[PATCH] RCU torture-testing kernel module

This patch is a rewrite of the one submitted on October 1st, using modules (http://marc.theaimsgroup.com/?l=linux-kernel&m=112819093522998&w=2). This rewrite adds a tristate CONFIG_RCU_TORTURE_TEST, which enables an intense torture test of the RCU infratructure. This is needed due to the continued changes to the RCU infrastructure to accommodate dynamic ticks, CPU hotplug, realtime, and so on. Most of the code is in a separate file that is compiled only if the CONFIG variable is set. Documentation on how to run the test and interpret the output is also included. This code has been tested on i386 and ppc64, and an earlier version of the code has received extensive testing on a number of architectures as part of the PREEMPT_RT patchset. Signed-off-by: "Paul E. McKenney" <paulmck@us.ibm.com> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>

[PATCH] RCU torture-testing kernel module
This patch is a rewrite of the one submitted on October 1st, using modules (http://marc.theaimsgroup.com/?l=linux-kernel&m=112819093522998&w=2). This rewrite adds a tristate CONFIG_RCU_TORTURE_TEST, which enables an intense torture test of the RCU infratructure. This is needed due to the continued changes to the RCU infrastructure to accommodate dynamic ticks, CPU hotplug, realtime, and so on. Most of the code is in a separate file that is compiled only if the CONFIG variable is set. Documentation on how to run the test and interpret the output is also included. This code has been tested on i386 and ppc64, and an earlier version of the code has received extensive testing on a number of architectures as part of the PREEMPT_RT patchset. Signed-off-by: "Paul E. McKenney" <paulmck@us.ibm.com> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Paul E. McKenney · Linus Torvalds
1 parent b3099b48da
Showing 7 changed files with 648 additions and 1 deletions Side-by-side Diff
Documentation/RCU/torture.txt
include/linux/rcupdate.h
kernel/Makefile
kernel/rcupdate.c
kernel/rcutorture.c
lib/Kconfig.debug
mm/mmap.c
+RCU Torture Test Operation
+
+
+CONFIG_RCU_TORTURE_TEST
+
+The CONFIG_RCU_TORTURE_TEST config option is available for all RCU
+implementations.  It creates an rcutorture kernel module that can
+be loaded to run a torture test.  The test periodically outputs
+status messages via printk(), which can be examined via the dmesg
+command (perhaps grepping for "rcutorture").  The test is started
+when the module is loaded, and stops when the module is unloaded.
+
+However, actually setting this config option to "y" results in the system
+running the test immediately upon boot, and ending only when the system
+is taken down.  Normally, one will instead want to build the system
+with CONFIG_RCU_TORTURE_TEST=m and to use modprobe and rmmod to control
+the test, perhaps using a script similar to the one shown at the end of
+this document.  Note that you will need CONFIG_MODULE_UNLOAD in order
+to be able to end the test.
+
+
+MODULE PARAMETERS
+
+This module has the following parameters:
+
+nreaders	This is the number of RCU reading threads supported.
+		The default is twice the number of CPUs.  Why twice?
+		To properly exercise RCU implementations with preemptible
+		read-side critical sections.
+
+stat_interval	The number of seconds between output of torture
+		statistics (via printk()).  Regardless of the interval,
+		statistics are printed when the module is unloaded.
+		Setting the interval to zero causes the statistics to
+		be printed -only- when the module is unloaded, and this
+		is the default.
+
+verbose		Enable debug printk()s.  Default is disabled.
+
+
+OUTPUT
+
+The statistics output is as follows:
+
+	rcutorture: --- Start of test: nreaders=16 stat_interval=0 verbose=0
+	rcutorture: rtc: 0000000000000000 ver: 1916 tfle: 0 rta: 1916 rtaf: 0 rtf: 1915
+	rcutorture: Reader Pipe:  1466408 9747 0 0 0 0 0 0 0 0 0
+	rcutorture: Reader Batch:  1464477 11678 0 0 0 0 0 0 0 0
+	rcutorture: Free-Block Circulation:  1915 1915 1915 1915 1915 1915 1915 1915 1915 1915 0
+	rcutorture: --- End of test
+
+The command "dmesg | grep rcutorture:" will extract this information on
+most systems.  On more esoteric configurations, it may be necessary to
+use other commands to access the output of the printk()s used by
+the RCU torture test.  The printk()s use KERN_ALERT, so they should
+be evident.  ;-)
+
+The entries are as follows:
+
+o	"ggp": The number of counter flips (or batches) since boot.
+
+o	"rtc": The hexadecimal address of the structure currently visible
+	to readers.
+
+o	"ver": The number of times since boot that the rcutw writer task
+	has changed the structure visible to readers.
+
+o	"tfle": If non-zero, indicates that the "torture freelist"
+	containing structure to be placed into the "rtc" area is empty.
+	This condition is important, since it can fool you into thinking
+	that RCU is working when it is not.  :-/
+
+o	"rta": Number of structures allocated from the torture freelist.
+
+o	"rtaf": Number of allocations from the torture freelist that have
+	failed due to the list being empty.
+
+o	"rtf": Number of frees into the torture freelist.
+
+o	"Reader Pipe": Histogram of "ages" of structures seen by readers.
+	If any entries past the first two are non-zero, RCU is broken.
+	And rcutorture prints the error flag string "!!!" to make sure
+	you notice.  The age of a newly allocated structure is zero,
+	it becomes one when removed from reader visibility, and is
+	incremented once per grace period subsequently -- and is freed
+	after passing through (RCU_TORTURE_PIPE_LEN-2) grace periods.
+
+	The output displayed above was taken from a correctly working
+	RCU.  If you want to see what it looks like when broken, break
+	it yourself.  ;-)
+
+o	"Reader Batch": Another histogram of "ages" of structures seen
+	by readers, but in terms of counter flips (or batches) rather
+	than in terms of grace periods.  The legal number of non-zero
+	entries is again two.  The reason for this separate view is
+	that it is easier to get the third entry to show up in the
+	"Reader Batch" list than in the "Reader Pipe" list.
+
+o	"Free-Block Circulation": Shows the number of torture structures
+	that have reached a given point in the pipeline.  The first element
+	should closely correspond to the number of structures allocated,
+	the second to the number that have been removed from reader view,
+	and all but the last remaining to the corresponding number of
+	passes through a grace period.  The last entry should be zero,
+	as it is only incremented if a torture structure's counter
+	somehow gets incremented farther than it should.
+
+
+USAGE
+
+The following script may be used to torture RCU:
+
+	#!/bin/sh
+
+	modprobe rcutorture
+	sleep 100
+	rmmod rcutorture
+	dmesg | grep rcutorture:
+
+The output can be manually inspected for the error flag of "!!!".
+One could of course create a more elaborate script that automatically
+checked for such errors.
@@ -275,6 +275,7 @@
 extern void rcu_init(void);
 extern void rcu_check_callbacks(int cpu, int user);
 extern void rcu_restart_cpu(int cpu);
+extern long rcu_batches_completed(void);
  
 /* Exported interfaces */
 extern void FASTCALL(call_rcu(struct rcu_head *head, 
@@ -31,6 +31,7 @@
 obj-$(CONFIG_GENERIC_HARDIRQS) += irq/
 obj-$(CONFIG_CRASH_DUMP) += crash_dump.o
 obj-$(CONFIG_SECCOMP) += seccomp.o
+obj-$(CONFIG_RCU_TORTURE_TEST) += rcutorture.o
  
 ifneq ($(CONFIG_SCHED_NO_NO_OMIT_FRAME_POINTER),y)
 # According to Alan Modra <alan@linuxcare.com.au>, the -fno-omit-frame-pointer is
@@ -154,6 +154,15 @@
 }
  
 /*
+ * Return the number of RCU batches processed thus far.  Useful
+ * for debug and statistics.
