mce.c 59.9 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * Machine check handler.
I
Ingo Molnar 已提交
3
 *
L
Linus Torvalds 已提交
4
 * K8 parts Copyright 2002,2003 Andi Kleen, SuSE Labs.
5 6
 * Rest from unknown author(s).
 * 2004 Andi Kleen. Rewrote most of it.
7 8
 * Copyright 2008 Intel Corporation
 * Author: Andi Kleen
L
Linus Torvalds 已提交
9
 */
10 11 12

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

I
Ingo Molnar 已提交
13 14 15 16 17 18 19
#include <linux/thread_info.h>
#include <linux/capability.h>
#include <linux/miscdevice.h>
#include <linux/ratelimit.h>
#include <linux/kallsyms.h>
#include <linux/rcupdate.h>
#include <linux/kobject.h>
20
#include <linux/uaccess.h>
I
Ingo Molnar 已提交
21 22 23
#include <linux/kdebug.h>
#include <linux/kernel.h>
#include <linux/percpu.h>
L
Linus Torvalds 已提交
24
#include <linux/string.h>
25
#include <linux/device.h>
26
#include <linux/syscore_ops.h>
27
#include <linux/delay.h>
28
#include <linux/ctype.h>
I
Ingo Molnar 已提交
29
#include <linux/sched.h>
30
#include <linux/sysfs.h>
I
Ingo Molnar 已提交
31
#include <linux/types.h>
32
#include <linux/slab.h>
I
Ingo Molnar 已提交
33 34 35
#include <linux/init.h>
#include <linux/kmod.h>
#include <linux/poll.h>
36
#include <linux/nmi.h>
I
Ingo Molnar 已提交
37
#include <linux/cpu.h>
38
#include <linux/smp.h>
I
Ingo Molnar 已提交
39
#include <linux/fs.h>
40
#include <linux/mm.h>
41
#include <linux/debugfs.h>
42
#include <linux/irq_work.h>
43
#include <linux/export.h>
I
Ingo Molnar 已提交
44

45
#include <asm/processor.h>
46
#include <asm/traps.h>
A
Andy Lutomirski 已提交
47
#include <asm/tlbflush.h>
I
Ingo Molnar 已提交
48 49
#include <asm/mce.h>
#include <asm/msr.h>
L
Linus Torvalds 已提交
50

51
#include "mce-internal.h"
52

53
static DEFINE_MUTEX(mce_chrdev_read_mutex);
54

55
#define rcu_dereference_check_mce(p) \
56 57 58 59 60 61
({ \
	rcu_lockdep_assert(rcu_read_lock_sched_held() || \
			   lockdep_is_held(&mce_chrdev_read_mutex), \
			   "suspicious rcu_dereference_check_mce() usage"); \
	smp_load_acquire(&(p)); \
})
62

63 64 65
#define CREATE_TRACE_POINTS
#include <trace/events/mce.h>

66
#define SPINUNIT		100	/* 100ns */
67

68 69
DEFINE_PER_CPU(unsigned, mce_exception_count);

70
struct mce_bank *mce_banks __read_mostly;
71
struct mce_vendor_flags mce_flags __read_mostly;
72

73
struct mca_config mca_cfg __read_mostly = {
74
	.bootlog  = -1,
75 76 77 78 79 80 81
	/*
	 * Tolerant levels:
	 * 0: always panic on uncorrected errors, log corrected errors
	 * 1: panic or SIGBUS on uncorrected errors, log corrected errors
	 * 2: SIGBUS or log uncorrected errors (if possible), log corr. errors
	 * 3: never panic or SIGBUS, log all errors (for testing only)
	 */
82 83
	.tolerant = 1,
	.monarch_timeout = -1
84 85
};

86 87 88 89
/* User mode helper program triggered by machine check event */
static unsigned long		mce_need_notify;
static char			mce_helper[128];
static char			*mce_helper_argv[2] = { mce_helper, NULL };
L
Linus Torvalds 已提交
90

91 92
static DECLARE_WAIT_QUEUE_HEAD(mce_chrdev_wait);

93 94 95
static DEFINE_PER_CPU(struct mce, mces_seen);
static int			cpu_missing;

96 97 98 99
/*
 * MCA banks polled by the period polling timer for corrected events.
 * With Intel CMCI, this only has MCA banks which do not support CMCI (if any).
 */
100 101 102 103
DEFINE_PER_CPU(mce_banks_t, mce_poll_banks) = {
	[0 ... BITS_TO_LONGS(MAX_NR_BANKS)-1] = ~0UL
};

104 105 106 107 108 109 110 111 112
/*
 * MCA banks controlled through firmware first for corrected errors.
 * This is a global list of banks for which we won't enable CMCI and we
 * won't poll. Firmware controls these banks and is responsible for
 * reporting corrected errors through GHES. Uncorrected/recoverable
 * errors are still notified through a machine check.
 */
mce_banks_t mce_banks_ce_disabled;

113 114
static struct work_struct mce_work;
static struct irq_work mce_irq_work;
115

116 117
static void (*quirk_no_way_out)(int bank, struct mce *m, struct pt_regs *regs);

118 119 120 121
/*
 * CPU/chipset specific EDAC code can register a notifier call here to print
 * MCE errors in a human-readable form.
 */
122
ATOMIC_NOTIFIER_HEAD(x86_mce_decoder_chain);
123

124 125 126 127
/* Do initial initialization of a struct mce */
void mce_setup(struct mce *m)
{
	memset(m, 0, sizeof(struct mce));
128
	m->cpu = m->extcpu = smp_processor_id();
129
	rdtscll(m->tsc);
130 131 132 133 134 135 136
	/* We hope get_seconds stays lockless */
	m->time = get_seconds();
	m->cpuvendor = boot_cpu_data.x86_vendor;
	m->cpuid = cpuid_eax(1);
	m->socketid = cpu_data(m->extcpu).phys_proc_id;
	m->apicid = cpu_data(m->extcpu).initial_apicid;
	rdmsrl(MSR_IA32_MCG_CAP, m->mcgcap);
137 138
}

139 140 141
DEFINE_PER_CPU(struct mce, injectm);
EXPORT_PER_CPU_SYMBOL_GPL(injectm);

L
Linus Torvalds 已提交
142 143 144 145 146 147
/*
 * Lockless MCE logging infrastructure.
 * This avoids deadlocks on printk locks without having to break locks. Also
 * separate MCEs from kernel messages to avoid bogus bug reports.
 */

148
static struct mce_log mcelog = {
149 150 151
	.signature	= MCE_LOG_SIGNATURE,
	.len		= MCE_LOG_LEN,
	.recordlen	= sizeof(struct mce),
152
};
L
Linus Torvalds 已提交
153 154 155 156

void mce_log(struct mce *mce)
{
	unsigned next, entry;
I
Ingo Molnar 已提交
157

158 159 160
	/* Emit the trace record: */
	trace_mce_record(mce);

161
	atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, mce);
162

L
Linus Torvalds 已提交
163
	mce->finished = 0;
M
Mike Waychison 已提交
164
	wmb();
L
Linus Torvalds 已提交
165
	for (;;) {
166
		entry = rcu_dereference_check_mce(mcelog.next);
167
		for (;;) {
168

I
Ingo Molnar 已提交
169 170 171 172 173
			/*
			 * When the buffer fills up discard new entries.
			 * Assume that the earlier errors are the more
			 * interesting ones:
			 */
174
			if (entry >= MCE_LOG_LEN) {
175 176
				set_bit(MCE_OVERFLOW,
					(unsigned long *)&mcelog.flags);
177 178
				return;
			}
I
Ingo Molnar 已提交
179
			/* Old left over entry. Skip: */
180 181 182 183
			if (mcelog.entry[entry].finished) {
				entry++;
				continue;
			}
M
Mike Waychison 已提交
184
			break;
L
Linus Torvalds 已提交
185 186 187 188 189 190 191
		}
		smp_rmb();
		next = entry + 1;
		if (cmpxchg(&mcelog.next, entry, next) == entry)
			break;
	}
	memcpy(mcelog.entry + entry, mce, sizeof(struct mce));
M
Mike Waychison 已提交
192
	wmb();
L
Linus Torvalds 已提交
193
	mcelog.entry[entry].finished = 1;
M
Mike Waychison 已提交
194
	wmb();
L
Linus Torvalds 已提交
195

196
	mce->finished = 1;
197
	set_bit(0, &mce_need_notify);
L
Linus Torvalds 已提交
198 199
}

B
Borislav Petkov 已提交
200 201 202 203
static void drain_mcelog_buffer(void)
{
	unsigned int next, i, prev = 0;

204
	next = ACCESS_ONCE(mcelog.next);
B
Borislav Petkov 已提交
205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222

	do {
		struct mce *m;

		/* drain what was logged during boot */
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;
			unsigned retries = 1;

			m = &mcelog.entry[i];

			while (!m->finished) {
				if (time_after_eq(jiffies, start + 2*retries))
					retries++;

				cpu_relax();

				if (!m->finished && retries >= 4) {
223
					pr_err("skipping error being logged currently!\n");
B
Borislav Petkov 已提交
224 225 226 227 228 229 230 231 232 233 234 235 236 237
					break;
				}
			}
			smp_rmb();
			atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, m);
		}

		memset(mcelog.entry + prev, 0, (next - prev) * sizeof(*m));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
}


238 239 240
void mce_register_decode_chain(struct notifier_block *nb)
{
	atomic_notifier_chain_register(&x86_mce_decoder_chain, nb);
B
Borislav Petkov 已提交
241
	drain_mcelog_buffer();
242 243 244 245 246 247 248 249 250
}
EXPORT_SYMBOL_GPL(mce_register_decode_chain);

void mce_unregister_decode_chain(struct notifier_block *nb)
{
	atomic_notifier_chain_unregister(&x86_mce_decoder_chain, nb);
}
EXPORT_SYMBOL_GPL(mce_unregister_decode_chain);

H
Hidetoshi Seto 已提交
251
static void print_mce(struct mce *m)
L
Linus Torvalds 已提交
252
{
253 254
	int ret = 0;

H
Huang Ying 已提交
255
	pr_emerg(HW_ERR "CPU %d: Machine Check Exception: %Lx Bank %d: %016Lx\n",
256
	       m->extcpu, m->mcgstatus, m->bank, m->status);
257

258
	if (m->ip) {
H
Huang Ying 已提交
259
		pr_emerg(HW_ERR "RIP%s %02x:<%016Lx> ",
260 261 262
			!(m->mcgstatus & MCG_STATUS_EIPV) ? " !INEXACT!" : "",
				m->cs, m->ip);

L
Linus Torvalds 已提交
263
		if (m->cs == __KERNEL_CS)
264
			print_symbol("{%s}", m->ip);
265
		pr_cont("\n");
L
Linus Torvalds 已提交
266
	}
267

H
Huang Ying 已提交
268
	pr_emerg(HW_ERR "TSC %llx ", m->tsc);
L
Linus Torvalds 已提交
269
	if (m->addr)
270
		pr_cont("ADDR %llx ", m->addr);
L
Linus Torvalds 已提交
271
	if (m->misc)
272
		pr_cont("MISC %llx ", m->misc);
273

274
	pr_cont("\n");
275 276 277 278
	/*
	 * Note this output is parsed by external tools and old fields
	 * should not be changed.
	 */
279
	pr_emerg(HW_ERR "PROCESSOR %u:%x TIME %llu SOCKET %u APIC %x microcode %x\n",
280 281
		m->cpuvendor, m->cpuid, m->time, m->socketid, m->apicid,
		cpu_data(m->extcpu).microcode);
282 283 284

	/*
	 * Print out human-readable details about the MCE error,
285
	 * (if the CPU has an implementation for that)
286
	 */
287 288 289 290 291
	ret = atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, m);
	if (ret == NOTIFY_STOP)
		return;

	pr_emerg_ratelimited(HW_ERR "Run the above through 'mcelog --ascii'\n");
292 293
}

294 295
#define PANIC_TIMEOUT 5 /* 5 seconds */

296
static atomic_t mce_panicked;
297

298
static int fake_panic;
299
static atomic_t mce_fake_panicked;
300

301 302 303 304
/* Panic in progress. Enable interrupts and wait for final IPI */
static void wait_for_panic(void)
{
	long timeout = PANIC_TIMEOUT*USEC_PER_SEC;
305

