mce.c 59.8 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * Machine check handler.
I
Ingo Molnar 已提交
3
 *
L
Linus Torvalds 已提交
4
 * K8 parts Copyright 2002,2003 Andi Kleen, SuSE Labs.
5 6
 * Rest from unknown author(s).
 * 2004 Andi Kleen. Rewrote most of it.
7 8
 * Copyright 2008 Intel Corporation
 * Author: Andi Kleen
L
Linus Torvalds 已提交
9
 */
10 11 12

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

I
Ingo Molnar 已提交
13 14 15 16 17 18 19
#include <linux/thread_info.h>
#include <linux/capability.h>
#include <linux/miscdevice.h>
#include <linux/ratelimit.h>
#include <linux/kallsyms.h>
#include <linux/rcupdate.h>
#include <linux/kobject.h>
20
#include <linux/uaccess.h>
I
Ingo Molnar 已提交
21 22 23
#include <linux/kdebug.h>
#include <linux/kernel.h>
#include <linux/percpu.h>
L
Linus Torvalds 已提交
24
#include <linux/string.h>
25
#include <linux/device.h>
26
#include <linux/syscore_ops.h>
27
#include <linux/delay.h>
28
#include <linux/ctype.h>
I
Ingo Molnar 已提交
29
#include <linux/sched.h>
30
#include <linux/sysfs.h>
I
Ingo Molnar 已提交
31
#include <linux/types.h>
32
#include <linux/slab.h>
I
Ingo Molnar 已提交
33 34 35
#include <linux/init.h>
#include <linux/kmod.h>
#include <linux/poll.h>
36
#include <linux/nmi.h>
I
Ingo Molnar 已提交
37
#include <linux/cpu.h>
38
#include <linux/smp.h>
I
Ingo Molnar 已提交
39
#include <linux/fs.h>
40
#include <linux/mm.h>
41
#include <linux/debugfs.h>
42
#include <linux/irq_work.h>
43
#include <linux/export.h>
I
Ingo Molnar 已提交
44

45
#include <asm/processor.h>
46
#include <asm/traps.h>
A
Andy Lutomirski 已提交
47
#include <asm/tlbflush.h>
I
Ingo Molnar 已提交
48 49
#include <asm/mce.h>
#include <asm/msr.h>
L
Linus Torvalds 已提交
50

51
#include "mce-internal.h"
52

53
static DEFINE_MUTEX(mce_chrdev_read_mutex);
54

55
#define rcu_dereference_check_mce(p) \
56
	rcu_dereference_index_check((p), \
57
			      rcu_read_lock_sched_held() || \
58
			      lockdep_is_held(&mce_chrdev_read_mutex))
59

60 61 62
#define CREATE_TRACE_POINTS
#include <trace/events/mce.h>

63
#define SPINUNIT		100	/* 100ns */
64

65 66
DEFINE_PER_CPU(unsigned, mce_exception_count);

67
struct mce_bank *mce_banks __read_mostly;
68
struct mce_vendor_flags mce_flags __read_mostly;
69

70
struct mca_config mca_cfg __read_mostly = {
71
	.bootlog  = -1,
72 73 74 75 76 77 78
	/*
	 * Tolerant levels:
	 * 0: always panic on uncorrected errors, log corrected errors
	 * 1: panic or SIGBUS on uncorrected errors, log corrected errors
	 * 2: SIGBUS or log uncorrected errors (if possible), log corr. errors
	 * 3: never panic or SIGBUS, log all errors (for testing only)
	 */
79 80
	.tolerant = 1,
	.monarch_timeout = -1
81 82
};

83 84 85 86
/* User mode helper program triggered by machine check event */
static unsigned long		mce_need_notify;
static char			mce_helper[128];
static char			*mce_helper_argv[2] = { mce_helper, NULL };
L
Linus Torvalds 已提交
87

88 89
static DECLARE_WAIT_QUEUE_HEAD(mce_chrdev_wait);

90 91 92
static DEFINE_PER_CPU(struct mce, mces_seen);
static int			cpu_missing;

93 94 95 96
/*
 * MCA banks polled by the period polling timer for corrected events.
 * With Intel CMCI, this only has MCA banks which do not support CMCI (if any).
 */
97 98 99 100
DEFINE_PER_CPU(mce_banks_t, mce_poll_banks) = {
	[0 ... BITS_TO_LONGS(MAX_NR_BANKS)-1] = ~0UL
};

101 102 103 104 105 106 107 108 109
/*
 * MCA banks controlled through firmware first for corrected errors.
 * This is a global list of banks for which we won't enable CMCI and we
 * won't poll. Firmware controls these banks and is responsible for
 * reporting corrected errors through GHES. Uncorrected/recoverable
 * errors are still notified through a machine check.
 */
mce_banks_t mce_banks_ce_disabled;

110 111
static DEFINE_PER_CPU(struct work_struct, mce_work);

112 113
static void (*quirk_no_way_out)(int bank, struct mce *m, struct pt_regs *regs);

114 115 116 117
/*
 * CPU/chipset specific EDAC code can register a notifier call here to print
 * MCE errors in a human-readable form.
 */
B
Borislav Petkov 已提交
118
static ATOMIC_NOTIFIER_HEAD(x86_mce_decoder_chain);
119

120 121 122 123
/* Do initial initialization of a struct mce */
void mce_setup(struct mce *m)
{
	memset(m, 0, sizeof(struct mce));
124
	m->cpu = m->extcpu = smp_processor_id();
125
	rdtscll(m->tsc);
126 127 128 129 130 131 132
	/* We hope get_seconds stays lockless */
	m->time = get_seconds();
	m->cpuvendor = boot_cpu_data.x86_vendor;
	m->cpuid = cpuid_eax(1);
	m->socketid = cpu_data(m->extcpu).phys_proc_id;
	m->apicid = cpu_data(m->extcpu).initial_apicid;
	rdmsrl(MSR_IA32_MCG_CAP, m->mcgcap);
133 134
}

135 136 137
DEFINE_PER_CPU(struct mce, injectm);
EXPORT_PER_CPU_SYMBOL_GPL(injectm);

L
Linus Torvalds 已提交
138 139 140 141 142 143
/*
 * Lockless MCE logging infrastructure.
 * This avoids deadlocks on printk locks without having to break locks. Also
 * separate MCEs from kernel messages to avoid bogus bug reports.
 */

