xref: /linux/kernel/watchdog.c (revision 8f0d91f41000e769f16b62a4b44f1f6da6db905b)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * Detect hard and soft lockups on a system
4  *
5  * started by Don Zickus, Copyright (C) 2010 Red Hat, Inc.
6  *
7  * Note: Most of this code is borrowed heavily from the original softlockup
8  * detector, so thanks to Ingo for the initial implementation.
9  * Some chunks also taken from the old x86-specific nmi watchdog code, thanks
10  * to those contributors as well.
11  */
12 
13 #define pr_fmt(fmt) "watchdog: " fmt
14 
15 #include <linux/cpu.h>
16 #include <linux/init.h>
17 #include <linux/irq.h>
18 #include <linux/irqdesc.h>
19 #include <linux/kernel_stat.h>
20 #include <linux/kvm_para.h>
21 #include <linux/math64.h>
22 #include <linux/mm.h>
23 #include <linux/module.h>
24 #include <linux/nmi.h>
25 #include <linux/stop_machine.h>
26 #include <linux/sysctl.h>
27 #include <linux/tick.h>
28 
29 #include <linux/sched/clock.h>
30 #include <linux/sched/debug.h>
31 #include <linux/sched/isolation.h>
32 
33 #include <asm/irq_regs.h>
34 
35 static DEFINE_MUTEX(watchdog_mutex);
36 
37 #if defined(CONFIG_HARDLOCKUP_DETECTOR) || defined(CONFIG_HARDLOCKUP_DETECTOR_SPARC64)
38 # define WATCHDOG_HARDLOCKUP_DEFAULT	1
39 #else
40 # define WATCHDOG_HARDLOCKUP_DEFAULT	0
41 #endif
42 
43 #define NUM_SAMPLE_PERIODS	5
44 
45 unsigned long __read_mostly watchdog_enabled;
46 int __read_mostly watchdog_user_enabled = 1;
47 static int __read_mostly watchdog_hardlockup_user_enabled = WATCHDOG_HARDLOCKUP_DEFAULT;
48 static int __read_mostly watchdog_softlockup_user_enabled = 1;
49 int __read_mostly watchdog_thresh = 10;
50 static int __read_mostly watchdog_hardlockup_available;
51 
52 struct cpumask watchdog_cpumask __read_mostly;
53 unsigned long *watchdog_cpumask_bits = cpumask_bits(&watchdog_cpumask);
54 
55 #ifdef CONFIG_HARDLOCKUP_DETECTOR
56 
57 # ifdef CONFIG_SMP
58 int __read_mostly sysctl_hardlockup_all_cpu_backtrace;
59 # endif /* CONFIG_SMP */
60 
61 /*
62  * Should we panic when a soft-lockup or hard-lockup occurs:
63  */
64 unsigned int __read_mostly hardlockup_panic =
65 			IS_ENABLED(CONFIG_BOOTPARAM_HARDLOCKUP_PANIC);
66 /*
67  * We may not want to enable hard lockup detection by default in all cases,
68  * for example when running the kernel as a guest on a hypervisor. In these
69  * cases this function can be called to disable hard lockup detection. This
70  * function should only be executed once by the boot processor before the
71  * kernel command line parameters are parsed, because otherwise it is not
72  * possible to override this in hardlockup_panic_setup().
73  */
74 void __init hardlockup_detector_disable(void)
75 {
76 	watchdog_hardlockup_user_enabled = 0;
77 }
78 
79 static int __init hardlockup_panic_setup(char *str)
80 {
81 next:
82 	if (!strncmp(str, "panic", 5))
83 		hardlockup_panic = 1;
84 	else if (!strncmp(str, "nopanic", 7))
85 		hardlockup_panic = 0;
86 	else if (!strncmp(str, "0", 1))
87 		watchdog_hardlockup_user_enabled = 0;
88 	else if (!strncmp(str, "1", 1))
89 		watchdog_hardlockup_user_enabled = 1;
90 	else if (!strncmp(str, "r", 1))
91 		hardlockup_config_perf_event(str + 1);
92 	while (*(str++)) {
93 		if (*str == ',') {
94 			str++;
95 			goto next;
96 		}
97 	}
98 	return 1;
99 }
100 __setup("nmi_watchdog=", hardlockup_panic_setup);
101 
102 #endif /* CONFIG_HARDLOCKUP_DETECTOR */
103 
104 #if defined(CONFIG_HARDLOCKUP_DETECTOR_COUNTS_HRTIMER)
105 
106 static DEFINE_PER_CPU(atomic_t, hrtimer_interrupts);
107 static DEFINE_PER_CPU(int, hrtimer_interrupts_saved);
108 static DEFINE_PER_CPU(bool, watchdog_hardlockup_warned);
109 static DEFINE_PER_CPU(bool, watchdog_hardlockup_touched);
110 static unsigned long hard_lockup_nmi_warn;
111 
112 notrace void arch_touch_nmi_watchdog(void)
113 {
114 	/*
115 	 * Using __raw here because some code paths have
116 	 * preemption enabled.  If preemption is enabled
117 	 * then interrupts should be enabled too, in which
118 	 * case we shouldn't have to worry about the watchdog
119 	 * going off.
120 	 */
121 	raw_cpu_write(watchdog_hardlockup_touched, true);
122 }
123 EXPORT_SYMBOL(arch_touch_nmi_watchdog);
124 
125 void watchdog_hardlockup_touch_cpu(unsigned int cpu)
126 {
127 	per_cpu(watchdog_hardlockup_touched, cpu) = true;
128 }
129 
130 static bool is_hardlockup(unsigned int cpu)
131 {
132 	int hrint = atomic_read(&per_cpu(hrtimer_interrupts, cpu));
133 
134 	if (per_cpu(hrtimer_interrupts_saved, cpu) == hrint)
135 		return true;
136 
137 	/*
138 	 * NOTE: we don't need any fancy atomic_t or READ_ONCE/WRITE_ONCE
139 	 * for hrtimer_interrupts_saved. hrtimer_interrupts_saved is
140 	 * written/read by a single CPU.
