 1.2 ad * worry: we'll just mark the lock as not having an ID.
260 1.2 ad */
261 1.23 ad ci = curcpu();
262 1.2 ad ci->ci_lkdebug_recurse++;
263 1.2 ad if (TAILQ_EMPTY(&ld_free)) {
264 1.5 ad if (ci->ci_lkdebug_recurse > 1 || ld_nomore) {
265 1.2 ad ci->ci_lkdebug_recurse--;
266 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
267 1.34 ad splx(s);
268 1.16 yamt return false;
269 1.2 ad }
270 1.34 ad s = lockdebug_more(s);
271 1.34 ad } else if (ci->ci_lkdebug_recurse == 1 && ld_nfree < LD_SLOP) {
272 1.34 ad s = lockdebug_more(s);
273 1.34 ad }
274 1.2 ad if ((ld = TAILQ_FIRST(&ld_free)) == NULL) {
275 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
276 1.34 ad splx(s);
277 1.16 yamt return false;
278 1.2 ad }
279 1.2 ad TAILQ_REMOVE(&ld_free, ld, ld_chain);
280 1.2 ad ld_nfree--;
281 1.2 ad ci->ci_lkdebug_recurse--;
282 1.2 ad
283 1.34 ad if (ld->ld_lock != NULL) {
284 1.2 ad panic("lockdebug_alloc: corrupt table");
285 1.34 ad }
286 1.2 ad
287 1.2 ad /* Initialise the structure. */
288 1.2 ad ld->ld_lock = lock;
289 1.2 ad ld->ld_lockops = lo;
290 1.2 ad ld->ld_locked = 0;
291 1.2 ad ld->ld_unlocked = 0;
292 1.2 ad ld->ld_lwp = NULL;
293 1.10 ad ld->ld_initaddr = initaddr;
294 1.35 ad ld->ld_flags = (lo->lo_type == LOCKOPS_SLEEP ? LD_SLEEPER : 0);
295 1.34 ad lockdebug_lock_cpus();
296 1.16 yamt rb_tree_insert_node(&ld_rb_tree, __UNVOLATILE(&ld->ld_rb_node));
297 1.34 ad lockdebug_unlock_cpus();
298 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
299 1.2 ad
300 1.34 ad splx(s);
301 1.16 yamt return true;
302 1.2 ad }
303 1.2 ad
304 1.2 ad /*
305 1.2 ad * lockdebug_free:
306 1.2 ad *
307 1.2 ad * A lock is being destroyed, so release debugging resources.
308 1.2 ad */
309 1.2 ad void
310 1.16 yamt lockdebug_free(volatile void *lock)
311 1.2 ad {
312 1.2 ad lockdebug_t *ld;
313 1.34 ad int s;
314 1.2 ad
315 1.27 ad if (panicstr != NULL || ld_panic)
316 1.2 ad return;
317 1.2 ad
318 1.34 ad s = splhigh();
319 1.34 ad __cpu_simple_lock(&ld_mod_lk);
320 1.34 ad ld = lockdebug_lookup(lock);
321 1.16 yamt if (ld == NULL) {
322 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
323 1.35 ad panic("lockdebug_free: destroying uninitialized object %p"
324 1.16 yamt "(ld_lock=%p)", lock, ld->ld_lock);
325 1.35 ad lockdebug_abort1(ld, s, __func__, "record follows", true);
326 1.27 ad return;
327 1.2 ad }
328 1.27 ad if ((ld->ld_flags & LD_LOCKED) != 0 || ld->ld_shares != 0) {
329 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
330 1.35 ad lockdebug_abort1(ld, s, __func__, "is locked or in use", true);
331 1.27 ad return;
332 1.27 ad }
333 1.34 ad lockdebug_lock_cpus();
334 1.16 yamt rb_tree_remove_node(&ld_rb_tree, __UNVOLATILE(&ld->ld_rb_node));
335 1.34 ad lockdebug_unlock_cpus();
336 1.2 ad ld->ld_lock = NULL;
337 1.2 ad TAILQ_INSERT_TAIL(&ld_free, ld, ld_chain);
338 1.2 ad ld_nfree++;
339 1.34 ad __cpu_simple_unlock(&ld->ld_spinlock);
340 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
341 1.34 ad splx(s);
342 1.2 ad }
343 1.2 ad
344 1.2 ad /*
345 1.2 ad * lockdebug_more:
346 1.2 ad *
347 1.2 ad * Allocate a batch of debug structures and add to the free list.