144
static struct mce_log mcelog = {
145 146 147
	.signature	= MCE_LOG_SIGNATURE,
	.len		= MCE_LOG_LEN,
	.recordlen	= sizeof(struct mce),
148
};
L
Linus Torvalds 已提交
149 150 151 152

void mce_log(struct mce *mce)
{
	unsigned next, entry;
I
Ingo Molnar 已提交
153

154 155 156
	/* Emit the trace record: */
	trace_mce_record(mce);

157
	atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, mce);
158

L
Linus Torvalds 已提交
159
	mce->finished = 0;
M
Mike Waychison 已提交
160
	wmb();
L
Linus Torvalds 已提交
161
	for (;;) {
162
		entry = rcu_dereference_check_mce(mcelog.next);
163
		for (;;) {
164

I
Ingo Molnar 已提交
165 166 167 168 169
			/*
			 * When the buffer fills up discard new entries.
			 * Assume that the earlier errors are the more
			 * interesting ones:
			 */
170
			if (entry >= MCE_LOG_LEN) {
171 172
				set_bit(MCE_OVERFLOW,
					(unsigned long *)&mcelog.flags);
173 174
				return;
			}
I
Ingo Molnar 已提交
175
			/* Old left over entry. Skip: */
176 177 178 179
			if (mcelog.entry[entry].finished) {
				entry++;
				continue;
			}
M
Mike Waychison 已提交
180
			break;
L
Linus Torvalds 已提交
181 182 183 184 185 186 187
		}
		smp_rmb();
		next = entry + 1;
		if (cmpxchg(&mcelog.next, entry, next) == entry)
			break;
	}
	memcpy(mcelog.entry + entry, mce, sizeof(struct mce));
M
Mike Waychison 已提交
188
	wmb();
L
Linus Torvalds 已提交
189
	mcelog.entry[entry].finished = 1;
M
Mike Waychison 已提交
190
	wmb();
L
Linus Torvalds 已提交
191

192
	mce->finished = 1;
193
	set_bit(0, &mce_need_notify);
L
Linus Torvalds 已提交
194 195
}

B
Borislav Petkov 已提交
196 197 198 199
static void drain_mcelog_buffer(void)
{
	unsigned int next, i, prev = 0;

200
	next = ACCESS_ONCE(mcelog.next);
B
Borislav Petkov 已提交
201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218

	do {
		struct mce *m;

		/* drain what was logged during boot */
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;
			unsigned retries = 1;

			m = &mcelog.entry[i];

			while (!m->finished) {
				if (time_after_eq(jiffies, start + 2*retries))
					retries++;

				cpu_relax();

				if (!m->finished && retries >= 4) {
219
					pr_err("skipping error being logged currently!\n");
B
Borislav Petkov 已提交
220 221 222 223 224 225 226 227 228 229 230 231 232 233
					break;
				}
			}
			smp_rmb();
			atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, m);
		}

		memset(mcelog.entry + prev, 0, (next - prev) * sizeof(*m));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
}


234 235 236
void mce_register_decode_chain(struct notifier_block *nb)
{
	atomic_notifier_chain_register(&x86_mce_decoder_chain, nb);
B
Borislav Petkov 已提交
237
	drain_mcelog_buffer();
238 239 240 241 242 243 244 245 246
}
EXPORT_SYMBOL_GPL(mce_register_decode_chain);

void mce_unregister_decode_chain(struct notifier_block *nb)
{
	atomic_notifier_chain_unregister(&x86_mce_decoder_chain, nb);
}
EXPORT_SYMBOL_GPL(mce_unregister_decode_chain);

H
Hidetoshi Seto 已提交
247
static void print_mce(struct mce *m)
L
Linus Torvalds 已提交
248
{
249 250
	int ret = 0;

H
Huang Ying 已提交
251
	pr_emerg(HW_ERR "CPU %d: Machine Check Exception: %Lx Bank %d: %016Lx\n",
252
	       m->extcpu, m->mcgstatus, m->bank, m->status);
253

254
	if (m->ip) {
H
Huang Ying 已提交
255
		pr_emerg(HW_ERR "RIP%s %02x:<%016Lx> ",
256 257 258
			!(m->mcgstatus & MCG_STATUS_EIPV) ? " !INEXACT!" : "",
				m->cs, m->ip);

L
Linus Torvalds 已提交
259
		if (m->cs == __KERNEL_CS)
260
			print_symbol("{%s}", m->ip);
261
		pr_cont("\n");
L
Linus Torvalds 已提交
262
	}
263

H
Huang Ying 已提交
264
	pr_emerg(HW_ERR "TSC %llx ", m->tsc);
L
Linus Torvalds 已提交
265
	if (m->addr)
266
		pr_cont("ADDR %llx ", m->addr);
L
Linus Torvalds 已提交
267
	if (m->misc)
268
		pr_cont("MISC %llx ", m->misc);
269

270
	pr_cont("\n");
271 272 273 274
	/*
	 * Note this output is parsed by external tools and old fields
	 * should not be changed.
	 */
275
	pr_emerg(HW_ERR "PROCESSOR %u:%x TIME %llu SOCKET %u APIC %x microcode %x\n",
276 277
		m->cpuvendor, m->cpuid, m->time, m->socketid, m->apicid,
		cpu_data(m->extcpu).microcode);
278 279 280

	/*
	 * Print out human-readable details about the MCE error,
281
	 * (if the CPU has an implementation for that)
282
	 */
283 284 285 286 287
	ret = atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, m);
	if (ret == NOTIFY_STOP)
		return;

	pr_emerg_ratelimited(HW_ERR "Run the above through 'mcelog --ascii'\n");
288 289
}

290 291
#define PANIC_TIMEOUT 5 /* 5 seconds */

292
static atomic_t mce_panicked;
293

294
static int fake_panic;
295
static atomic_t mce_fake_panicked;
296

297 298 299 300
/* Panic in progress. Enable interrupts and wait for final IPI */
static void wait_for_panic(void)
{
	long timeout = PANIC_TIMEOUT*USEC_PER_SEC;
301

302 303 304 305
	preempt_disable();
	local_irq_enable();
	while (timeout-- > 0)
		udelay(1);
306
	if (panic_timeout == 0)
307
		panic_timeout = mca_cfg.panic_timeout;
308 309 310
	panic("Panicing machine check CPU died");
}

311
static void mce_panic(const char *msg, struct mce *final, char *exp)
312
{
313
	int i, apei_err = 0;
314

