xref: /linux/kernel/debug/debug_core.c (revision 02680c23d7b3febe45ea3d4f9818c2b2dc89020a)
1 /*
2  * Kernel Debug Core
3  *
4  * Maintainer: Jason Wessel <jason.wessel@windriver.com>
5  *
6  * Copyright (C) 2000-2001 VERITAS Software Corporation.
7  * Copyright (C) 2002-2004 Timesys Corporation
8  * Copyright (C) 2003-2004 Amit S. Kale <amitkale@linsyssoft.com>
9  * Copyright (C) 2004 Pavel Machek <pavel@ucw.cz>
10  * Copyright (C) 2004-2006 Tom Rini <trini@kernel.crashing.org>
11  * Copyright (C) 2004-2006 LinSysSoft Technologies Pvt. Ltd.
12  * Copyright (C) 2005-2009 Wind River Systems, Inc.
13  * Copyright (C) 2007 MontaVista Software, Inc.
14  * Copyright (C) 2008 Red Hat, Inc., Ingo Molnar <mingo@redhat.com>
15  *
16  * Contributors at various stages not listed above:
17  *  Jason Wessel ( jason.wessel@windriver.com )
18  *  George Anzinger <george@mvista.com>
19  *  Anurekh Saxena (anurekh.saxena@timesys.com)
20  *  Lake Stevens Instrument Division (Glenn Engel)
21  *  Jim Kingdon, Cygnus Support.
22  *
23  * Original KGDB stub: David Grothe <dave@gcom.com>,
24  * Tigran Aivazian <tigran@sco.com>
25  *
26  * This file is licensed under the terms of the GNU General Public License
27  * version 2. This program is licensed "as is" without any warranty of any
28  * kind, whether express or implied.
29  */
30 
31 #define pr_fmt(fmt) "KGDB: " fmt
32 
33 #include <linux/pid_namespace.h>
34 #include <linux/clocksource.h>
35 #include <linux/serial_core.h>
36 #include <linux/interrupt.h>
37 #include <linux/spinlock.h>
38 #include <linux/console.h>
39 #include <linux/threads.h>
40 #include <linux/uaccess.h>
41 #include <linux/kernel.h>
42 #include <linux/module.h>
43 #include <linux/ptrace.h>
44 #include <linux/string.h>
45 #include <linux/delay.h>
46 #include <linux/sched.h>
47 #include <linux/sysrq.h>
48 #include <linux/reboot.h>
49 #include <linux/init.h>
50 #include <linux/kgdb.h>
51 #include <linux/kdb.h>
52 #include <linux/nmi.h>
53 #include <linux/pid.h>
54 #include <linux/smp.h>
55 #include <linux/mm.h>
56 #include <linux/vmacache.h>
57 #include <linux/rcupdate.h>
58 #include <linux/irq.h>
59 
60 #include <asm/cacheflush.h>
61 #include <asm/byteorder.h>
62 #include <linux/atomic.h>
63 
64 #include "debug_core.h"
65 
66 static int kgdb_break_asap;
67 
68 struct debuggerinfo_struct kgdb_info[NR_CPUS];
69 
70 /* kgdb_connected - Is a host GDB connected to us? */
71 int				kgdb_connected;
72 EXPORT_SYMBOL_GPL(kgdb_connected);
73 
74 /* All the KGDB handlers are installed */
75 int			kgdb_io_module_registered;
76 
77 /* Guard for recursive entry */
78 static int			exception_level;
79 
80 struct kgdb_io		*dbg_io_ops;
81 static DEFINE_SPINLOCK(kgdb_registration_lock);
82 
83 /* Action for the reboot notifier, a global allow kdb to change it */
84 static int kgdbreboot;
85 /* kgdb console driver is loaded */
86 static int kgdb_con_registered;
87 /* determine if kgdb console output should be used */
88 static int kgdb_use_con;
89 /* Flag for alternate operations for early debugging */
90 bool dbg_is_early = true;
91 /* Next cpu to become the master debug core */
92 int dbg_switch_cpu;
93 
94 /* Use kdb or gdbserver mode */
95 int dbg_kdb_mode = 1;
96 
97 module_param(kgdb_use_con, int, 0644);
98 module_param(kgdbreboot, int, 0644);
99 
100 /*
101  * Holds information about breakpoints in a kernel. These breakpoints are
102  * added and removed by gdb.