348 1.34 ad * Must be called with ld_mod_lk held.
349 1.2 ad */
350 1.34 ad static int
351 1.34 ad lockdebug_more(int s)
352 1.2 ad {
353 1.2 ad lockdebug_t *ld;
354 1.2 ad void *block;
355 1.5 ad int i, base, m;
356 1.2 ad
357 1.35 ad /*
358 1.35 ad * Can't call kmem_alloc() if in interrupt context. XXX We could
359 1.35 ad * deadlock, because we don't know which locks the caller holds.
360 1.35 ad */
361 1.35 ad if (cpu_intr_p() || (curlwp->l_pflag & LP_INTR) != 0) {
362 1.35 ad return s;
363 1.35 ad }
364 1.35 ad
365 1.2 ad while (ld_nfree < LD_SLOP) {
366 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
367 1.34 ad splx(s);
368 1.2 ad block = kmem_zalloc(LD_BATCH * sizeof(lockdebug_t), KM_SLEEP);
369 1.34 ad s = splhigh();
370 1.34 ad __cpu_simple_lock(&ld_mod_lk);
371 1.2 ad
372 1.2 ad if (block == NULL)
373 1.34 ad return s;
374 1.2 ad
375 1.2 ad if (ld_nfree > LD_SLOP) {
376 1.2 ad /* Somebody beat us to it. */
377 1.34 ad __cpu_simple_unlock(&ld_mod_lk);
378 1.34 ad splx(s);
379 1.2 ad kmem_free(block, LD_BATCH * sizeof(lockdebug_t));
380 1.34 ad s = splhigh();
381 1.34 ad __cpu_simple_lock(&ld_mod_lk);
382 1.2 ad continue;
383 1.2 ad }
384 1.2 ad
385 1.2 ad base = ld_freeptr;
386 1.2 ad ld_nfree += LD_BATCH;
387 1.2 ad ld = block;
388 1.2 ad base <<= LD_BATCH_SHIFT;
389 1.5 ad m = min(LD_MAX_LOCKS, base + LD_BATCH);
390 1.5 ad
391 1.5 ad if (m == LD_MAX_LOCKS)
392 1.5 ad ld_nomore = true;
393 1.2 ad
394 1.5 ad for (i = base; i < m; i++, ld++) {
395 1.34 ad __cpu_simple_lock_init(&ld->ld_spinlock);
396 1.2 ad TAILQ_INSERT_TAIL(&ld_free, ld, ld_chain);
397 1.2 ad TAILQ_INSERT_TAIL(&ld_all, ld, ld_achain);
398 1.2 ad }
399 1.2 ad
400 1.22 ad membar_producer();
401 1.2 ad }
402 1.34 ad
403 1.34 ad return s;
404 1.2 ad }
405 1.2 ad
406 1.2 ad /*
407 1.2 ad * lockdebug_wantlock:
408 1.2 ad *
409 1.2 ad * Process the preamble to a lock acquire.