315 316 317 318
	if (!fake_panic) {
		/*
		 * Make sure only one CPU runs in machine check panic
		 */
319
		if (atomic_inc_return(&mce_panicked) > 1)
320 321
			wait_for_panic();
		barrier();
322

323 324 325 326
		bust_spinlocks(1);
		console_verbose();
	} else {
		/* Don't log too much for fake panic */
327
		if (atomic_inc_return(&mce_fake_panicked) > 1)
328 329
			return;
	}
330
	/* First print corrected ones that are still unlogged */
L
Linus Torvalds 已提交
331
	for (i = 0; i < MCE_LOG_LEN; i++) {
332
		struct mce *m = &mcelog.entry[i];
H
Hidetoshi Seto 已提交
333 334
		if (!(m->status & MCI_STATUS_VAL))
			continue;
335
		if (!(m->status & MCI_STATUS_UC)) {
H
Hidetoshi Seto 已提交
336
			print_mce(m);
337 338 339
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
340 341 342 343 344
	}
	/* Now print uncorrected but with the final one last */
	for (i = 0; i < MCE_LOG_LEN; i++) {
		struct mce *m = &mcelog.entry[i];
		if (!(m->status & MCI_STATUS_VAL))
L
Linus Torvalds 已提交
345
			continue;
H
Hidetoshi Seto 已提交
346 347
		if (!(m->status & MCI_STATUS_UC))
			continue;
348
		if (!final || memcmp(m, final, sizeof(struct mce))) {
H
Hidetoshi Seto 已提交
349
			print_mce(m);
350 351 352
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
L
Linus Torvalds 已提交
353
	}
354
	if (final) {
H
Hidetoshi Seto 已提交
355
		print_mce(final);
356 357 358
		if (!apei_err)
			apei_err = apei_write_mce(final);
	}
359
	if (cpu_missing)
H
Huang Ying 已提交
360
		pr_emerg(HW_ERR "Some CPUs didn't answer in synchronization\n");
361
	if (exp)
H
Huang Ying 已提交
362
		pr_emerg(HW_ERR "Machine check: %s\n", exp);
363 364
	if (!fake_panic) {
		if (panic_timeout == 0)
365
			panic_timeout = mca_cfg.panic_timeout;
366 367
		panic(msg);
	} else
H
Huang Ying 已提交
368
		pr_emerg(HW_ERR "Fake kernel panic: %s\n", msg);
369
}
L
Linus Torvalds 已提交
370

371 372 373 374
/* Support code for software error injection */

static int msr_to_offset(u32 msr)
{
T
Tejun Heo 已提交
375
	unsigned bank = __this_cpu_read(injectm.bank);
376

377
	if (msr == mca_cfg.rip_msr)
378
		return offsetof(struct mce, ip);
379
	if (msr == MSR_IA32_MCx_STATUS(bank))
380
		return offsetof(struct mce, status);
381
	if (msr == MSR_IA32_MCx_ADDR(bank))
382
		return offsetof(struct mce, addr);
383
	if (msr == MSR_IA32_MCx_MISC(bank))
384 385 386 387 388 389
		return offsetof(struct mce, misc);
	if (msr == MSR_IA32_MCG_STATUS)
		return offsetof(struct mce, mcgstatus);
	return -1;
}

390 391 392 393
/* MSR access wrappers used for error injection */
static u64 mce_rdmsrl(u32 msr)
{
	u64 v;
394

T
Tejun Heo 已提交
395
	if (__this_cpu_read(injectm.finished)) {
396
		int offset = msr_to_offset(msr);
397

398 399
		if (offset < 0)
			return 0;
400
		return *(u64 *)((char *)this_cpu_ptr(&injectm) + offset);
401
	}
402 403 404 405 406 407 408 409 410 411 412

	if (rdmsrl_safe(msr, &v)) {
		WARN_ONCE(1, "mce: Unable to read msr %d!\n", msr);
		/*
		 * Return zero in case the access faulted. This should
		 * not happen normally but can happen if the CPU does
		 * something weird, or if the code is buggy.
		 */
		v = 0;
	}

413 414 415 416 417
	return v;
}

static void mce_wrmsrl(u32 msr, u64 v)
{
T
Tejun Heo 已提交
418
	if (__this_cpu_read(injectm.finished)) {
419
		int offset = msr_to_offset(msr);
420

421
		if (offset >= 0)
422
			*(u64 *)((char *)this_cpu_ptr(&injectm) + offset) = v;
423 424
		return;
	}
425 426 427
	wrmsrl(msr, v);
}

428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445
/*
 * Collect all global (w.r.t. this processor) status about this machine
 * check into our "mce" struct so that we can use it later to assess
 * the severity of the problem as we read per-bank specific details.
 */
static inline void mce_gather_info(struct mce *m, struct pt_regs *regs)
{
	mce_setup(m);

	m->mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
	if (regs) {
		/*
		 * Get the address of the instruction at the time of
		 * the machine check error.
		 */
		if (m->mcgstatus & (MCG_STATUS_RIPV|MCG_STATUS_EIPV)) {
			m->ip = regs->ip;
			m->cs = regs->cs;
446 447 448 449 450 451 452 453

			/*
			 * When in VM86 mode make the cs look like ring 3
			 * always. This is a lie, but it's better than passing
			 * the additional vm86 bit around everywhere.
			 */
			if (v8086_mode(regs))
				m->cs |= 3;
454 455
		}
		/* Use accurate RIP reporting if available. */
456 457
		if (mca_cfg.rip_msr)
			m->ip = mce_rdmsrl(mca_cfg.rip_msr);
458 459 460
	}
}

461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477
/*
 * Simple lockless ring to communicate PFNs from the exception handler with the
 * process context work function. This is vastly simplified because there's
 * only a single reader and a single writer.
 */
#define MCE_RING_SIZE 16	/* we use one entry less */

struct mce_ring {
	unsigned short start;
	unsigned short end;
	unsigned long ring[MCE_RING_SIZE];
};
static DEFINE_PER_CPU(struct mce_ring, mce_ring);

/* Runs with CPU affinity in workqueue */
static int mce_ring_empty(void)
{
478
	struct mce_ring *r = this_cpu_ptr(&mce_ring);
479 480 481 482 483 484 485 486 487 488 489

	return r->start == r->end;
}

static int mce_ring_get(unsigned long *pfn)
{
	struct mce_ring *r;
	int ret = 0;