+ */
+long rcu_batches_completed(void)
+{
+	return rcu_ctrlblk.completed;
+}
+
+/*
  * Invoke the completed RCU callbacks. They are expected to be in
  * a per-cpu list.
  */
@@ -501,6 +510,7 @@
 }
  
 module_param(maxbatch, int, 0);
+EXPORT_SYMBOL_GPL(rcu_batches_completed);
 EXPORT_SYMBOL(call_rcu);  /* WARNING: GPL-only in April 2006. */
 EXPORT_SYMBOL(call_rcu_bh);  /* WARNING: GPL-only in April 2006. */
 EXPORT_SYMBOL_GPL(synchronize_rcu);
+/*
+ * Read-Copy Update /proc-based torture test facility
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ *
+ * Copyright (C) IBM Corporation, 2005
+ *
+ * Authors: Paul E. McKenney <paulmck@us.ibm.com>
+ *
+ * See also:  Documentation/RCU/torture.txt
+ */
+#include <linux/types.h>
+#include <linux/kernel.h>
+#include <linux/init.h>
+#include <linux/module.h>
+#include <linux/kthread.h>
+#include <linux/err.h>
+#include <linux/spinlock.h>
+#include <linux/smp.h>
+#include <linux/rcupdate.h>
+#include <linux/interrupt.h>
+#include <linux/sched.h>
+#include <asm/atomic.h>
+#include <linux/bitops.h>
+#include <linux/module.h>
+#include <linux/completion.h>
+#include <linux/moduleparam.h>
+#include <linux/percpu.h>
+#include <linux/notifier.h>
+#include <linux/rcuref.h>
+#include <linux/cpu.h>
+#include <linux/random.h>
+#include <linux/delay.h>
+#include <linux/byteorder/swabb.h>
+#include <linux/stat.h>
+
+MODULE_LICENSE("GPL");
+
+static int nreaders = -1;	/* # reader threads, defaults to 4*ncpus */
+static int stat_interval = 0;	/* Interval between stats, in seconds. */
+				/*  Defaults to "only at end of test". */
+static int verbose = 0;		/* Print more debug info. */
+
+MODULE_PARM(nreaders, "i");
+MODULE_PARM_DESC(nreaders, "Number of RCU reader threads");
+MODULE_PARM(stat_interval, "i");
+MODULE_PARM_DESC(stat_interval, "Number of seconds between stats printk()s");
+MODULE_PARM(verbose, "i");
+MODULE_PARM_DESC(verbose, "Enable verbose debugging printk()s");
+#define TORTURE_FLAG "rcutorture: "
+#define PRINTK_STRING(s) \
+	do { printk(KERN_ALERT TORTURE_FLAG s "\n"); } while (0)
+#define VERBOSE_PRINTK_STRING(s) \
+	do { if (verbose) printk(KERN_ALERT TORTURE_FLAG s "\n"); } while (0)
+#define VERBOSE_PRINTK_ERRSTRING(s) \
+	do { if (verbose) printk(KERN_ALERT TORTURE_FLAG "!!! " s "\n"); } while (0)
+
+static char printk_buf[4096];
+
+static int nrealreaders;
+static struct task_struct *writer_task;
+static struct task_struct **reader_tasks;
+static struct task_struct *stats_task;
+
+#define RCU_TORTURE_PIPE_LEN 10
+
+struct rcu_torture {
+	struct rcu_head rtort_rcu;
+	int rtort_pipe_count;
+	struct list_head rtort_free;
+};
+
+static int fullstop = 0;	/* stop generating callbacks at test end. */
+static LIST_HEAD(rcu_torture_freelist);
+static struct rcu_torture *rcu_torture_current = NULL;
+static long rcu_torture_current_version = 0;
+static struct rcu_torture rcu_tortures[10 * RCU_TORTURE_PIPE_LEN];
+static DEFINE_SPINLOCK(rcu_torture_lock);
+static DEFINE_PER_CPU(long [RCU_TORTURE_PIPE_LEN + 1], rcu_torture_count) =
+	{ 0 };
+static DEFINE_PER_CPU(long [RCU_TORTURE_PIPE_LEN + 1], rcu_torture_batch) =
+	{ 0 };
+static atomic_t rcu_torture_wcount[RCU_TORTURE_PIPE_LEN + 1];
+atomic_t n_rcu_torture_alloc;
+atomic_t n_rcu_torture_alloc_fail;
+atomic_t n_rcu_torture_free;
+
+/*
+ * Allocate an element from the rcu_tortures pool.
+ */
+struct rcu_torture *
+rcu_torture_alloc(void)
+{
+	struct list_head *p;
+
+	spin_lock(&rcu_torture_lock);
+	if (list_empty(&rcu_torture_freelist)) {
+		atomic_inc(&n_rcu_torture_alloc_fail);
+		spin_unlock(&rcu_torture_lock);
+		return NULL;
+	}
+	atomic_inc(&n_rcu_torture_alloc);
+	p = rcu_torture_freelist.next;
+	list_del_init(p);
+	spin_unlock(&rcu_torture_lock);
+	return container_of(p, struct rcu_torture, rtort_free);
+}
+
+/*
+ * Free an element to the rcu_tortures pool.
+ */
+static void
+rcu_torture_free(struct rcu_torture *p)
+{
+	atomic_inc(&n_rcu_torture_free);
+	spin_lock(&rcu_torture_lock);
+	list_add_tail(&p->rtort_free, &rcu_torture_freelist);
+	spin_unlock(&rcu_torture_lock);
+}
+
+static void
+rcu_torture_cb(struct rcu_head *p)
+{
+	int i;
+	struct rcu_torture *rp = container_of(p, struct rcu_torture, rtort_rcu);
+
+	if (fullstop) {
+		/* Test is ending, just drop callbacks on the floor. */
+		/* The next initialization will pick up the pieces. */
+		return;
+	}
+	i = rp->rtort_pipe_count;
+	if (i > RCU_TORTURE_PIPE_LEN)
+		i = RCU_TORTURE_PIPE_LEN;
+	atomic_inc(&rcu_torture_wcount[i]);
+	if (++rp->rtort_pipe_count >= RCU_TORTURE_PIPE_LEN)
+		rcu_torture_free(rp);
+	else
+		call_rcu(p, rcu_torture_cb);
+}
+
+struct rcu_random_state {
+	unsigned long rrs_state;
+	unsigned long rrs_count;
+};
+
+#define RCU_RANDOM_MULT 39916801  /* prime */
+#define RCU_RANDOM_ADD	479001701 /* prime */
+#define RCU_RANDOM_REFRESH 10000
+
+#define DEFINE_RCU_RANDOM(name) struct rcu_random_state name = { 0, 0 }
+
+/*
+ * Crude but fast random-number generator.  Uses a linear congruential
+ * generator, with occasional help from get_random_bytes().
+ */
+static long
+rcu_random(struct rcu_random_state *rrsp)
+{
+	long refresh;
+
+	if (--rrsp->rrs_count < 0) {
+		get_random_bytes(&refresh, sizeof(refresh));
+		rrsp->rrs_state += refresh;
+		rrsp->rrs_count = RCU_RANDOM_REFRESH;
+	}
+	rrsp->rrs_state = rrsp->rrs_state * RCU_RANDOM_MULT + RCU_RANDOM_ADD;
+	return swahw32(rrsp->rrs_state);
+}
+
+/*
+ * RCU torture writer kthread.  Repeatedly substitutes a new structure
+ * for that pointed to by rcu_torture_current, freeing the old structure
+ * after a series of grace periods (the "pipeline").