141 	 */
142 	per_cpu(hrtimer_interrupts_saved, cpu) = hrint;
143 
144 	return false;
145 }
146 
147 static void watchdog_hardlockup_kick(void)
148 {
149 	int new_interrupts;
150 
151 	new_interrupts = atomic_inc_return(this_cpu_ptr(&hrtimer_interrupts));
152 	watchdog_buddy_check_hardlockup(new_interrupts);
153 }
154 
155 void watchdog_hardlockup_check(unsigned int cpu, struct pt_regs *regs)
156 {
157 	if (per_cpu(watchdog_hardlockup_touched, cpu)) {
158 		per_cpu(watchdog_hardlockup_touched, cpu) = false;
159 		return;
160 	}
161 
162 	/*
163 	 * Check for a hardlockup by making sure the CPU's timer
164 	 * interrupt is incrementing. The timer interrupt should have
165 	 * fired multiple times before we overflow'd. If it hasn't
166 	 * then this is a good indication the cpu is stuck
167 	 */
168 	if (is_hardlockup(cpu)) {
169 		unsigned int this_cpu = smp_processor_id();
170 		unsigned long flags;
171 
172 		/* Only print hardlockups once. */
173 		if (per_cpu(watchdog_hardlockup_warned, cpu))
174 			return;
175 
176 		/*
177 		 * Prevent multiple hard-lockup reports if one cpu is already
178 		 * engaged in dumping all cpu back traces.
179 		 */
180 		if (sysctl_hardlockup_all_cpu_backtrace) {
181 			if (test_and_set_bit_lock(0, &hard_lockup_nmi_warn))
182 				return;
183 		}
184 
185 		/*
186 		 * NOTE: we call printk_cpu_sync_get_irqsave() after printing
187 		 * the lockup message. While it would be nice to serialize
188 		 * that printout, we really want to make sure that if some
189 		 * other CPU somehow locked up while holding the lock associated
190 		 * with printk_cpu_sync_get_irqsave() that we can still at least
191 		 * get the message about the lockup out.
192 		 */
193 		pr_emerg("Watchdog detected hard LOCKUP on cpu %d\n", cpu);
194 		printk_cpu_sync_get_irqsave(flags);
195 
196 		print_modules();
197 		print_irqtrace_events(current);
198 		if (cpu == this_cpu) {
199 			if (regs)
200 				show_regs(regs);
201 			else
202 				dump_stack();
203 			printk_cpu_sync_put_irqrestore(flags);
204 		} else {
205 			printk_cpu_sync_put_irqrestore(flags);
206 			trigger_single_cpu_backtrace(cpu);
207 		}
208 
209 		if (sysctl_hardlockup_all_cpu_backtrace) {
210 			trigger_allbutcpu_cpu_backtrace(cpu);
211 			if (!hardlockup_panic)
212 				clear_bit_unlock(0, &hard_lockup_nmi_warn);
213 		}
214 
215 		if (hardlockup_panic)
216 			nmi_panic(regs, "Hard LOCKUP");
217 
218 		per_cpu(watchdog_hardlockup_warned, cpu) = true;
219 	} else {
220 		per_cpu(watchdog_hardlockup_warned, cpu) = false;
221 	}
222 }
223 
224 #else /* CONFIG_HARDLOCKUP_DETECTOR_COUNTS_HRTIMER */
225 
226 static inline void watchdog_hardlockup_kick(void) { }
227 
228 #endif /* !CONFIG_HARDLOCKUP_DETECTOR_COUNTS_HRTIMER */
229 
230 /*
231  * These functions can be overridden based on the configured hardlockdup detector.
232  *
233  * watchdog_hardlockup_enable/disable can be implemented to start and stop when
234  * softlockup watchdog start and stop. The detector must select the
235  * SOFTLOCKUP_DETECTOR Kconfig.
236  */
237 void __weak watchdog_hardlockup_enable(unsigned int cpu) { }
238 
239 void __weak watchdog_hardlockup_disable(unsigned int cpu) { }
240 
241 /*
242  * Watchdog-detector specific API.
243  *
244  * Return 0 when hardlockup watchdog is available, negative value otherwise.
245  * Note that the negative value means that a delayed probe might
246  * succeed later.
247  */
248 int __weak __init watchdog_hardlockup_probe(void)
249 {
250 	return -ENODEV;
251 }
252 
253 /**
254  * watchdog_hardlockup_stop - Stop the watchdog for reconfiguration
255  *
256  * The reconfiguration steps are:
257  * watchdog_hardlockup_stop();
258  * update_variables();
259  * watchdog_hardlockup_start();
260  */
261 void __weak watchdog_hardlockup_stop(void) { }
262 
263 /**
264  * watchdog_hardlockup_start - Start the watchdog after reconfiguration
265  *
266  * Counterpart to watchdog_hardlockup_stop().
267  *
268  * The following variables have been updated in update_variables() and
269  * contain the currently valid configuration:
270  * - watchdog_enabled
271  * - watchdog_thresh
272  * - watchdog_cpumask
273  */
274 void __weak watchdog_hardlockup_start(void) { }
275 
276 /**
277  * lockup_detector_update_enable - Update the sysctl enable bit
278  *
279  * Caller needs to make sure that the hard watchdogs are off, so this
280  * can't race with watchdog_hardlockup_disable().
281  */
282 static void lockup_detector_update_enable(void)
283 {
284 	watchdog_enabled = 0;
285 	if (!watchdog_user_enabled)
286 		return;
287 	if (watchdog_hardlockup_available && watchdog_hardlockup_user_enabled)
288 		watchdog_enabled |= WATCHDOG_HARDLOCKUP_ENABLED;
289 	if (watchdog_softlockup_user_enabled)
290 		watchdog_enabled |= WATCHDOG_SOFTOCKUP_ENABLED;
291 }
292 
293 #ifdef CONFIG_SOFTLOCKUP_DETECTOR
294 
295 /*
296  * Delay the soflockup report when running a known slow code.
297  * It does _not_ affect the timestamp of the last successdul reschedule.