103  */
104 static struct kgdb_bkpt		kgdb_break[KGDB_MAX_BREAKPOINTS] = {
105 	[0 ... KGDB_MAX_BREAKPOINTS-1] = { .state = BP_UNDEFINED }
106 };
107 
108 /*
109  * The CPU# of the active CPU, or -1 if none:
110  */
111 atomic_t			kgdb_active = ATOMIC_INIT(-1);
112 EXPORT_SYMBOL_GPL(kgdb_active);
113 static DEFINE_RAW_SPINLOCK(dbg_master_lock);
114 static DEFINE_RAW_SPINLOCK(dbg_slave_lock);
115 
116 /*
117  * We use NR_CPUs not PERCPU, in case kgdb is used to debug early
118  * bootup code (which might not have percpu set up yet):
119  */
120 static atomic_t			masters_in_kgdb;
121 static atomic_t			slaves_in_kgdb;
122 atomic_t			kgdb_setting_breakpoint;
123 
124 struct task_struct		*kgdb_usethread;
125 struct task_struct		*kgdb_contthread;
126 
127 int				kgdb_single_step;
128 static pid_t			kgdb_sstep_pid;
129 
130 /* to keep track of the CPU which is doing the single stepping*/
131 atomic_t			kgdb_cpu_doing_single_step = ATOMIC_INIT(-1);
132 
133 /*
134  * If you are debugging a problem where roundup (the collection of
135  * all other CPUs) is a problem [this should be extremely rare],
136  * then use the nokgdbroundup option to avoid roundup. In that case
137  * the other CPUs might interfere with your debugging context, so
138  * use this with care:
139  */
140 static int kgdb_do_roundup = 1;
141 
142 static int __init opt_nokgdbroundup(char *str)
143 {
144 	kgdb_do_roundup = 0;
145 
146 	return 0;
147 }
148 
149 early_param("nokgdbroundup", opt_nokgdbroundup);
150 
151 /*
152  * Finally, some KGDB code :-)
153  */
154 
155 /*
156  * Weak aliases for breakpoint management,
157  * can be overridden by architectures when needed:
158  */
159 int __weak kgdb_arch_set_breakpoint(struct kgdb_bkpt *bpt)
160 {
161 	int err;
162 
163 	err = copy_from_kernel_nofault(bpt->saved_instr, (char *)bpt->bpt_addr,
164 				BREAK_INSTR_SIZE);
165 	if (err)
166 		return err;
167 	err = copy_to_kernel_nofault((char *)bpt->bpt_addr,
168 				 arch_kgdb_ops.gdb_bpt_instr, BREAK_INSTR_SIZE);
169 	return err;
170 }
171 NOKPROBE_SYMBOL(kgdb_arch_set_breakpoint);
172 
173 int __weak kgdb_arch_remove_breakpoint(struct kgdb_bkpt *bpt)
174 {
175 	return copy_to_kernel_nofault((char *)bpt->bpt_addr,
176 				  (char *)bpt->saved_instr, BREAK_INSTR_SIZE);
177 }
178 NOKPROBE_SYMBOL(kgdb_arch_remove_breakpoint);
179 
180 int __weak kgdb_validate_break_address(unsigned long addr)
181 {
182 	struct kgdb_bkpt tmp;
183 	int err;
184 
185 	if (kgdb_within_blocklist(addr))
186 		return -EINVAL;
187 
188 	/* Validate setting the breakpoint and then removing it.  If the
189 	 * remove fails, the kernel needs to emit a bad message because we
190 	 * are deep trouble not being able to put things back the way we
191 	 * found them.
192 	 */
193 	tmp.bpt_addr = addr;
194 	err = kgdb_arch_set_breakpoint(&tmp);
195 	if (err)
196 		return err;
197 	err = kgdb_arch_remove_breakpoint(&tmp);
198 	if (err)
199 		pr_err("Critical breakpoint error, kernel memory destroyed at: %lx\n",
200 		       addr);
201 	return err;
202 }
203 
204 unsigned long __weak kgdb_arch_pc(int exception, struct pt_regs *regs)
205 {
206 	return instruction_pointer(regs);
207 }
208 NOKPROBE_SYMBOL(kgdb_arch_pc);
209 
210 int __weak kgdb_arch_init(void)
211 {
212 	return 0;
213 }
214 
215 int __weak kgdb_skipexception(int exception, struct pt_regs *regs)
216 {
217 	return 0;
218 }
219 NOKPROBE_SYMBOL(kgdb_skipexception);
220 
221 #ifdef CONFIG_SMP
222 
223 /*
224  * Default (weak) implementation for kgdb_roundup_cpus
225  */
226 
227 void __weak kgdb_call_nmi_hook(void *ignored)
228 {
229 	/*
230 	 * NOTE: get_irq_regs() is supposed to get the registers from
231 	 * before the IPI interrupt happened and so is supposed to
232 	 * show where the processor was.  In some situations it's
233 	 * possible we might be called without an IPI, so it might be
234 	 * safer to figure out how to make kgdb_breakpoint() work
235 	 * properly here.
236 	 */
237 	kgdb_nmicallback(raw_smp_processor_id(), get_irq_regs());
238 }
239 NOKPROBE_SYMBOL(kgdb_call_nmi_hook);
240 
241 static DEFINE_PER_CPU(call_single_data_t, kgdb_roundup_csd) =
242 	CSD_INIT(kgdb_call_nmi_hook, NULL);
243 
244 void __weak kgdb_roundup_cpus(void)
245 {
246 	call_single_data_t *csd;
247 	int this_cpu = raw_smp_processor_id();
248 	int cpu;
249 	int ret;
250 
251 	for_each_online_cpu(cpu) {
252 		/* No need to roundup ourselves */
253 		if (cpu == this_cpu)
254 			continue;
255 
256 		csd = &per_cpu(kgdb_roundup_csd, cpu);
257 
258 		/*
259 		 * If it didn't round up last time, don't try again
260 		 * since smp_call_function_single_async() will block.
261 		 *
262 		 * If rounding_up is false then we know that the
263 		 * previous call must have at least started and that
264 		 * means smp_call_function_single_async() won't block.