+ */
+static int
+rcu_torture_writer(void *arg)
+{
+	int i;
+	long oldbatch = rcu_batches_completed();
+	struct rcu_torture *rp;
+	struct rcu_torture *old_rp;
+	static DEFINE_RCU_RANDOM(rand);
+
+	VERBOSE_PRINTK_STRING("rcu_torture_writer task started");
+	do {
+		schedule_timeout_uninterruptible(1);
+		if (rcu_batches_completed() == oldbatch)
+			continue;
+		if ((rp = rcu_torture_alloc()) == NULL)
+			continue;
+		rp->rtort_pipe_count = 0;
+		udelay(rcu_random(&rand) & 0x3ff);
+		old_rp = rcu_torture_current;
+		rcu_assign_pointer(rcu_torture_current, rp);
+		smp_wmb();
+		if (old_rp != NULL) {
+			i = old_rp->rtort_pipe_count;
+			if (i > RCU_TORTURE_PIPE_LEN)
+				i = RCU_TORTURE_PIPE_LEN;
+			atomic_inc(&rcu_torture_wcount[i]);
+			old_rp->rtort_pipe_count++;
+			call_rcu(&old_rp->rtort_rcu, rcu_torture_cb);
+		}
+		rcu_torture_current_version++;
+		oldbatch = rcu_batches_completed();
+	} while (!kthread_should_stop() && !fullstop);
+	VERBOSE_PRINTK_STRING("rcu_torture_writer task stopping");
+	while (!kthread_should_stop())
+		schedule_timeout_uninterruptible(1);
+	return 0;
+}
+
+/*
+ * RCU torture reader kthread.  Repeatedly dereferences rcu_torture_current,
+ * incrementing the corresponding element of the pipeline array.  The
+ * counter in the element should never be greater than 1, otherwise, the
+ * RCU implementation is broken.
+ */
+static int
+rcu_torture_reader(void *arg)
+{
+	int completed;
+	DEFINE_RCU_RANDOM(rand);
+	struct rcu_torture *p;
+	int pipe_count;
+
+	VERBOSE_PRINTK_STRING("rcu_torture_reader task started");
+	do {
+		rcu_read_lock();
+		completed = rcu_batches_completed();
+		p = rcu_dereference(rcu_torture_current);
+		if (p == NULL) {
+			/* Wait for rcu_torture_writer to get underway */
+			rcu_read_unlock();
+			schedule_timeout_interruptible(HZ);
+			continue;
+		}
+		udelay(rcu_random(&rand) & 0x7f);
+		preempt_disable();
+		pipe_count = p->rtort_pipe_count;
+		if (pipe_count > RCU_TORTURE_PIPE_LEN) {
+			/* Should not happen, but... */
+			pipe_count = RCU_TORTURE_PIPE_LEN;
+		}
+		++__get_cpu_var(rcu_torture_count)[pipe_count];
+		completed = rcu_batches_completed() - completed;
+		if (completed > RCU_TORTURE_PIPE_LEN) {
+			/* Should not happen, but... */
+			completed = RCU_TORTURE_PIPE_LEN;
+		}
+		++__get_cpu_var(rcu_torture_batch)[completed];
+		preempt_enable();
+		rcu_read_unlock();
+		schedule();
+	} while (!kthread_should_stop() && !fullstop);
+	VERBOSE_PRINTK_STRING("rcu_torture_reader task stopping");
+	while (!kthread_should_stop())
+		schedule_timeout_uninterruptible(1);
+	return 0;
+}
+
+/*
+ * Create an RCU-torture statistics message in the specified buffer.
+ */
+static int
+rcu_torture_printk(char *page)
+{
+	int cnt = 0;
+	int cpu;
+	int i;
+	long pipesummary[RCU_TORTURE_PIPE_LEN + 1] = { 0 };
+	long batchsummary[RCU_TORTURE_PIPE_LEN + 1] = { 0 };
+
+	for_each_cpu(cpu) {
+		for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++) {
+			pipesummary[i] += per_cpu(rcu_torture_count, cpu)[i];
+			batchsummary[i] += per_cpu(rcu_torture_batch, cpu)[i];
+		}
+	}
+	for (i = RCU_TORTURE_PIPE_LEN - 1; i >= 0; i--) {
+		if (pipesummary[i] != 0)
+			break;
+	}
+	cnt += sprintf(&page[cnt], "rcutorture: ");
+	cnt += sprintf(&page[cnt],
+		       "rtc: %p ver: %ld tfle: %d rta: %d rtaf: %d rtf: %d",
+		       rcu_torture_current,
+		       rcu_torture_current_version,
+		       list_empty(&rcu_torture_freelist),
+		       atomic_read(&n_rcu_torture_alloc),
+		       atomic_read(&n_rcu_torture_alloc_fail),
+		       atomic_read(&n_rcu_torture_free));
+	cnt += sprintf(&page[cnt], "\nrcutorture: ");
+	if (i > 1)
+		cnt += sprintf(&page[cnt], "!!! ");
+	cnt += sprintf(&page[cnt], "Reader Pipe: ");
+	for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++)
+		cnt += sprintf(&page[cnt], " %ld", pipesummary[i]);
+	cnt += sprintf(&page[cnt], "\nrcutorture: ");
+	cnt += sprintf(&page[cnt], "Reader Batch: ");
+	for (i = 0; i < RCU_TORTURE_PIPE_LEN; i++)
+		cnt += sprintf(&page[cnt], " %ld", batchsummary[i]);
+	cnt += sprintf(&page[cnt], "\nrcutorture: ");
+	cnt += sprintf(&page[cnt], "Free-Block Circulation: ");
+	for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++) {
+		cnt += sprintf(&page[cnt], " %d",
+			       atomic_read(&rcu_torture_wcount[i]));
+	}
+	cnt += sprintf(&page[cnt], "\n");
+	return cnt;
+}
+
+/*
+ * Print torture statistics.  Caller must ensure that there is only
+ * one call to this function at a given time!!!  This is normally
+ * accomplished by relying on the module system to only have one copy
+ * of the module loaded, and then by giving the rcu_torture_stats
+ * kthread full control (or the init/cleanup functions when rcu_torture_stats
+ * thread is not running).
+ */
+static void
+rcu_torture_stats_print(void)
+{
+	int cnt;
+
+	cnt = rcu_torture_printk(printk_buf);
+	printk(KERN_ALERT "%s", printk_buf);
+}
+
+/*
+ * Periodically prints torture statistics, if periodic statistics printing
+ * was specified via the stat_interval module parameter.
+ *
+ * No need to worry about fullstop here, since this one doesn't reference
+ * volatile state or register callbacks.