298  */
299 #define SOFTLOCKUP_DELAY_REPORT	ULONG_MAX
300 
301 #ifdef CONFIG_SMP
302 int __read_mostly sysctl_softlockup_all_cpu_backtrace;
303 #endif
304 
305 static struct cpumask watchdog_allowed_mask __read_mostly;
306 
307 /* Global variables, exported for sysctl */
308 unsigned int __read_mostly softlockup_panic =
309 			IS_ENABLED(CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC);
310 
311 static bool softlockup_initialized __read_mostly;
312 static u64 __read_mostly sample_period;
313 
314 /* Timestamp taken after the last successful reschedule. */
315 static DEFINE_PER_CPU(unsigned long, watchdog_touch_ts);
316 /* Timestamp of the last softlockup report. */
317 static DEFINE_PER_CPU(unsigned long, watchdog_report_ts);
318 static DEFINE_PER_CPU(struct hrtimer, watchdog_hrtimer);
319 static DEFINE_PER_CPU(bool, softlockup_touch_sync);
320 static unsigned long soft_lockup_nmi_warn;
321 
322 static int __init softlockup_panic_setup(char *str)
323 {
324 	softlockup_panic = simple_strtoul(str, NULL, 0);
325 	return 1;
326 }
327 __setup("softlockup_panic=", softlockup_panic_setup);
328 
329 static int __init nowatchdog_setup(char *str)
330 {
331 	watchdog_user_enabled = 0;
332 	return 1;
333 }
334 __setup("nowatchdog", nowatchdog_setup);
335 
336 static int __init nosoftlockup_setup(char *str)
337 {
338 	watchdog_softlockup_user_enabled = 0;
339 	return 1;
340 }
341 __setup("nosoftlockup", nosoftlockup_setup);
342 
343 static int __init watchdog_thresh_setup(char *str)
344 {
345 	get_option(&str, &watchdog_thresh);
346 	return 1;
347 }
348 __setup("watchdog_thresh=", watchdog_thresh_setup);
349 
350 static void __lockup_detector_cleanup(void);
351 
352 #ifdef CONFIG_SOFTLOCKUP_DETECTOR_INTR_STORM
353 enum stats_per_group {
354 	STATS_SYSTEM,
355 	STATS_SOFTIRQ,
356 	STATS_HARDIRQ,
357 	STATS_IDLE,
358 	NUM_STATS_PER_GROUP,
359 };
360 
361 static const enum cpu_usage_stat tracked_stats[NUM_STATS_PER_GROUP] = {
362 	CPUTIME_SYSTEM,
363 	CPUTIME_SOFTIRQ,
364 	CPUTIME_IRQ,
365 	CPUTIME_IDLE,
366 };
367 
368 static DEFINE_PER_CPU(u16, cpustat_old[NUM_STATS_PER_GROUP]);
369 static DEFINE_PER_CPU(u8, cpustat_util[NUM_SAMPLE_PERIODS][NUM_STATS_PER_GROUP]);
370 static DEFINE_PER_CPU(u8, cpustat_tail);
371 
372 /*
373  * We don't need nanosecond resolution. A granularity of 16ms is
374  * sufficient for our precision, allowing us to use u16 to store
375  * cpustats, which will roll over roughly every ~1000 seconds.
376  * 2^24 ~= 16 * 10^6
377  */
378 static u16 get_16bit_precision(u64 data_ns)
379 {
380 	return data_ns >> 24LL; /* 2^24ns ~= 16.8ms */
381 }
382 
383 static void update_cpustat(void)
384 {
385 	int i;
386 	u8 util;
387 	u16 old_stat, new_stat;
388 	struct kernel_cpustat kcpustat;
389 	u64 *cpustat = kcpustat.cpustat;
390 	u8 tail = __this_cpu_read(cpustat_tail);
391 	u16 sample_period_16 = get_16bit_precision(sample_period);
392 
393 	kcpustat_cpu_fetch(&kcpustat, smp_processor_id());
394 
395 	for (i = 0; i < NUM_STATS_PER_GROUP; i++) {
396 		old_stat = __this_cpu_read(cpustat_old[i]);
397 		new_stat = get_16bit_precision(cpustat[tracked_stats[i]]);
398 		util = DIV_ROUND_UP(100 * (new_stat - old_stat), sample_period_16);
399 		__this_cpu_write(cpustat_util[tail][i], util);
400 		__this_cpu_write(cpustat_old[i], new_stat);
401 	}
402 
403 	__this_cpu_write(cpustat_tail, (tail + 1) % NUM_SAMPLE_PERIODS);
404 }
405 
406 static void print_cpustat(void)
407 {
408 	int i, group;
409 	u8 tail = __this_cpu_read(cpustat_tail);
410 	u64 sample_period_second = sample_period;
411 
412 	do_div(sample_period_second, NSEC_PER_SEC);
413 
414 	/*
415 	 * Outputting the "watchdog" prefix on every line is redundant and not
416 	 * concise, and the original alarm information is sufficient for
417 	 * positioning in logs, hence here printk() is used instead of pr_crit().
418 	 */
419 	printk(KERN_CRIT "CPU#%d Utilization every %llus during lockup:\n",
420 	       smp_processor_id(), sample_period_second);
421 
422 	for (i = 0; i < NUM_SAMPLE_PERIODS; i++) {
423 		group = (tail + i) % NUM_SAMPLE_PERIODS;
424 		printk(KERN_CRIT "\t#%d: %3u%% system,\t%3u%% softirq,\t"
425 			"%3u%% hardirq,\t%3u%% idle\n", i + 1,
426 			__this_cpu_read(cpustat_util[group][STATS_SYSTEM]),
427 			__this_cpu_read(cpustat_util[group][STATS_SOFTIRQ]),
428 			__this_cpu_read(cpustat_util[group][STATS_HARDIRQ]),
429 			__this_cpu_read(cpustat_util[group][STATS_IDLE]));
430 	}
431 }
432 
433 #define HARDIRQ_PERCENT_THRESH          50
434 #define NUM_HARDIRQ_REPORT              5
435 struct irq_counts {
436 	int irq;
437 	u32 counts;
438 };
439 
440 static DEFINE_PER_CPU(bool, snapshot_taken);
441 
442 /* Tabulate the most frequent interrupts. */
443 static void tabulate_irq_count(struct irq_counts *irq_counts, int irq, u32 counts, int rank)
444 {
445 	int i;
446 	struct irq_counts new_count = {irq, counts};
447 
448 	for (i = 0; i < rank; i++) {
449 		if (counts > irq_counts[i].counts)
450 			swap(new_count, irq_counts[i]);
451 	}
452 }
453 
454 /*
455  * If the hardirq time exceeds HARDIRQ_PERCENT_THRESH% of the sample_period,
456  * then the cause of softlockup might be interrupt storm. In this case, it
457  * would be useful to start interrupt counting.