	*pfn = 0;
	get_cpu();
490
	r = this_cpu_ptr(&mce_ring);
491 492 493 494 495 496 497 498 499 500 501 502 503
	if (r->start == r->end)
		goto out;
	*pfn = r->ring[r->start];
	r->start = (r->start + 1) % MCE_RING_SIZE;
	ret = 1;
out:
	put_cpu();
	return ret;
}

/* Always runs in MCE context with preempt off */
static int mce_ring_add(unsigned long pfn)
{
504
	struct mce_ring *r = this_cpu_ptr(&mce_ring);
505 506 507 508 509 510 511 512 513 514 515
	unsigned next;

	next = (r->end + 1) % MCE_RING_SIZE;
	if (next == r->start)
		return -1;
	r->ring[r->end] = pfn;
	wmb();
	r->end = next;
	return 0;
}

A
Andi Kleen 已提交
516
int mce_available(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
517
{
518
	if (mca_cfg.disabled)
519
		return 0;
520
	return cpu_has(c, X86_FEATURE_MCE) && cpu_has(c, X86_FEATURE_MCA);
L
Linus Torvalds 已提交
521 522
}

523 524
static void mce_schedule_work(void)
{
525
	if (!mce_ring_empty())
526
		schedule_work(this_cpu_ptr(&mce_work));
527 528
}

B
Borislav Petkov 已提交
529
static DEFINE_PER_CPU(struct irq_work, mce_irq_work);
530 531

static void mce_irq_work_cb(struct irq_work *entry)
532
{
533
	mce_notify_irq();
534
	mce_schedule_work();
535 536 537 538 539
}

static void mce_report_event(struct pt_regs *regs)
{
	if (regs->flags & (X86_VM_MASK|X86_EFLAGS_IF)) {
540
		mce_notify_irq();
541 542 543 544 545 546 547
		/*
		 * Triggering the work queue here is just an insurance
		 * policy in case the syscall exit notify handler
		 * doesn't run soon enough or ends up running on the
		 * wrong CPU (can happen when audit sleeps)
		 */
		mce_schedule_work();
548 549 550
		return;
	}

551
	irq_work_queue(this_cpu_ptr(&mce_irq_work));
552 553
}

554 555 556 557 558 559 560 561 562 563 564 565 566
/*
 * Read ADDR and MISC registers.
 */
static void mce_read_aux(struct mce *m, int i)
{
	if (m->status & MCI_STATUS_MISCV)
		m->misc = mce_rdmsrl(MSR_IA32_MCx_MISC(i));
	if (m->status & MCI_STATUS_ADDRV) {
		m->addr = mce_rdmsrl(MSR_IA32_MCx_ADDR(i));

		/*
		 * Mask the reported address by the reported granularity.
		 */
567
		if (mca_cfg.ser && (m->status & MCI_STATUS_MISCV)) {
568 569 570 571 572 573 574
			u8 shift = MCI_MISC_ADDR_LSB(m->misc);
			m->addr >>= shift;
			m->addr <<= shift;
		}
	}
}

575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605
static bool memory_error(struct mce *m)
{
	struct cpuinfo_x86 *c = &boot_cpu_data;

	if (c->x86_vendor == X86_VENDOR_AMD) {
		/*
		 * coming soon
		 */
		return false;
	} else if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * Intel SDM Volume 3B - 15.9.2 Compound Error Codes
		 *
		 * Bit 7 of the MCACOD field of IA32_MCi_STATUS is used for
		 * indicating a memory error. Bit 8 is used for indicating a
		 * cache hierarchy error. The combination of bit 2 and bit 3
		 * is used for indicating a `generic' cache hierarchy error
		 * But we can't just blindly check the above bits, because if
		 * bit 11 is set, then it is a bus/interconnect error - and
		 * either way the above bits just gives more detail on what
		 * bus/interconnect error happened. Note that bit 12 can be
		 * ignored, as it's the "filter" bit.
		 */
		return (m->status & 0xef80) == BIT(7) ||
		       (m->status & 0xef00) == BIT(8) ||
		       (m->status & 0xeffc) == 0xc;
	}

	return false;
}

606 607
DEFINE_PER_CPU(unsigned, mce_poll_count);

608
/*
609 610 611 612
 * Poll for corrected events or events that happened before reset.
 * Those are just logged through /dev/mcelog.
 *
 * This is executed in standard interrupt context.
A
Andi Kleen 已提交
613 614 615 616 617 618 619 620 621
 *
 * Note: spec recommends to panic for fatal unsignalled
 * errors here. However this would be quite problematic --
 * we would need to reimplement the Monarch handling and
 * it would mess up the exclusion between exception handler
 * and poll hander -- * so we skip this for now.
 * These cases should not happen anyways, or only when the CPU
 * is already totally * confused. In this case it's likely it will
 * not fully execute the machine check handler either.
622
 */
623
bool machine_check_poll(enum mcp_flags flags, mce_banks_t *b)
624
{
625
	bool error_logged = false;
626
	struct mce m;
627
	int severity;
628 629
	int i;

630
	this_cpu_inc(mce_poll_count);
631

632
	mce_gather_info(&m, NULL);
633

634
	for (i = 0; i < mca_cfg.banks; i++) {
635
		if (!mce_banks[i].ctl || !test_bit(i, *b))
636 637 638 639 640 641 642 643
			continue;

		m.misc = 0;
		m.addr = 0;
		m.bank = i;
		m.tsc = 0;

		barrier();
644
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
645 646 647
		if (!(m.status & MCI_STATUS_VAL))
			continue;

648

649
		/*
A
Andi Kleen 已提交
650 651
		 * Uncorrected or signalled events are handled by the exception
		 * handler when it is enabled, so don't process those here.
652 653 654
		 *
		 * TBD do the same check for MCI_STATUS_EN here?
		 */
A
Andi Kleen 已提交
655
		if (!(flags & MCP_UC) &&
656
		    (m.status & (mca_cfg.ser ? MCI_STATUS_S : MCI_STATUS_UC)))
657 658
			continue;

659
		mce_read_aux(&m, i);
660 661 662

		if (!(flags & MCP_TIMESTAMP))
			m.tsc = 0;
663 664 665 666 667 668 669 670 671 672 673 674 675 676

		severity = mce_severity(&m, mca_cfg.tolerant, NULL, false);

		/*
		 * In the cases where we don't have a valid address after all,
		 * do not add it into the ring buffer.
		 */
		if (severity == MCE_DEFERRED_SEVERITY && memory_error(&m)) {
			if (m.status & MCI_STATUS_ADDRV) {
				mce_ring_add(m.addr >> PAGE_SHIFT);
				mce_schedule_work();
			}
		}