+ */
+static int
+rcu_torture_stats(void *arg)
+{
+	VERBOSE_PRINTK_STRING("rcu_torture_stats task started");
+	do {
+		schedule_timeout_interruptible(stat_interval * HZ);
+		rcu_torture_stats_print();
+	} while (!kthread_should_stop());
+	VERBOSE_PRINTK_STRING("rcu_torture_stats task stopping");
+	return 0;
+}
+
+static void
+rcu_torture_cleanup(void)
+{
+	int i;
+
+	fullstop = 1;
+	if (writer_task != NULL) {
+		VERBOSE_PRINTK_STRING("Stopping rcu_torture_writer task");
+		kthread_stop(writer_task);
+	}
+	writer_task = NULL;
+
+	if (reader_tasks != NULL) {
+		for (i = 0; i < nrealreaders; i++) {
+			if (reader_tasks[i] != NULL) {
+				VERBOSE_PRINTK_STRING(
+					"Stopping rcu_torture_reader task");
+				kthread_stop(reader_tasks[i]);
+			}
+			reader_tasks[i] = NULL;
+		}
+		kfree(reader_tasks);
+		reader_tasks = NULL;
+	}
+	rcu_torture_current = NULL;
+
+	if (stats_task != NULL) {
+		VERBOSE_PRINTK_STRING("Stopping rcu_torture_stats task");
+		kthread_stop(stats_task);
+	}
+	stats_task = NULL;
+
+	/* Wait for all RCU callbacks to fire.  */
+
+	for (i = 0; i < RCU_TORTURE_PIPE_LEN; i++)
+		synchronize_rcu();
+	rcu_torture_stats_print();  /* -After- the stats thread is stopped! */
+	PRINTK_STRING("--- End of test");
+}
+
+static int
+rcu_torture_init(void)
+{
+	int i;
+	int cpu;
+	int firsterr = 0;
+
+	/* Process args and tell the world that the torturer is on the job. */
+
+	if (nreaders >= 0)
+		nrealreaders = nreaders;
+	else
+		nrealreaders = 2 * num_online_cpus();
+	printk(KERN_ALERT TORTURE_FLAG
+	       "--- Start of test: nreaders=%d stat_interval=%d verbose=%d\n",
+	       nrealreaders, stat_interval, verbose);
+	fullstop = 0;
+
+	/* Set up the freelist. */
+
+	INIT_LIST_HEAD(&rcu_torture_freelist);
+	for (i = 0; i < sizeof(rcu_tortures) / sizeof(rcu_tortures[0]); i++) {
+		list_add_tail(&rcu_tortures[i].rtort_free,
+			      &rcu_torture_freelist);
+	}
+
+	/* Initialize the statistics so that each run gets its own numbers. */
+
+	rcu_torture_current = NULL;
+	rcu_torture_current_version = 0;
+	atomic_set(&n_rcu_torture_alloc, 0);
+	atomic_set(&n_rcu_torture_alloc_fail, 0);
+	atomic_set(&n_rcu_torture_free, 0);
+	for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++)
+		atomic_set(&rcu_torture_wcount[i], 0);
+	for_each_cpu(cpu) {
+		for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++) {
+			per_cpu(rcu_torture_count, cpu)[i] = 0;
+			per_cpu(rcu_torture_batch, cpu)[i] = 0;
+		}
+	}
+
+	/* Start up the kthreads. */
+
+	VERBOSE_PRINTK_STRING("Creating rcu_torture_writer task");
+	writer_task = kthread_run(rcu_torture_writer, NULL,
+				  "rcu_torture_writer");
+	if (IS_ERR(writer_task)) {
+		firsterr = PTR_ERR(writer_task);
+		VERBOSE_PRINTK_ERRSTRING("Failed to create writer");
+		writer_task = NULL;
+		goto unwind;
+	}
+	reader_tasks = kmalloc(nrealreaders * sizeof(reader_tasks[0]),
+			       GFP_KERNEL);
+	if (reader_tasks == NULL) {
+		VERBOSE_PRINTK_ERRSTRING("out of memory");
+		firsterr = -ENOMEM;
+		goto unwind;
+	}
+	for (i = 0; i < nrealreaders; i++) {
+		VERBOSE_PRINTK_STRING("Creating rcu_torture_reader task");
+		reader_tasks[i] = kthread_run(rcu_torture_reader, NULL,
+					      "rcu_torture_reader");
+		if (IS_ERR(reader_tasks[i])) {
+			firsterr = PTR_ERR(reader_tasks[i]);
+			VERBOSE_PRINTK_ERRSTRING("Failed to create reader");
+			reader_tasks[i] = NULL;
+			goto unwind;
+		}
+	}
+	if (stat_interval > 0) {
+		VERBOSE_PRINTK_STRING("Creating rcu_torture_stats task");
+		stats_task = kthread_run(rcu_torture_stats, NULL,
+					"rcu_torture_stats");
+		if (IS_ERR(stats_task)) {
+			firsterr = PTR_ERR(stats_task);
+			VERBOSE_PRINTK_ERRSTRING("Failed to create stats");
+			stats_task = NULL;
+			goto unwind;
+		}
+	}
+	return 0;
+
+unwind:
+	rcu_torture_cleanup();
+	return firsterr;
+}
+
+module_init(rcu_torture_init);
+module_exit(rcu_torture_cleanup);
@@ -168,6 +168,14 @@
  
 	  If unsure, say N.
  
+config DEBUG_VM
+	bool "Debug VM"
+	depends on DEBUG_KERNEL
+	help
+	  Enable this to debug the virtual-memory system.
+
+	  If unsure, say N.
+
 config FRAME_POINTER
 	bool "Compile the kernel with frame pointers"
 	depends on DEBUG_KERNEL && (X86 || CRIS || M68K || M68KNOMMU || FRV || UML)
@@ -177,4 +185,18 @@
 	  and slower, but it might give very useful debugging information on
 	  some architectures or if you use external debuggers.
 	  If you don't debug the kernel, you can say N.
+
+config RCU_TORTURE_TEST
+	tristate "torture tests for RCU"
+	depends on DEBUG_KERNEL
+	default n
+	help
+	  This option provides a kernel module that runs torture tests
+	  on the RCU infrastructure.  The kernel module may be built
+	  after the fact on the running kernel to be tested, if desired.
+
+	  Say Y here if you want RCU torture tests to start automatically
+	  at boot time (you probably don't).
+	  Say M if you want the RCU torture tests to build as a module.
+	  Say N if you are unsure.
@@ -1840,7 +1840,7 @@
  
 static inline void verify_mm_writelocked(struct mm_struct *mm)
 {
-#ifdef CONFIG_DEBUG_KERNEL
+#ifdef CONFIG_DEBUG_VM
 	if (unlikely(down_read_trylock(&mm->mmap_sem))) {
 		WARN_ON(1);
 		up_read(&mm->mmap_sem);
	1	+RCU Torture Test Operation
	2	+
	3	+
	4	+CONFIG_RCU_TORTURE_TEST
	5	+
	6	+The CONFIG_RCU_TORTURE_TEST config option is available for all RCU
	7	+implementations. It creates an rcutorture kernel module that can
	8	+be loaded to run a torture test. The test periodically outputs
	9	+status messages via printk(), which can be examined via the dmesg
	10	+command (perhaps grepping for "rcutorture"). The test is started
	11	+when the module is loaded, and stops when the module is unloaded.
	12	+
	13	+However, actually setting this config option to "y" results in the system
	14	+running the test immediately upon boot, and ending only when the system
	15	+is taken down. Normally, one will instead want to build the system
	16	+with CONFIG_RCU_TORTURE_TEST=m and to use modprobe and rmmod to control
	17	+the test, perhaps using a script similar to the one shown at the end of
	18	+this document. Note that you will need CONFIG_MODULE_UNLOAD in order
	19	+to be able to end the test.
	20	+
	21	+
	22	+MODULE PARAMETERS
	23	+
	24	+This module has the following parameters:
	25	+
	26	+nreaders This is the number of RCU reading threads supported.
	27	+ The default is twice the number of CPUs. Why twice?
	28	+ To properly exercise RCU implementations with preemptible
	29	+ read-side critical sections.
	30	+
	31	+stat_interval The number of seconds between output of torture
	32	+ statistics (via printk()). Regardless of the interval,
	33	+ statistics are printed when the module is unloaded.
	34	+ Setting the interval to zero causes the statistics to
	35	+ be printed -only- when the module is unloaded, and this
	36	+ is the default.
	37	+
	38	+verbose Enable debug printk()s. Default is disabled.