410 1.2 ad */
411 1.2 ad void
412 1.33 ad lockdebug_wantlock(volatile void *lock, uintptr_t where, bool shared,
413 1.33 ad bool trylock)
414 1.2 ad {
415 1.2 ad struct lwp *l = curlwp;
416 1.2 ad lockdebug_t *ld;
417 1.3 thorpej bool recurse;
418 1.34 ad int s;
419 1.2 ad
420 1.2 ad (void)shared;
421 1.4 thorpej recurse = false;
422 1.2 ad
423 1.27 ad if (panicstr != NULL || ld_panic)
424 1.2 ad return;
425 1.2 ad
426 1.34 ad s = splhigh();
427 1.34 ad if ((ld = lockdebug_lookup(lock)) == NULL) {
428 1.34 ad splx(s);
429 1.2 ad return;
430 1.34 ad }
431 1.32 yamt if ((ld->ld_flags & LD_LOCKED) != 0 || ld->ld_shares != 0) {
432 1.2 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
433 1.33 ad if (ld->ld_lwp == l && !(shared && trylock))
434 1.4 thorpej recurse = true;
435 1.2 ad } else if (ld->ld_cpu == (uint16_t)cpu_number())
436 1.4 thorpej recurse = true;
437 1.2 ad }
438 1.10 ad if (cpu_intr_p()) {
439 1.27 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
440 1.34 ad lockdebug_abort1(ld, s, __func__,
441 1.10 ad "acquiring sleep lock from interrupt context",
442 1.10 ad true);
443 1.27 ad return;
444 1.27 ad }
445 1.10 ad }
446 1.2 ad if (shared)
447 1.2 ad ld->ld_shwant++;
448 1.2 ad else
449 1.2 ad ld->ld_exwant++;
450 1.27 ad if (recurse) {
451 1.34 ad lockdebug_abort1(ld, s, __func__, "locking against myself",
452 1.10 ad true);
453 1.27 ad return;
454 1.27 ad }
455 1.34 ad __cpu_simple_unlock(&ld->ld_spinlock);
456 1.34 ad splx(s);
457 1.2 ad }
458 1.2 ad
459 1.2 ad /*
460 1.2 ad * lockdebug_locked:
461 1.2 ad *
462 1.2 ad * Process a lock acquire operation.
463 1.2 ad */
464 1.2 ad void
465 1.35 ad lockdebug_locked(volatile void *lock, void *cvlock, uintptr_t where,
466 1.35 ad int shared)
467 1.2 ad {
468 1.2 ad struct lwp *l = curlwp;
469 1.2 ad lockdebug_t *ld;
470 1.34 ad int s;
471 1.2 ad
472 1.27 ad if (panicstr != NULL || ld_panic)
473 1.2 ad return;
474 1.2 ad
475 1.34 ad s = splhigh();
476 1.34 ad if ((ld = lockdebug_lookup(lock)) == NULL) {
477 1.34 ad splx(s);
478 1.2 ad return;
479 1.34 ad }
480 1.35 ad if (cvlock) {
481 1.35 ad KASSERT(ld->ld_lockops->lo_type == LOCKOPS_CV);
482 1.35 ad if (lock == (void *)&lbolt) {
483 1.35 ad /* nothing */
484 1.35 ad } else if (ld->ld_shares++ == 0) {
485 1.35 ad ld->ld_locked = (uintptr_t)cvlock;
486 1.35 ad } else if (cvlock != (void *)ld->ld_locked) {
487 1.35 ad lockdebug_abort1(ld, s, __func__, "multiple locks used"
488 1.35 ad " with condition variable", true);
489 1.35 ad return;
490 1.35 ad }
491 1.35 ad } else if (shared) {
492 1.2 ad l->l_shlocks++;
493 1.2 ad ld->ld_shares++;
494 1.2 ad ld->ld_shwant--;
495 1.2 ad } else {
496 1.27 ad if ((ld->ld_flags & LD_LOCKED) != 0) {
497 1.34 ad lockdebug_abort1(ld, s, __func__, "already locked",
498 1.34 ad true);
499 1.27 ad return;
500 1.27 ad }
501 1.2 ad ld->ld_flags |= LD_LOCKED;
502 1.2 ad ld->ld_locked = where;
503 1.2 ad ld->ld_exwant--;
504 1.2 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
505 1.34 ad TAILQ_INSERT_TAIL(&l->l_ld_locks, ld, ld_chain);
506 1.2 ad } else {
507 1.34 ad TAILQ_INSERT_TAIL(&curcpu()->ci_data.cpu_ld_locks,
508 1.34 ad ld, ld_chain);
509 1.2 ad }
510 1.2 ad }
511 1.32 yamt ld->ld_cpu = (uint16_t)cpu_number();
512 1.32 yamt ld->ld_lwp = l;
513 1.34 ad __cpu_simple_unlock(&ld->ld_spinlock);
514 1.34 ad splx(s);
515 1.2 ad }
516 1.2 ad
517 1.2 ad /*
518 1.2 ad * lockdebug_unlocked:
519 1.2 ad *
520 1.2 ad * Process a lock release operation.