306 307 308 309
	preempt_disable();
	local_irq_enable();
	while (timeout-- > 0)
		udelay(1);
310
	if (panic_timeout == 0)
311
		panic_timeout = mca_cfg.panic_timeout;
312 313 314
	panic("Panicing machine check CPU died");
}

315
static void mce_panic(const char *msg, struct mce *final, char *exp)
316
{
317
	int i, apei_err = 0;
318

319 320 321 322
	if (!fake_panic) {
		/*
		 * Make sure only one CPU runs in machine check panic
		 */
323
		if (atomic_inc_return(&mce_panicked) > 1)
324 325
			wait_for_panic();
		barrier();
326

327 328 329 330
		bust_spinlocks(1);
		console_verbose();
	} else {
		/* Don't log too much for fake panic */
331
		if (atomic_inc_return(&mce_fake_panicked) > 1)
332 333
			return;
	}
334
	/* First print corrected ones that are still unlogged */
L
Linus Torvalds 已提交
335
	for (i = 0; i < MCE_LOG_LEN; i++) {
336
		struct mce *m = &mcelog.entry[i];
H
Hidetoshi Seto 已提交
337 338
		if (!(m->status & MCI_STATUS_VAL))
			continue;
339
		if (!(m->status & MCI_STATUS_UC)) {
H
Hidetoshi Seto 已提交
340
			print_mce(m);
341 342 343
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
344 345 346 347 348
	}
	/* Now print uncorrected but with the final one last */
	for (i = 0; i < MCE_LOG_LEN; i++) {
		struct mce *m = &mcelog.entry[i];
		if (!(m->status & MCI_STATUS_VAL))
L
Linus Torvalds 已提交
349
			continue;
H
Hidetoshi Seto 已提交
350 351
		if (!(m->status & MCI_STATUS_UC))
			continue;
352
		if (!final || memcmp(m, final, sizeof(struct mce))) {
H
Hidetoshi Seto 已提交
353
			print_mce(m);
354 355 356
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
L
Linus Torvalds 已提交
357
	}
358
	if (final) {
H
Hidetoshi Seto 已提交
359
		print_mce(final);
360 361 362
		if (!apei_err)
			apei_err = apei_write_mce(final);
	}
363
	if (cpu_missing)
H
Huang Ying 已提交
364
		pr_emerg(HW_ERR "Some CPUs didn't answer in synchronization\n");
365
	if (exp)
H
Huang Ying 已提交
366
		pr_emerg(HW_ERR "Machine check: %s\n", exp);
367 368
	if (!fake_panic) {
		if (panic_timeout == 0)
369
			panic_timeout = mca_cfg.panic_timeout;
370 371
		panic(msg);
	} else
H
Huang Ying 已提交
372
		pr_emerg(HW_ERR "Fake kernel panic: %s\n", msg);
373
}
L
Linus Torvalds 已提交
374

375 376 377 378
/* Support code for software error injection */

static int msr_to_offset(u32 msr)
{
T
Tejun Heo 已提交
379
	unsigned bank = __this_cpu_read(injectm.bank);
380

381
	if (msr == mca_cfg.rip_msr)
382
		return offsetof(struct mce, ip);
383
	if (msr == MSR_IA32_MCx_STATUS(bank))
384
		return offsetof(struct mce, status);
385
	if (msr == MSR_IA32_MCx_ADDR(bank))
386
		return offsetof(struct mce, addr);
387
	if (msr == MSR_IA32_MCx_MISC(bank))
388 389 390 391 392 393
		return offsetof(struct mce, misc);
	if (msr == MSR_IA32_MCG_STATUS)
		return offsetof(struct mce, mcgstatus);
	return -1;
}

394 395 396 397
/* MSR access wrappers used for error injection */
static u64 mce_rdmsrl(u32 msr)
{
	u64 v;
398

T
Tejun Heo 已提交
399
	if (__this_cpu_read(injectm.finished)) {
400
		int offset = msr_to_offset(msr);
401

402 403
		if (offset < 0)
			return 0;
404
		return *(u64 *)((char *)this_cpu_ptr(&injectm) + offset);
405
	}
406 407 408 409 410 411 412 413 414 415 416

	if (rdmsrl_safe(msr, &v)) {
		WARN_ONCE(1, "mce: Unable to read msr %d!\n", msr);
		/*
		 * Return zero in case the access faulted. This should
		 * not happen normally but can happen if the CPU does
		 * something weird, or if the code is buggy.
		 */
		v = 0;
	}

417 418 419 420 421
	return v;
}

static void mce_wrmsrl(u32 msr, u64 v)
{
T
Tejun Heo 已提交
422
	if (__this_cpu_read(injectm.finished)) {
423
		int offset = msr_to_offset(msr);
424

425
		if (offset >= 0)
426
			*(u64 *)((char *)this_cpu_ptr(&injectm) + offset) = v;
427 428
		return;
	}
429 430 431
	wrmsrl(msr, v);
}

432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449
/*
 * Collect all global (w.r.t. this processor) status about this machine
 * check into our "mce" struct so that we can use it later to assess
 * the severity of the problem as we read per-bank specific details.
 */
static inline void mce_gather_info(struct mce *m, struct pt_regs *regs)
{
	mce_setup(m);

	m->mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
	if (regs) {
		/*
		 * Get the address of the instruction at the time of
		 * the machine check error.
		 */
		if (m->mcgstatus & (MCG_STATUS_RIPV|MCG_STATUS_EIPV)) {
			m->ip = regs->ip;
			m->cs = regs->cs;
450 451 452 453 454 455 456 457

			/*
			 * When in VM86 mode make the cs look like ring 3
			 * always. This is a lie, but it's better than passing
			 * the additional vm86 bit around everywhere.
			 */
			if (v8086_mode(regs))
				m->cs |= 3;
458 459
		}
		/* Use accurate RIP reporting if available. */
460 461
		if (mca_cfg.rip_msr)
			m->ip = mce_rdmsrl(mca_cfg.rip_msr);
462 463 464
	}
}

465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481
/*
 * Simple lockless ring to communicate PFNs from the exception handler with the
 * process context work function. This is vastly simplified because there's
 * only a single reader and a single writer.
 */
#define MCE_RING_SIZE 16	/* we use one entry less */

struct mce_ring {
	unsigned short start;
	unsigned short end;
	unsigned long ring[MCE_RING_SIZE];
};
static DEFINE_PER_CPU(struct mce_ring, mce_ring);

/* Runs with CPU affinity in workqueue */
static int mce_ring_empty(void)
{
482
	struct mce_ring *r = this_cpu_ptr(&mce_ring);
483 484 485 486 487 488 489 490 491 492 493

	return r->start == r->end;
}

static int mce_ring_get(unsigned long *pfn)
{
	struct mce_ring *r;
	int ret = 0;

	*pfn = 0;
	get_cpu();
494
	r = this_cpu_ptr(&mce_ring);
495 496 497 498 499 500 501 502 503 504 505 506 507
	if (r->start == r->end)
		goto out;
	*pfn = r->ring[r->start];
	r->start = (r->start + 1) % MCE_RING_SIZE;
	ret = 1;
out:
	put_cpu();
	return ret;
}

/* Always runs in MCE context with preempt off */
static int mce_ring_add(unsigned long pfn)
{
508
	struct mce_ring *r = this_cpu_ptr(&mce_ring);
509 510 511 512 513 514 515 516 517 518 519
	unsigned next;

	next = (r->end + 1) % MCE_RING_SIZE;
	if (next == r->start)
		return -1;
	r->ring[r->end] = pfn;
	wmb();
	r->end = next;
	return 0;
}

A
Andi Kleen 已提交
520
int mce_available(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
521
{
522
	if (mca_cfg.disabled)
523
		return 0;
524
	return cpu_has(c, X86_FEATURE_MCE) && cpu_has(c, X86_FEATURE_MCA);
L
Linus Torvalds 已提交
525 526
}

527 528
static void mce_schedule_work(void)
{
529
	if (!mce_ring_empty())
530
		schedule_work(&mce_work);
531 532
}

533
static void mce_irq_work_cb(struct irq_work *entry)
534
{
535
	mce_notify_irq();
536
	mce_schedule_work();
537 538 539 540 541
}

static void mce_report_event(struct pt_regs *regs)
{
	if (regs->flags & (X86_VM_MASK|X86_EFLAGS_IF)) {
542
		mce_notify_irq();
543 544 545 546 547 548 549
		/*
		 * Triggering the work queue here is just an insurance
		 * policy in case the syscall exit notify handler
		 * doesn't run soon enough or ends up running on the
		 * wrong CPU (can happen when audit sleeps)
		 */
		mce_schedule_work();
550 551 552
		return;
	}

553
	irq_work_queue(&mce_irq_work);
554 555
}

556 557 558 559 560 561 562 563 564 565 566 567 568
/*
 * Read ADDR and MISC registers.
 */
static void mce_read_aux(struct mce *m, int i)
{
	if (m->status & MCI_STATUS_MISCV)
		m->misc = mce_rdmsrl(MSR_IA32_MCx_MISC(i));
	if (m->status & MCI_STATUS_ADDRV) {
		m->addr = mce_rdmsrl(MSR_IA32_MCx_ADDR(i));

		/*
		 * Mask the reported address by the reported granularity.
		 */
569
		if (mca_cfg.ser && (m->status & MCI_STATUS_MISCV)) {
570 571 572 573 574 575 576
			u8 shift = MCI_MISC_ADDR_LSB(m->misc);
			m->addr >>= shift;
			m->addr <<= shift;
		}
	}
}

577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607
static bool memory_error(struct mce *m)
{
	struct cpuinfo_x86 *c = &boot_cpu_data;

	if (c->x86_vendor == X86_VENDOR_AMD) {
		/*
		 * coming soon
		 */
		return false;
	} else if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * Intel SDM Volume 3B - 15.9.2 Compound Error Codes
		 *
		 * Bit 7 of the MCACOD field of IA32_MCi_STATUS is used for
		 * indicating a memory error. Bit 8 is used for indicating a
		 * cache hierarchy error. The combination of bit 2 and bit 3
		 * is used for indicating a `generic' cache hierarchy error
		 * But we can't just blindly check the above bits, because if
		 * bit 11 is set, then it is a bus/interconnect error - and
		 * either way the above bits just gives more detail on what
		 * bus/interconnect error happened. Note that bit 12 can be
		 * ignored, as it's the "filter" bit.
		 */
		return (m->status & 0xef80) == BIT(7) ||
		       (m->status & 0xef00) == BIT(8) ||
		       (m->status & 0xeffc) == 0xc;
	}

	return false;
}

608 609
DEFINE_PER_CPU(unsigned, mce_poll_count);

610
/*
611 612 613 614
 * Poll for corrected events or events that happened before reset.
 * Those are just logged through /dev/mcelog.
 *
 * This is executed in standard interrupt context.
A
Andi Kleen 已提交
615 616 617 618 619 620 621 622 623
 *
 * Note: spec recommends to panic for fatal unsignalled
 * errors here. However this would be quite problematic --
 * we would need to reimplement the Monarch handling and
 * it would mess up the exclusion between exception handler
 * and poll hander -- * so we skip this for now.
 * These cases should not happen anyways, or only when the CPU
 * is already totally * confused. In this case it's likely it will
 * not fully execute the machine check handler either.
624
 */
625
bool machine_check_poll(enum mcp_flags flags, mce_banks_t *b)
626
{
627
	bool error_logged = false;
628
	struct mce m;
629
	int severity;
630 631
	int i;

632
	this_cpu_inc(mce_poll_count);
633

634
	mce_gather_info(&m, NULL);
635

636
	for (i = 0; i < mca_cfg.banks; i++) {
637
		if (!mce_banks[i].ctl || !test_bit(i, *b))
638 639 640 641 642 643 644 645
			continue;

		m.misc = 0;
		m.addr = 0;
		m.bank = i;
		m.tsc = 0;

		barrier();
646
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
647 648 649
		if (!(m.status & MCI_STATUS_VAL))
			continue;

650

651
		/*
A
Andi Kleen 已提交
652 653
		 * Uncorrected or signalled events are handled by the exception
		 * handler when it is enabled, so don't process those here.
654 655 656
		 *
		 * TBD do the same check for MCI_STATUS_EN here?
		 */
A
Andi Kleen 已提交
657
		if (!(flags & MCP_UC) &&
658
		    (m.status & (mca_cfg.ser ? MCI_STATUS_S : MCI_STATUS_UC)))
659 660
			continue;

