strat9_kernel/process/scheduler/

timer_ops.rs

use super::*;
use core::sync::atomic::{AtomicBool, AtomicU64};

// One-shot bootstrap nudge: ensure each CPU requests at least one preemption
// after entering Ring 3. This breaks "first task runs forever" scenarios when
// class accounting has not yet accumulated enough runtime to trigger resched.
static FIRST_TICK_FORCE_RESCHED: [AtomicBool; crate::arch::x86_64::percpu::MAX_CPUS] =
    [const { AtomicBool::new(false) }; crate::arch::x86_64::percpu::MAX_CPUS];

// Per-CPU local tick counter (incremented every timer tick, independent of
// the BSP-only global TICK_COUNT). Used for periodic force-resched below.
static CPU_LOCAL_TICKS: [AtomicU64; crate::arch::x86_64::percpu::MAX_CPUS] =
    [const { AtomicU64::new(0) }; crate::arch::x86_64::percpu::MAX_CPUS];

// Force a reschedule at least every N ticks per CPU, regardless of GLOBAL_SCHED_STATE
// lock availability. This guarantees kernel tasks (shell, idle) get CPU time
// even if timer_tick consistently loses the scheduler lock race with the other CPU.
const PERIODIC_RESCHED_TICKS: u64 = 5;

/// Timer interrupt handler - called from interrupt context.
///
/// Increments the global tick counter unconditionally on BSP so wall-clock
/// time never drifts even when the scheduler lock is contended. Secondary
/// bookkeeping (interval timers, wake deadlines, per-task accounting) is
/// deferred when the lock is unavailable.
///
/// Lock discipline: `tick_all_timers` and `check_wake_deadlines` each acquire
/// the scheduler lock themselves via `try_lock`. The per-task block below uses
/// its own `try_lock`. These are separate acquisitions by design - the inner
/// functions must not be called while the outer lock is held (that would deadlock).
pub fn timer_tick() {
    let _perf = super::perf_counters::PerfScope::new(
        &super::perf_counters::IRQ_TIMER_TSC,
        &super::perf_counters::IRQ_TIMER_COUNT,
    );

    // Feed TSC low bits into the entropy pool (every tick).
    crate::entropy::add_entropy(2, crate::arch::x86_64::rdtsc());
    let cpu_idx = crate::arch::x86_64::percpu::current_cpu_index();

    if cpu_is_valid(cpu_idx) {
        CPU_TOTAL_TICKS[cpu_idx].fetch_add(1, Ordering::Relaxed);
    }

    // BSP wall-clock: ALWAYS advance, regardless of any lock state.
    if cpu_idx == 0 {
        TICK_COUNT.fetch_add(1, Ordering::Relaxed);
    }

    // Per-CPU local tick counter (all CPUs, not just BSP).
    let local_tick = if cpu_is_valid(cpu_idx) {
        CPU_LOCAL_TICKS[cpu_idx].fetch_add(1, Ordering::Relaxed) + 1
    } else {
        0
    };

    // Lock-free bootstrap nudge: first local timer tick requests one resched
    // without touching GLOBAL_SCHED_STATE. This avoids pathological boot windows where
    // another CPU holds GLOBAL_SCHED_STATE and this CPU would otherwise defer the first
    // `need_resched` update indefinitely.
    if cpu_is_valid(cpu_idx) && !FIRST_TICK_FORCE_RESCHED[cpu_idx].swap(true, Ordering::AcqRel) {
        request_force_resched_hint(cpu_idx);
    }

    // Periodic force-resched: guarantee every CPU reschedules at least every
    // PERIODIC_RESCHED_TICKS ticks. This prevents starvation of kernel tasks
    // when timer_tick fails to acquire the scheduler lock repeatedly, or when
    // FairClassRq::update_current returns false (e.g., single-task queue).
    if cpu_is_valid(cpu_idx) && local_tick > 0 && local_tick % PERIODIC_RESCHED_TICKS == 0 {
        request_force_resched_hint(cpu_idx);
    }