458  */
459 static bool need_counting_irqs(void)
460 {
461 	u8 util;
462 	int tail = __this_cpu_read(cpustat_tail);
463 
464 	tail = (tail + NUM_HARDIRQ_REPORT - 1) % NUM_HARDIRQ_REPORT;
465 	util = __this_cpu_read(cpustat_util[tail][STATS_HARDIRQ]);
466 	return util > HARDIRQ_PERCENT_THRESH;
467 }
468 
469 static void start_counting_irqs(void)
470 {
471 	if (!__this_cpu_read(snapshot_taken)) {
472 		kstat_snapshot_irqs();
473 		__this_cpu_write(snapshot_taken, true);
474 	}
475 }
476 
477 static void stop_counting_irqs(void)
478 {
479 	__this_cpu_write(snapshot_taken, false);
480 }
481 
482 static void print_irq_counts(void)
483 {
484 	unsigned int i, count;
485 	struct irq_counts irq_counts_sorted[NUM_HARDIRQ_REPORT] = {
486 		{-1, 0}, {-1, 0}, {-1, 0}, {-1, 0}, {-1, 0}
487 	};
488 
489 	if (__this_cpu_read(snapshot_taken)) {
490 		for_each_active_irq(i) {
491 			count = kstat_get_irq_since_snapshot(i);
492 			tabulate_irq_count(irq_counts_sorted, i, count, NUM_HARDIRQ_REPORT);
493 		}
494 
495 		/*
496 		 * Outputting the "watchdog" prefix on every line is redundant and not
497 		 * concise, and the original alarm information is sufficient for
498 		 * positioning in logs, hence here printk() is used instead of pr_crit().
499 		 */
500 		printk(KERN_CRIT "CPU#%d Detect HardIRQ Time exceeds %d%%. Most frequent HardIRQs:\n",
501 		       smp_processor_id(), HARDIRQ_PERCENT_THRESH);
502 
503 		for (i = 0; i < NUM_HARDIRQ_REPORT; i++) {
504 			if (irq_counts_sorted[i].irq == -1)
505 				break;
506 
507 			printk(KERN_CRIT "\t#%u: %-10u\tirq#%d\n",
508 			       i + 1, irq_counts_sorted[i].counts,
509 			       irq_counts_sorted[i].irq);
510 		}
511 
512 		/*
513 		 * If the hardirq time is less than HARDIRQ_PERCENT_THRESH% in the last
514 		 * sample_period, then we suspect the interrupt storm might be subsiding.
515 		 */
516 		if (!need_counting_irqs())
517 			stop_counting_irqs();
518 	}
519 }
520 
521 static void report_cpu_status(void)
522 {
523 	print_cpustat();
524 	print_irq_counts();
525 }
526 #else
527 static inline void update_cpustat(void) { }
528 static inline void report_cpu_status(void) { }
529 static inline bool need_counting_irqs(void) { return false; }
530 static inline void start_counting_irqs(void) { }
531 static inline void stop_counting_irqs(void) { }
532 #endif
533 
534 /*
535  * Hard-lockup warnings should be triggered after just a few seconds. Soft-
536  * lockups can have false positives under extreme conditions. So we generally
537  * want a higher threshold for soft lockups than for hard lockups. So we couple
538  * the thresholds with a factor: we make the soft threshold twice the amount of
539  * time the hard threshold is.
540  */
541 static int get_softlockup_thresh(void)
542 {
543 	return watchdog_thresh * 2;
544 }
545 
546 /*
547  * Returns seconds, approximately.  We don't need nanosecond
548  * resolution, and we don't need to waste time with a big divide when
549  * 2^30ns == 1.074s.
550  */
551 static unsigned long get_timestamp(void)
552 {
553 	return running_clock() >> 30LL;  /* 2^30 ~= 10^9 */
554 }
555 
556 static void set_sample_period(void)
557 {
558 	/*
559 	 * convert watchdog_thresh from seconds to ns
560 	 * the divide by 5 is to give hrtimer several chances (two
561 	 * or three with the current relation between the soft
562 	 * and hard thresholds) to increment before the
563 	 * hardlockup detector generates a warning
564 	 */
565 	sample_period = get_softlockup_thresh() * ((u64)NSEC_PER_SEC / NUM_SAMPLE_PERIODS);
566 	watchdog_update_hrtimer_threshold(sample_period);
567 }
568 
569 static void update_report_ts(void)
570 {
571 	__this_cpu_write(watchdog_report_ts, get_timestamp());
572 }
573 
574 /* Commands for resetting the watchdog */
575 static void update_touch_ts(void)
576 {
577 	__this_cpu_write(watchdog_touch_ts, get_timestamp());
578 	update_report_ts();
579 }
580 
581 /**
582  * touch_softlockup_watchdog_sched - touch watchdog on scheduler stalls
583  *
584  * Call when the scheduler may have stalled for legitimate reasons
585  * preventing the watchdog task from executing - e.g. the scheduler
586  * entering idle state.  This should only be used for scheduler events.
587  * Use touch_softlockup_watchdog() for everything else.
588  */
589 notrace void touch_softlockup_watchdog_sched(void)
590 {
591 	/*
592 	 * Preemption can be enabled.  It doesn't matter which CPU's watchdog
593 	 * report period gets restarted here, so use the raw_ operation.
594 	 */
595 	raw_cpu_write(watchdog_report_ts, SOFTLOCKUP_DELAY_REPORT);
596 }
597 
598 notrace void touch_softlockup_watchdog(void)
599 {
600 	touch_softlockup_watchdog_sched();
601 	wq_watchdog_touch(raw_smp_processor_id());
602 }
603 EXPORT_SYMBOL(touch_softlockup_watchdog);
604 
605 void touch_all_softlockup_watchdogs(void)
606 {
607 	int cpu;
608 
609 	/*
610 	 * watchdog_mutex cannpt be taken here, as this might be called
611 	 * from (soft)interrupt context, so the access to
612 	 * watchdog_allowed_cpumask might race with a concurrent update.
613 	 *
614 	 * The watchdog time stamp can race against a concurrent real
615 	 * update as well, the only side effect might be a cycle delay for
616 	 * the softlockup check.