661
		mce_read_aux(&m, i);
662 663 664

		if (!(flags & MCP_TIMESTAMP))
			m.tsc = 0;
665 666 667 668 669 670 671 672 673 674 675 676 677 678

		severity = mce_severity(&m, mca_cfg.tolerant, NULL, false);

		/*
		 * In the cases where we don't have a valid address after all,
		 * do not add it into the ring buffer.
		 */
		if (severity == MCE_DEFERRED_SEVERITY && memory_error(&m)) {
			if (m.status & MCI_STATUS_ADDRV) {
				mce_ring_add(m.addr >> PAGE_SHIFT);
				mce_schedule_work();
			}
		}

679 680 681 682
		/*
		 * Don't get the IP here because it's unlikely to
		 * have anything to do with the actual error location.
		 */
683 684
		if (!(flags & MCP_DONTLOG) && !mca_cfg.dont_log_ce) {
			error_logged = true;
A
Andi Kleen 已提交
685
			mce_log(&m);
686
		}
687 688 689 690

		/*
		 * Clear state for this bank.
		 */
691
		mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
692 693 694 695 696 697
	}

	/*
	 * Don't clear MCG_STATUS here because it's only defined for
	 * exceptions.
	 */
698 699

	sync_core();
700 701

	return error_logged;
702
}
703
EXPORT_SYMBOL_GPL(machine_check_poll);
704

705 706 707 708
/*
 * Do a quick check if any of the events requires a panic.
 * This decides if we keep the events around or clear them.
 */
709 710
static int mce_no_way_out(struct mce *m, char **msg, unsigned long *validp,
			  struct pt_regs *regs)
711
{
712
	int i, ret = 0;
713
	char *tmp;
714

715
	for (i = 0; i < mca_cfg.banks; i++) {
716
		m->status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
717
		if (m->status & MCI_STATUS_VAL) {
718
			__set_bit(i, validp);
719 720 721
			if (quirk_no_way_out)
				quirk_no_way_out(i, m, regs);
		}
722 723 724

		if (mce_severity(m, mca_cfg.tolerant, &tmp, true) >= MCE_PANIC_SEVERITY) {
			*msg = tmp;
725
			ret = 1;
726
		}
727
	}
728
	return ret;
729 730
}

731 732 733 734 735 736 737 738 739 740 741 742 743 744
/*
 * Variable to establish order between CPUs while scanning.
 * Each CPU spins initially until executing is equal its number.
 */
static atomic_t mce_executing;

/*
 * Defines order of CPUs on entry. First CPU becomes Monarch.
 */
static atomic_t mce_callin;

/*
 * Check if a timeout waiting for other CPUs happened.
 */
745
static int mce_timed_out(u64 *t, const char *msg)
746 747 748 749 750 751 752 753
{
	/*
	 * The others already did panic for some reason.
	 * Bail out like in a timeout.
	 * rmb() to tell the compiler that system_state
	 * might have been modified by someone else.
	 */
	rmb();
754
	if (atomic_read(&mce_panicked))
755
		wait_for_panic();
756
	if (!mca_cfg.monarch_timeout)
757 758
		goto out;
	if ((s64)*t < SPINUNIT) {
759
		if (mca_cfg.tolerant <= 1)
760
			mce_panic(msg, NULL, NULL);
761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781
		cpu_missing = 1;
		return 1;
	}
	*t -= SPINUNIT;
out:
	touch_nmi_watchdog();
	return 0;
}

/*
 * The Monarch's reign.  The Monarch is the CPU who entered
 * the machine check handler first. It waits for the others to
 * raise the exception too and then grades them. When any
 * error is fatal panic. Only then let the others continue.
 *
 * The other CPUs entering the MCE handler will be controlled by the
 * Monarch. They are called Subjects.
 *
 * This way we prevent any potential data corruption in a unrecoverable case
 * and also makes sure always all CPU's errors are examined.
 *
782
 * Also this detects the case of a machine check event coming from outer
783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807
 * space (not detected by any CPUs) In this case some external agent wants
 * us to shut down, so panic too.
 *
 * The other CPUs might still decide to panic if the handler happens
 * in a unrecoverable place, but in this case the system is in a semi-stable
 * state and won't corrupt anything by itself. It's ok to let the others
 * continue for a bit first.
 *
 * All the spin loops have timeouts; when a timeout happens a CPU
 * typically elects itself to be Monarch.
 */
static void mce_reign(void)
{
	int cpu;
	struct mce *m = NULL;
	int global_worst = 0;
	char *msg = NULL;
	char *nmsg = NULL;

	/*
	 * This CPU is the Monarch and the other CPUs have run
	 * through their handlers.
	 * Grade the severity of the errors of all the CPUs.
	 */
	for_each_possible_cpu(cpu) {
808 809
		int severity = mce_severity(&per_cpu(mces_seen, cpu),
					    mca_cfg.tolerant,
810
					    &nmsg, true);
811 812 813 814 815 816 817 818 819 820 821 822
		if (severity > global_worst) {
			msg = nmsg;
			global_worst = severity;
			m = &per_cpu(mces_seen, cpu);
		}
	}

	/*
	 * Cannot recover? Panic here then.
	 * This dumps all the mces in the log buffer and stops the
	 * other CPUs.
	 */
823
	if (m && global_worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
824
		mce_panic("Fatal machine check", m, msg);
825 826 827 828 829 830 831 832 833 834 835

	/*
	 * For UC somewhere we let the CPU who detects it handle it.
	 * Also must let continue the others, otherwise the handling
	 * CPU could deadlock on a lock.
	 */

	/*
	 * No machine check event found. Must be some external
	 * source or one CPU is hung. Panic.
	 */
836
	if (global_worst <= MCE_KEEP_SEVERITY && mca_cfg.tolerant < 3)
837
		mce_panic("Fatal machine check from unknown source", NULL, NULL);
838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855

	/*
	 * Now clear all the mces_seen so that they don't reappear on
	 * the next mce.
	 */
	for_each_possible_cpu(cpu)
		memset(&per_cpu(mces_seen, cpu), 0, sizeof(struct mce));
}

static atomic_t global_nwo;

/*
 * Start of Monarch synchronization. This waits until all CPUs have
 * entered the exception handler and then determines if any of them
 * saw a fatal event that requires panic. Then it executes them
 * in the entry order.
 * TBD double check parallel CPU hotunplug
 */
H
Hidetoshi Seto 已提交
856
static int mce_start(int *no_way_out)
857
{
H
Hidetoshi Seto 已提交
858
	int order;
859
	int cpus = num_online_cpus();
860
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
861

H
Hidetoshi Seto 已提交
862 863
	if (!timeout)
		return -1;
864

H
Hidetoshi Seto 已提交
865
	atomic_add(*no_way_out, &global_nwo);
866 867 868 869
	/*
	 * global_nwo should be updated before mce_callin
	 */
	smp_wmb();
870
	order = atomic_inc_return(&mce_callin);
871 872 873 874 875

	/*
	 * Wait for everyone.
	 */
	while (atomic_read(&mce_callin) != cpus) {
876 877
		if (mce_timed_out(&timeout,
				  "Timeout: Not all CPUs entered broadcast exception handler")) {
878
			atomic_set(&global_nwo, 0);
H
Hidetoshi Seto 已提交
879
			return -1;
880 881 882 883
		}
		ndelay(SPINUNIT);
	}

884 885 886 887
	/*
	 * mce_callin should be read before global_nwo
	 */
	smp_rmb();
888

H
Hidetoshi Seto 已提交
889 890 891 892
	if (order == 1) {
		/*
		 * Monarch: Starts executing now, the others wait.
		 */
893
		atomic_set(&mce_executing, 1);
H
Hidetoshi Seto 已提交
894 895 896 897 898 899 900 901
	} else {
		/*
		 * Subject: Now start the scanning loop one by one in
		 * the original callin order.
		 * This way when there are any shared banks it will be
		 * only seen by one CPU before cleared, avoiding duplicates.
		 */
		while (atomic_read(&mce_executing) < order) {
902 903
			if (mce_timed_out(&timeout,
					  "Timeout: Subject CPUs unable to finish machine check processing")) {
H
Hidetoshi Seto 已提交
904 905 906 907 908
				atomic_set(&global_nwo, 0);
				return -1;
			}
			ndelay(SPINUNIT);
		}
909 910 911
	}

	/*
H
Hidetoshi Seto 已提交
912
	 * Cache the global no_way_out state.
913
	 */
H
Hidetoshi Seto 已提交
914 915 916
	*no_way_out = atomic_read(&global_nwo);

	return order;
917 918 919 920 921 922 923 924 925
}

/*
 * Synchronize between CPUs after main scanning loop.
 * This invokes the bulk of the Monarch processing.
 */
static int mce_end(int order)
{
	int ret = -1;
926
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946

	if (!timeout)
		goto reset;
	if (order < 0)
		goto reset;

	/*
	 * Allow others to run.
	 */
	atomic_inc(&mce_executing);

	if (order == 1) {
		/* CHECKME: Can this race with a parallel hotplug? */
		int cpus = num_online_cpus();

		/*
		 * Monarch: Wait for everyone to go through their scanning
		 * loops.
		 */
		while (atomic_read(&mce_executing) <= cpus) {
947 948
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU unable to finish machine check processing"))
949 950 951 952 953 954 955 956 957 958 959 960
				goto reset;
			ndelay(SPINUNIT);
		}

		mce_reign();
		barrier();
		ret = 0;
	} else {
		/*
		 * Subject: Wait for Monarch to finish.
		 */
		while (atomic_read(&mce_executing) != 0) {
961 962
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU did not finish machine check processing"))
963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987
				goto reset;
			ndelay(SPINUNIT);
		}

		/*
		 * Don't reset anything. That's done by the Monarch.
		 */
		return 0;
	}

	/*
	 * Reset all global state.
	 */
reset:
	atomic_set(&global_nwo, 0);
	atomic_set(&mce_callin, 0);
	barrier();

	/*
	 * Let others run again.
	 */
	atomic_set(&mce_executing, 0);
	return ret;
}

988 989 990 991
/*
 * Check if the address reported by the CPU is in a format we can parse.
 * It would be possible to add code for most other cases, but all would
 * be somewhat complicated (e.g. segment offset would require an instruction
L
Lucas De Marchi 已提交
992
 * parser). So only support physical addresses up to page granuality for now.
993 994 995 996 997
 */
static int mce_usable_address(struct mce *m)
{
	if (!(m->status & MCI_STATUS_MISCV) || !(m->status & MCI_STATUS_ADDRV))
		return 0;
998
	if (MCI_MISC_ADDR_LSB(m->misc) > PAGE_SHIFT)
999
		return 0;
1000
	if (MCI_MISC_ADDR_MODE(m->misc) != MCI_MISC_ADDR_PHYS)
1001 1002 1003 1004
		return 0;
	return 1;
}

1005 1006 1007 1008
static void mce_clear_state(unsigned long *toclear)
{
	int i;

1009
	for (i = 0; i < mca_cfg.banks; i++) {
1010
		if (test_bit(i, toclear))
1011
			mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
1012 1013 1014
	}
}

1015 1016 1017 1018 1019 1020 1021
/*
 * The actual machine check handler. This only handles real
 * exceptions when something got corrupted coming in through int 18.
 *
 * This is executed in NMI context not subject to normal locking rules. This
 * implies that most kernel services cannot be safely used. Don't even
 * think about putting a printk in there!
1022 1023 1024 1025
 *
 * On Intel systems this is entered on all CPUs in parallel through
 * MCE broadcast. However some CPUs might be broken beyond repair,
 * so be always careful when synchronizing with others.
L
Linus Torvalds 已提交
1026
 */
I
Ingo Molnar 已提交
1027
void do_machine_check(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
1028
{
1029
	struct mca_config *cfg = &mca_cfg;
1030
	struct mce m, *final;
1031
	enum ctx_state prev_state;
L
Linus Torvalds 已提交
1032
	int i;
1033 1034 1035 1036 1037 1038
	int worst = 0;
	int severity;
	/*
	 * Establish sequential order between the CPUs entering the machine
	 * check handler.
	 */
H
Hidetoshi Seto 已提交
1039
	int order;
1040 1041
	/*
	 * If no_way_out gets set, there is no safe way to recover from this
1042
	 * MCE.  If mca_cfg.tolerant is cranked up, we'll try anyway.
1043 1044 1045 1046 1047 1048 1049
	 */
	int no_way_out = 0;
	/*
	 * If kill_it gets set, there might be a way to recover from this
	 * error.
	 */
	int kill_it = 0;
1050
	DECLARE_BITMAP(toclear, MAX_NR_BANKS);
1051
	DECLARE_BITMAP(valid_banks, MAX_NR_BANKS);
1052
	char *msg = "Unknown";
1053 1054
	u64 recover_paddr = ~0ull;
	int flags = MF_ACTION_REQUIRED;
A
Ashok Raj 已提交
1055
	int lmce = 0;
L
Linus Torvalds 已提交
1056