    // BSP-only secondary bookkeeping: interval timers and sleep wakeups.
    // NS_PER_TICK = 1_000_000_000 / TIMER_HZ (10_000_000 ns at 100 Hz).
    // Both helpers acquire the scheduler lock internally via try_lock and
    // skip silently when contended - no probe needed.
    if cpu_idx == 0 {
        let tick = TICK_COUNT.load(Ordering::Relaxed);
        let current_time_ns = tick * NS_PER_TICK;
        crate::process::timer::tick_all_timers(current_time_ns);
        check_wake_deadlines(current_time_ns);

        if tick % 200 == 0 {
            crate::hardware::thermal::poll();
        }
    }

    // Per-task accounting on this CPU : uses LOCAL lock only (no global GLOBAL_SCHED_STATE).
    // This ensures timer ticks are never dropped due to another CPU holding GLOBAL_SCHED_STATE.
    if cpu_is_valid(cpu_idx) {
        if let Some(mut guard) = LOCAL_SCHEDULERS[cpu_idx].try_lock_no_irqsave() {
            if let Some(ref mut cpu) = *guard {
                let should_resched = if let Some(ref current_task) = cpu.current_task {
                    let class = cpu.class_table.class_for_task(current_task);
                    match class {
                        crate::process::sched::SchedClassId::RealTime => {
                            CPU_RT_RUNTIME_TICKS[cpu_idx].fetch_add(1, Ordering::Relaxed);
                        }
                        crate::process::sched::SchedClassId::Fair => {
                            CPU_FAIR_RUNTIME_TICKS[cpu_idx].fetch_add(1, Ordering::Relaxed);
                        }
                        crate::process::sched::SchedClassId::Idle => {
                            CPU_IDLE_TICKS[cpu_idx].fetch_add(1, Ordering::Relaxed);
                        }
                    }
                    current_task.ticks.fetch_add(1, Ordering::Relaxed);
                    cpu.current_runtime.update();
                    cpu.class_rqs.update_current(
                        &cpu.current_runtime,
                        current_task,
                        false,
                        &cpu.class_table,
                    )
                } else {
                    false
                };
                if should_resched {
                    cpu.need_resched = true;
                }
            }
        } else {
            note_try_lock_fail_on_cpu(cpu_idx);
        }
    }
}

/// Check wake deadlines for all tasks and wake up those whose sleep has expired.
///
/// Called from timer_tick() with interrupts disabled.
/// Uses try_lock() to avoid deadlock if called while scheduler lock is held.
///
/// # Lock discipline
///
/// The `BLOCKED_TASKS` lock is held **only** during the scan + re-enqueue phase.
/// The lock is explicitly dropped before sending IPIs (which may acquire
/// per-CPU data) and before any `Arc<Task>` drop (which reaches
/// `KernelStack::drop → free_frames → buddy_alloc.lock()`).
///
/// To guarantee this, every `Arc<Task>` removed from `blocked_tasks` is
/// moved into the `deferred_drops` array. Those Arcs are dropped after the
/// guard goes out of scope, ensuring `free_frames` is never called while the
/// scheduler lock is held.
fn check_wake_deadlines(current_time_ns: u64) {
    let mut ipi_targets = [false; crate::arch::x86_64::percpu::MAX_CPUS];
    let my_cpu = current_cpu_index();

    // Stack-allocated storage for tasks whose Arc must be dropped outside the
    // scheduler lock. Sized to the same batch limit used for the scan so that
    // we never need a heap allocation here.
    const BATCH: usize = 128;
    let mut deferred_drops: [Option<Arc<Task>>; BATCH] = [const { None }; BATCH];
    let mut drop_count = 0usize;