521 1.2 ad */
522 1.2 ad void
523 1.16 yamt lockdebug_unlocked(volatile void *lock, uintptr_t where, int shared)
524 1.2 ad {
525 1.2 ad struct lwp *l = curlwp;
526 1.2 ad lockdebug_t *ld;
527 1.34 ad int s;
528 1.2 ad
529 1.27 ad if (panicstr != NULL || ld_panic)
530 1.2 ad return;
531 1.2 ad
532 1.34 ad s = splhigh();
533 1.34 ad if ((ld = lockdebug_lookup(lock)) == NULL) {
534 1.34 ad splx(s);
535 1.2 ad return;
536 1.34 ad }
537 1.35 ad if (ld->ld_lockops->lo_type == LOCKOPS_CV) {
538 1.35 ad if (lock == (void *)&lbolt) {
539 1.35 ad /* nothing */
540 1.35 ad } else {
541 1.35 ad ld->ld_shares--;
542 1.35 ad }
543 1.35 ad } else if (shared) {
544 1.27 ad if (l->l_shlocks == 0) {
545 1.34 ad lockdebug_abort1(ld, s, __func__,
546 1.10 ad "no shared locks held by LWP", true);
547 1.27 ad return;
548 1.27 ad }
549 1.27 ad if (ld->ld_shares == 0) {
550 1.34 ad lockdebug_abort1(ld, s, __func__,
551 1.10 ad "no shared holds on this lock", true);
552 1.27 ad return;
553 1.27 ad }
554 1.2 ad l->l_shlocks--;
555 1.2 ad ld->ld_shares--;
556 1.32 yamt if (ld->ld_lwp == l)
557 1.32 yamt ld->ld_lwp = NULL;
558 1.32 yamt if (ld->ld_cpu == (uint16_t)cpu_number())
559 1.32 yamt ld->ld_cpu = (uint16_t)-1;
560 1.2 ad } else {
561 1.27 ad if ((ld->ld_flags & LD_LOCKED) == 0) {
562 1.34 ad lockdebug_abort1(ld, s, __func__, "not locked", true);
563 1.27 ad return;
564 1.27 ad }
565 1.2 ad
566 1.2 ad if ((ld->ld_flags & LD_SLEEPER) != 0) {
567 1.27 ad if (ld->ld_lwp != curlwp) {
568 1.34 ad lockdebug_abort1(ld, s, __func__,
569 1.10 ad "not held by current LWP", true);
570 1.27 ad return;
571 1.27 ad }
572 1.2 ad ld->ld_flags &= ~LD_LOCKED;
573 1.2 ad ld->ld_unlocked = where;
574 1.2 ad ld->ld_lwp = NULL;
575 1.34 ad TAILQ_REMOVE(&l->l_ld_locks, ld, ld_chain);
576 1.2 ad } else {
577 1.27 ad if (ld->ld_cpu != (uint16_t)cpu_number()) {
578 1.34 ad lockdebug_abort1(ld, s, __func__,
579 1.10 ad "not held by current CPU", true);
580 1.27 ad return;
581 1.27 ad }
582 1.2 ad ld->ld_flags &= ~LD_LOCKED;
583 1.2 ad ld->ld_unlocked = where;
584 1.2 ad ld->ld_lwp = NULL;
585 1.34 ad TAILQ_REMOVE(&curcpu()->ci_data.cpu_ld_locks, ld,
586 1.34 ad ld_chain);
587 1.2 ad }
588 1.2 ad }
589 1.34 ad __cpu_simple_unlock(&ld->ld_spinlock);
590 1.34 ad splx(s);
591 1.2 ad }
592 1.2 ad
593 1.2 ad /*
594 1.35 ad * lockdebug_wakeup:
595 1.35 ad *
596 1.35 ad * Process a wakeup on a condition variable.