	39	+
	40	+
	41	+OUTPUT
	42	+
	43	+The statistics output is as follows:
	44	+
	45	+ rcutorture: --- Start of test: nreaders=16 stat_interval=0 verbose=0
	46	+ rcutorture: rtc: 0000000000000000 ver: 1916 tfle: 0 rta: 1916 rtaf: 0 rtf: 1915
	47	+ rcutorture: Reader Pipe: 1466408 9747 0 0 0 0 0 0 0 0 0
	48	+ rcutorture: Reader Batch: 1464477 11678 0 0 0 0 0 0 0 0
	49	+ rcutorture: Free-Block Circulation: 1915 1915 1915 1915 1915 1915 1915 1915 1915 1915 0
	50	+ rcutorture: --- End of test
	51	+
	52	+The command "dmesg \| grep rcutorture:" will extract this information on
	53	+most systems. On more esoteric configurations, it may be necessary to
	54	+use other commands to access the output of the printk()s used by
	55	+the RCU torture test. The printk()s use KERN_ALERT, so they should
	56	+be evident. ;-)
	57	+
	58	+The entries are as follows:
	59	+
	60	+o "ggp": The number of counter flips (or batches) since boot.
	61	+
	62	+o "rtc": The hexadecimal address of the structure currently visible
	63	+ to readers.
	64	+
	65	+o "ver": The number of times since boot that the rcutw writer task
	66	+ has changed the structure visible to readers.
	67	+
	68	+o "tfle": If non-zero, indicates that the "torture freelist"
	69	+ containing structure to be placed into the "rtc" area is empty.
	70	+ This condition is important, since it can fool you into thinking
	71	+ that RCU is working when it is not. :-/
	72	+
	73	+o "rta": Number of structures allocated from the torture freelist.
	74	+
	75	+o "rtaf": Number of allocations from the torture freelist that have
	76	+ failed due to the list being empty.
	77	+
	78	+o "rtf": Number of frees into the torture freelist.
	79	+
	80	+o "Reader Pipe": Histogram of "ages" of structures seen by readers.
	81	+ If any entries past the first two are non-zero, RCU is broken.
	82	+ And rcutorture prints the error flag string "!!!" to make sure
	83	+ you notice. The age of a newly allocated structure is zero,
	84	+ it becomes one when removed from reader visibility, and is
	85	+ incremented once per grace period subsequently -- and is freed
	86	+ after passing through (RCU_TORTURE_PIPE_LEN-2) grace periods.
	87	+
	88	+ The output displayed above was taken from a correctly working
	89	+ RCU. If you want to see what it looks like when broken, break
	90	+ it yourself. ;-)
	91	+
	92	+o "Reader Batch": Another histogram of "ages" of structures seen
	93	+ by readers, but in terms of counter flips (or batches) rather
	94	+ than in terms of grace periods. The legal number of non-zero
	95	+ entries is again two. The reason for this separate view is
	96	+ that it is easier to get the third entry to show up in the
	97	+ "Reader Batch" list than in the "Reader Pipe" list.
	98	+
	99	+o "Free-Block Circulation": Shows the number of torture structures
	100	+ that have reached a given point in the pipeline. The first element
	101	+ should closely correspond to the number of structures allocated,
	102	+ the second to the number that have been removed from reader view,
	103	+ and all but the last remaining to the corresponding number of
	104	+ passes through a grace period. The last entry should be zero,
	105	+ as it is only incremented if a torture structure's counter
	106	+ somehow gets incremented farther than it should.
	107	+
	108	+
	109	+USAGE
	110	+
	111	+The following script may be used to torture RCU:
	112	+
	113	+ #!/bin/sh
	114	+
	115	+ modprobe rcutorture
	116	+ sleep 100
	117	+ rmmod rcutorture
	118	+ dmesg \| grep rcutorture:
	119	+
	120	+The output can be manually inspected for the error flag of "!!!".
	121	+One could of course create a more elaborate script that automatically
	122	+checked for such errors.
...	...	@@ -275,6 +275,7 @@
275	275	extern void rcu_init(void);
276	276	extern void rcu_check_callbacks(int cpu, int user);
277	277	extern void rcu_restart_cpu(int cpu);
	278	+extern long rcu_batches_completed(void);
278	279
279	280	/* Exported interfaces */
280	281	extern void FASTCALL(call_rcu(struct rcu_head *head,
...	...	@@ -31,6 +31,7 @@
31	31	obj-$(CONFIG_GENERIC_HARDIRQS) += irq/
32	32	obj-$(CONFIG_CRASH_DUMP) += crash_dump.o
33	33	obj-$(CONFIG_SECCOMP) += seccomp.o
	34	+obj-$(CONFIG_RCU_TORTURE_TEST) += rcutorture.o
34	35
35	36	ifneq ($(CONFIG_SCHED_NO_NO_OMIT_FRAME_POINTER),y)
36	37	# According to Alan Modra <alan@linuxcare.com.au>, the -fno-omit-frame-pointer is
...	...	@@ -154,6 +154,15 @@
154	154	}
155	155
156	156	/*
	157	+ * Return the number of RCU batches processed thus far. Useful
	158	+ * for debug and statistics.
	159	+ */
	160	+long rcu_batches_completed(void)
	161	+{
	162	+ return rcu_ctrlblk.completed;
	163	+}
	164	+
	165	+/*
157	166	* Invoke the completed RCU callbacks. They are expected to be in
158	167	* a per-cpu list.
159	168	*/
...	...	@@ -501,6 +510,7 @@
501	510	}
502	511
503	512	module_param(maxbatch, int, 0);
	513	+EXPORT_SYMBOL_GPL(rcu_batches_completed);
504	514	EXPORT_SYMBOL(call_rcu); /* WARNING: GPL-only in April 2006. */
505	515	EXPORT_SYMBOL(call_rcu_bh); /* WARNING: GPL-only in April 2006. */
506	516	EXPORT_SYMBOL_GPL(synchronize_rcu);
	1	+/*
	2	+ * Read-Copy Update /proc-based torture test facility
	3	+ *
	4	+ * This program is free software; you can redistribute it and/or modify
	5	+ * it under the terms of the GNU General Public License as published by
	6	+ * the Free Software Foundation; either version 2 of the License, or
	7	+ * (at your option) any later version.
	8	+ *
	9	+ * This program is distributed in the hope that it will be useful,
	10	+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
	11	+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	12	+ * GNU General Public License for more details.