1057 1058
	prev_state = ist_enter(regs);

1059
	this_cpu_inc(mce_exception_count);
1060

1061
	if (!cfg->banks)
1062
		goto out;
L
Linus Torvalds 已提交
1063

1064
	mce_gather_info(&m, regs);
1065

1066
	final = this_cpu_ptr(&mces_seen);
1067 1068
	*final = m;

1069
	memset(valid_banks, 0, sizeof(valid_banks));
1070
	no_way_out = mce_no_way_out(&m, &msg, valid_banks, regs);
1071

L
Linus Torvalds 已提交
1072 1073
	barrier();

A
Andi Kleen 已提交
1074
	/*
1075 1076 1077
	 * When no restart IP might need to kill or panic.
	 * Assume the worst for now, but if we find the
	 * severity is MCE_AR_SEVERITY we have other options.
A
Andi Kleen 已提交
1078 1079 1080 1081
	 */
	if (!(m.mcgstatus & MCG_STATUS_RIPV))
		kill_it = 1;

1082
	/*
A
Ashok Raj 已提交
1083
	 * Check if this MCE is signaled to only this logical processor
1084
	 */
A
Ashok Raj 已提交
1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096
	if (m.mcgstatus & MCG_STATUS_LMCES)
		lmce = 1;
	else {
		/*
		 * Go through all the banks in exclusion of the other CPUs.
		 * This way we don't report duplicated events on shared banks
		 * because the first one to see it will clear it.
		 * If this is a Local MCE, then no need to perform rendezvous.
		 */
		order = mce_start(&no_way_out);
	}

1097
	for (i = 0; i < cfg->banks; i++) {
1098
		__clear_bit(i, toclear);
1099 1100
		if (!test_bit(i, valid_banks))
			continue;
1101
		if (!mce_banks[i].ctl)
L
Linus Torvalds 已提交
1102
			continue;
1103 1104

		m.misc = 0;
L
Linus Torvalds 已提交
1105 1106 1107
		m.addr = 0;
		m.bank = i;

1108
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
L
Linus Torvalds 已提交
1109 1110 1111
		if ((m.status & MCI_STATUS_VAL) == 0)
			continue;

1112
		/*
A
Andi Kleen 已提交
1113 1114
		 * Non uncorrected or non signaled errors are handled by
		 * machine_check_poll. Leave them alone, unless this panics.
1115
		 */
1116
		if (!(m.status & (cfg->ser ? MCI_STATUS_S : MCI_STATUS_UC)) &&
A
Andi Kleen 已提交
1117
			!no_way_out)
1118 1119 1120 1121 1122
			continue;

		/*
		 * Set taint even when machine check was not enabled.
		 */
1123
		add_taint(TAINT_MACHINE_CHECK, LOCKDEP_NOW_UNRELIABLE);
1124

1125
		severity = mce_severity(&m, cfg->tolerant, NULL, true);
1126

A
Andi Kleen 已提交
1127
		/*
1128 1129
		 * When machine check was for corrected/deferred handler don't
		 * touch, unless we're panicing.
A
Andi Kleen 已提交
1130
		 */
1131 1132
		if ((severity == MCE_KEEP_SEVERITY ||
		     severity == MCE_UCNA_SEVERITY) && !no_way_out)
A
Andi Kleen 已提交
1133 1134 1135
			continue;
		__set_bit(i, toclear);
		if (severity == MCE_NO_SEVERITY) {
1136 1137 1138 1139 1140
			/*
			 * Machine check event was not enabled. Clear, but
			 * ignore.
			 */
			continue;
L
Linus Torvalds 已提交
1141 1142
		}

1143
		mce_read_aux(&m, i);
L
Linus Torvalds 已提交
1144

1145 1146 1147 1148 1149
		/*
		 * Action optional error. Queue address for later processing.
		 * When the ring overflows we just ignore the AO error.
		 * RED-PEN add some logging mechanism when
		 * usable_address or mce_add_ring fails.
1150
		 * RED-PEN don't ignore overflow for mca_cfg.tolerant == 0
1151 1152 1153 1154
		 */
		if (severity == MCE_AO_SEVERITY && mce_usable_address(&m))
			mce_ring_add(m.addr >> PAGE_SHIFT);

1155
		mce_log(&m);
L
Linus Torvalds 已提交
1156

1157 1158 1159
		if (severity > worst) {
			*final = m;
			worst = severity;
L
Linus Torvalds 已提交
1160 1161 1162
		}
	}

1163 1164 1165
	/* mce_clear_state will clear *final, save locally for use later */
	m = *final;

1166 1167 1168
	if (!no_way_out)
		mce_clear_state(toclear);

I
Ingo Molnar 已提交
1169
	/*
1170 1171
	 * Do most of the synchronization with other CPUs.
	 * When there's any problem use only local no_way_out state.
I
Ingo Molnar 已提交
1172
	 */
A
Ashok Raj 已提交
1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184
	if (!lmce) {
		if (mce_end(order) < 0)
			no_way_out = worst >= MCE_PANIC_SEVERITY;
	} else {
		/*
		 * Local MCE skipped calling mce_reign()
		 * If we found a fatal error, we need to panic here.
		 */
		 if (worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
			mce_panic("Machine check from unknown source",
				NULL, NULL);
	}
1185 1186

	/*
1187 1188 1189 1190
	 * At insane "tolerant" levels we take no action. Otherwise
	 * we only die if we have no other choice. For less serious
	 * issues we try to recover, or limit damage to the current
	 * process.
1191
	 */
1192
	if (cfg->tolerant < 3) {
1193 1194 1195
		if (no_way_out)
			mce_panic("Fatal machine check on current CPU", &m, msg);
		if (worst == MCE_AR_SEVERITY) {
1196 1197 1198
			recover_paddr = m.addr;
			if (!(m.mcgstatus & MCG_STATUS_RIPV))
				flags |= MF_MUST_KILL;
1199 1200 1201 1202
		} else if (kill_it) {
			force_sig(SIGBUS, current);
		}
	}
1203

1204 1205
	if (worst > 0)
		mce_report_event(regs);
1206
	mce_wrmsrl(MSR_IA32_MCG_STATUS, 0);
1207
out:
1208
	sync_core();
1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228

	if (recover_paddr == ~0ull)
		goto done;

	pr_err("Uncorrected hardware memory error in user-access at %llx",
		 recover_paddr);
	/*
	 * We must call memory_failure() here even if the current process is
	 * doomed. We still need to mark the page as poisoned and alert any
	 * other users of the page.
	 */
	ist_begin_non_atomic(regs);
	local_irq_enable();
	if (memory_failure(recover_paddr >> PAGE_SHIFT, MCE_VECTOR, flags) < 0) {
		pr_err("Memory error not recovered");
		force_sig(SIGBUS, current);
	}
	local_irq_disable();
	ist_end_non_atomic();
done:
1229
	ist_exit(regs, prev_state);
L
Linus Torvalds 已提交
1230
}
1231
EXPORT_SYMBOL_GPL(do_machine_check);
L
Linus Torvalds 已提交
1232

1233 1234
#ifndef CONFIG_MEMORY_FAILURE
int memory_failure(unsigned long pfn, int vector, int flags)
1235
{
1236 1237
	/* mce_severity() should not hand us an ACTION_REQUIRED error */
	BUG_ON(flags & MF_ACTION_REQUIRED);
1238 1239 1240
	pr_err("Uncorrected memory error in page 0x%lx ignored\n"
	       "Rebuild kernel with CONFIG_MEMORY_FAILURE=y for smarter handling\n",
	       pfn);
1241 1242

	return 0;
1243
}
1244
#endif
1245

1246 1247 1248 1249 1250
/*
 * Action optional processing happens here (picking up
 * from the list of faulting pages that do_machine_check()
 * placed into the "ring").
 */
1251 1252
static void mce_process_work(struct work_struct *dummy)
{
1253 1254 1255 1256
	unsigned long pfn;

	while (mce_ring_get(&pfn))
		memory_failure(pfn, MCE_VECTOR, 0);
1257 1258
}

1259 1260 1261
#ifdef CONFIG_X86_MCE_INTEL
/***
 * mce_log_therm_throt_event - Logs the thermal throttling event to mcelog
S
Simon Arlott 已提交
1262
 * @cpu: The CPU on which the event occurred.
1263 1264 1265 1266 1267 1268 1269 1270 1271 1272
 * @status: Event status information
 *
 * This function should be called by the thermal interrupt after the
 * event has been processed and the decision was made to log the event
 * further.
 *
 * The status parameter will be saved to the 'status' field of 'struct mce'
 * and historically has been the register value of the
 * MSR_IA32_THERMAL_STATUS (Intel) msr.
 */
1273
void mce_log_therm_throt_event(__u64 status)
1274 1275 1276
{
	struct mce m;

1277
	mce_setup(&m);
1278 1279 1280 1281 1282 1283
	m.bank = MCE_THERMAL_BANK;
	m.status = status;
	mce_log(&m);
}
#endif /* CONFIG_X86_MCE_INTEL */

L
Linus Torvalds 已提交
1284
/*
1285 1286 1287
 * Periodic polling timer for "silent" machine check errors.  If the
 * poller finds an MCE, poll 2x faster.  When the poller finds no more
 * errors, poll 2x slower (up to check_interval seconds).
L
Linus Torvalds 已提交
1288
 */
1289
static unsigned long check_interval = INITIAL_CHECK_INTERVAL;
I
Ingo Molnar 已提交
1290

T
Thomas Gleixner 已提交
1291
static DEFINE_PER_CPU(unsigned long, mce_next_interval); /* in jiffies */
1292
static DEFINE_PER_CPU(struct timer_list, mce_timer);
L
Linus Torvalds 已提交
1293

C
Chen Gong 已提交
1294 1295 1296 1297 1298
static unsigned long mce_adjust_timer_default(unsigned long interval)
{
	return interval;
}

1299
static unsigned long (*mce_adjust_timer)(unsigned long interval) = mce_adjust_timer_default;
C
Chen Gong 已提交
1300

1301
static void __restart_timer(struct timer_list *t, unsigned long interval)
1302
{
1303 1304
	unsigned long when = jiffies + interval;
	unsigned long flags;
1305

1306
	local_irq_save(flags);
1307

1308 1309 1310 1311 1312 1313 1314 1315 1316
	if (timer_pending(t)) {
		if (time_before(when, t->expires))
			mod_timer_pinned(t, when);
	} else {
		t->expires = round_jiffies(when);
		add_timer_on(t, smp_processor_id());
	}

	local_irq_restore(flags);
1317 1318
}

T
Thomas Gleixner 已提交
1319
static void mce_timer_fn(unsigned long data)
L
Linus Torvalds 已提交
1320
{
1321
	struct timer_list *t = this_cpu_ptr(&mce_timer);
1322
	int cpu = smp_processor_id();
T
Thomas Gleixner 已提交
1323
	unsigned long iv;
1324

1325 1326 1327
	WARN_ON(cpu != data);

	iv = __this_cpu_read(mce_next_interval);
1328

1329
	if (mce_available(this_cpu_ptr(&cpu_info))) {
1330 1331 1332 1333 1334 1335
		machine_check_poll(MCP_TIMESTAMP, this_cpu_ptr(&mce_poll_banks));

		if (mce_intel_cmci_poll()) {
			iv = mce_adjust_timer(iv);
			goto done;
		}
I
Ingo Molnar 已提交
1336
	}
L
Linus Torvalds 已提交
1337 1338