    {
        // --- begin critical section (BLOCKED_TASKS lock held) ---
        let mut blocked = match super::BLOCKED_TASKS.try_lock_no_irqsave() {
            Some(guard) => guard,
            None => return,
        };

        let mut to_wake = [TaskId::from_u64(0); BATCH];
        let mut count = 0usize;
        for (id, task) in blocked.iter() {
            let deadline = task.wake_deadline_ns.load(Ordering::Relaxed);
            if deadline != 0 && current_time_ns >= deadline {
                if count < BATCH {
                    to_wake[count] = *id;
                    count += 1;
                } else {
                    break;
                }
            }
        }

        for id in to_wake.iter().copied().take(count) {
            if let Some(blocked_task) = blocked.remove(&id) {
                blocked_task.wake_deadline_ns.store(0, Ordering::Relaxed);
                blocked_task.set_state(TaskState::Ready);
                let home = blocked_task.home_cpu.load(Ordering::Relaxed);
                let cpu = if home != usize::MAX { home } else { 0 };
                let class = {
                    use crate::process::sched::SchedClassId;
                    match blocked_task.sched_policy() {
                        crate::process::sched::SchedPolicy::RealTimeRR { .. }
                        | crate::process::sched::SchedPolicy::RealTimeFifo { .. } => {
                            SchedClassId::RealTime
                        }
                        crate::process::sched::SchedPolicy::Fair(_) => SchedClassId::Fair,
                        crate::process::sched::SchedPolicy::Idle => SchedClassId::Idle,
                    }
                };
                if let Some(ref mut local_cpu) = *LOCAL_SCHEDULERS[cpu].lock() {
                    // `enqueue` moves the Arc into the run-queue, so no
                    // drop occurs here; the Arc is alive in class_rqs.
                    local_cpu.class_rqs.enqueue(class, blocked_task);
                    local_cpu.need_resched = true;
                    if cpu != my_cpu && cpu_is_valid(cpu) {
                        ipi_targets[cpu] = true;
                    }
                } else {
                    // No valid CPU slot: stash for drop outside the lock.
                    // This is the only path where an Arc<Task> can be the
                    // last reference and trigger KernelStack::drop.
                    if drop_count < BATCH {
                        deferred_drops[drop_count] = Some(blocked_task);
                        drop_count += 1;
                    }
                    // If deferred_drops is full the task Arc is dropped here,
                    // still under the lock : but that case means we already
                    // have 128 orphaned tasks with no valid CPU, which is a
                    // bug elsewhere; emit a trace and accept the latency hit.
                }
            }
        }
        // `blocked` guard drops here : BLOCKED_TASKS lock released BEFORE any
        // Arc<Task> drop and BEFORE send_resched_ipi_to_cpu.
        // --- end critical section ---
    }
    unsafe { core::arch::asm!("mov al, '2'; out 0xe9, al", out("al") _) };

    // Drop orphaned task Arcs outside the scheduler lock so that
    // KernelStack::drop → free_frames → buddy_alloc.lock() does not race
    // with any other GLOBAL_SCHED_STATE lock acquisition on this or another CPU.
    for slot in deferred_drops[..drop_count].iter_mut() {
        drop(slot.take());
    }

    for (cpu, send) in ipi_targets.iter().copied().enumerate() {
        if send {
            send_resched_ipi_to_cpu(cpu);
        }
    }
}

/// Get the current tick count
pub fn ticks() -> u64 {
    TICK_COUNT.load(Ordering::Relaxed)
}

/// Get a list of all tasks in the system (for timer checking).
/// Returns None if scheduler is not initialized or currently locked.
pub fn get_all_tasks() -> Option<alloc::vec::Vec<Arc<Task>>> {
    use alloc::vec::Vec;
    let scheduler = match GLOBAL_SCHED_STATE.try_lock() {
        Some(guard) => guard,
        None => {
            note_try_lock_fail();
            return None;
        }
    };
    if let Some(ref sched) = *scheduler {
        let mut tasks = Vec::with_capacity(sched.all_tasks.len());
        for (_, task) in sched.all_tasks.iter() {
            tasks.push(task.clone());
        }
        Some(tasks)
    } else {
        None
    }
}