265 		 */
266 		if (kgdb_info[cpu].rounding_up)
267 			continue;
268 		kgdb_info[cpu].rounding_up = true;
269 
270 		ret = smp_call_function_single_async(cpu, csd);
271 		if (ret)
272 			kgdb_info[cpu].rounding_up = false;
273 	}
274 }
275 NOKPROBE_SYMBOL(kgdb_roundup_cpus);
276 
277 #endif
278 
279 /*
280  * Some architectures need cache flushes when we set/clear a
281  * breakpoint:
282  */
283 static void kgdb_flush_swbreak_addr(unsigned long addr)
284 {
285 	if (!CACHE_FLUSH_IS_SAFE)
286 		return;
287 
288 	if (current->mm) {
289 		int i;
290 
291 		for (i = 0; i < VMACACHE_SIZE; i++) {
292 			if (!current->vmacache.vmas[i])
293 				continue;
294 			flush_cache_range(current->vmacache.vmas[i],
295 					  addr, addr + BREAK_INSTR_SIZE);
296 		}
297 	}
298 
299 	/* Force flush instruction cache if it was outside the mm */
300 	flush_icache_range(addr, addr + BREAK_INSTR_SIZE);
301 }
302 NOKPROBE_SYMBOL(kgdb_flush_swbreak_addr);
303 
304 /*
305  * SW breakpoint management:
306  */
307 int dbg_activate_sw_breakpoints(void)
308 {
309 	int error;
310 	int ret = 0;
311 	int i;
312 
313 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
314 		if (kgdb_break[i].state != BP_SET)
315 			continue;
316 
317 		error = kgdb_arch_set_breakpoint(&kgdb_break[i]);
318 		if (error) {
319 			ret = error;
320 			pr_info("BP install failed: %lx\n",
321 				kgdb_break[i].bpt_addr);
322 			continue;
323 		}
324 
325 		kgdb_flush_swbreak_addr(kgdb_break[i].bpt_addr);
326 		kgdb_break[i].state = BP_ACTIVE;
327 	}
328 	return ret;
329 }
330 NOKPROBE_SYMBOL(dbg_activate_sw_breakpoints);
331 
332 int dbg_set_sw_break(unsigned long addr)
333 {
334 	int err = kgdb_validate_break_address(addr);
335 	int breakno = -1;
336 	int i;
337 
338 	if (err)
339 		return err;
340 
341 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
342 		if ((kgdb_break[i].state == BP_SET) &&
343 					(kgdb_break[i].bpt_addr == addr))
344 			return -EEXIST;
345 	}
346 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
347 		if (kgdb_break[i].state == BP_REMOVED &&
348 					kgdb_break[i].bpt_addr == addr) {
349 			breakno = i;
350 			break;
351 		}
352 	}
353 
354 	if (breakno == -1) {
355 		for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
356 			if (kgdb_break[i].state == BP_UNDEFINED) {
357 				breakno = i;
358 				break;
359 			}
360 		}
361 	}
362 
363 	if (breakno == -1)
364 		return -E2BIG;
365 
366 	kgdb_break[breakno].state = BP_SET;
367 	kgdb_break[breakno].type = BP_BREAKPOINT;
368 	kgdb_break[breakno].bpt_addr = addr;
369 
370 	return 0;
371 }
372 
373 int dbg_deactivate_sw_breakpoints(void)
374 {
375 	int error;
376 	int ret = 0;
377 	int i;
378 
379 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
380 		if (kgdb_break[i].state != BP_ACTIVE)
381 			continue;
382 		error = kgdb_arch_remove_breakpoint(&kgdb_break[i]);
383 		if (error) {
384 			pr_info("BP remove failed: %lx\n",
385 				kgdb_break[i].bpt_addr);
386 			ret = error;
387 		}
388 
389 		kgdb_flush_swbreak_addr(kgdb_break[i].bpt_addr);
390 		kgdb_break[i].state = BP_SET;
391 	}
392 	return ret;
393 }
394 NOKPROBE_SYMBOL(dbg_deactivate_sw_breakpoints);
395 
396 int dbg_remove_sw_break(unsigned long addr)
397 {
398 	int i;
399 
400 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
401 		if ((kgdb_break[i].state == BP_SET) &&
402 				(kgdb_break[i].bpt_addr == addr)) {
403 			kgdb_break[i].state = BP_REMOVED;
404 			return 0;
405 		}
406 	}
407 	return -ENOENT;
408 }
409 
410 int kgdb_isremovedbreak(unsigned long addr)
411 {
412 	int i;
413 
414 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
415 		if ((kgdb_break[i].state == BP_REMOVED) &&
416 					(kgdb_break[i].bpt_addr == addr))
417 			return 1;
418 	}
419 	return 0;
420 }
421 
422 int kgdb_has_hit_break(unsigned long addr)
423 {
424 	int i;
425 
426 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
427 		if (kgdb_break[i].state == BP_ACTIVE &&
428 		    kgdb_break[i].bpt_addr == addr)
429 			return 1;
430 	}
431 	return 0;
432 }
433 
434 int dbg_remove_all_break(void)
435 {
436 	int error;
437 	int i;
438 
439 	/* Clear memory breakpoints. */
440 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
441 		if (kgdb_break[i].state != BP_ACTIVE)
442 			goto setundefined;
443 		error = kgdb_arch_remove_breakpoint(&kgdb_break[i]);
444 		if (error)
445 			pr_err("breakpoint remove failed: %lx\n",
446 			       kgdb_break[i].bpt_addr);
447 setundefined:
448 		kgdb_break[i].state = BP_UNDEFINED;
449 	}
450 
451 	/* Clear hardware breakpoints. */
452 	if (arch_kgdb_ops.remove_all_hw_break)
453 		arch_kgdb_ops.remove_all_hw_break();
454 
455 	return 0;
456 }
457 
458 void kgdb_free_init_mem(void)
459 {
460 	int i;
461 
462 	/* Clear init memory breakpoints. */
463 	for (i = 0; i < KGDB_MAX_BREAKPOINTS; i++) {
464 		if (init_section_contains((void *)kgdb_break[i].bpt_addr, 0))
465 			kgdb_break[i].state = BP_UNDEFINED;
466 	}
467 }
468 
469 #ifdef CONFIG_KGDB_KDB
470 void kdb_dump_stack_on_cpu(int cpu)
471 {
472 	if (cpu == raw_smp_processor_id() || !IS_ENABLED(CONFIG_SMP)) {
473 		dump_stack();
474 		return;
475 	}
476 
477 	if (!(kgdb_info[cpu].exception_state & DCPU_IS_SLAVE)) {
478 		kdb_printf("ERROR: Task on cpu %d didn't stop in the debugger\n",
479 			   cpu);
480 		return;
481 	}
482 
483 	/*
484 	 * In general, architectures don't support dumping the stack of a
485 	 * "running" process that's not the current one.  From the point of
486 	 * view of the Linux, kernel processes that are looping in the kgdb
487 	 * slave loop are still "running".  There's also no API (that actually
488 	 * works across all architectures) that can do a stack crawl based
489 	 * on registers passed as a parameter.