	/*
1339 1340
	 * Alert userspace if needed. If we logged an MCE, reduce the polling
	 * interval, otherwise increase the polling interval.
L
Linus Torvalds 已提交
1341
	 */
1342
	if (mce_notify_irq())
1343
		iv = max(iv / 2, (unsigned long) HZ/100);
1344
	else
T
Thomas Gleixner 已提交
1345
		iv = min(iv * 2, round_jiffies_relative(check_interval * HZ));
1346 1347

done:
T
Thomas Gleixner 已提交
1348
	__this_cpu_write(mce_next_interval, iv);
1349
	__restart_timer(t, iv);
C
Chen Gong 已提交
1350
}
1351

C
Chen Gong 已提交
1352 1353 1354 1355 1356
/*
 * Ensure that the timer is firing in @interval from now.
 */
void mce_timer_kick(unsigned long interval)
{
1357
	struct timer_list *t = this_cpu_ptr(&mce_timer);
C
Chen Gong 已提交
1358 1359
	unsigned long iv = __this_cpu_read(mce_next_interval);

1360 1361
	__restart_timer(t, interval);

C
Chen Gong 已提交
1362 1363
	if (interval < iv)
		__this_cpu_write(mce_next_interval, interval);
1364 1365
}

1366 1367 1368 1369 1370 1371 1372 1373 1374
/* Must not be called in IRQ context where del_timer_sync() can deadlock */
static void mce_timer_delete_all(void)
{
	int cpu;

	for_each_online_cpu(cpu)
		del_timer_sync(&per_cpu(mce_timer, cpu));
}

1375 1376
static void mce_do_trigger(struct work_struct *work)
{
1377
	call_usermodehelper(mce_helper, mce_helper_argv, NULL, UMH_NO_WAIT);
1378 1379 1380 1381
}

static DECLARE_WORK(mce_trigger_work, mce_do_trigger);

1382
/*
1383 1384 1385
 * Notify the user(s) about new machine check events.
 * Can be called from interrupt context, but not from machine check/NMI
 * context.
1386
 */
1387
int mce_notify_irq(void)
1388
{
1389 1390 1391
	/* Not more than two messages every minute */
	static DEFINE_RATELIMIT_STATE(ratelimit, 60*HZ, 2);

1392
	if (test_and_clear_bit(0, &mce_need_notify)) {
1393 1394
		/* wake processes polling /dev/mcelog */
		wake_up_interruptible(&mce_chrdev_wait);
1395

1396
		if (mce_helper[0])
1397
			schedule_work(&mce_trigger_work);
1398

1399
		if (__ratelimit(&ratelimit))
H
Huang Ying 已提交
1400
			pr_info(HW_ERR "Machine check events logged\n");
1401 1402

		return 1;
L
Linus Torvalds 已提交
1403
	}
1404 1405
	return 0;
}
1406
EXPORT_SYMBOL_GPL(mce_notify_irq);
1407

1408
static int __mcheck_cpu_mce_banks_init(void)
1409 1410
{
	int i;
1411
	u8 num_banks = mca_cfg.banks;
1412

1413
	mce_banks = kzalloc(num_banks * sizeof(struct mce_bank), GFP_KERNEL);
1414 1415
	if (!mce_banks)
		return -ENOMEM;
1416 1417

	for (i = 0; i < num_banks; i++) {
1418
		struct mce_bank *b = &mce_banks[i];
1419

1420 1421 1422 1423 1424 1425
		b->ctl = -1ULL;
		b->init = 1;
	}
	return 0;
}

1426
/*
L
Linus Torvalds 已提交
1427 1428
 * Initialize Machine Checks for a CPU.
 */
1429
static int __mcheck_cpu_cap_init(void)
L
Linus Torvalds 已提交
1430
{
1431
	unsigned b;
I
Ingo Molnar 已提交
1432
	u64 cap;
L
Linus Torvalds 已提交
1433 1434

	rdmsrl(MSR_IA32_MCG_CAP, cap);
1435 1436

	b = cap & MCG_BANKCNT_MASK;
1437
	if (!mca_cfg.banks)
1438
		pr_info("CPU supports %d MCE banks\n", b);
1439

1440
	if (b > MAX_NR_BANKS) {
1441
		pr_warn("Using only %u machine check banks out of %u\n",
1442 1443 1444 1445 1446
			MAX_NR_BANKS, b);
		b = MAX_NR_BANKS;
	}

	/* Don't support asymmetric configurations today */
1447 1448 1449
	WARN_ON(mca_cfg.banks != 0 && b != mca_cfg.banks);
	mca_cfg.banks = b;

1450
	if (!mce_banks) {
H
Hidetoshi Seto 已提交
1451
		int err = __mcheck_cpu_mce_banks_init();
1452

1453 1454
		if (err)
			return err;
L
Linus Torvalds 已提交
1455
	}
1456

1457
	/* Use accurate RIP reporting if available. */
1458
	if ((cap & MCG_EXT_P) && MCG_EXT_CNT(cap) >= 9)
1459
		mca_cfg.rip_msr = MSR_IA32_MCG_EIP;
L
Linus Torvalds 已提交
1460

A
Andi Kleen 已提交
1461
	if (cap & MCG_SER_P)
1462
		mca_cfg.ser = true;
A
Andi Kleen 已提交
1463

1464 1465 1466
	return 0;
}

1467
static void __mcheck_cpu_init_generic(void)
1468
{
1469
	enum mcp_flags m_fl = 0;
I
Ingo Molnar 已提交
1470
	mce_banks_t all_banks;
1471 1472 1473
	u64 cap;
	int i;

1474 1475 1476
	if (!mca_cfg.bootlog)
		m_fl = MCP_DONTLOG;

1477 1478 1479
	/*
	 * Log the machine checks left over from the previous reset.
	 */
1480
	bitmap_fill(all_banks, MAX_NR_BANKS);
1481
	machine_check_poll(MCP_UC | m_fl, &all_banks);
L
Linus Torvalds 已提交
1482

A
Andy Lutomirski 已提交
1483
	cr4_set_bits(X86_CR4_MCE);
L
Linus Torvalds 已提交
1484

1485
	rdmsrl(MSR_IA32_MCG_CAP, cap);
L
Linus Torvalds 已提交
1486 1487 1488
	if (cap & MCG_CTL_P)
		wrmsr(MSR_IA32_MCG_CTL, 0xffffffff, 0xffffffff);

1489
	for (i = 0; i < mca_cfg.banks; i++) {
1490
		struct mce_bank *b = &mce_banks[i];
1491

1492
		if (!b->init)
1493
			continue;
1494 1495
		wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
		wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
1496
	}
L
Linus Torvalds 已提交
1497 1498
}

1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526
/*
 * During IFU recovery Sandy Bridge -EP4S processors set the RIPV and
 * EIPV bits in MCG_STATUS to zero on the affected logical processor (SDM
 * Vol 3B Table 15-20). But this confuses both the code that determines
 * whether the machine check occurred in kernel or user mode, and also
 * the severity assessment code. Pretend that EIPV was set, and take the
 * ip/cs values from the pt_regs that mce_gather_info() ignored earlier.
 */
static void quirk_sandybridge_ifu(int bank, struct mce *m, struct pt_regs *regs)
{
	if (bank != 0)
		return;
	if ((m->mcgstatus & (MCG_STATUS_EIPV|MCG_STATUS_RIPV)) != 0)
		return;
	if ((m->status & (MCI_STATUS_OVER|MCI_STATUS_UC|
		          MCI_STATUS_EN|MCI_STATUS_MISCV|MCI_STATUS_ADDRV|
			  MCI_STATUS_PCC|MCI_STATUS_S|MCI_STATUS_AR|
			  MCACOD)) !=
			 (MCI_STATUS_UC|MCI_STATUS_EN|
			  MCI_STATUS_MISCV|MCI_STATUS_ADDRV|MCI_STATUS_S|
			  MCI_STATUS_AR|MCACOD_INSTR))
		return;

	m->mcgstatus |= MCG_STATUS_EIPV;
	m->ip = regs->ip;
	m->cs = regs->cs;
}

L
Linus Torvalds 已提交
1527
/* Add per CPU specific workarounds here */
1528
static int __mcheck_cpu_apply_quirks(struct cpuinfo_x86 *c)
1529
{
1530 1531
	struct mca_config *cfg = &mca_cfg;

1532
	if (c->x86_vendor == X86_VENDOR_UNKNOWN) {
1533
		pr_info("unknown CPU type - not enabling MCE support\n");
1534 1535 1536
		return -EOPNOTSUPP;
	}

L
Linus Torvalds 已提交
1537
	/* This should be disabled by the BIOS, but isn't always */
1538
	if (c->x86_vendor == X86_VENDOR_AMD) {
1539
		if (c->x86 == 15 && cfg->banks > 4) {
I
Ingo Molnar 已提交
1540 1541 1542 1543 1544
			/*
			 * disable GART TBL walk error reporting, which
			 * trips off incorrectly with the IOMMU & 3ware
			 * & Cerberus:
			 */
1545
			clear_bit(10, (unsigned long *)&mce_banks[4].ctl);
I
Ingo Molnar 已提交
1546
		}
1547
		if (c->x86 <= 17 && cfg->bootlog < 0) {
I
Ingo Molnar 已提交
1548 1549 1550 1551
			/*
			 * Lots of broken BIOS around that don't clear them
			 * by default and leave crap in there. Don't log:
			 */
1552
			cfg->bootlog = 0;
I
Ingo Molnar 已提交
1553
		}
1554 1555 1556 1557
		/*
		 * Various K7s with broken bank 0 around. Always disable
		 * by default.
		 */
1558
		if (c->x86 == 6 && cfg->banks > 0)
1559
			mce_banks[0].ctl = 0;
1560

1561 1562 1563 1564 1565 1566 1567
		/*
		 * overflow_recov is supported for F15h Models 00h-0fh
		 * even though we don't have a CPUID bit for it.
		 */
		if (c->x86 == 0x15 && c->x86_model <= 0xf)
			mce_flags.overflow_recov = 1;

1568 1569 1570 1571 1572 1573 1574 1575 1576 1577
		/*
		 * Turn off MC4_MISC thresholding banks on those models since
		 * they're not supported there.
		 */
		if (c->x86 == 0x15 &&
		    (c->x86_model >= 0x10 && c->x86_model <= 0x1f)) {
			int i;
			u64 hwcr;
			bool need_toggle;
			u32 msrs[] = {
1578 1579
				0x00000413, /* MC4_MISC0 */
				0xc0000408, /* MC4_MISC1 */
1580
			};
1581

1582
			rdmsrl(MSR_K7_HWCR, hwcr);
1583

1584 1585
			/* McStatusWrEn has to be set */
			need_toggle = !(hwcr & BIT(18));
1586

1587 1588
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr | BIT(18));
1589

1590 1591 1592
			/* Clear CntP bit safely */
			for (i = 0; i < ARRAY_SIZE(msrs); i++)
				msr_clear_bit(msrs[i], 62);
1593

1594 1595 1596 1597
			/* restore old settings */
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr);
		}
L
Linus Torvalds 已提交
1598
	}
1599

1600 1601 1602 1603 1604 1605 1606 1607 1608 1609
	if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * SDM documents that on family 6 bank 0 should not be written
		 * because it aliases to another special BIOS controlled
		 * register.
		 * But it's not aliased anymore on model 0x1a+
		 * Don't ignore bank 0 completely because there could be a
		 * valid event later, merely don't write CTL0.
		 */

1610
		if (c->x86 == 6 && c->x86_model < 0x1A && cfg->banks > 0)
1611
			mce_banks[0].init = 0;
1612 1613 1614 1615 1616 1617

		/*
		 * All newer Intel systems support MCE broadcasting. Enable
		 * synchronization with a one second timeout.
		 */
		if ((c->x86 > 6 || (c->x86 == 6 && c->x86_model >= 0xe)) &&
1618 1619
			cfg->monarch_timeout < 0)
			cfg->monarch_timeout = USEC_PER_SEC;
1620