	13	+ *
	14	+ * You should have received a copy of the GNU General Public License
	15	+ * along with this program; if not, write to the Free Software
	16	+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
	17	+ *
	18	+ * Copyright (C) IBM Corporation, 2005
	19	+ *
	20	+ * Authors: Paul E. McKenney <paulmck@us.ibm.com>
	21	+ *
	22	+ * See also: Documentation/RCU/torture.txt
	23	+ */
	24	+#include <linux/types.h>
	25	+#include <linux/kernel.h>
	26	+#include <linux/init.h>
	27	+#include <linux/module.h>
	28	+#include <linux/kthread.h>
	29	+#include <linux/err.h>
	30	+#include <linux/spinlock.h>
	31	+#include <linux/smp.h>
	32	+#include <linux/rcupdate.h>
	33	+#include <linux/interrupt.h>
	34	+#include <linux/sched.h>
	35	+#include <asm/atomic.h>
	36	+#include <linux/bitops.h>
	37	+#include <linux/module.h>
	38	+#include <linux/completion.h>
	39	+#include <linux/moduleparam.h>
	40	+#include <linux/percpu.h>
	41	+#include <linux/notifier.h>
	42	+#include <linux/rcuref.h>
	43	+#include <linux/cpu.h>
	44	+#include <linux/random.h>
	45	+#include <linux/delay.h>
	46	+#include <linux/byteorder/swabb.h>
	47	+#include <linux/stat.h>
	48	+
	49	+MODULE_LICENSE("GPL");
	50	+
	51	+static int nreaders = -1; /* # reader threads, defaults to 4ncpus /
	52	+static int stat_interval = 0; /* Interval between stats, in seconds. */
	53	+ /* Defaults to "only at end of test". */
	54	+static int verbose = 0; /* Print more debug info. */
	55	+
	56	+MODULE_PARM(nreaders, "i");
	57	+MODULE_PARM_DESC(nreaders, "Number of RCU reader threads");
	58	+MODULE_PARM(stat_interval, "i");
	59	+MODULE_PARM_DESC(stat_interval, "Number of seconds between stats printk()s");
	60	+MODULE_PARM(verbose, "i");
	61	+MODULE_PARM_DESC(verbose, "Enable verbose debugging printk()s");
	62	+#define TORTURE_FLAG "rcutorture: "
	63	+#define PRINTK_STRING(s) \
	64	+ do { printk(KERN_ALERT TORTURE_FLAG s "\n"); } while (0)
	65	+#define VERBOSE_PRINTK_STRING(s) \
	66	+ do { if (verbose) printk(KERN_ALERT TORTURE_FLAG s "\n"); } while (0)
	67	+#define VERBOSE_PRINTK_ERRSTRING(s) \
	68	+ do { if (verbose) printk(KERN_ALERT TORTURE_FLAG "!!! " s "\n"); } while (0)
	69	+
	70	+static char printk_buf[4096];
	71	+
	72	+static int nrealreaders;
	73	+static struct task_struct *writer_task;
	74	+static struct task_struct **reader_tasks;
	75	+static struct task_struct *stats_task;
	76	+
	77	+#define RCU_TORTURE_PIPE_LEN 10
	78	+
	79	+struct rcu_torture {
	80	+ struct rcu_head rtort_rcu;
	81	+ int rtort_pipe_count;
	82	+ struct list_head rtort_free;
	83	+};
	84	+
	85	+static int fullstop = 0; /* stop generating callbacks at test end. */
	86	+static LIST_HEAD(rcu_torture_freelist);
	87	+static struct rcu_torture *rcu_torture_current = NULL;
	88	+static long rcu_torture_current_version = 0;
	89	+static struct rcu_torture rcu_tortures[10 * RCU_TORTURE_PIPE_LEN];
	90	+static DEFINE_SPINLOCK(rcu_torture_lock);
	91	+static DEFINE_PER_CPU(long [RCU_TORTURE_PIPE_LEN + 1], rcu_torture_count) =
	92	+ { 0 };
	93	+static DEFINE_PER_CPU(long [RCU_TORTURE_PIPE_LEN + 1], rcu_torture_batch) =
	94	+ { 0 };
	95	+static atomic_t rcu_torture_wcount[RCU_TORTURE_PIPE_LEN + 1];
	96	+atomic_t n_rcu_torture_alloc;
	97	+atomic_t n_rcu_torture_alloc_fail;
	98	+atomic_t n_rcu_torture_free;
	99	+
	100	+/*
	101	+ * Allocate an element from the rcu_tortures pool.
	102	+ */
	103	+struct rcu_torture *
	104	+rcu_torture_alloc(void)
	105	+{
	106	+ struct list_head *p;
	107	+
	108	+ spin_lock(&rcu_torture_lock);
	109	+ if (list_empty(&rcu_torture_freelist)) {
	110	+ atomic_inc(&n_rcu_torture_alloc_fail);
	111	+ spin_unlock(&rcu_torture_lock);
	112	+ return NULL;
	113	+ }
	114	+ atomic_inc(&n_rcu_torture_alloc);
	115	+ p = rcu_torture_freelist.next;
	116	+ list_del_init(p);
	117	+ spin_unlock(&rcu_torture_lock);
	118	+ return container_of(p, struct rcu_torture, rtort_free);
	119	+}
	120	+
	121	+/*
	122	+ * Free an element to the rcu_tortures pool.
	123	+ */
	124	+static void
	125	+rcu_torture_free(struct rcu_torture *p)
	126	+{
	127	+ atomic_inc(&n_rcu_torture_free);
	128	+ spin_lock(&rcu_torture_lock);
	129	+ list_add_tail(&p->rtort_free, &rcu_torture_freelist);
	130	+ spin_unlock(&rcu_torture_lock);
	131	+}
	132	+
	133	+static void
	134	+rcu_torture_cb(struct rcu_head *p)
	135	+{
	136	+ int i;
	137	+ struct rcu_torture *rp = container_of(p, struct rcu_torture, rtort_rcu);
	138	+
	139	+ if (fullstop) {
	140	+ /* Test is ending, just drop callbacks on the floor. */
	141	+ /* The next initialization will pick up the pieces. */
	142	+ return;
	143	+ }
	144	+ i = rp->rtort_pipe_count;
	145	+ if (i > RCU_TORTURE_PIPE_LEN)
	146	+ i = RCU_TORTURE_PIPE_LEN;
	147	+ atomic_inc(&rcu_torture_wcount[i]);
	148	+ if (++rp->rtort_pipe_count >= RCU_TORTURE_PIPE_LEN)
	149	+ rcu_torture_free(rp);
	150	+ else
	151	+ call_rcu(p, rcu_torture_cb);
	152	+}
	153	+
	154	+struct rcu_random_state {
	155	+ unsigned long rrs_state;
	156	+ unsigned long rrs_count;
	157	+};
	158	+
	159	+#define RCU_RANDOM_MULT 39916801 /* prime */
	160	+#define RCU_RANDOM_ADD 479001701 /* prime */
	161	+#define RCU_RANDOM_REFRESH 10000
	162	+
	163	+#define DEFINE_RCU_RANDOM(name) struct rcu_random_state name = { 0, 0 }
	164	+
	165	+/*
	166	+ * Crude but fast random-number generator. Uses a linear congruential
	167	+ * generator, with occasional help from get_random_bytes().
	168	+ */
	169	+static long
	170	+rcu_random(struct rcu_random_state *rrsp)
	171	+{
	172	+ long refresh;
	173	+
	174	+ if (--rrsp->rrs_count < 0) {
	175	+ get_random_bytes(&refresh, sizeof(refresh));
	176	+ rrsp->rrs_state += refresh;
	177	+ rrsp->rrs_count = RCU_RANDOM_REFRESH;
	178	+ }
	179	+ rrsp->rrs_state = rrsp->rrs_state * RCU_RANDOM_MULT + RCU_RANDOM_ADD;
	180	+ return swahw32(rrsp->rrs_state);
	181	+}
	182	+
	183	+/*
	184	+ * RCU torture writer kthread. Repeatedly substitutes a new structure
	185	+ * for that pointed to by rcu_torture_current, freeing the old structure
	186	+ * after a series of grace periods (the "pipeline").