617 	 */
618 	for_each_cpu(cpu, &watchdog_allowed_mask) {
619 		per_cpu(watchdog_report_ts, cpu) = SOFTLOCKUP_DELAY_REPORT;
620 		wq_watchdog_touch(cpu);
621 	}
622 }
623 
624 void touch_softlockup_watchdog_sync(void)
625 {
626 	__this_cpu_write(softlockup_touch_sync, true);
627 	__this_cpu_write(watchdog_report_ts, SOFTLOCKUP_DELAY_REPORT);
628 }
629 
630 static int is_softlockup(unsigned long touch_ts,
631 			 unsigned long period_ts,
632 			 unsigned long now)
633 {
634 	if ((watchdog_enabled & WATCHDOG_SOFTOCKUP_ENABLED) && watchdog_thresh) {
635 		/*
636 		 * If period_ts has not been updated during a sample_period, then
637 		 * in the subsequent few sample_periods, period_ts might also not
638 		 * be updated, which could indicate a potential softlockup. In
639 		 * this case, if we suspect the cause of the potential softlockup
640 		 * might be interrupt storm, then we need to count the interrupts
641 		 * to find which interrupt is storming.
642 		 */
643 		if (time_after_eq(now, period_ts + get_softlockup_thresh() / NUM_SAMPLE_PERIODS) &&
644 		    need_counting_irqs())
645 			start_counting_irqs();
646 
647 		/* Warn about unreasonable delays. */
648 		if (time_after(now, period_ts + get_softlockup_thresh()))
649 			return now - touch_ts;
650 	}
651 	return 0;
652 }
653 
654 /* watchdog detector functions */
655 static DEFINE_PER_CPU(struct completion, softlockup_completion);
656 static DEFINE_PER_CPU(struct cpu_stop_work, softlockup_stop_work);
657 
658 /*
659  * The watchdog feed function - touches the timestamp.
660  *
661  * It only runs once every sample_period seconds (4 seconds by
662  * default) to reset the softlockup timestamp. If this gets delayed
663  * for more than 2*watchdog_thresh seconds then the debug-printout
664  * triggers in watchdog_timer_fn().
665  */
666 static int softlockup_fn(void *data)
667 {
668 	update_touch_ts();
669 	stop_counting_irqs();
670 	complete(this_cpu_ptr(&softlockup_completion));
671 
672 	return 0;
673 }
674 
675 /* watchdog kicker functions */
676 static enum hrtimer_restart watchdog_timer_fn(struct hrtimer *hrtimer)
677 {
678 	unsigned long touch_ts, period_ts, now;
679 	struct pt_regs *regs = get_irq_regs();
680 	int duration;
681 	int softlockup_all_cpu_backtrace = sysctl_softlockup_all_cpu_backtrace;
682 	unsigned long flags;
683 
684 	if (!watchdog_enabled)
685 		return HRTIMER_NORESTART;
686 
687 	watchdog_hardlockup_kick();
688 
689 	/* kick the softlockup detector */
690 	if (completion_done(this_cpu_ptr(&softlockup_completion))) {
691 		reinit_completion(this_cpu_ptr(&softlockup_completion));
692 		stop_one_cpu_nowait(smp_processor_id(),
693 				softlockup_fn, NULL,
694 				this_cpu_ptr(&softlockup_stop_work));
695 	}
696 
697 	/* .. and repeat */
698 	hrtimer_forward_now(hrtimer, ns_to_ktime(sample_period));
699 
700 	/*
701 	 * Read the current timestamp first. It might become invalid anytime
702 	 * when a virtual machine is stopped by the host or when the watchog
703 	 * is touched from NMI.
704 	 */
705 	now = get_timestamp();
706 	/*
707 	 * If a virtual machine is stopped by the host it can look to
708 	 * the watchdog like a soft lockup. This function touches the watchdog.
709 	 */
710 	kvm_check_and_clear_guest_paused();
711 	/*
712 	 * The stored timestamp is comparable with @now only when not touched.
713 	 * It might get touched anytime from NMI. Make sure that is_softlockup()
714 	 * uses the same (valid) value.
715 	 */
716 	period_ts = READ_ONCE(*this_cpu_ptr(&watchdog_report_ts));
717 
718 	update_cpustat();
719 
720 	/* Reset the interval when touched by known problematic code. */
721 	if (period_ts == SOFTLOCKUP_DELAY_REPORT) {
722 		if (unlikely(__this_cpu_read(softlockup_touch_sync))) {
723 			/*
724 			 * If the time stamp was touched atomically
725 			 * make sure the scheduler tick is up to date.
726 			 */
727 			__this_cpu_write(softlockup_touch_sync, false);
728 			sched_clock_tick();
729 		}
730 
731 		update_report_ts();
732 		return HRTIMER_RESTART;
733 	}
734 
735 	/* Check for a softlockup. */
736 	touch_ts = __this_cpu_read(watchdog_touch_ts);
737 	duration = is_softlockup(touch_ts, period_ts, now);
738 	if (unlikely(duration)) {
739 		/*
740 		 * Prevent multiple soft-lockup reports if one cpu is already
741 		 * engaged in dumping all cpu back traces.
742 		 */
743 		if (softlockup_all_cpu_backtrace) {
744 			if (test_and_set_bit_lock(0, &soft_lockup_nmi_warn))
745 				return HRTIMER_RESTART;
746 		}
747 
748 		/* Start period for the next softlockup warning. */
749 		update_report_ts();
750 
751 		printk_cpu_sync_get_irqsave(flags);
752 		pr_emerg("BUG: soft lockup - CPU#%d stuck for %us! [%s:%d]\n",
753 			smp_processor_id(), duration,
754 			current->comm, task_pid_nr(current));
755 		report_cpu_status();
756 		print_modules();
757 		print_irqtrace_events(current);
758 		if (regs)
759 			show_regs(regs);
760 		else
761 			dump_stack();
762 		printk_cpu_sync_put_irqrestore(flags);
763 
764 		if (softlockup_all_cpu_backtrace) {
765 			trigger_allbutcpu_cpu_backtrace(smp_processor_id());
766 			if (!softlockup_panic)
767 				clear_bit_unlock(0, &soft_lockup_nmi_warn);
768 		}
769 
770 		add_taint(TAINT_SOFTLOCKUP, LOCKDEP_STILL_OK);
771 		if (softlockup_panic)
772 			panic("softlockup: hung tasks");
773 	}
774 
775 	return HRTIMER_RESTART;
776 }
777 
778 static void watchdog_enable(unsigned int cpu)
779 {
780 	struct hrtimer *hrtimer = this_cpu_ptr(&watchdog_hrtimer);
781 	struct completion *done = this_cpu_ptr(&softlockup_completion);
782 
783 	WARN_ON_ONCE(cpu != smp_processor_id());
784 
785 	init_completion(done);
786 	complete(done);
787 
788 	/*
789 	 * Start the timer first to prevent the hardlockup watchdog triggering
790 	 * before the timer has a chance to fire.