597 1.35 ad */
598 1.35 ad void
599 1.35 ad lockdebug_wakeup(volatile void *lock, uintptr_t where)
600 1.35 ad {
601 1.35 ad lockdebug_t *ld;
602 1.35 ad int s;
603 1.35 ad
604 1.35 ad if (panicstr != NULL || ld_panic || lock == (void *)&lbolt)
605 1.35 ad return;
606 1.35 ad
607 1.35 ad s = splhigh();
608 1.35 ad /* Find the CV... */
609 1.35 ad if ((ld = lockdebug_lookup(lock)) == NULL) {
610 1.35 ad splx(s);
611 1.35 ad return;
612 1.35 ad }
613 1.35 ad /*
614 1.35 ad * If it has any waiters, ensure that they are using the
615 1.35 ad * same interlock.
616 1.35 ad */
617 1.35 ad if (ld->ld_shares != 0 && !mutex_owned((kmutex_t *)ld->ld_locked)) {
618 1.35 ad lockdebug_abort1(ld, s, __func__, "interlocking mutex not "
619 1.35 ad "held during wakeup", true);
620 1.35 ad return;
621 1.35 ad }
622 1.35 ad __cpu_simple_unlock(&ld->ld_spinlock);
623 1.35 ad splx(s);
624 1.35 ad }
625 1.35 ad
626 1.35 ad /*
627 1.2 ad * lockdebug_barrier:
628 1.2 ad *
629 1.2 ad * Panic if we hold more than one specified spin lock, and optionally,
630 1.2 ad * if we hold sleep locks.
631 1.2 ad */
632 1.2 ad void
633 1.2 ad lockdebug_barrier(volatile void *spinlock, int slplocks)
634 1.2 ad {
635 1.2 ad struct lwp *l = curlwp;
636 1.2 ad lockdebug_t *ld;
637 1.34 ad int s;
638 1.2 ad
639 1.27 ad if (panicstr != NULL || ld_panic)
640 1.2 ad return;
641 1.2 ad
642 1.34 ad s = splhigh();
643 1.34 ad if ((l->l_pflag & LP_INTR) == 0) {
644 1.34 ad TAILQ_FOREACH(ld, &curcpu()->ci_data.cpu_ld_locks, ld_chain) {
645 1.2 ad if (ld->ld_lock == spinlock) {
646 1.2 ad continue;
647 1.2 ad }
648 1.34 ad __cpu_simple_lock(&ld->ld_spinlock);
649 1.34 ad lockdebug_abort1(ld, s, __func__,
650 1.34 ad "spin lock held", true);
651 1.34 ad return;
652 1.2 ad }
653 1.2 ad }
654 1.34 ad if (slplocks) {
655 1.34 ad splx(s);
656 1.34 ad return;
657 1.34 ad }
658 1.34 ad if ((ld = TAILQ_FIRST(&l->l_ld_locks)) != NULL) {
659 1.34 ad __cpu_simple_lock(&ld->ld_spinlock);
660 1.34 ad lockdebug_abort1(ld, s, __func__, "sleep lock held", true);
661 1.34 ad return;
662 1.34 ad }
663 1.34 ad splx(s);
664 1.34 ad if (l->l_shlocks != 0) {
665 1.34 ad panic("lockdebug_barrier: holding %d shared locks",
666 1.34 ad l->l_shlocks);
667 1.2 ad }
668 1.2 ad }
669 1.2 ad
670 1.2 ad /*
671 1.10 ad * lockdebug_mem_check:
672 1.10 ad *
673 1.10 ad * Check for in-use locks within a memory region that is
674 1.16 yamt * being freed.