677 678 679 680
		/*
		 * Don't get the IP here because it's unlikely to
		 * have anything to do with the actual error location.
		 */
681 682
		if (!(flags & MCP_DONTLOG) && !mca_cfg.dont_log_ce) {
			error_logged = true;
A
Andi Kleen 已提交
683
			mce_log(&m);
684
		}
685 686 687 688

		/*
		 * Clear state for this bank.
		 */
689
		mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
690 691 692 693 694 695
	}

	/*
	 * Don't clear MCG_STATUS here because it's only defined for
	 * exceptions.
	 */
696 697

	sync_core();
698 699

	return error_logged;
700
}
701
EXPORT_SYMBOL_GPL(machine_check_poll);
702

703 704 705 706
/*
 * Do a quick check if any of the events requires a panic.
 * This decides if we keep the events around or clear them.
 */
707 708
static int mce_no_way_out(struct mce *m, char **msg, unsigned long *validp,
			  struct pt_regs *regs)
709
{
710
	int i, ret = 0;
711

712
	for (i = 0; i < mca_cfg.banks; i++) {
713
		m->status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
714
		if (m->status & MCI_STATUS_VAL) {
715
			__set_bit(i, validp);
716 717 718
			if (quirk_no_way_out)
				quirk_no_way_out(i, m, regs);
		}
719 720
		if (mce_severity(m, mca_cfg.tolerant, msg, true) >=
		    MCE_PANIC_SEVERITY)
721
			ret = 1;
722
	}
723
	return ret;
724 725
}

726 727 728 729 730 731 732 733 734 735 736 737 738 739
/*
 * Variable to establish order between CPUs while scanning.
 * Each CPU spins initially until executing is equal its number.
 */
static atomic_t mce_executing;

/*
 * Defines order of CPUs on entry. First CPU becomes Monarch.
 */
static atomic_t mce_callin;

/*
 * Check if a timeout waiting for other CPUs happened.
 */
740
static int mce_timed_out(u64 *t, const char *msg)
741 742 743 744 745 746 747 748
{
	/*
	 * The others already did panic for some reason.
	 * Bail out like in a timeout.
	 * rmb() to tell the compiler that system_state
	 * might have been modified by someone else.
	 */
	rmb();
749
	if (atomic_read(&mce_panicked))
750
		wait_for_panic();
751
	if (!mca_cfg.monarch_timeout)
752 753
		goto out;
	if ((s64)*t < SPINUNIT) {
754
		if (mca_cfg.tolerant <= 1)
755
			mce_panic(msg, NULL, NULL);
756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776
		cpu_missing = 1;
		return 1;
	}
	*t -= SPINUNIT;
out:
	touch_nmi_watchdog();
	return 0;
}

/*
 * The Monarch's reign.  The Monarch is the CPU who entered
 * the machine check handler first. It waits for the others to
 * raise the exception too and then grades them. When any
 * error is fatal panic. Only then let the others continue.
 *
 * The other CPUs entering the MCE handler will be controlled by the
 * Monarch. They are called Subjects.
 *
 * This way we prevent any potential data corruption in a unrecoverable case
 * and also makes sure always all CPU's errors are examined.
 *
777
 * Also this detects the case of a machine check event coming from outer
778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802
 * space (not detected by any CPUs) In this case some external agent wants
 * us to shut down, so panic too.
 *
 * The other CPUs might still decide to panic if the handler happens
 * in a unrecoverable place, but in this case the system is in a semi-stable
 * state and won't corrupt anything by itself. It's ok to let the others
 * continue for a bit first.
 *
 * All the spin loops have timeouts; when a timeout happens a CPU
 * typically elects itself to be Monarch.
 */
static void mce_reign(void)
{
	int cpu;
	struct mce *m = NULL;
	int global_worst = 0;
	char *msg = NULL;
	char *nmsg = NULL;

	/*
	 * This CPU is the Monarch and the other CPUs have run
	 * through their handlers.
	 * Grade the severity of the errors of all the CPUs.
	 */
	for_each_possible_cpu(cpu) {
803 804
		int severity = mce_severity(&per_cpu(mces_seen, cpu),
					    mca_cfg.tolerant,
805
					    &nmsg, true);
806 807 808 809 810 811 812 813 814 815 816 817
		if (severity > global_worst) {
			msg = nmsg;
			global_worst = severity;
			m = &per_cpu(mces_seen, cpu);
		}
	}

	/*
	 * Cannot recover? Panic here then.
	 * This dumps all the mces in the log buffer and stops the
	 * other CPUs.
	 */
818
	if (m && global_worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
819
		mce_panic("Fatal machine check", m, msg);
820 821 822 823 824 825 826 827 828 829 830

	/*
	 * For UC somewhere we let the CPU who detects it handle it.
	 * Also must let continue the others, otherwise the handling
	 * CPU could deadlock on a lock.
	 */

	/*
	 * No machine check event found. Must be some external
	 * source or one CPU is hung. Panic.
	 */
831
	if (global_worst <= MCE_KEEP_SEVERITY && mca_cfg.tolerant < 3)
832
		mce_panic("Fatal machine check from unknown source", NULL, NULL);
833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850

	/*
	 * Now clear all the mces_seen so that they don't reappear on
	 * the next mce.
	 */
	for_each_possible_cpu(cpu)
		memset(&per_cpu(mces_seen, cpu), 0, sizeof(struct mce));
}

static atomic_t global_nwo;

/*
 * Start of Monarch synchronization. This waits until all CPUs have
 * entered the exception handler and then determines if any of them
 * saw a fatal event that requires panic. Then it executes them
 * in the entry order.
 * TBD double check parallel CPU hotunplug
 */
H
Hidetoshi Seto 已提交
851
static int mce_start(int *no_way_out)
852
{
H
Hidetoshi Seto 已提交
853
	int order;
854
	int cpus = num_online_cpus();
855
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
856

H
Hidetoshi Seto 已提交
857 858
	if (!timeout)
		return -1;
859

H
Hidetoshi Seto 已提交
860
	atomic_add(*no_way_out, &global_nwo);
861 862 863 864
	/*
	 * global_nwo should be updated before mce_callin
	 */
	smp_wmb();
865
	order = atomic_inc_return(&mce_callin);
866 867 868 869 870