791 	 */
792 	hrtimer_init(hrtimer, CLOCK_MONOTONIC, HRTIMER_MODE_REL_HARD);
793 	hrtimer->function = watchdog_timer_fn;
794 	hrtimer_start(hrtimer, ns_to_ktime(sample_period),
795 		      HRTIMER_MODE_REL_PINNED_HARD);
796 
797 	/* Initialize timestamp */
798 	update_touch_ts();
799 	/* Enable the hardlockup detector */
800 	if (watchdog_enabled & WATCHDOG_HARDLOCKUP_ENABLED)
801 		watchdog_hardlockup_enable(cpu);
802 }
803 
804 static void watchdog_disable(unsigned int cpu)
805 {
806 	struct hrtimer *hrtimer = this_cpu_ptr(&watchdog_hrtimer);
807 
808 	WARN_ON_ONCE(cpu != smp_processor_id());
809 
810 	/*
811 	 * Disable the hardlockup detector first. That prevents that a large
812 	 * delay between disabling the timer and disabling the hardlockup
813 	 * detector causes a false positive.
814 	 */
815 	watchdog_hardlockup_disable(cpu);
816 	hrtimer_cancel(hrtimer);
817 	wait_for_completion(this_cpu_ptr(&softlockup_completion));
818 }
819 
820 static int softlockup_stop_fn(void *data)
821 {
822 	watchdog_disable(smp_processor_id());
823 	return 0;
824 }
825 
826 static void softlockup_stop_all(void)
827 {
828 	int cpu;
829 
830 	if (!softlockup_initialized)
831 		return;
832 
833 	for_each_cpu(cpu, &watchdog_allowed_mask)
834 		smp_call_on_cpu(cpu, softlockup_stop_fn, NULL, false);
835 
836 	cpumask_clear(&watchdog_allowed_mask);
837 }
838 
839 static int softlockup_start_fn(void *data)
840 {
841 	watchdog_enable(smp_processor_id());
842 	return 0;
843 }
844 
845 static void softlockup_start_all(void)
846 {
847 	int cpu;
848 
849 	cpumask_copy(&watchdog_allowed_mask, &watchdog_cpumask);
850 	for_each_cpu(cpu, &watchdog_allowed_mask)
851 		smp_call_on_cpu(cpu, softlockup_start_fn, NULL, false);
852 }
853 
854 int lockup_detector_online_cpu(unsigned int cpu)
855 {
856 	if (cpumask_test_cpu(cpu, &watchdog_allowed_mask))
857 		watchdog_enable(cpu);
858 	return 0;
859 }
860 
861 int lockup_detector_offline_cpu(unsigned int cpu)
862 {
863 	if (cpumask_test_cpu(cpu, &watchdog_allowed_mask))
864 		watchdog_disable(cpu);
865 	return 0;
866 }
867 
868 static void __lockup_detector_reconfigure(void)
869 {
870 	cpus_read_lock();
871 	watchdog_hardlockup_stop();
872 
873 	softlockup_stop_all();
874 	set_sample_period();
875 	lockup_detector_update_enable();
876 	if (watchdog_enabled && watchdog_thresh)
877 		softlockup_start_all();
878 
879 	watchdog_hardlockup_start();
880 	cpus_read_unlock();
881 	/*
882 	 * Must be called outside the cpus locked section to prevent
883 	 * recursive locking in the perf code.
884 	 */
885 	__lockup_detector_cleanup();
886 }
887 
888 void lockup_detector_reconfigure(void)
889 {
890 	mutex_lock(&watchdog_mutex);
891 	__lockup_detector_reconfigure();
892 	mutex_unlock(&watchdog_mutex);
893 }
894 
895 /*
896  * Create the watchdog infrastructure and configure the detector(s).
897  */
898 static __init void lockup_detector_setup(void)
899 {
900 	/*
901 	 * If sysctl is off and watchdog got disabled on the command line,
902 	 * nothing to do here.
903 	 */
904 	lockup_detector_update_enable();
905 
906 	if (!IS_ENABLED(CONFIG_SYSCTL) &&
907 	    !(watchdog_enabled && watchdog_thresh))
908 		return;
909 
910 	mutex_lock(&watchdog_mutex);
911 	__lockup_detector_reconfigure();
912 	softlockup_initialized = true;
913 	mutex_unlock(&watchdog_mutex);
914 }
915 
916 #else /* CONFIG_SOFTLOCKUP_DETECTOR */
917 static void __lockup_detector_reconfigure(void)
918 {
919 	cpus_read_lock();
920 	watchdog_hardlockup_stop();
921 	lockup_detector_update_enable();
922 	watchdog_hardlockup_start();
923 	cpus_read_unlock();
924 }
925 void lockup_detector_reconfigure(void)
926 {
927 	__lockup_detector_reconfigure();
928 }
929 static inline void lockup_detector_setup(void)
930 {
931 	__lockup_detector_reconfigure();
932 }
933 #endif /* !CONFIG_SOFTLOCKUP_DETECTOR */
934 
935 static void __lockup_detector_cleanup(void)
936 {
937 	lockdep_assert_held(&watchdog_mutex);
938 	hardlockup_detector_perf_cleanup();
939 }
940 
941 /**
942  * lockup_detector_cleanup - Cleanup after cpu hotplug or sysctl changes
943  *
944  * Caller must not hold the cpu hotplug rwsem.
945  */
946 void lockup_detector_cleanup(void)
947 {
948 	mutex_lock(&watchdog_mutex);
949 	__lockup_detector_cleanup();
950 	mutex_unlock(&watchdog_mutex);
951 }
952 
953 /**
954  * lockup_detector_soft_poweroff - Interface to stop lockup detector(s)
955  *
956  * Special interface for parisc. It prevents lockup detector warnings from
957  * the default pm_poweroff() function which busy loops forever.