675 1.10 ad */
676 1.10 ad void
677 1.10 ad lockdebug_mem_check(const char *func, void *base, size_t sz)
678 1.10 ad {
679 1.16 yamt lockdebug_t *ld;
680 1.34 ad struct cpu_info *ci;
681 1.23 ad int s;
682 1.10 ad
683 1.27 ad if (panicstr != NULL || ld_panic)
684 1.24 ad return;
685 1.24 ad
686 1.34 ad s = splhigh();
687 1.34 ad ci = curcpu();
688 1.34 ad __cpu_simple_lock(&ci->ci_data.cpu_ld_lock);
689 1.16 yamt ld = (lockdebug_t *)rb_tree_find_node_geq(&ld_rb_tree, base);
690 1.23 ad if (ld != NULL) {
691 1.23 ad const uintptr_t lock = (uintptr_t)ld->ld_lock;
692 1.23 ad
693 1.23 ad if ((uintptr_t)base > lock)
694 1.23 ad panic("%s: corrupt tree ld=%p, base=%p, sz=%zu",
695 1.23 ad __func__, ld, base, sz);
696 1.23 ad if (lock >= (uintptr_t)base + sz)
697 1.23 ad ld = NULL;
698 1.23 ad }
699 1.34 ad __cpu_simple_unlock(&ci->ci_data.cpu_ld_lock);
700 1.34 ad if (ld != NULL) {
701 1.34 ad __cpu_simple_lock(&ld->ld_spinlock);
702 1.34 ad lockdebug_abort1(ld, s, func,
703 1.34 ad "allocation contains active lock", !cold);
704 1.16 yamt return;
705 1.34 ad }
706 1.34 ad splx(s);
707 1.10 ad }
708 1.10 ad
709 1.10 ad /*
710 1.2 ad * lockdebug_dump:
711 1.2 ad *
712 1.2 ad * Dump information about a lock on panic, or for DDB.
713 1.2 ad */
714 1.2 ad static void
715 1.2 ad lockdebug_dump(lockdebug_t *ld, void (*pr)(const char *, ...))
716 1.2 ad {
717 1.2 ad int sleeper = (ld->ld_flags & LD_SLEEPER);
718 1.2 ad
719 1.2 ad (*pr)(
720 1.2 ad "lock address : %#018lx type : %18s\n"
721 1.35 ad "initialized : %#018lx",
722 1.2 ad (long)ld->ld_lock, (sleeper ? "sleep/adaptive" : "spin"),
723 1.10 ad (long)ld->ld_initaddr);
724 1.2 ad
725 1.35 ad if (ld->ld_lockops->lo_type == LOCKOPS_CV) {
726 1.35 ad (*pr)(" interlock: %#018lx\n", ld->ld_locked);
727 1.35 ad } else {
728 1.35 ad (*pr)("\n"
729 1.35 ad "shared holds : %18u exclusive: %18u\n"
730 1.35 ad "shares wanted: %18u exclusive: %18u\n"
731 1.35 ad "current cpu : %18u last held: %18u\n"
732 1.35 ad "current lwp : %#018lx last held: %#018lx\n"
733 1.35 ad "last locked : %#018lx unlocked : %#018lx\n",
734 1.35 ad (unsigned)ld->ld_shares, ((ld->ld_flags & LD_LOCKED) != 0),
735 1.35 ad (unsigned)ld->ld_shwant, (unsigned)ld->ld_exwant,
736 1.35 ad (unsigned)cpu_number(), (unsigned)ld->ld_cpu,
737 1.35 ad (long)curlwp, (long)ld->ld_lwp,
738 1.35 ad (long)ld->ld_locked, (long)ld->ld_unlocked);
739 1.35 ad }
740 1.35 ad
741 1.2 ad if (ld->ld_lockops->lo_dump != NULL)
742 1.2 ad (*ld->ld_lockops->lo_dump)(ld->ld_lock);
743 1.2 ad
744 1.2 ad if (sleeper) {
745 1.2 ad (*pr)("\n");
746 1.2 ad turnstile_print(ld->ld_lock, pr);
747 1.2 ad }
748 1.2 ad }
749 1.2 ad
750 1.2 ad /*
751 1.27 ad * lockdebug_abort1:
752 1.2 ad *
753 1.27 ad * An error has been trapped - dump lock info and panic.
754 1.2 ad */
755 1.5 ad static void
756 1.34 ad lockdebug_abort1(lockdebug_t *ld, int s, const char *func,
757 1.10 ad const char *msg, bool dopanic)
758 1.2 ad {
759 1.2 ad
760 1.27 ad /*
761 1.27 ad * Don't make the situation wose if the system is already going
762 1.27 ad * down in flames. Once a panic is triggered, lockdebug state
763 1.27 ad * becomes stale and cannot be trusted.