1621 1622 1623 1624
		/*
		 * There are also broken BIOSes on some Pentium M and
		 * earlier systems:
		 */
1625 1626
		if (c->x86 == 6 && c->x86_model <= 13 && cfg->bootlog < 0)
			cfg->bootlog = 0;
1627 1628 1629

		if (c->x86 == 6 && c->x86_model == 45)
			quirk_no_way_out = quirk_sandybridge_ifu;
1630
	}
1631 1632 1633
	if (cfg->monarch_timeout < 0)
		cfg->monarch_timeout = 0;
	if (cfg->bootlog != 0)
1634
		cfg->panic_timeout = 30;
1635 1636

	return 0;
1637
}
L
Linus Torvalds 已提交
1638

1639
static int __mcheck_cpu_ancient_init(struct cpuinfo_x86 *c)
1640 1641
{
	if (c->x86 != 5)
1642 1643
		return 0;

1644 1645
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
1646
		intel_p5_mcheck_init(c);
1647
		return 1;
1648 1649 1650
		break;
	case X86_VENDOR_CENTAUR:
		winchip_mcheck_init(c);
1651
		return 1;
1652 1653
		break;
	}
1654 1655

	return 0;
1656 1657
}

1658
static void __mcheck_cpu_init_vendor(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1659 1660 1661 1662
{
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		mce_intel_feature_init(c);
1663
		mce_adjust_timer = cmci_intel_adjust_timer;
L
Linus Torvalds 已提交
1664
		break;
1665 1666 1667 1668

	case X86_VENDOR_AMD: {
		u32 ebx = cpuid_ebx(0x80000007);

1669
		mce_amd_feature_init(c);
1670 1671
		mce_flags.overflow_recov = !!(ebx & BIT(0));
		mce_flags.succor	 = !!(ebx & BIT(1));
1672
		break;
1673 1674
		}

L
Linus Torvalds 已提交
1675 1676 1677 1678 1679
	default:
		break;
	}
}

T
Thomas Gleixner 已提交
1680
static void mce_start_timer(unsigned int cpu, struct timer_list *t)
1681
{
1682
	unsigned long iv = check_interval * HZ;
1683

1684
	if (mca_cfg.ignore_ce || !iv)
1685 1686
		return;

1687 1688
	per_cpu(mce_next_interval, cpu) = iv;

T
Thomas Gleixner 已提交
1689
	t->expires = round_jiffies(jiffies + iv);
1690
	add_timer_on(t, cpu);
1691 1692
}

T
Thomas Gleixner 已提交
1693 1694
static void __mcheck_cpu_init_timer(void)
{
1695
	struct timer_list *t = this_cpu_ptr(&mce_timer);
T
Thomas Gleixner 已提交
1696 1697 1698 1699 1700 1701
	unsigned int cpu = smp_processor_id();

	setup_timer(t, mce_timer_fn, cpu);
	mce_start_timer(cpu, t);
}

A
Andi Kleen 已提交
1702 1703 1704
/* Handle unconfigured int18 (should never happen) */
static void unexpected_machine_check(struct pt_regs *regs, long error_code)
{
1705
	pr_err("CPU#%d: Unexpected int18 (Machine Check)\n",
A
Andi Kleen 已提交
1706 1707 1708 1709 1710 1711 1712
	       smp_processor_id());
}

/* Call the installed machine check handler for this CPU setup. */
void (*machine_check_vector)(struct pt_regs *, long error_code) =
						unexpected_machine_check;

1713
/*
L
Linus Torvalds 已提交
1714
 * Called for each booted CPU to set up machine checks.
I
Ingo Molnar 已提交
1715
 * Must be called with preempt off:
L
Linus Torvalds 已提交
1716
 */
1717
void mcheck_cpu_init(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1718
{
1719
	if (mca_cfg.disabled)
1720 1721
		return;

1722 1723
	if (__mcheck_cpu_ancient_init(c))
		return;
1724

1725
	if (!mce_available(c))
L
Linus Torvalds 已提交
1726 1727
		return;

1728
	if (__mcheck_cpu_cap_init() < 0 || __mcheck_cpu_apply_quirks(c) < 0) {
1729
		mca_cfg.disabled = true;
1730 1731 1732
		return;
	}

1733 1734 1735 1736 1737 1738
	if (mce_gen_pool_init()) {
		mca_cfg.disabled = true;
		pr_emerg("Couldn't allocate MCE records pool!\n");
		return;
	}

1739 1740
	machine_check_vector = do_machine_check;

1741 1742 1743
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_vendor(c);
	__mcheck_cpu_init_timer();
L
Linus Torvalds 已提交
1744 1745 1746
}

/*
1747
 * mce_chrdev: Character device /dev/mcelog to read and clear the MCE log.
L
Linus Torvalds 已提交
1748 1749
 */

1750 1751 1752
static DEFINE_SPINLOCK(mce_chrdev_state_lock);
static int mce_chrdev_open_count;	/* #times opened */
static int mce_chrdev_open_exclu;	/* already open exclusive? */
T
Tim Hockin 已提交
1753

1754
static int mce_chrdev_open(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1755
{
1756
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1757

1758 1759 1760
	if (mce_chrdev_open_exclu ||
	    (mce_chrdev_open_count && (file->f_flags & O_EXCL))) {
		spin_unlock(&mce_chrdev_state_lock);
I
Ingo Molnar 已提交
1761

T
Tim Hockin 已提交
1762 1763 1764 1765
		return -EBUSY;
	}

	if (file->f_flags & O_EXCL)
1766 1767
		mce_chrdev_open_exclu = 1;
	mce_chrdev_open_count++;
T
Tim Hockin 已提交
1768

1769
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1770

1771
	return nonseekable_open(inode, file);
T
Tim Hockin 已提交
1772 1773
}

1774
static int mce_chrdev_release(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1775
{
1776
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1777

1778 1779
	mce_chrdev_open_count--;
	mce_chrdev_open_exclu = 0;
T
Tim Hockin 已提交
1780

1781
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1782 1783 1784 1785

	return 0;
}

1786 1787
static void collect_tscs(void *data)
{
L
Linus Torvalds 已提交
1788
	unsigned long *cpu_tsc = (unsigned long *)data;
1789

L
Linus Torvalds 已提交
1790
	rdtscll(cpu_tsc[smp_processor_id()]);
1791
}
L
Linus Torvalds 已提交
1792

1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808
static int mce_apei_read_done;

/* Collect MCE record of previous boot in persistent storage via APEI ERST. */
static int __mce_read_apei(char __user **ubuf, size_t usize)
{
	int rc;
	u64 record_id;
	struct mce m;

	if (usize < sizeof(struct mce))
		return -EINVAL;

	rc = apei_read_mce(&m, &record_id);
	/* Error or no more MCE record */
	if (rc <= 0) {
		mce_apei_read_done = 1;
1809 1810 1811 1812 1813 1814
		/*
		 * When ERST is disabled, mce_chrdev_read() should return
		 * "no record" instead of "no device."
		 */
		if (rc == -ENODEV)
			return 0;
1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835
		return rc;
	}
	rc = -EFAULT;
	if (copy_to_user(*ubuf, &m, sizeof(struct mce)))
		return rc;
	/*
	 * In fact, we should have cleared the record after that has
	 * been flushed to the disk or sent to network in
	 * /sbin/mcelog, but we have no interface to support that now,
	 * so just clear it to avoid duplication.
	 */
	rc = apei_clear_mce(record_id);
	if (rc) {
		mce_apei_read_done = 1;
		return rc;
	}
	*ubuf += sizeof(struct mce);

	return 0;
}

1836 1837
static ssize_t mce_chrdev_read(struct file *filp, char __user *ubuf,
				size_t usize, loff_t *off)
L
Linus Torvalds 已提交
1838
{
I
Ingo Molnar 已提交
1839
	char __user *buf = ubuf;
1840
	unsigned long *cpu_tsc;
1841
	unsigned prev, next;
L
Linus Torvalds 已提交
1842 1843
	int i, err;

1844
	cpu_tsc = kmalloc(nr_cpu_ids * sizeof(long), GFP_KERNEL);
1845 1846 1847
	if (!cpu_tsc)
		return -ENOMEM;

1848
	mutex_lock(&mce_chrdev_read_mutex);
1849 1850 1851 1852 1853 1854 1855

	if (!mce_apei_read_done) {
		err = __mce_read_apei(&buf, usize);
		if (err || buf != ubuf)
			goto out;
	}

1856
	next = rcu_dereference_check_mce(mcelog.next);
L
Linus Torvalds 已提交
1857 1858

	/* Only supports full reads right now */
1859 1860 1861
	err = -EINVAL;
	if (*off != 0 || usize < MCE_LOG_LEN*sizeof(struct mce))
		goto out;
L
Linus Torvalds 已提交
1862 1863

	err = 0;
1864 1865 1866 1867
	prev = 0;
	do {
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;
H
Hidetoshi Seto 已提交
1868
			struct mce *m = &mcelog.entry[i];
1869

H
Hidetoshi Seto 已提交
1870
			while (!m->finished) {
1871
				if (time_after_eq(jiffies, start + 2)) {
H
Hidetoshi Seto 已提交
1872
					memset(m, 0, sizeof(*m));
1873 1874 1875
					goto timeout;
				}
				cpu_relax();
1876
			}
1877
			smp_rmb();
H
Hidetoshi Seto 已提交
1878 1879
			err |= copy_to_user(buf, m, sizeof(*m));
			buf += sizeof(*m);
1880 1881
timeout:
			;
1882
		}
L
Linus Torvalds 已提交
1883

1884 1885 1886 1887 1888
		memset(mcelog.entry + prev, 0,
		       (next - prev) * sizeof(struct mce));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
L
Linus Torvalds 已提交
1889

1890
	synchronize_sched();
L
Linus Torvalds 已提交
1891

1892 1893 1894 1895
	/*
	 * Collect entries that were still getting written before the
	 * synchronize.
	 */
1896
	on_each_cpu(collect_tscs, cpu_tsc, 1);
I
Ingo Molnar 已提交
1897

1898
	for (i = next; i < MCE_LOG_LEN; i++) {
H
Hidetoshi Seto 已提交
1899 1900 1901 1902
		struct mce *m = &mcelog.entry[i];

		if (m->finished && m->tsc < cpu_tsc[m->cpu]) {
			err |= copy_to_user(buf, m, sizeof(*m));
L
Linus Torvalds 已提交
1903
			smp_rmb();
H
Hidetoshi Seto 已提交
1904 1905
			buf += sizeof(*m);
			memset(m, 0, sizeof(*m));
L
Linus Torvalds 已提交
1906
		}
1907
	}
1908 1909 1910 1911 1912

	if (err)
		err = -EFAULT;

out:
1913
	mutex_unlock(&mce_chrdev_read_mutex);
1914
	kfree(cpu_tsc);
I
Ingo Molnar 已提交
1915

1916
	return err ? err : buf - ubuf;
L
Linus Torvalds 已提交
1917 1918
}

1919
static unsigned int mce_chrdev_poll(struct file *file, poll_table *wait)
1920
{
1921
	poll_wait(file, &mce_chrdev_wait, wait);
1922
	if (READ_ONCE(mcelog.next))
1923
		return POLLIN | POLLRDNORM;
1924 1925
	if (!mce_apei_read_done && apei_check_mce())
		return POLLIN | POLLRDNORM;
1926 1927 1928
	return 0;
}

1929 1930
static long mce_chrdev_ioctl(struct file *f, unsigned int cmd,
				unsigned long arg)
L
Linus Torvalds 已提交
1931 1932
{
	int __user *p = (int __user *)arg;
1933

L
Linus Torvalds 已提交
1934
	if (!capable(CAP_SYS_ADMIN))
1935
		return -EPERM;
I
Ingo Molnar 已提交
1936

L
Linus Torvalds 已提交
1937
	switch (cmd) {
1938
	case MCE_GET_RECORD_LEN:
L
Linus Torvalds 已提交
1939 1940
		return put_user(sizeof(struct mce), p);
	case MCE_GET_LOG_LEN:
1941
		return put_user(MCE_LOG_LEN, p);
L
Linus Torvalds 已提交
1942 1943
	case MCE_GETCLEAR_FLAGS: {
		unsigned flags;
1944 1945

		do {
L
Linus Torvalds 已提交
1946
			flags = mcelog.flags;
1947
		} while (cmpxchg(&mcelog.flags, flags, 0) != flags);
I
Ingo Molnar 已提交
1948