958  */
959 void lockup_detector_soft_poweroff(void)
960 {
961 	watchdog_enabled = 0;
962 }
963 
964 #ifdef CONFIG_SYSCTL
965 
966 /* Propagate any changes to the watchdog infrastructure */
967 static void proc_watchdog_update(void)
968 {
969 	/* Remove impossible cpus to keep sysctl output clean. */
970 	cpumask_and(&watchdog_cpumask, &watchdog_cpumask, cpu_possible_mask);
971 	__lockup_detector_reconfigure();
972 }
973 
974 /*
975  * common function for watchdog, nmi_watchdog and soft_watchdog parameter
976  *
977  * caller             | table->data points to            | 'which'
978  * -------------------|----------------------------------|-------------------------------
979  * proc_watchdog      | watchdog_user_enabled            | WATCHDOG_HARDLOCKUP_ENABLED |
980  *                    |                                  | WATCHDOG_SOFTOCKUP_ENABLED
981  * -------------------|----------------------------------|-------------------------------
982  * proc_nmi_watchdog  | watchdog_hardlockup_user_enabled | WATCHDOG_HARDLOCKUP_ENABLED
983  * -------------------|----------------------------------|-------------------------------
984  * proc_soft_watchdog | watchdog_softlockup_user_enabled | WATCHDOG_SOFTOCKUP_ENABLED
985  */
986 static int proc_watchdog_common(int which, const struct ctl_table *table, int write,
987 				void *buffer, size_t *lenp, loff_t *ppos)
988 {
989 	int err, old, *param = table->data;
990 
991 	mutex_lock(&watchdog_mutex);
992 
993 	old = *param;
994 	if (!write) {
995 		/*
996 		 * On read synchronize the userspace interface. This is a
997 		 * racy snapshot.
998 		 */
999 		*param = (watchdog_enabled & which) != 0;
1000 		err = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
1001 		*param = old;
1002 	} else {
1003 		err = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
1004 		if (!err && old != READ_ONCE(*param))
1005 			proc_watchdog_update();
1006 	}
1007 	mutex_unlock(&watchdog_mutex);
1008 	return err;
1009 }
1010 
1011 /*
1012  * /proc/sys/kernel/watchdog
1013  */
1014 static int proc_watchdog(const struct ctl_table *table, int write,
1015 			 void *buffer, size_t *lenp, loff_t *ppos)
1016 {
1017 	return proc_watchdog_common(WATCHDOG_HARDLOCKUP_ENABLED |
1018 				    WATCHDOG_SOFTOCKUP_ENABLED,
1019 				    table, write, buffer, lenp, ppos);
1020 }
1021 
1022 /*
1023  * /proc/sys/kernel/nmi_watchdog
1024  */
1025 static int proc_nmi_watchdog(const struct ctl_table *table, int write,
1026 			     void *buffer, size_t *lenp, loff_t *ppos)
1027 {
1028 	if (!watchdog_hardlockup_available && write)
1029 		return -ENOTSUPP;
1030 	return proc_watchdog_common(WATCHDOG_HARDLOCKUP_ENABLED,
1031 				    table, write, buffer, lenp, ppos);
1032 }
1033 
1034 #ifdef CONFIG_SOFTLOCKUP_DETECTOR
1035 /*
1036  * /proc/sys/kernel/soft_watchdog
1037  */
1038 static int proc_soft_watchdog(const struct ctl_table *table, int write,
1039 			      void *buffer, size_t *lenp, loff_t *ppos)
1040 {
1041 	return proc_watchdog_common(WATCHDOG_SOFTOCKUP_ENABLED,
1042 				    table, write, buffer, lenp, ppos);
1043 }
1044 #endif
1045 
1046 /*
1047  * /proc/sys/kernel/watchdog_thresh
1048  */
1049 static int proc_watchdog_thresh(const struct ctl_table *table, int write,
1050 				void *buffer, size_t *lenp, loff_t *ppos)
1051 {
1052 	int err, old;
1053 
1054 	mutex_lock(&watchdog_mutex);
1055 
1056 	old = READ_ONCE(watchdog_thresh);
1057 	err = proc_dointvec_minmax(table, write, buffer, lenp, ppos);
1058 
1059 	if (!err && write && old != READ_ONCE(watchdog_thresh))
1060 		proc_watchdog_update();
1061 
1062 	mutex_unlock(&watchdog_mutex);
1063 	return err;
1064 }
1065 
1066 /*
1067  * The cpumask is the mask of possible cpus that the watchdog can run
1068  * on, not the mask of cpus it is actually running on.  This allows the
1069  * user to specify a mask that will include cpus that have not yet
1070  * been brought online, if desired.