764 1.27 ad */
765 1.27 ad if (atomic_inc_uint_nv(&ld_panic) != 1) {
766 1.34 ad __cpu_simple_unlock(&ld->ld_spinlock);
767 1.34 ad splx(s);
768 1.27 ad return;
769 1.27 ad }
770 1.27 ad
771 1.2 ad printf_nolog("%s error: %s: %s\n\n", ld->ld_lockops->lo_name,
772 1.2 ad func, msg);
773 1.2 ad lockdebug_dump(ld, printf_nolog);
774 1.34 ad __cpu_simple_unlock(&ld->ld_spinlock);
775 1.34 ad splx(s);
776 1.2 ad printf_nolog("\n");
777 1.10 ad if (dopanic)
778 1.10 ad panic("LOCKDEBUG");
779 1.2 ad }
780 1.2 ad
781 1.2 ad #endif /* LOCKDEBUG */
782 1.2 ad
783 1.2 ad /*
784 1.2 ad * lockdebug_lock_print:
785 1.2 ad *
786 1.2 ad * Handle the DDB 'show lock' command.
787 1.2 ad */
788 1.2 ad #ifdef DDB
789 1.2 ad void
790 1.2 ad lockdebug_lock_print(void *addr, void (*pr)(const char *, ...))
791 1.2 ad {
792 1.2 ad #ifdef LOCKDEBUG
793 1.2 ad lockdebug_t *ld;
794 1.2 ad
795 1.2 ad TAILQ_FOREACH(ld, &ld_all, ld_achain) {
796 1.2 ad if (ld->ld_lock == addr) {
797 1.2 ad lockdebug_dump(ld, pr);
798 1.2 ad return;
799 1.2 ad }
800 1.2 ad }
801 1.2 ad (*pr)("Sorry, no record of a lock with address %p found.\n", addr);
802 1.2 ad #else
803 1.2 ad (*pr)("Sorry, kernel not built with the LOCKDEBUG option.\n");
804 1.2 ad #endif /* LOCKDEBUG */
805 1.2 ad }
806 1.2 ad #endif /* DDB */
807 1.2 ad
808 1.2 ad /*
809 1.2 ad * lockdebug_abort:
810 1.2 ad *
811 1.2 ad * An error has been trapped - dump lock info and call panic().
812 1.2 ad */
813 1.2 ad void
814 1.16 yamt lockdebug_abort(volatile void *lock, lockops_t *ops, const char *func,
815 1.16 yamt const char *msg)
816 1.2 ad {
817 1.2 ad #ifdef LOCKDEBUG
818 1.2 ad lockdebug_t *ld;
819 1.34 ad int s;
820 1.2 ad
821 1.34 ad s = splhigh();
822 1.34 ad if ((ld = lockdebug_lookup(lock)) != NULL) {
823 1.34 ad lockdebug_abort1(ld, s, func, msg, true);
824 1.34 ad return;
825 1.2 ad }
826 1.34 ad splx(s);
827 1.2 ad #endif /* LOCKDEBUG */
828 1.2 ad
829 1.27 ad /*
830 1.27 ad * Complain first on the occurrance only. Otherwise proceeed to
831 1.27 ad * panic where we will `rendezvous' with other CPUs if the machine
832 1.27 ad * is going down in flames.
833 1.27 ad */
834 1.27 ad if (atomic_inc_uint_nv(&ld_panic) == 1) {
835 1.27 ad printf_nolog("%s error: %s: %s\n\n"
836 1.27 ad "lock address : %#018lx\n"
837 1.27 ad "current cpu : %18d\n"
838 1.27 ad "current lwp : %#018lx\n",
839 1.27 ad ops->lo_name, func, msg, (long)lock, (int)cpu_number(),
840 1.27 ad (long)curlwp);
841 1.27 ad (*ops->lo_dump)(lock);
842 1.27 ad printf_nolog("\n");
843 1.27 ad }
844 1.2 ad
845 1.2 ad panic("lock error");
846 1.2 ad }
847