490 	 *
491 	 * Solve this conundrum by asking slave CPUs to do the backtrace
492 	 * themselves.
493 	 */
494 	kgdb_info[cpu].exception_state |= DCPU_WANT_BT;
495 	while (kgdb_info[cpu].exception_state & DCPU_WANT_BT)
496 		cpu_relax();
497 }
498 #endif
499 
500 /*
501  * Return true if there is a valid kgdb I/O module.  Also if no
502  * debugger is attached a message can be printed to the console about
503  * waiting for the debugger to attach.
504  *
505  * The print_wait argument is only to be true when called from inside
506  * the core kgdb_handle_exception, because it will wait for the
507  * debugger to attach.
508  */
509 static int kgdb_io_ready(int print_wait)
510 {
511 	if (!dbg_io_ops)
512 		return 0;
513 	if (kgdb_connected)
514 		return 1;
515 	if (atomic_read(&kgdb_setting_breakpoint))
516 		return 1;
517 	if (print_wait) {
518 #ifdef CONFIG_KGDB_KDB
519 		if (!dbg_kdb_mode)
520 			pr_crit("waiting... or $3#33 for KDB\n");
521 #else
522 		pr_crit("Waiting for remote debugger\n");
523 #endif
524 	}
525 	return 1;
526 }
527 NOKPROBE_SYMBOL(kgdb_io_ready);
528 
529 static int kgdb_reenter_check(struct kgdb_state *ks)
530 {
531 	unsigned long addr;
532 
533 	if (atomic_read(&kgdb_active) != raw_smp_processor_id())
534 		return 0;
535 
536 	/* Panic on recursive debugger calls: */
537 	exception_level++;
538 	addr = kgdb_arch_pc(ks->ex_vector, ks->linux_regs);
539 	dbg_deactivate_sw_breakpoints();
540 
541 	/*
542 	 * If the break point removed ok at the place exception
543 	 * occurred, try to recover and print a warning to the end
544 	 * user because the user planted a breakpoint in a place that
545 	 * KGDB needs in order to function.
546 	 */
547 	if (dbg_remove_sw_break(addr) == 0) {
548 		exception_level = 0;
549 		kgdb_skipexception(ks->ex_vector, ks->linux_regs);
550 		dbg_activate_sw_breakpoints();
551 		pr_crit("re-enter error: breakpoint removed %lx\n", addr);
552 		WARN_ON_ONCE(1);
553 
554 		return 1;
555 	}
556 	dbg_remove_all_break();
557 	kgdb_skipexception(ks->ex_vector, ks->linux_regs);
558 
559 	if (exception_level > 1) {
560 		dump_stack();
561 		kgdb_io_module_registered = false;
562 		panic("Recursive entry to debugger");
563 	}
564 
565 	pr_crit("re-enter exception: ALL breakpoints killed\n");
566 #ifdef CONFIG_KGDB_KDB
567 	/* Allow kdb to debug itself one level */
568 	return 0;
569 #endif
570 	dump_stack();
571 	panic("Recursive entry to debugger");
572 
573 	return 1;
574 }
575 NOKPROBE_SYMBOL(kgdb_reenter_check);
576 
577 static void dbg_touch_watchdogs(void)
578 {
579 	touch_softlockup_watchdog_sync();
580 	clocksource_touch_watchdog();
581 	rcu_cpu_stall_reset();
582 }
583 NOKPROBE_SYMBOL(dbg_touch_watchdogs);
584 
585 static int kgdb_cpu_enter(struct kgdb_state *ks, struct pt_regs *regs,
586 		int exception_state)
587 {
588 	unsigned long flags;
589 	int sstep_tries = 100;
590 	int error;
591 	int cpu;
592 	int trace_on = 0;
593 	int online_cpus = num_online_cpus();
594 	u64 time_left;
595 
596 	kgdb_info[ks->cpu].enter_kgdb++;
597 	kgdb_info[ks->cpu].exception_state |= exception_state;
598 
599 	if (exception_state == DCPU_WANT_MASTER)
600 		atomic_inc(&masters_in_kgdb);
601 	else
602 		atomic_inc(&slaves_in_kgdb);
603 
604 	if (arch_kgdb_ops.disable_hw_break)
605 		arch_kgdb_ops.disable_hw_break(regs);
606 
607 acquirelock:
608 	rcu_read_lock();
609 	/*
610 	 * Interrupts will be restored by the 'trap return' code, except when
611 	 * single stepping.