	/*
	 * Wait for everyone.
	 */
	while (atomic_read(&mce_callin) != cpus) {
871 872
		if (mce_timed_out(&timeout,
				  "Timeout: Not all CPUs entered broadcast exception handler")) {
873
			atomic_set(&global_nwo, 0);
H
Hidetoshi Seto 已提交
874
			return -1;
875 876 877 878
		}
		ndelay(SPINUNIT);
	}

879 880 881 882
	/*
	 * mce_callin should be read before global_nwo
	 */
	smp_rmb();
883

H
Hidetoshi Seto 已提交
884 885 886 887
	if (order == 1) {
		/*
		 * Monarch: Starts executing now, the others wait.
		 */
888
		atomic_set(&mce_executing, 1);
H
Hidetoshi Seto 已提交
889 890 891 892 893 894 895 896
	} else {
		/*
		 * Subject: Now start the scanning loop one by one in
		 * the original callin order.
		 * This way when there are any shared banks it will be
		 * only seen by one CPU before cleared, avoiding duplicates.
		 */
		while (atomic_read(&mce_executing) < order) {
897 898
			if (mce_timed_out(&timeout,
					  "Timeout: Subject CPUs unable to finish machine check processing")) {
H
Hidetoshi Seto 已提交
899 900 901 902 903
				atomic_set(&global_nwo, 0);
				return -1;
			}
			ndelay(SPINUNIT);
		}
904 905 906
	}

	/*
H
Hidetoshi Seto 已提交
907
	 * Cache the global no_way_out state.
908
	 */
H
Hidetoshi Seto 已提交
909 910 911
	*no_way_out = atomic_read(&global_nwo);

	return order;
912 913 914 915 916 917 918 919 920
}

/*
 * Synchronize between CPUs after main scanning loop.
 * This invokes the bulk of the Monarch processing.
 */
static int mce_end(int order)
{
	int ret = -1;
921
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941

	if (!timeout)
		goto reset;
	if (order < 0)
		goto reset;

	/*
	 * Allow others to run.
	 */
	atomic_inc(&mce_executing);

	if (order == 1) {
		/* CHECKME: Can this race with a parallel hotplug? */
		int cpus = num_online_cpus();

		/*
		 * Monarch: Wait for everyone to go through their scanning
		 * loops.
		 */
		while (atomic_read(&mce_executing) <= cpus) {
942 943
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU unable to finish machine check processing"))
944 945 946 947 948 949 950 951 952 953 954 955
				goto reset;
			ndelay(SPINUNIT);
		}

		mce_reign();
		barrier();
		ret = 0;
	} else {
		/*
		 * Subject: Wait for Monarch to finish.
		 */
		while (atomic_read(&mce_executing) != 0) {
956 957
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU did not finish machine check processing"))
958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982
				goto reset;
			ndelay(SPINUNIT);
		}

		/*
		 * Don't reset anything. That's done by the Monarch.
		 */
		return 0;
	}

	/*
	 * Reset all global state.
	 */
reset:
	atomic_set(&global_nwo, 0);
	atomic_set(&mce_callin, 0);
	barrier();

	/*
	 * Let others run again.
	 */
	atomic_set(&mce_executing, 0);
	return ret;
}

983 984 985 986
/*
 * Check if the address reported by the CPU is in a format we can parse.
 * It would be possible to add code for most other cases, but all would
 * be somewhat complicated (e.g. segment offset would require an instruction
L
Lucas De Marchi 已提交
987
 * parser). So only support physical addresses up to page granuality for now.
988 989 990 991 992
 */
static int mce_usable_address(struct mce *m)
{
	if (!(m->status & MCI_STATUS_MISCV) || !(m->status & MCI_STATUS_ADDRV))
		return 0;
993
	if (MCI_MISC_ADDR_LSB(m->misc) > PAGE_SHIFT)
994
		return 0;
995
	if (MCI_MISC_ADDR_MODE(m->misc) != MCI_MISC_ADDR_PHYS)
996 997 998 999
		return 0;
	return 1;
}

1000 1001 1002 1003
static void mce_clear_state(unsigned long *toclear)
{
	int i;

1004
	for (i = 0; i < mca_cfg.banks; i++) {
1005
		if (test_bit(i, toclear))
1006
			mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
1007 1008 1009
	}
}

1010 1011 1012 1013 1014 1015 1016
/*
 * The actual machine check handler. This only handles real
 * exceptions when something got corrupted coming in through int 18.
 *
 * This is executed in NMI context not subject to normal locking rules. This
 * implies that most kernel services cannot be safely used. Don't even
 * think about putting a printk in there!
1017 1018 1019 1020
 *
 * On Intel systems this is entered on all CPUs in parallel through
 * MCE broadcast. However some CPUs might be broken beyond repair,
 * so be always careful when synchronizing with others.
L
Linus Torvalds 已提交
1021
 */
I
Ingo Molnar 已提交
1022
void do_machine_check(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
1023
{
1024
	struct mca_config *cfg = &mca_cfg;
1025
	struct mce m, *final;
1026
	enum ctx_state prev_state;
L
Linus Torvalds 已提交
1027
	int i;
1028 1029 1030 1031 1032 1033
	int worst = 0;
	int severity;
	/*
	 * Establish sequential order between the CPUs entering the machine
	 * check handler.
	 */
H
Hidetoshi Seto 已提交
1034
	int order;
1035 1036
	/*
	 * If no_way_out gets set, there is no safe way to recover from this
1037
	 * MCE.  If mca_cfg.tolerant is cranked up, we'll try anyway.
1038 1039 1040 1041 1042 1043 1044
	 */
	int no_way_out = 0;
	/*
	 * If kill_it gets set, there might be a way to recover from this
	 * error.
	 */
	int kill_it = 0;
1045
	DECLARE_BITMAP(toclear, MAX_NR_BANKS);
1046
	DECLARE_BITMAP(valid_banks, MAX_NR_BANKS);
1047
	char *msg = "Unknown";
1048 1049
	u64 recover_paddr = ~0ull;
	int flags = MF_ACTION_REQUIRED;
A
Ashok Raj 已提交
1050
	int lmce = 0;
L
Linus Torvalds 已提交
1051

1052 1053
	prev_state = ist_enter(regs);

1054
	this_cpu_inc(mce_exception_count);
1055

1056
	if (!cfg->banks)
1057
		goto out;
L
Linus Torvalds 已提交
1058

1059
	mce_gather_info(&m, regs);
1060

1061
	final = this_cpu_ptr(&mces_seen);
1062 1063
	*final = m;