	187	+ */
	188	+static int
	189	+rcu_torture_writer(void *arg)
	190	+{
	191	+ int i;
	192	+ long oldbatch = rcu_batches_completed();
	193	+ struct rcu_torture *rp;
	194	+ struct rcu_torture *old_rp;
	195	+ static DEFINE_RCU_RANDOM(rand);
	196	+
	197	+ VERBOSE_PRINTK_STRING("rcu_torture_writer task started");
	198	+ do {
	199	+ schedule_timeout_uninterruptible(1);
	200	+ if (rcu_batches_completed() == oldbatch)
	201	+ continue;
	202	+ if ((rp = rcu_torture_alloc()) == NULL)
	203	+ continue;
	204	+ rp->rtort_pipe_count = 0;
	205	+ udelay(rcu_random(&rand) & 0x3ff);
	206	+ old_rp = rcu_torture_current;
	207	+ rcu_assign_pointer(rcu_torture_current, rp);
	208	+ smp_wmb();
	209	+ if (old_rp != NULL) {
	210	+ i = old_rp->rtort_pipe_count;
	211	+ if (i > RCU_TORTURE_PIPE_LEN)
	212	+ i = RCU_TORTURE_PIPE_LEN;
	213	+ atomic_inc(&rcu_torture_wcount[i]);
	214	+ old_rp->rtort_pipe_count++;
	215	+ call_rcu(&old_rp->rtort_rcu, rcu_torture_cb);
	216	+ }
	217	+ rcu_torture_current_version++;
	218	+ oldbatch = rcu_batches_completed();
	219	+ } while (!kthread_should_stop() && !fullstop);
	220	+ VERBOSE_PRINTK_STRING("rcu_torture_writer task stopping");
	221	+ while (!kthread_should_stop())
	222	+ schedule_timeout_uninterruptible(1);
	223	+ return 0;
	224	+}
	225	+
	226	+/*
	227	+ * RCU torture reader kthread. Repeatedly dereferences rcu_torture_current,
	228	+ * incrementing the corresponding element of the pipeline array. The
	229	+ * counter in the element should never be greater than 1, otherwise, the
	230	+ * RCU implementation is broken.
	231	+ */
	232	+static int
	233	+rcu_torture_reader(void *arg)
	234	+{
	235	+ int completed;
	236	+ DEFINE_RCU_RANDOM(rand);
	237	+ struct rcu_torture *p;
	238	+ int pipe_count;
	239	+
	240	+ VERBOSE_PRINTK_STRING("rcu_torture_reader task started");
	241	+ do {
	242	+ rcu_read_lock();
	243	+ completed = rcu_batches_completed();
	244	+ p = rcu_dereference(rcu_torture_current);
	245	+ if (p == NULL) {
	246	+ /* Wait for rcu_torture_writer to get underway */
	247	+ rcu_read_unlock();
	248	+ schedule_timeout_interruptible(HZ);
	249	+ continue;
	250	+ }
	251	+ udelay(rcu_random(&rand) & 0x7f);
	252	+ preempt_disable();
	253	+ pipe_count = p->rtort_pipe_count;
	254	+ if (pipe_count > RCU_TORTURE_PIPE_LEN) {
	255	+ /* Should not happen, but... */
	256	+ pipe_count = RCU_TORTURE_PIPE_LEN;
	257	+ }
	258	+ ++__get_cpu_var(rcu_torture_count)[pipe_count];
	259	+ completed = rcu_batches_completed() - completed;
	260	+ if (completed > RCU_TORTURE_PIPE_LEN) {
	261	+ /* Should not happen, but... */
	262	+ completed = RCU_TORTURE_PIPE_LEN;
	263	+ }
	264	+ ++__get_cpu_var(rcu_torture_batch)[completed];
	265	+ preempt_enable();
	266	+ rcu_read_unlock();
	267	+ schedule();
	268	+ } while (!kthread_should_stop() && !fullstop);
	269	+ VERBOSE_PRINTK_STRING("rcu_torture_reader task stopping");
	270	+ while (!kthread_should_stop())
	271	+ schedule_timeout_uninterruptible(1);
	272	+ return 0;
	273	+}
	274	+
	275	+/*
	276	+ * Create an RCU-torture statistics message in the specified buffer.
	277	+ */
	278	+static int
	279	+rcu_torture_printk(char *page)
	280	+{
	281	+ int cnt = 0;
	282	+ int cpu;
	283	+ int i;
	284	+ long pipesummary[RCU_TORTURE_PIPE_LEN + 1] = { 0 };
	285	+ long batchsummary[RCU_TORTURE_PIPE_LEN + 1] = { 0 };
	286	+
	287	+ for_each_cpu(cpu) {
	288	+ for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++) {
	289	+ pipesummary[i] += per_cpu(rcu_torture_count, cpu)[i];
	290	+ batchsummary[i] += per_cpu(rcu_torture_batch, cpu)[i];
	291	+ }
	292	+ }
	293	+ for (i = RCU_TORTURE_PIPE_LEN - 1; i >= 0; i--) {
	294	+ if (pipesummary[i] != 0)
	295	+ break;
	296	+ }
	297	+ cnt += sprintf(&page[cnt], "rcutorture: ");
	298	+ cnt += sprintf(&page[cnt],
	299	+ "rtc: %p ver: %ld tfle: %d rta: %d rtaf: %d rtf: %d",
	300	+ rcu_torture_current,
	301	+ rcu_torture_current_version,
	302	+ list_empty(&rcu_torture_freelist),
	303	+ atomic_read(&n_rcu_torture_alloc),
	304	+ atomic_read(&n_rcu_torture_alloc_fail),
	305	+ atomic_read(&n_rcu_torture_free));
	306	+ cnt += sprintf(&page[cnt], "\nrcutorture: ");
	307	+ if (i > 1)
	308	+ cnt += sprintf(&page[cnt], "!!! ");
	309	+ cnt += sprintf(&page[cnt], "Reader Pipe: ");
	310	+ for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++)
	311	+ cnt += sprintf(&page[cnt], " %ld", pipesummary[i]);
	312	+ cnt += sprintf(&page[cnt], "\nrcutorture: ");
	313	+ cnt += sprintf(&page[cnt], "Reader Batch: ");
	314	+ for (i = 0; i < RCU_TORTURE_PIPE_LEN; i++)
	315	+ cnt += sprintf(&page[cnt], " %ld", batchsummary[i]);
	316	+ cnt += sprintf(&page[cnt], "\nrcutorture: ");
	317	+ cnt += sprintf(&page[cnt], "Free-Block Circulation: ");
	318	+ for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++) {
	319	+ cnt += sprintf(&page[cnt], " %d",
	320	+ atomic_read(&rcu_torture_wcount[i]));
	321	+ }
	322	+ cnt += sprintf(&page[cnt], "\n");
	323	+ return cnt;
	324	+}
	325	+
	326	+/*
	327	+ * Print torture statistics. Caller must ensure that there is only
	328	+ * one call to this function at a given time!!! This is normally
	329	+ * accomplished by relying on the module system to only have one copy
	330	+ * of the module loaded, and then by giving the rcu_torture_stats
	331	+ * kthread full control (or the init/cleanup functions when rcu_torture_stats
	332	+ * thread is not running).
	333	+ */
	334	+static void
	335	+rcu_torture_stats_print(void)
	336	+{
	337	+ int cnt;
	338	+
	339	+ cnt = rcu_torture_printk(printk_buf);
	340	+ printk(KERN_ALERT "%s", printk_buf);
	341	+}
	342	+
	343	+/*
	344	+ * Periodically prints torture statistics, if periodic statistics printing
	345	+ * was specified via the stat_interval module parameter.
	346	+ *
	347	+ * No need to worry about fullstop here, since this one doesn't reference
	348	+ * volatile state or register callbacks.