612 	 */
613 	local_irq_save(flags);
614 
615 	cpu = ks->cpu;
616 	kgdb_info[cpu].debuggerinfo = regs;
617 	kgdb_info[cpu].task = current;
618 	kgdb_info[cpu].ret_state = 0;
619 	kgdb_info[cpu].irq_depth = hardirq_count() >> HARDIRQ_SHIFT;
620 
621 	/* Make sure the above info reaches the primary CPU */
622 	smp_mb();
623 
624 	if (exception_level == 1) {
625 		if (raw_spin_trylock(&dbg_master_lock))
626 			atomic_xchg(&kgdb_active, cpu);
627 		goto cpu_master_loop;
628 	}
629 
630 	/*
631 	 * CPU will loop if it is a slave or request to become a kgdb
632 	 * master cpu and acquire the kgdb_active lock:
633 	 */
634 	while (1) {
635 cpu_loop:
636 		if (kgdb_info[cpu].exception_state & DCPU_NEXT_MASTER) {
637 			kgdb_info[cpu].exception_state &= ~DCPU_NEXT_MASTER;
638 			goto cpu_master_loop;
639 		} else if (kgdb_info[cpu].exception_state & DCPU_WANT_MASTER) {
640 			if (raw_spin_trylock(&dbg_master_lock)) {
641 				atomic_xchg(&kgdb_active, cpu);
642 				break;
643 			}
644 		} else if (kgdb_info[cpu].exception_state & DCPU_WANT_BT) {
645 			dump_stack();
646 			kgdb_info[cpu].exception_state &= ~DCPU_WANT_BT;
647 		} else if (kgdb_info[cpu].exception_state & DCPU_IS_SLAVE) {
648 			if (!raw_spin_is_locked(&dbg_slave_lock))
649 				goto return_normal;
650 		} else {
651 return_normal:
652 			/* Return to normal operation by executing any
653 			 * hw breakpoint fixup.
654 			 */
655 			if (arch_kgdb_ops.correct_hw_break)
656 				arch_kgdb_ops.correct_hw_break();
657 			if (trace_on)
658 				tracing_on();
659 			kgdb_info[cpu].debuggerinfo = NULL;
660 			kgdb_info[cpu].task = NULL;
661 			kgdb_info[cpu].exception_state &=
662 				~(DCPU_WANT_MASTER | DCPU_IS_SLAVE);
663 			kgdb_info[cpu].enter_kgdb--;
664 			smp_mb__before_atomic();
665 			atomic_dec(&slaves_in_kgdb);
666 			dbg_touch_watchdogs();
667 			local_irq_restore(flags);
668 			rcu_read_unlock();
669 			return 0;
670 		}
671 		cpu_relax();
672 	}
673 
674 	/*
675 	 * For single stepping, try to only enter on the processor
676 	 * that was single stepping.  To guard against a deadlock, the
677 	 * kernel will only try for the value of sstep_tries before
678 	 * giving up and continuing on.
679 	 */
680 	if (atomic_read(&kgdb_cpu_doing_single_step) != -1 &&
681 	    (kgdb_info[cpu].task &&
682 	     kgdb_info[cpu].task->pid != kgdb_sstep_pid) && --sstep_tries) {
683 		atomic_set(&kgdb_active, -1);
684 		raw_spin_unlock(&dbg_master_lock);
685 		dbg_touch_watchdogs();
686 		local_irq_restore(flags);
687 		rcu_read_unlock();
688 
689 		goto acquirelock;
690 	}
691 
692 	if (!kgdb_io_ready(1)) {
693 		kgdb_info[cpu].ret_state = 1;
694 		goto kgdb_restore; /* No I/O connection, resume the system */
695 	}
696 
697 	/*
698 	 * Don't enter if we have hit a removed breakpoint.
699 	 */
700 	if (kgdb_skipexception(ks->ex_vector, ks->linux_regs))
701 		goto kgdb_restore;
702 
703 	atomic_inc(&ignore_console_lock_warning);
704 
705 	/* Call the I/O driver's pre_exception routine */
706 	if (dbg_io_ops->pre_exception)
707 		dbg_io_ops->pre_exception();
708 
709 	/*
710 	 * Get the passive CPU lock which will hold all the non-primary
711 	 * CPU in a spin state while the debugger is active
712 	 */
713 	if (!kgdb_single_step)
714 		raw_spin_lock(&dbg_slave_lock);
715 
716 #ifdef CONFIG_SMP
717 	/* If send_ready set, slaves are already waiting */
718 	if (ks->send_ready)
719 		atomic_set(ks->send_ready, 1);
720 
721 	/* Signal the other CPUs to enter kgdb_wait() */
722 	else if ((!kgdb_single_step) && kgdb_do_roundup)
723 		kgdb_roundup_cpus();
724 #endif
725 
726 	/*
727 	 * Wait for the other CPUs to be notified and be waiting for us:
728 	 */
729 	time_left = MSEC_PER_SEC;
730 	while (kgdb_do_roundup && --time_left &&
731 	       (atomic_read(&masters_in_kgdb) + atomic_read(&slaves_in_kgdb)) !=
732 		   online_cpus)
733 		udelay(1000);