1064
	memset(valid_banks, 0, sizeof(valid_banks));
1065
	no_way_out = mce_no_way_out(&m, &msg, valid_banks, regs);
1066

L
Linus Torvalds 已提交
1067 1068
	barrier();

A
Andi Kleen 已提交
1069
	/*
1070 1071 1072
	 * When no restart IP might need to kill or panic.
	 * Assume the worst for now, but if we find the
	 * severity is MCE_AR_SEVERITY we have other options.
A
Andi Kleen 已提交
1073 1074 1075 1076
	 */
	if (!(m.mcgstatus & MCG_STATUS_RIPV))
		kill_it = 1;

1077
	/*
A
Ashok Raj 已提交
1078
	 * Check if this MCE is signaled to only this logical processor
1079
	 */
A
Ashok Raj 已提交
1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091
	if (m.mcgstatus & MCG_STATUS_LMCES)
		lmce = 1;
	else {
		/*
		 * Go through all the banks in exclusion of the other CPUs.
		 * This way we don't report duplicated events on shared banks
		 * because the first one to see it will clear it.
		 * If this is a Local MCE, then no need to perform rendezvous.
		 */
		order = mce_start(&no_way_out);
	}

1092
	for (i = 0; i < cfg->banks; i++) {
1093
		__clear_bit(i, toclear);
1094 1095
		if (!test_bit(i, valid_banks))
			continue;
1096
		if (!mce_banks[i].ctl)
L
Linus Torvalds 已提交
1097
			continue;
1098 1099

		m.misc = 0;
L
Linus Torvalds 已提交
1100 1101 1102
		m.addr = 0;
		m.bank = i;

1103
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
L
Linus Torvalds 已提交
1104 1105 1106
		if ((m.status & MCI_STATUS_VAL) == 0)
			continue;

1107
		/*
A
Andi Kleen 已提交
1108 1109
		 * Non uncorrected or non signaled errors are handled by
		 * machine_check_poll. Leave them alone, unless this panics.
1110
		 */
1111
		if (!(m.status & (cfg->ser ? MCI_STATUS_S : MCI_STATUS_UC)) &&
A
Andi Kleen 已提交
1112
			!no_way_out)
1113 1114 1115 1116 1117
			continue;

		/*
		 * Set taint even when machine check was not enabled.
		 */
1118
		add_taint(TAINT_MACHINE_CHECK, LOCKDEP_NOW_UNRELIABLE);
1119

1120
		severity = mce_severity(&m, cfg->tolerant, NULL, true);
1121

A
Andi Kleen 已提交
1122
		/*
1123 1124
		 * When machine check was for corrected/deferred handler don't
		 * touch, unless we're panicing.
A
Andi Kleen 已提交
1125
		 */
1126 1127
		if ((severity == MCE_KEEP_SEVERITY ||
		     severity == MCE_UCNA_SEVERITY) && !no_way_out)
A
Andi Kleen 已提交
1128 1129 1130
			continue;
		__set_bit(i, toclear);
		if (severity == MCE_NO_SEVERITY) {
1131 1132 1133 1134 1135
			/*
			 * Machine check event was not enabled. Clear, but
			 * ignore.
			 */
			continue;
L
Linus Torvalds 已提交
1136 1137
		}

1138
		mce_read_aux(&m, i);
L
Linus Torvalds 已提交
1139

1140 1141 1142 1143 1144
		/*
		 * Action optional error. Queue address for later processing.
		 * When the ring overflows we just ignore the AO error.
		 * RED-PEN add some logging mechanism when
		 * usable_address or mce_add_ring fails.
1145
		 * RED-PEN don't ignore overflow for mca_cfg.tolerant == 0
1146 1147 1148 1149
		 */
		if (severity == MCE_AO_SEVERITY && mce_usable_address(&m))
			mce_ring_add(m.addr >> PAGE_SHIFT);

1150
		mce_log(&m);
L
Linus Torvalds 已提交
1151

1152 1153 1154
		if (severity > worst) {
			*final = m;
			worst = severity;
L
Linus Torvalds 已提交
1155 1156 1157
		}
	}

1158 1159 1160
	/* mce_clear_state will clear *final, save locally for use later */
	m = *final;

1161 1162 1163
	if (!no_way_out)
		mce_clear_state(toclear);

I
Ingo Molnar 已提交
1164
	/*
1165 1166
	 * Do most of the synchronization with other CPUs.
	 * When there's any problem use only local no_way_out state.
I
Ingo Molnar 已提交
1167
	 */
A
Ashok Raj 已提交
1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179
	if (!lmce) {
		if (mce_end(order) < 0)
			no_way_out = worst >= MCE_PANIC_SEVERITY;
	} else {
		/*
		 * Local MCE skipped calling mce_reign()
		 * If we found a fatal error, we need to panic here.
		 */
		 if (worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
			mce_panic("Machine check from unknown source",
				NULL, NULL);
	}
1180 1181

	/*
1182 1183 1184 1185
	 * At insane "tolerant" levels we take no action. Otherwise
	 * we only die if we have no other choice. For less serious
	 * issues we try to recover, or limit damage to the current
	 * process.
1186
	 */
1187
	if (cfg->tolerant < 3) {
1188 1189 1190
		if (no_way_out)
			mce_panic("Fatal machine check on current CPU", &m, msg);
		if (worst == MCE_AR_SEVERITY) {
1191 1192 1193
			recover_paddr = m.addr;
			if (!(m.mcgstatus & MCG_STATUS_RIPV))
				flags |= MF_MUST_KILL;
1194 1195 1196 1197
		} else if (kill_it) {
			force_sig(SIGBUS, current);
		}
	}
1198

1199 1200
	if (worst > 0)
		mce_report_event(regs);
1201
	mce_wrmsrl(MSR_IA32_MCG_STATUS, 0);
1202
out:
1203
	sync_core();
1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223

	if (recover_paddr == ~0ull)
		goto done;

	pr_err("Uncorrected hardware memory error in user-access at %llx",
		 recover_paddr);
	/*
	 * We must call memory_failure() here even if the current process is
	 * doomed. We still need to mark the page as poisoned and alert any
	 * other users of the page.
	 */
	ist_begin_non_atomic(regs);
	local_irq_enable();
	if (memory_failure(recover_paddr >> PAGE_SHIFT, MCE_VECTOR, flags) < 0) {
		pr_err("Memory error not recovered");
		force_sig(SIGBUS, current);
	}
	local_irq_disable();
	ist_end_non_atomic();
done:
1224
	ist_exit(regs, prev_state);
L
Linus Torvalds 已提交
1225
}
1226
EXPORT_SYMBOL_GPL(do_machine_check);
L
Linus Torvalds 已提交
1227