1949
		return put_user(flags, p);
L
Linus Torvalds 已提交
1950 1951
	}
	default:
1952 1953
		return -ENOTTY;
	}
L
Linus Torvalds 已提交
1954 1955
}

1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966
static ssize_t (*mce_write)(struct file *filp, const char __user *ubuf,
			    size_t usize, loff_t *off);

void register_mce_write_callback(ssize_t (*fn)(struct file *filp,
			     const char __user *ubuf,
			     size_t usize, loff_t *off))
{
	mce_write = fn;
}
EXPORT_SYMBOL_GPL(register_mce_write_callback);

1967 1968
static ssize_t mce_chrdev_write(struct file *filp, const char __user *ubuf,
				size_t usize, loff_t *off)
1969 1970 1971 1972 1973 1974 1975 1976
{
	if (mce_write)
		return mce_write(filp, ubuf, usize, off);
	else
		return -EINVAL;
}

static const struct file_operations mce_chrdev_ops = {
1977 1978 1979
	.open			= mce_chrdev_open,
	.release		= mce_chrdev_release,
	.read			= mce_chrdev_read,
1980
	.write			= mce_chrdev_write,
1981 1982 1983
	.poll			= mce_chrdev_poll,
	.unlocked_ioctl		= mce_chrdev_ioctl,
	.llseek			= no_llseek,
L
Linus Torvalds 已提交
1984 1985
};

1986
static struct miscdevice mce_chrdev_device = {
L
Linus Torvalds 已提交
1987 1988 1989 1990 1991
	MISC_MCELOG_MINOR,
	"mcelog",
	&mce_chrdev_ops,
};

1992 1993 1994
static void __mce_disable_bank(void *arg)
{
	int bank = *((int *)arg);
1995
	__clear_bit(bank, this_cpu_ptr(mce_poll_banks));
1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010
	cmci_disable_bank(bank);
}

void mce_disable_bank(int bank)
{
	if (bank >= mca_cfg.banks) {
		pr_warn(FW_BUG
			"Ignoring request to disable invalid MCA bank %d.\n",
			bank);
		return;
	}
	set_bit(bank, mce_banks_ce_disabled);
	on_each_cpu(__mce_disable_bank, &bank, 1);
}

H
Hidetoshi Seto 已提交
2011
/*
2012 2013
 * mce=off Disables machine check
 * mce=no_cmci Disables CMCI
2014
 * mce=no_lmce Disables LMCE
2015 2016
 * mce=dont_log_ce Clears corrected events silently, no log created for CEs.
 * mce=ignore_ce Disables polling and CMCI, corrected events are not cleared.
2017 2018 2019
 * mce=TOLERANCELEVEL[,monarchtimeout] (number, see above)
 *	monarchtimeout is how long to wait for other CPUs on machine
 *	check, or 0 to not wait
H
Hidetoshi Seto 已提交
2020 2021
 * mce=bootlog Log MCEs from before booting. Disabled by default on AMD.
 * mce=nobootlog Don't log MCEs from before booting.
2022
 * mce=bios_cmci_threshold Don't program the CMCI threshold
H
Hidetoshi Seto 已提交
2023
 */
L
Linus Torvalds 已提交
2024 2025
static int __init mcheck_enable(char *str)
{
2026 2027
	struct mca_config *cfg = &mca_cfg;

2028
	if (*str == 0) {
2029
		enable_p5_mce();
2030 2031
		return 1;
	}
2032 2033
	if (*str == '=')
		str++;
L
Linus Torvalds 已提交
2034
	if (!strcmp(str, "off"))
2035
		cfg->disabled = true;
2036
	else if (!strcmp(str, "no_cmci"))
2037
		cfg->cmci_disabled = true;
2038 2039
	else if (!strcmp(str, "no_lmce"))
		cfg->lmce_disabled = true;
2040
	else if (!strcmp(str, "dont_log_ce"))
2041
		cfg->dont_log_ce = true;
2042
	else if (!strcmp(str, "ignore_ce"))
2043
		cfg->ignore_ce = true;
H
Hidetoshi Seto 已提交
2044
	else if (!strcmp(str, "bootlog") || !strcmp(str, "nobootlog"))
2045
		cfg->bootlog = (str[0] == 'b');
2046
	else if (!strcmp(str, "bios_cmci_threshold"))
2047
		cfg->bios_cmci_threshold = true;
2048
	else if (isdigit(str[0])) {
2049
		if (get_option(&str, &cfg->tolerant) == 2)
2050
			get_option(&str, &(cfg->monarch_timeout));
2051
	} else {
2052
		pr_info("mce argument %s ignored. Please use /sys\n", str);
H
Hidetoshi Seto 已提交
2053 2054
		return 0;
	}
2055
	return 1;
L
Linus Torvalds 已提交
2056
}
2057
__setup("mce", mcheck_enable);
L
Linus Torvalds 已提交
2058

2059
int __init mcheck_init(void)
2060
{
2061
	mcheck_intel_therm_init();
2062
	mcheck_vendor_init_severity();
2063

2064 2065 2066
	INIT_WORK(&mce_work, mce_process_work);
	init_irq_work(&mce_irq_work, mce_irq_work_cb);

2067 2068 2069
	return 0;
}

2070
/*
2071
 * mce_syscore: PM support
2072
 */
L
Linus Torvalds 已提交
2073

2074 2075 2076 2077
/*
 * Disable machine checks on suspend and shutdown. We can't really handle
 * them later.
 */
2078
static int mce_disable_error_reporting(void)
2079 2080 2081
{
	int i;

2082
	for (i = 0; i < mca_cfg.banks; i++) {
2083
		struct mce_bank *b = &mce_banks[i];
2084

2085
		if (b->init)
2086
			wrmsrl(MSR_IA32_MCx_CTL(i), 0);
2087
	}
2088 2089 2090
	return 0;
}

2091
static int mce_syscore_suspend(void)
2092
{
2093
	return mce_disable_error_reporting();
2094 2095
}

2096
static void mce_syscore_shutdown(void)
2097
{
2098
	mce_disable_error_reporting();
2099 2100
}

I
Ingo Molnar 已提交
2101 2102 2103 2104 2105
/*
 * On resume clear all MCE state. Don't want to see leftovers from the BIOS.
 * Only one CPU is active at this time, the others get re-added later using
 * CPU hotplug:
 */
2106
static void mce_syscore_resume(void)
L
Linus Torvalds 已提交
2107
{
2108
	__mcheck_cpu_init_generic();
2109
	__mcheck_cpu_init_vendor(raw_cpu_ptr(&cpu_info));
L
Linus Torvalds 已提交
2110 2111
}

2112
static struct syscore_ops mce_syscore_ops = {
2113 2114 2115
	.suspend	= mce_syscore_suspend,
	.shutdown	= mce_syscore_shutdown,
	.resume		= mce_syscore_resume,
2116 2117
};

2118
/*
2119
 * mce_device: Sysfs support
2120 2121
 */

2122 2123
static void mce_cpu_restart(void *data)
{
2124
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2125
		return;
2126 2127
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_timer();
2128 2129
}

L
Linus Torvalds 已提交
2130
/* Reinit MCEs after user configuration changes */
2131 2132
static void mce_restart(void)
{
2133
	mce_timer_delete_all();
2134
	on_each_cpu(mce_cpu_restart, NULL, 1);
L
Linus Torvalds 已提交
2135 2136
}

2137
/* Toggle features for corrected errors */
2138
static void mce_disable_cmci(void *data)
2139
{
2140
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2141 2142 2143 2144 2145 2146
		return;
	cmci_clear();
}

static void mce_enable_ce(void *all)
{
2147
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2148 2149 2150 2151
		return;
	cmci_reenable();
	cmci_recheck();
	if (all)
2152
		__mcheck_cpu_init_timer();
2153 2154
}

2155
static struct bus_type mce_subsys = {
I
Ingo Molnar 已提交
2156
	.name		= "machinecheck",
2157
	.dev_name	= "machinecheck",
L
Linus Torvalds 已提交
2158 2159
};

2160
DEFINE_PER_CPU(struct device *, mce_device);
I
Ingo Molnar 已提交
2161 2162

void (*threshold_cpu_callback)(unsigned long action, unsigned int cpu);
L
Linus Torvalds 已提交
2163

2164
static inline struct mce_bank *attr_to_bank(struct device_attribute *attr)
2165 2166 2167
{
	return container_of(attr, struct mce_bank, attr);
}
2168

2169
static ssize_t show_bank(struct device *s, struct device_attribute *attr,
2170 2171
			 char *buf)
{
2172
	return sprintf(buf, "%llx\n", attr_to_bank(attr)->ctl);
2173 2174
}

2175
static ssize_t set_bank(struct device *s, struct device_attribute *attr,
H
Hidetoshi Seto 已提交
2176
			const char *buf, size_t size)
2177
{
H
Hidetoshi Seto 已提交
2178
	u64 new;
I
Ingo Molnar 已提交
2179

2180
	if (kstrtou64(buf, 0, &new) < 0)
2181
		return -EINVAL;
I
Ingo Molnar 已提交
2182

2183
	attr_to_bank(attr)->ctl = new;
2184
	mce_restart();
I
Ingo Molnar 已提交
2185

H
Hidetoshi Seto 已提交
2186
	return size;
2187
}
2188

I
Ingo Molnar 已提交
2189
static ssize_t
2190
show_trigger(struct device *s, struct device_attribute *attr, char *buf)
2191
{
2192
	strcpy(buf, mce_helper);
2193
	strcat(buf, "\n");
2194
	return strlen(mce_helper) + 1;
2195 2196
}

2197
static ssize_t set_trigger(struct device *s, struct device_attribute *attr,
I
Ingo Molnar 已提交
2198
				const char *buf, size_t siz)
2199 2200
{
	char *p;
I
Ingo Molnar 已提交
2201

2202 2203 2204
	strncpy(mce_helper, buf, sizeof(mce_helper));
	mce_helper[sizeof(mce_helper)-1] = 0;
	p = strchr(mce_helper, '\n');
I
Ingo Molnar 已提交
2205

2206
	if (p)
I
Ingo Molnar 已提交
2207 2208
		*p = 0;

2209
	return strlen(mce_helper) + !!p;
2210 2211
}

2212 2213
static ssize_t set_ignore_ce(struct device *s,
			     struct device_attribute *attr,
2214 2215 2216 2217
			     const char *buf, size_t size)
{
	u64 new;

2218
	if (kstrtou64(buf, 0, &new) < 0)
2219 2220
		return -EINVAL;

2221
	if (mca_cfg.ignore_ce ^ !!new) {
2222 2223
		if (new) {
			/* disable ce features */
2224 2225
			mce_timer_delete_all();
			on_each_cpu(mce_disable_cmci, NULL, 1);
2226
			mca_cfg.ignore_ce = true;
2227 2228
		} else {
			/* enable ce features */
2229
			mca_cfg.ignore_ce = false;
2230 2231 2232 2233 2234 2235
			on_each_cpu(mce_enable_ce, (void *)1, 1);
		}
	}
	return size;
}

2236 2237
static ssize_t set_cmci_disabled(struct device *s,
				 struct device_attribute *attr,
2238 2239 2240 2241
				 const char *buf, size_t size)
{
	u64 new;

2242
	if (kstrtou64(buf, 0, &new) < 0)
2243 2244
		return -EINVAL;

2245
	if (mca_cfg.cmci_disabled ^ !!new) {
2246 2247
		if (new) {
			/* disable cmci */
2248
			on_each_cpu(mce_disable_cmci, NULL, 1);
2249
			mca_cfg.cmci_disabled = true;
2250 2251
		} else {
			/* enable cmci */
2252
			mca_cfg.cmci_disabled = false;
2253 2254 2255 2256 2257 2258
			on_each_cpu(mce_enable_ce, NULL, 1);
		}
	}
	return size;
}

2259 2260
static ssize_t store_int_with_restart(struct device *s,
				      struct device_attribute *attr,
2261 2262
				      const char *buf, size_t size)
{
2263
	ssize_t ret = device_store_int(s, attr, buf, size);
2264 2265 2266 2267
	mce_restart();
	return ret;
}