734 	if (!time_left)
735 		pr_crit("Timed out waiting for secondary CPUs.\n");
736 
737 	/*
738 	 * At this point the primary processor is completely
739 	 * in the debugger and all secondary CPUs are quiescent
740 	 */
741 	dbg_deactivate_sw_breakpoints();
742 	kgdb_single_step = 0;
743 	kgdb_contthread = current;
744 	exception_level = 0;
745 	trace_on = tracing_is_on();
746 	if (trace_on)
747 		tracing_off();
748 
749 	while (1) {
750 cpu_master_loop:
751 		if (dbg_kdb_mode) {
752 			kgdb_connected = 1;
753 			error = kdb_stub(ks);
754 			if (error == -1)
755 				continue;
756 			kgdb_connected = 0;
757 		} else {
758 			error = gdb_serial_stub(ks);
759 		}
760 
761 		if (error == DBG_PASS_EVENT) {
762 			dbg_kdb_mode = !dbg_kdb_mode;
763 		} else if (error == DBG_SWITCH_CPU_EVENT) {
764 			kgdb_info[dbg_switch_cpu].exception_state |=
765 				DCPU_NEXT_MASTER;
766 			goto cpu_loop;
767 		} else {
768 			kgdb_info[cpu].ret_state = error;
769 			break;
770 		}
771 	}
772 
773 	dbg_activate_sw_breakpoints();
774 
775 	/* Call the I/O driver's post_exception routine */
776 	if (dbg_io_ops->post_exception)
777 		dbg_io_ops->post_exception();
778 
779 	atomic_dec(&ignore_console_lock_warning);
780 
781 	if (!kgdb_single_step) {
782 		raw_spin_unlock(&dbg_slave_lock);
783 		/* Wait till all the CPUs have quit from the debugger. */
784 		while (kgdb_do_roundup && atomic_read(&slaves_in_kgdb))
785 			cpu_relax();
786 	}
787 
788 kgdb_restore:
789 	if (atomic_read(&kgdb_cpu_doing_single_step) != -1) {
790 		int sstep_cpu = atomic_read(&kgdb_cpu_doing_single_step);
791 		if (kgdb_info[sstep_cpu].task)
792 			kgdb_sstep_pid = kgdb_info[sstep_cpu].task->pid;
793 		else
794 			kgdb_sstep_pid = 0;
795 	}
796 	if (arch_kgdb_ops.correct_hw_break)
797 		arch_kgdb_ops.correct_hw_break();
798 	if (trace_on)
799 		tracing_on();
800 
801 	kgdb_info[cpu].debuggerinfo = NULL;
802 	kgdb_info[cpu].task = NULL;
803 	kgdb_info[cpu].exception_state &=
804 		~(DCPU_WANT_MASTER | DCPU_IS_SLAVE);
805 	kgdb_info[cpu].enter_kgdb--;
806 	smp_mb__before_atomic();
807 	atomic_dec(&masters_in_kgdb);
808 	/* Free kgdb_active */
809 	atomic_set(&kgdb_active, -1);
810 	raw_spin_unlock(&dbg_master_lock);
811 	dbg_touch_watchdogs();
812 	local_irq_restore(flags);
813 	rcu_read_unlock();
814 
815 	return kgdb_info[cpu].ret_state;
816 }
817 NOKPROBE_SYMBOL(kgdb_cpu_enter);
818 
819 /*
820  * kgdb_handle_exception() - main entry point from a kernel exception
821  *
822  * Locking hierarchy:
823  *	interface locks, if any (begin_session)
824  *	kgdb lock (kgdb_active)
825  */
826 int
827 kgdb_handle_exception(int evector, int signo, int ecode, struct pt_regs *regs)
828 {
829 	struct kgdb_state kgdb_var;
830 	struct kgdb_state *ks = &kgdb_var;
831 	int ret = 0;
832 
833 	if (arch_kgdb_ops.enable_nmi)
834 		arch_kgdb_ops.enable_nmi(0);
835 	/*
836 	 * Avoid entering the debugger if we were triggered due to an oops
837 	 * but panic_timeout indicates the system should automatically
838 	 * reboot on panic. We don't want to get stuck waiting for input
839 	 * on such systems, especially if its "just" an oops.
840 	 */
841 	if (signo != SIGTRAP && panic_timeout)
842 		return 1;
843 
844 	memset(ks, 0, sizeof(struct kgdb_state));
845 	ks->cpu			= raw_smp_processor_id();
846 	ks->ex_vector		= evector;
847 	ks->signo		= signo;
848 	ks->err_code		= ecode;
849 	ks->linux_regs		= regs;
850 
851 	if (kgdb_reenter_check(ks))
852 		goto out; /* Ouch, double exception ! */
853 	if (kgdb_info[ks->cpu].enter_kgdb != 0)
854 		goto out;
855 
856 	ret = kgdb_cpu_enter(ks, regs, DCPU_WANT_MASTER);
857 out:
858 	if (arch_kgdb_ops.enable_nmi)
859 		arch_kgdb_ops.enable_nmi(1);
860 	return ret;
861 }
862 NOKPROBE_SYMBOL(kgdb_handle_exception);
863 
864 /*
865  * GDB places a breakpoint at this function to know dynamically loaded objects.