1071  */
1072 static int proc_watchdog_cpumask(const struct ctl_table *table, int write,
1073 				 void *buffer, size_t *lenp, loff_t *ppos)
1074 {
1075 	int err;
1076 
1077 	mutex_lock(&watchdog_mutex);
1078 
1079 	err = proc_do_large_bitmap(table, write, buffer, lenp, ppos);
1080 	if (!err && write)
1081 		proc_watchdog_update();
1082 
1083 	mutex_unlock(&watchdog_mutex);
1084 	return err;
1085 }
1086 
1087 static const int sixty = 60;
1088 
1089 static struct ctl_table watchdog_sysctls[] = {
1090 	{
1091 		.procname       = "watchdog",
1092 		.data		= &watchdog_user_enabled,
1093 		.maxlen		= sizeof(int),
1094 		.mode		= 0644,
1095 		.proc_handler   = proc_watchdog,
1096 		.extra1		= SYSCTL_ZERO,
1097 		.extra2		= SYSCTL_ONE,
1098 	},
1099 	{
1100 		.procname	= "watchdog_thresh",
1101 		.data		= &watchdog_thresh,
1102 		.maxlen		= sizeof(int),
1103 		.mode		= 0644,
1104 		.proc_handler	= proc_watchdog_thresh,
1105 		.extra1		= SYSCTL_ZERO,
1106 		.extra2		= (void *)&sixty,
1107 	},
1108 	{
1109 		.procname	= "watchdog_cpumask",
1110 		.data		= &watchdog_cpumask_bits,
1111 		.maxlen		= NR_CPUS,
1112 		.mode		= 0644,
1113 		.proc_handler	= proc_watchdog_cpumask,
1114 	},
1115 #ifdef CONFIG_SOFTLOCKUP_DETECTOR
1116 	{
1117 		.procname       = "soft_watchdog",
1118 		.data		= &watchdog_softlockup_user_enabled,
1119 		.maxlen		= sizeof(int),
1120 		.mode		= 0644,
1121 		.proc_handler   = proc_soft_watchdog,
1122 		.extra1		= SYSCTL_ZERO,
1123 		.extra2		= SYSCTL_ONE,
1124 	},
1125 	{
1126 		.procname	= "softlockup_panic",
1127 		.data		= &softlockup_panic,
1128 		.maxlen		= sizeof(int),
1129 		.mode		= 0644,
1130 		.proc_handler	= proc_dointvec_minmax,
1131 		.extra1		= SYSCTL_ZERO,
1132 		.extra2		= SYSCTL_ONE,
1133 	},
1134 #ifdef CONFIG_SMP
1135 	{
1136 		.procname	= "softlockup_all_cpu_backtrace",
1137 		.data		= &sysctl_softlockup_all_cpu_backtrace,
1138 		.maxlen		= sizeof(int),
1139 		.mode		= 0644,
1140 		.proc_handler	= proc_dointvec_minmax,
1141 		.extra1		= SYSCTL_ZERO,
1142 		.extra2		= SYSCTL_ONE,
1143 	},
1144 #endif /* CONFIG_SMP */
1145 #endif
1146 #ifdef CONFIG_HARDLOCKUP_DETECTOR
1147 	{
1148 		.procname	= "hardlockup_panic",
1149 		.data		= &hardlockup_panic,
1150 		.maxlen		= sizeof(int),
1151 		.mode		= 0644,
1152 		.proc_handler	= proc_dointvec_minmax,
1153 		.extra1		= SYSCTL_ZERO,
1154 		.extra2		= SYSCTL_ONE,
1155 	},
1156 #ifdef CONFIG_SMP
1157 	{
1158 		.procname	= "hardlockup_all_cpu_backtrace",
1159 		.data		= &sysctl_hardlockup_all_cpu_backtrace,
1160 		.maxlen		= sizeof(int),
1161 		.mode		= 0644,
1162 		.proc_handler	= proc_dointvec_minmax,
1163 		.extra1		= SYSCTL_ZERO,
1164 		.extra2		= SYSCTL_ONE,
1165 	},
1166 #endif /* CONFIG_SMP */
1167 #endif
1168 };
1169 
1170 static struct ctl_table watchdog_hardlockup_sysctl[] = {
1171 	{
1172 		.procname       = "nmi_watchdog",
1173 		.data		= &watchdog_hardlockup_user_enabled,
1174 		.maxlen		= sizeof(int),
1175 		.mode		= 0444,
1176 		.proc_handler   = proc_nmi_watchdog,
1177 		.extra1		= SYSCTL_ZERO,
1178 		.extra2		= SYSCTL_ONE,
1179 	},
1180 };
1181 
1182 static void __init watchdog_sysctl_init(void)
1183 {
1184 	register_sysctl_init("kernel", watchdog_sysctls);
1185 
1186 	if (watchdog_hardlockup_available)
1187 		watchdog_hardlockup_sysctl[0].mode = 0644;
1188 	register_sysctl_init("kernel", watchdog_hardlockup_sysctl);
1189 }
1190 
1191 #else
1192 #define watchdog_sysctl_init() do { } while (0)
1193 #endif /* CONFIG_SYSCTL */
1194 
1195 static void __init lockup_detector_delay_init(struct work_struct *work);
1196 static bool allow_lockup_detector_init_retry __initdata;
1197 
1198 static struct work_struct detector_work __initdata =
1199 		__WORK_INITIALIZER(detector_work, lockup_detector_delay_init);
1200 
1201 static void __init lockup_detector_delay_init(struct work_struct *work)
1202 {
1203 	int ret;
1204 
1205 	ret = watchdog_hardlockup_probe();
1206 	if (ret) {
1207 		if (ret == -ENODEV)
1208 			pr_info("NMI not fully supported\n");
1209 		else
1210 			pr_info("Delayed init of the lockup detector failed: %d\n", ret);
1211 		pr_info("Hard watchdog permanently disabled\n");
1212 		return;
1213 	}
1214 
1215 	allow_lockup_detector_init_retry = false;
1216 
1217 	watchdog_hardlockup_available = true;
1218 	lockup_detector_setup();
1219 }
1220 
1221 /*
1222  * lockup_detector_retry_init - retry init lockup detector if possible.
1223  *
1224  * Retry hardlockup detector init. It is useful when it requires some
1225  * functionality that has to be initialized later on a particular
1226  * platform.
1227  */
1228 void __init lockup_detector_retry_init(void)
1229 {
1230 	/* Must be called before late init calls */
1231 	if (!allow_lockup_detector_init_retry)
1232 		return;
1233 
1234 	schedule_work(&detector_work);
1235 }
1236 
1237 /*
1238  * Ensure that optional delayed hardlockup init is proceed before
1239  * the init code and memory is freed.
1240  */
1241 static int __init lockup_detector_check(void)
1242 {
1243 	/* Prevent any later retry. */
1244 	allow_lockup_detector_init_retry = false;
1245 
1246 	/* Make sure no work is pending. */
1247 	flush_work(&detector_work);
1248 
1249 	watchdog_sysctl_init();
1250 
1251 	return 0;
1252 
1253 }
1254 late_initcall_sync(lockup_detector_check);
1255 
1256 void __init lockup_detector_init(void)
1257 {
1258 	if (tick_nohz_full_enabled())
1259 		pr_info("Disabling watchdog on nohz_full cores by default\n");
1260 
1261 	cpumask_copy(&watchdog_cpumask,
1262 		     housekeeping_cpumask(HK_TYPE_TIMER));
1263 
1264 	if (!watchdog_hardlockup_probe())
1265 		watchdog_hardlockup_available = true;
1266 	else
1267 		allow_lockup_detector_init_retry = true;
1268 
1269 	lockup_detector_setup();
1270 }
1271