2268
static DEVICE_ATTR(trigger, 0644, show_trigger, set_trigger);
2269
static DEVICE_INT_ATTR(tolerant, 0644, mca_cfg.tolerant);
2270
static DEVICE_INT_ATTR(monarch_timeout, 0644, mca_cfg.monarch_timeout);
2271
static DEVICE_BOOL_ATTR(dont_log_ce, 0644, mca_cfg.dont_log_ce);
I
Ingo Molnar 已提交
2272

2273 2274
static struct dev_ext_attribute dev_attr_check_interval = {
	__ATTR(check_interval, 0644, device_show_int, store_int_with_restart),
2275 2276
	&check_interval
};
I
Ingo Molnar 已提交
2277

2278
static struct dev_ext_attribute dev_attr_ignore_ce = {
2279 2280
	__ATTR(ignore_ce, 0644, device_show_bool, set_ignore_ce),
	&mca_cfg.ignore_ce
2281 2282
};

2283
static struct dev_ext_attribute dev_attr_cmci_disabled = {
2284 2285
	__ATTR(cmci_disabled, 0644, device_show_bool, set_cmci_disabled),
	&mca_cfg.cmci_disabled
2286 2287
};

2288 2289 2290 2291 2292 2293 2294 2295
static struct device_attribute *mce_device_attrs[] = {
	&dev_attr_tolerant.attr,
	&dev_attr_check_interval.attr,
	&dev_attr_trigger,
	&dev_attr_monarch_timeout.attr,
	&dev_attr_dont_log_ce.attr,
	&dev_attr_ignore_ce.attr,
	&dev_attr_cmci_disabled.attr,
2296 2297
	NULL
};
L
Linus Torvalds 已提交
2298

2299
static cpumask_var_t mce_device_initialized;
2300

2301 2302 2303 2304 2305
static void mce_device_release(struct device *dev)
{
	kfree(dev);
}

2306
/* Per cpu device init. All of the cpus still share the same ctrl bank: */
2307
static int mce_device_create(unsigned int cpu)
L
Linus Torvalds 已提交
2308
{
2309
	struct device *dev;
L
Linus Torvalds 已提交
2310
	int err;
2311
	int i, j;
2312

A
Andreas Herrmann 已提交
2313
	if (!mce_available(&boot_cpu_data))
2314 2315
		return -EIO;

2316 2317 2318
	dev = kzalloc(sizeof *dev, GFP_KERNEL);
	if (!dev)
		return -ENOMEM;
2319 2320
	dev->id  = cpu;
	dev->bus = &mce_subsys;
2321
	dev->release = &mce_device_release;
2322

2323
	err = device_register(dev);
2324 2325
	if (err) {
		put_device(dev);
2326
		return err;
2327
	}
2328

2329 2330
	for (i = 0; mce_device_attrs[i]; i++) {
		err = device_create_file(dev, mce_device_attrs[i]);
2331 2332 2333
		if (err)
			goto error;
	}
2334
	for (j = 0; j < mca_cfg.banks; j++) {
2335
		err = device_create_file(dev, &mce_banks[j].attr);
2336 2337 2338
		if (err)
			goto error2;
	}
2339
	cpumask_set_cpu(cpu, mce_device_initialized);
2340
	per_cpu(mce_device, cpu) = dev;
2341

2342
	return 0;
2343
error2:
2344
	while (--j >= 0)
2345
		device_remove_file(dev, &mce_banks[j].attr);
2346
error:
I
Ingo Molnar 已提交
2347
	while (--i >= 0)
2348
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2349

2350
	device_unregister(dev);
2351

2352 2353 2354
	return err;
}

2355
static void mce_device_remove(unsigned int cpu)
2356
{
2357
	struct device *dev = per_cpu(mce_device, cpu);
2358 2359
	int i;

2360
	if (!cpumask_test_cpu(cpu, mce_device_initialized))
2361 2362
		return;

2363 2364
	for (i = 0; mce_device_attrs[i]; i++)
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2365

2366
	for (i = 0; i < mca_cfg.banks; i++)
2367
		device_remove_file(dev, &mce_banks[i].attr);
I
Ingo Molnar 已提交
2368

2369 2370
	device_unregister(dev);
	cpumask_clear_cpu(cpu, mce_device_initialized);
2371
	per_cpu(mce_device, cpu) = NULL;
2372 2373
}

2374
/* Make sure there are no machine checks on offlined CPUs. */
2375
static void mce_disable_cpu(void *h)
2376
{
A
Andi Kleen 已提交
2377
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
2378
	int i;
2379

2380
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2381
		return;
2382

A
Andi Kleen 已提交
2383 2384
	if (!(action & CPU_TASKS_FROZEN))
		cmci_clear();
2385
	for (i = 0; i < mca_cfg.banks; i++) {
2386
		struct mce_bank *b = &mce_banks[i];
2387

2388
		if (b->init)
2389
			wrmsrl(MSR_IA32_MCx_CTL(i), 0);
2390
	}
2391 2392
}

2393
static void mce_reenable_cpu(void *h)
2394
{
A
Andi Kleen 已提交
2395
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
2396
	int i;
2397

2398
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2399
		return;
I
Ingo Molnar 已提交
2400

A
Andi Kleen 已提交
2401 2402
	if (!(action & CPU_TASKS_FROZEN))
		cmci_reenable();
2403
	for (i = 0; i < mca_cfg.banks; i++) {
2404
		struct mce_bank *b = &mce_banks[i];
2405

2406
		if (b->init)
2407
			wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
2408
	}
2409 2410
}

2411
/* Get notified when a cpu comes on/off. Be hotplug friendly. */
2412
static int
I
Ingo Molnar 已提交
2413
mce_cpu_callback(struct notifier_block *nfb, unsigned long action, void *hcpu)
2414 2415
{
	unsigned int cpu = (unsigned long)hcpu;
2416
	struct timer_list *t = &per_cpu(mce_timer, cpu);
2417

2418
	switch (action & ~CPU_TASKS_FROZEN) {
2419
	case CPU_ONLINE:
2420
		mce_device_create(cpu);
2421 2422
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2423 2424
		break;
	case CPU_DEAD:
2425 2426
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2427
		mce_device_remove(cpu);
C
Chen Gong 已提交
2428
		mce_intel_hcpu_update(cpu);
B
Borislav Petkov 已提交
2429 2430 2431 2432

		/* intentionally ignoring frozen here */
		if (!(action & CPU_TASKS_FROZEN))
			cmci_rediscover();
2433
		break;
2434
	case CPU_DOWN_PREPARE:
A
Andi Kleen 已提交
2435
		smp_call_function_single(cpu, mce_disable_cpu, &action, 1);
C
Chen Gong 已提交
2436
		del_timer_sync(t);
2437 2438
		break;
	case CPU_DOWN_FAILED:
A
Andi Kleen 已提交
2439
		smp_call_function_single(cpu, mce_reenable_cpu, &action, 1);
T
Thomas Gleixner 已提交
2440
		mce_start_timer(cpu, t);
A
Andi Kleen 已提交
2441
		break;
2442 2443
	}

2444
	return NOTIFY_OK;
2445 2446
}

2447
static struct notifier_block mce_cpu_notifier = {
2448 2449 2450
	.notifier_call = mce_cpu_callback,
};

2451
static __init void mce_init_banks(void)
2452 2453 2454
{
	int i;

2455
	for (i = 0; i < mca_cfg.banks; i++) {
2456
		struct mce_bank *b = &mce_banks[i];
2457
		struct device_attribute *a = &b->attr;
I
Ingo Molnar 已提交
2458

2459
		sysfs_attr_init(&a->attr);
2460 2461
		a->attr.name	= b->attrname;
		snprintf(b->attrname, ATTR_LEN, "bank%d", i);
I
Ingo Molnar 已提交
2462 2463 2464 2465

		a->attr.mode	= 0644;
		a->show		= show_bank;
		a->store	= set_bank;
2466 2467 2468
	}
}

2469
static __init int mcheck_init_device(void)
2470 2471 2472 2473
{
	int err;
	int i = 0;

2474 2475 2476 2477
	if (!mce_available(&boot_cpu_data)) {
		err = -EIO;
		goto err_out;
	}
2478

2479 2480 2481 2482
	if (!zalloc_cpumask_var(&mce_device_initialized, GFP_KERNEL)) {
		err = -ENOMEM;
		goto err_out;
	}
2483

2484
	mce_init_banks();
2485

2486
	err = subsys_system_register(&mce_subsys, NULL);
2487
	if (err)
2488
		goto err_out_mem;
2489

2490
	cpu_notifier_register_begin();
2491
	for_each_online_cpu(i) {
2492
		err = mce_device_create(i);
2493
		if (err) {
2494 2495 2496 2497 2498 2499
			/*
			 * Register notifier anyway (and do not unreg it) so
			 * that we don't leave undeleted timers, see notifier
			 * callback above.
			 */
			__register_hotcpu_notifier(&mce_cpu_notifier);
2500
			cpu_notifier_register_done();
2501
			goto err_device_create;
2502
		}
2503 2504
	}

2505 2506
	__register_hotcpu_notifier(&mce_cpu_notifier);
	cpu_notifier_register_done();
2507

2508 2509
	register_syscore_ops(&mce_syscore_ops);

2510
	/* register character device /dev/mcelog */
2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527 2528 2529 2530 2531 2532 2533 2534
	err = misc_register(&mce_chrdev_device);
	if (err)
		goto err_register;

	return 0;

err_register:
	unregister_syscore_ops(&mce_syscore_ops);

err_device_create:
	/*
	 * We didn't keep track of which devices were created above, but
	 * even if we had, the set of online cpus might have changed.
	 * Play safe and remove for every possible cpu, since
	 * mce_device_remove() will do the right thing.
	 */
	for_each_possible_cpu(i)
		mce_device_remove(i);

err_out_mem:
	free_cpumask_var(mce_device_initialized);

err_out:
	pr_err("Unable to init device /dev/mcelog (rc: %d)\n", err);
I
Ingo Molnar 已提交
2535

L
Linus Torvalds 已提交
2536 2537
	return err;
}
2538
device_initcall_sync(mcheck_init_device);
I
Ingo Molnar 已提交
2539

2540 2541 2542 2543 2544
/*
 * Old style boot options parsing. Only for compatibility.
 */
static int __init mcheck_disable(char *str)
{
2545
	mca_cfg.disabled = true;
2546 2547 2548
	return 1;
}
__setup("nomce", mcheck_disable);
I
Ingo Molnar 已提交
2549

2550 2551
#ifdef CONFIG_DEBUG_FS
struct dentry *mce_get_debugfs_dir(void)
I
Ingo Molnar 已提交
2552
{
2553
	static struct dentry *dmce;
I
Ingo Molnar 已提交
2554

2555 2556
	if (!dmce)
		dmce = debugfs_create_dir("mce", NULL);
I
Ingo Molnar 已提交
2557

2558 2559
	return dmce;
}
I
Ingo Molnar 已提交
2560

2561 2562 2563
static void mce_reset(void)
{
	cpu_missing = 0;
2564
	atomic_set(&mce_fake_panicked, 0);
2565 2566 2567 2568
	atomic_set(&mce_executing, 0);
	atomic_set(&mce_callin, 0);
	atomic_set(&global_nwo, 0);
}
I
Ingo Molnar 已提交
2569

2570 2571 2572 2573
static int fake_panic_get(void *data, u64 *val)
{
	*val = fake_panic;
	return 0;
I
Ingo Molnar 已提交
2574 2575
}

2576
static int fake_panic_set(void *data, u64 val)
I
Ingo Molnar 已提交
2577
{
2578 2579 2580
	mce_reset();
	fake_panic = val;
	return 0;
I
Ingo Molnar 已提交
2581 2582
}

2583 2584
DEFINE_SIMPLE_ATTRIBUTE(fake_panic_fops, fake_panic_get,
			fake_panic_set, "%llu\n");
2585

2586
static int __init mcheck_debugfs_init(void)
2587
{
2588 2589 2590 2591 2592 2593 2594 2595 2596 2597 2598
	struct dentry *dmce, *ffake_panic;

	dmce = mce_get_debugfs_dir();
	if (!dmce)
		return -ENOMEM;
	ffake_panic = debugfs_create_file("fake_panic", 0444, dmce, NULL,
					  &fake_panic_fops);
	if (!ffake_panic)
		return -ENOMEM;

	return 0;
2599
}
2600
late_initcall(mcheck_debugfs_init);
2601
#endif