866  */
867 static int module_event(struct notifier_block *self, unsigned long val,
868 	void *data)
869 {
870 	return 0;
871 }
872 
873 static struct notifier_block dbg_module_load_nb = {
874 	.notifier_call	= module_event,
875 };
876 
877 int kgdb_nmicallback(int cpu, void *regs)
878 {
879 #ifdef CONFIG_SMP
880 	struct kgdb_state kgdb_var;
881 	struct kgdb_state *ks = &kgdb_var;
882 
883 	kgdb_info[cpu].rounding_up = false;
884 
885 	memset(ks, 0, sizeof(struct kgdb_state));
886 	ks->cpu			= cpu;
887 	ks->linux_regs		= regs;
888 
889 	if (kgdb_info[ks->cpu].enter_kgdb == 0 &&
890 			raw_spin_is_locked(&dbg_master_lock)) {
891 		kgdb_cpu_enter(ks, regs, DCPU_IS_SLAVE);
892 		return 0;
893 	}
894 #endif
895 	return 1;
896 }
897 NOKPROBE_SYMBOL(kgdb_nmicallback);
898 
899 int kgdb_nmicallin(int cpu, int trapnr, void *regs, int err_code,
900 							atomic_t *send_ready)
901 {
902 #ifdef CONFIG_SMP
903 	if (!kgdb_io_ready(0) || !send_ready)
904 		return 1;
905 
906 	if (kgdb_info[cpu].enter_kgdb == 0) {
907 		struct kgdb_state kgdb_var;
908 		struct kgdb_state *ks = &kgdb_var;
909 
910 		memset(ks, 0, sizeof(struct kgdb_state));
911 		ks->cpu			= cpu;
912 		ks->ex_vector		= trapnr;
913 		ks->signo		= SIGTRAP;
914 		ks->err_code		= err_code;
915 		ks->linux_regs		= regs;
916 		ks->send_ready		= send_ready;
917 		kgdb_cpu_enter(ks, regs, DCPU_WANT_MASTER);
918 		return 0;
919 	}
920 #endif
921 	return 1;
922 }
923 NOKPROBE_SYMBOL(kgdb_nmicallin);
924 
925 static void kgdb_console_write(struct console *co, const char *s,
926    unsigned count)
927 {
928 	unsigned long flags;
929 
930 	/* If we're debugging, or KGDB has not connected, don't try
931 	 * and print. */
932 	if (!kgdb_connected || atomic_read(&kgdb_active) != -1 || dbg_kdb_mode)
933 		return;
934 
935 	local_irq_save(flags);
936 	gdbstub_msg_write(s, count);
937 	local_irq_restore(flags);
938 }
939 
940 static struct console kgdbcons = {
941 	.name		= "kgdb",
942 	.write		= kgdb_console_write,
943 	.flags		= CON_PRINTBUFFER | CON_ENABLED,
944 	.index		= -1,
945 };
946 
947 static int __init opt_kgdb_con(char *str)
948 {
949 	kgdb_use_con = 1;
950 
951 	if (kgdb_io_module_registered && !kgdb_con_registered) {
952 		register_console(&kgdbcons);
953 		kgdb_con_registered = 1;
954 	}
955 
956 	return 0;
957 }
958 
959 early_param("kgdbcon", opt_kgdb_con);
960 
961 #ifdef CONFIG_MAGIC_SYSRQ
962 static void sysrq_handle_dbg(int key)
963 {
964 	if (!dbg_io_ops) {
965 		pr_crit("ERROR: No KGDB I/O module available\n");
966 		return;
967 	}
968 	if (!kgdb_connected) {
969 #ifdef CONFIG_KGDB_KDB
970 		if (!dbg_kdb_mode)
971 			pr_crit("KGDB or $3#33 for KDB\n");
972 #else
973 		pr_crit("Entering KGDB\n");
974 #endif
975 	}
976 
977 	kgdb_breakpoint();
978 }
979 
980 static const struct sysrq_key_op sysrq_dbg_op = {
981 	.handler	= sysrq_handle_dbg,
982 	.help_msg	= "debug(g)",
983 	.action_msg	= "DEBUG",
984 };
985 #endif
986 
987 void kgdb_panic(const char *msg)
988 {
989 	if (!kgdb_io_module_registered)
990 		return;
991 
992 	/*
993 	 * We don't want to get stuck waiting for input from user if
994 	 * "panic_timeout" indicates the system should automatically
995 	 * reboot on panic.
996 	 */
997 	if (panic_timeout)
998 		return;
999 
1000 	if (dbg_kdb_mode)
1001 		kdb_printf("PANIC: %s\n", msg);
1002 
1003 	kgdb_breakpoint();
1004 }
1005 
1006 static void kgdb_initial_breakpoint(void)
1007 {
1008 	kgdb_break_asap = 0;
1009 
1010 	pr_crit("Waiting for connection from remote gdb...\n");
1011 	kgdb_breakpoint();
1012 }
1013 
1014 void __weak kgdb_arch_late(void)
1015 {
1016 }
1017 
1018 void __init dbg_late_init(void)
1019 {
1020 	dbg_is_early = false;
1021 	if (kgdb_io_module_registered)
1022 		kgdb_arch_late();
1023 	kdb_init(KDB_INIT_FULL);
1024 
1025 	if (kgdb_io_module_registered && kgdb_break_asap)
1026 		kgdb_initial_breakpoint();
1027 }
1028 
1029 static int
1030 dbg_notify_reboot(struct notifier_block *this, unsigned long code, void *x)
1031 {
1032 	/*
1033 	 * Take the following action on reboot notify depending on value:
1034 	 *    1 == Enter debugger
1035 	 *    0 == [the default] detatch debug client
1036 	 *   -1 == Do nothing... and use this until the board resets
1037 	 */
1038 	switch (kgdbreboot) {
1039 	case 1:
1040 		kgdb_breakpoint();
1041 	case -1:
1042 		goto done;
1043 	}
1044 	if (!dbg_kdb_mode)
1045 		gdbstub_exit(code);
1046 done:
1047 	return NOTIFY_DONE;
1048 }
1049 
1050 static struct notifier_block dbg_reboot_notifier = {
1051 	.notifier_call		= dbg_notify_reboot,
1052 	.next			= NULL,
1053 	.priority		= INT_MAX,
1054 };
1055 
1056 static void kgdb_register_callbacks(void)
1057 {
1058 	if (!kgdb_io_module_registered) {
1059 		kgdb_io_module_registered = 1;
1060 		kgdb_arch_init();
1061 		if (!dbg_is_early)
1062 			kgdb_arch_late();
1063 		register_module_notifier(&dbg_module_load_nb);
1064 		register_reboot_notifier(&dbg_reboot_notifier);
1065 #ifdef CONFIG_MAGIC_SYSRQ
1066 		register_sysrq_key('g', &sysrq_dbg_op);
1067 #endif
1068 		if (kgdb_use_con && !kgdb_con_registered) {
1069 			register_console(&kgdbcons);
1070 			kgdb_con_registered = 1;
1071 		}
1072 	}
1073 }
1074 
1075 static void kgdb_unregister_callbacks(void)
1076 {
1077 	/*
1078 	 * When this routine is called KGDB should unregister from
1079 	 * handlers and clean up, making sure it is not handling any
1080 	 * break exceptions at the time.