	349	+ */
	350	+static int
	351	+rcu_torture_stats(void *arg)
	352	+{
	353	+ VERBOSE_PRINTK_STRING("rcu_torture_stats task started");
	354	+ do {
	355	+ schedule_timeout_interruptible(stat_interval * HZ);
	356	+ rcu_torture_stats_print();
	357	+ } while (!kthread_should_stop());
	358	+ VERBOSE_PRINTK_STRING("rcu_torture_stats task stopping");
	359	+ return 0;
	360	+}
	361	+
	362	+static void
	363	+rcu_torture_cleanup(void)
	364	+{
	365	+ int i;
	366	+
	367	+ fullstop = 1;
	368	+ if (writer_task != NULL) {
	369	+ VERBOSE_PRINTK_STRING("Stopping rcu_torture_writer task");
	370	+ kthread_stop(writer_task);
	371	+ }
	372	+ writer_task = NULL;
	373	+
	374	+ if (reader_tasks != NULL) {
	375	+ for (i = 0; i < nrealreaders; i++) {
	376	+ if (reader_tasks[i] != NULL) {
	377	+ VERBOSE_PRINTK_STRING(
	378	+ "Stopping rcu_torture_reader task");
	379	+ kthread_stop(reader_tasks[i]);
	380	+ }
	381	+ reader_tasks[i] = NULL;
	382	+ }
	383	+ kfree(reader_tasks);
	384	+ reader_tasks = NULL;
	385	+ }
	386	+ rcu_torture_current = NULL;
	387	+
	388	+ if (stats_task != NULL) {
	389	+ VERBOSE_PRINTK_STRING("Stopping rcu_torture_stats task");
	390	+ kthread_stop(stats_task);
	391	+ }
	392	+ stats_task = NULL;
	393	+
	394	+ /* Wait for all RCU callbacks to fire. */
	395	+
	396	+ for (i = 0; i < RCU_TORTURE_PIPE_LEN; i++)
	397	+ synchronize_rcu();
	398	+ rcu_torture_stats_print(); /* -After- the stats thread is stopped! */
	399	+ PRINTK_STRING("--- End of test");
	400	+}
	401	+
	402	+static int
	403	+rcu_torture_init(void)
	404	+{
	405	+ int i;
	406	+ int cpu;
	407	+ int firsterr = 0;
	408	+
	409	+ /* Process args and tell the world that the torturer is on the job. */
	410	+
	411	+ if (nreaders >= 0)
	412	+ nrealreaders = nreaders;
	413	+ else
	414	+ nrealreaders = 2 * num_online_cpus();
	415	+ printk(KERN_ALERT TORTURE_FLAG
	416	+ "--- Start of test: nreaders=%d stat_interval=%d verbose=%d\n",
	417	+ nrealreaders, stat_interval, verbose);
	418	+ fullstop = 0;
	419	+
	420	+ /* Set up the freelist. */
	421	+
	422	+ INIT_LIST_HEAD(&rcu_torture_freelist);
	423	+ for (i = 0; i < sizeof(rcu_tortures) / sizeof(rcu_tortures[0]); i++) {
	424	+ list_add_tail(&rcu_tortures[i].rtort_free,
	425	+ &rcu_torture_freelist);
	426	+ }
	427	+
	428	+ /* Initialize the statistics so that each run gets its own numbers. */
	429	+
	430	+ rcu_torture_current = NULL;
	431	+ rcu_torture_current_version = 0;
	432	+ atomic_set(&n_rcu_torture_alloc, 0);
	433	+ atomic_set(&n_rcu_torture_alloc_fail, 0);
	434	+ atomic_set(&n_rcu_torture_free, 0);
	435	+ for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++)
	436	+ atomic_set(&rcu_torture_wcount[i], 0);
	437	+ for_each_cpu(cpu) {
	438	+ for (i = 0; i < RCU_TORTURE_PIPE_LEN + 1; i++) {
	439	+ per_cpu(rcu_torture_count, cpu)[i] = 0;
	440	+ per_cpu(rcu_torture_batch, cpu)[i] = 0;
	441	+ }
	442	+ }
	443	+
	444	+ /* Start up the kthreads. */
	445	+
	446	+ VERBOSE_PRINTK_STRING("Creating rcu_torture_writer task");
	447	+ writer_task = kthread_run(rcu_torture_writer, NULL,
	448	+ "rcu_torture_writer");
	449	+ if (IS_ERR(writer_task)) {
	450	+ firsterr = PTR_ERR(writer_task);
	451	+ VERBOSE_PRINTK_ERRSTRING("Failed to create writer");
	452	+ writer_task = NULL;
	453	+ goto unwind;
	454	+ }
	455	+ reader_tasks = kmalloc(nrealreaders * sizeof(reader_tasks[0]),
	456	+ GFP_KERNEL);
	457	+ if (reader_tasks == NULL) {
	458	+ VERBOSE_PRINTK_ERRSTRING("out of memory");
	459	+ firsterr = -ENOMEM;
	460	+ goto unwind;
	461	+ }
	462	+ for (i = 0; i < nrealreaders; i++) {
	463	+ VERBOSE_PRINTK_STRING("Creating rcu_torture_reader task");
	464	+ reader_tasks[i] = kthread_run(rcu_torture_reader, NULL,
	465	+ "rcu_torture_reader");
	466	+ if (IS_ERR(reader_tasks[i])) {
	467	+ firsterr = PTR_ERR(reader_tasks[i]);
	468	+ VERBOSE_PRINTK_ERRSTRING("Failed to create reader");
	469	+ reader_tasks[i] = NULL;
	470	+ goto unwind;
	471	+ }
	472	+ }
	473	+ if (stat_interval > 0) {
	474	+ VERBOSE_PRINTK_STRING("Creating rcu_torture_stats task");
	475	+ stats_task = kthread_run(rcu_torture_stats, NULL,
	476	+ "rcu_torture_stats");
	477	+ if (IS_ERR(stats_task)) {
	478	+ firsterr = PTR_ERR(stats_task);
	479	+ VERBOSE_PRINTK_ERRSTRING("Failed to create stats");
	480	+ stats_task = NULL;
	481	+ goto unwind;
	482	+ }
	483	+ }
	484	+ return 0;
	485	+
	486	+unwind:
	487	+ rcu_torture_cleanup();
	488	+ return firsterr;
	489	+}
	490	+
	491	+module_init(rcu_torture_init);
	492	+module_exit(rcu_torture_cleanup);
...	...	@@ -168,6 +168,14 @@
168	168
169	169	If unsure, say N.
170	170
	171	+config DEBUG_VM
	172	+ bool "Debug VM"
	173	+ depends on DEBUG_KERNEL
	174	+ help
	175	+ Enable this to debug the virtual-memory system.
	176	+
	177	+ If unsure, say N.
	178	+
171	179	config FRAME_POINTER
172	180	bool "Compile the kernel with frame pointers"
173	181	depends on DEBUG_KERNEL && (X86 \|\| CRIS \|\| M68K \|\| M68KNOMMU \|\| FRV \|\| UML)
...	...	@@ -177,4 +185,18 @@
177	185	and slower, but it might give very useful debugging information on
178	186	some architectures or if you use external debuggers.
179	187	If you don't debug the kernel, you can say N.
	188	+
	189	+config RCU_TORTURE_TEST
	190	+ tristate "torture tests for RCU"
	191	+ depends on DEBUG_KERNEL
	192	+ default n
	193	+ help
	194	+ This option provides a kernel module that runs torture tests
	195	+ on the RCU infrastructure. The kernel module may be built
	196	+ after the fact on the running kernel to be tested, if desired.
	197	+
	198	+ Say Y here if you want RCU torture tests to start automatically
	199	+ at boot time (you probably don't).
	200	+ Say M if you want the RCU torture tests to build as a module.
	201	+ Say N if you are unsure.
...	...	@@ -1840,7 +1840,7 @@
1840	1840
1841	1841	static inline void verify_mm_writelocked(struct mm_struct *mm)
1842	1842	{
1843		-#ifdef CONFIG_DEBUG_KERNEL
	1843	+#ifdef CONFIG_DEBUG_VM
1844	1844	if (unlikely(down_read_trylock(&mm->mmap_sem))) {
1845	1845	WARN_ON(1);
1846	1846	up_read(&mm->mmap_sem);