1081 	 */
1082 	if (kgdb_io_module_registered) {
1083 		kgdb_io_module_registered = 0;
1084 		unregister_reboot_notifier(&dbg_reboot_notifier);
1085 		unregister_module_notifier(&dbg_module_load_nb);
1086 		kgdb_arch_exit();
1087 #ifdef CONFIG_MAGIC_SYSRQ
1088 		unregister_sysrq_key('g', &sysrq_dbg_op);
1089 #endif
1090 		if (kgdb_con_registered) {
1091 			unregister_console(&kgdbcons);
1092 			kgdb_con_registered = 0;
1093 		}
1094 	}
1095 }
1096 
1097 /**
1098  *	kgdb_register_io_module - register KGDB IO module
1099  *	@new_dbg_io_ops: the io ops vector
1100  *
1101  *	Register it with the KGDB core.
1102  */
1103 int kgdb_register_io_module(struct kgdb_io *new_dbg_io_ops)
1104 {
1105 	struct kgdb_io *old_dbg_io_ops;
1106 	int err;
1107 
1108 	spin_lock(&kgdb_registration_lock);
1109 
1110 	old_dbg_io_ops = dbg_io_ops;
1111 	if (old_dbg_io_ops) {
1112 		if (!old_dbg_io_ops->deinit) {
1113 			spin_unlock(&kgdb_registration_lock);
1114 
1115 			pr_err("KGDB I/O driver %s can't replace %s.\n",
1116 				new_dbg_io_ops->name, old_dbg_io_ops->name);
1117 			return -EBUSY;
1118 		}
1119 		pr_info("Replacing I/O driver %s with %s\n",
1120 			old_dbg_io_ops->name, new_dbg_io_ops->name);
1121 	}
1122 
1123 	if (new_dbg_io_ops->init) {
1124 		err = new_dbg_io_ops->init();
1125 		if (err) {
1126 			spin_unlock(&kgdb_registration_lock);
1127 			return err;
1128 		}
1129 	}
1130 
1131 	dbg_io_ops = new_dbg_io_ops;
1132 
1133 	spin_unlock(&kgdb_registration_lock);
1134 
1135 	if (old_dbg_io_ops) {
1136 		old_dbg_io_ops->deinit();
1137 		return 0;
1138 	}
1139 
1140 	pr_info("Registered I/O driver %s\n", new_dbg_io_ops->name);
1141 
1142 	/* Arm KGDB now. */
1143 	kgdb_register_callbacks();
1144 
1145 	if (kgdb_break_asap &&
1146 	    (!dbg_is_early || IS_ENABLED(CONFIG_ARCH_HAS_EARLY_DEBUG)))
1147 		kgdb_initial_breakpoint();
1148 
1149 	return 0;
1150 }
1151 EXPORT_SYMBOL_GPL(kgdb_register_io_module);
1152 
1153 /**
1154  *	kgdb_unregister_io_module - unregister KGDB IO module
1155  *	@old_dbg_io_ops: the io ops vector
1156  *
1157  *	Unregister it with the KGDB core.
1158  */
1159 void kgdb_unregister_io_module(struct kgdb_io *old_dbg_io_ops)
1160 {
1161 	BUG_ON(kgdb_connected);
1162 
1163 	/*
1164 	 * KGDB is no longer able to communicate out, so
1165 	 * unregister our callbacks and reset state.
1166 	 */
1167 	kgdb_unregister_callbacks();
1168 
1169 	spin_lock(&kgdb_registration_lock);
1170 
1171 	WARN_ON_ONCE(dbg_io_ops != old_dbg_io_ops);
1172 	dbg_io_ops = NULL;
1173 
1174 	spin_unlock(&kgdb_registration_lock);
1175 
1176 	if (old_dbg_io_ops->deinit)
1177 		old_dbg_io_ops->deinit();
1178 
1179 	pr_info("Unregistered I/O driver %s, debugger disabled\n",
1180 		old_dbg_io_ops->name);
1181 }
1182 EXPORT_SYMBOL_GPL(kgdb_unregister_io_module);
1183 
1184 int dbg_io_get_char(void)
1185 {
1186 	int ret = dbg_io_ops->read_char();
1187 	if (ret == NO_POLL_CHAR)
1188 		return -1;
1189 	if (!dbg_kdb_mode)
1190 		return ret;
1191 	if (ret == 127)
1192 		return 8;
1193 	return ret;
1194 }
1195 
1196 /**
1197  * kgdb_breakpoint - generate breakpoint exception
1198  *
1199  * This function will generate a breakpoint exception.  It is used at the
1200  * beginning of a program to sync up with a debugger and can be used
1201  * otherwise as a quick means to stop program execution and "break" into
1202  * the debugger.
1203  */
1204 noinline void kgdb_breakpoint(void)
1205 {
1206 	atomic_inc(&kgdb_setting_breakpoint);
1207 	wmb(); /* Sync point before breakpoint */
1208 	arch_kgdb_breakpoint();
1209 	wmb(); /* Sync point after breakpoint */
1210 	atomic_dec(&kgdb_setting_breakpoint);
1211 }
1212 EXPORT_SYMBOL_GPL(kgdb_breakpoint);
1213 
1214 static int __init opt_kgdb_wait(char *str)
1215 {
1216 	kgdb_break_asap = 1;
1217 
1218 	kdb_init(KDB_INIT_EARLY);
1219 	if (kgdb_io_module_registered &&
1220 	    IS_ENABLED(CONFIG_ARCH_HAS_EARLY_DEBUG))
1221 		kgdb_initial_breakpoint();
1222 
1223 	return 0;
1224 }
1225 
1226 early_param("kgdbwait", opt_kgdb_wait);
1227