1228 1229
#ifndef CONFIG_MEMORY_FAILURE
int memory_failure(unsigned long pfn, int vector, int flags)
1230
{
1231 1232
	/* mce_severity() should not hand us an ACTION_REQUIRED error */
	BUG_ON(flags & MF_ACTION_REQUIRED);
1233 1234 1235
	pr_err("Uncorrected memory error in page 0x%lx ignored\n"
	       "Rebuild kernel with CONFIG_MEMORY_FAILURE=y for smarter handling\n",
	       pfn);
1236 1237

	return 0;
1238
}
1239
#endif
1240

1241 1242 1243 1244 1245
/*
 * Action optional processing happens here (picking up
 * from the list of faulting pages that do_machine_check()
 * placed into the "ring").
 */
1246 1247
static void mce_process_work(struct work_struct *dummy)
{
1248 1249 1250 1251
	unsigned long pfn;

	while (mce_ring_get(&pfn))
		memory_failure(pfn, MCE_VECTOR, 0);
1252 1253
}

1254 1255 1256
#ifdef CONFIG_X86_MCE_INTEL
/***
 * mce_log_therm_throt_event - Logs the thermal throttling event to mcelog
S
Simon Arlott 已提交
1257
 * @cpu: The CPU on which the event occurred.
1258 1259 1260 1261 1262 1263 1264 1265 1266 1267
 * @status: Event status information
 *
 * This function should be called by the thermal interrupt after the
 * event has been processed and the decision was made to log the event
 * further.
 *
 * The status parameter will be saved to the 'status' field of 'struct mce'
 * and historically has been the register value of the
 * MSR_IA32_THERMAL_STATUS (Intel) msr.
 */
1268
void mce_log_therm_throt_event(__u64 status)
1269 1270 1271
{
	struct mce m;

1272
	mce_setup(&m);
1273 1274 1275 1276 1277 1278
	m.bank = MCE_THERMAL_BANK;
	m.status = status;
	mce_log(&m);
}
#endif /* CONFIG_X86_MCE_INTEL */

L
Linus Torvalds 已提交
1279
/*
1280 1281 1282
 * Periodic polling timer for "silent" machine check errors.  If the
 * poller finds an MCE, poll 2x faster.  When the poller finds no more
 * errors, poll 2x slower (up to check_interval seconds).
L
Linus Torvalds 已提交
1283
 */
1284
static unsigned long check_interval = INITIAL_CHECK_INTERVAL;
I
Ingo Molnar 已提交
1285

T
Thomas Gleixner 已提交
1286
static DEFINE_PER_CPU(unsigned long, mce_next_interval); /* in jiffies */
1287
static DEFINE_PER_CPU(struct timer_list, mce_timer);
L
Linus Torvalds 已提交
1288

C
Chen Gong 已提交
1289 1290 1291 1292 1293
static unsigned long mce_adjust_timer_default(unsigned long interval)
{
	return interval;
}

1294
static unsigned long (*mce_adjust_timer)(unsigned long interval) = mce_adjust_timer_default;
C
Chen Gong 已提交
1295

1296
static void __restart_timer(struct timer_list *t, unsigned long interval)
1297
{
1298 1299
	unsigned long when = jiffies + interval;
	unsigned long flags;
1300

1301
	local_irq_save(flags);
1302

1303 1304 1305 1306 1307 1308 1309 1310 1311
	if (timer_pending(t)) {
		if (time_before(when, t->expires))
			mod_timer_pinned(t, when);
	} else {
		t->expires = round_jiffies(when);
		add_timer_on(t, smp_processor_id());
	}

	local_irq_restore(flags);
1312 1313
}

T
Thomas Gleixner 已提交
1314
static void mce_timer_fn(unsigned long data)
L
Linus Torvalds 已提交
1315
{
1316
	struct timer_list *t = this_cpu_ptr(&mce_timer);
1317
	int cpu = smp_processor_id();
T
Thomas Gleixner 已提交
1318
	unsigned long iv;
1319

1320 1321 1322
	WARN_ON(cpu != data);

	iv = __this_cpu_read(mce_next_interval);
1323

1324
	if (mce_available(this_cpu_ptr(&cpu_info))) {
1325 1326 1327 1328 1329 1330
		machine_check_poll(MCP_TIMESTAMP, this_cpu_ptr(&mce_poll_banks));

		if (mce_intel_cmci_poll()) {
			iv = mce_adjust_timer(iv);
			goto done;
		}
I
Ingo Molnar 已提交
1331
	}
L
Linus Torvalds 已提交
1332 1333

	/*
1334 1335
	 * Alert userspace if needed. If we logged an MCE, reduce the polling
	 * interval, otherwise increase the polling interval.
L
Linus Torvalds 已提交
1336
	 */
1337
	if (mce_notify_irq())
1338
		iv = max(iv / 2, (unsigned long) HZ/100);
1339
	else
T
Thomas Gleixner 已提交
1340
		iv = min(iv * 2, round_jiffies_relative(check_interval * HZ));
1341 1342

done:
T
Thomas Gleixner 已提交
1343
	__this_cpu_write(mce_next_interval, iv);
1344
	__restart_timer(t, iv);
C
Chen Gong 已提交
1345
}
1346

C
Chen Gong 已提交
1347 1348 1349 1350 1351
/*
 * Ensure that the timer is firing in @interval from now.
 */
void mce_timer_kick(unsigned long interval)
{
1352
	struct timer_list *t = this_cpu_ptr(&mce_timer);
C
Chen Gong 已提交
1353 1354
	unsigned long iv = __this_cpu_read(mce_next_interval);

1355 1356
	__restart_timer(t, interval);

C
Chen Gong 已提交
1357 1358
	if (interval < iv)
		__this_cpu_write(mce_next_interval, interval);
1359 1360
}

1361 1362 1363 1364 1365 1366 1367 1368 1369
/* Must not be called in IRQ context where del_timer_sync() can deadlock */
static void mce_timer_delete_all(void)
{
	int cpu;

	for_each_online_cpu(cpu)
		del_timer_sync(&per_cpu(mce_timer, cpu));
}

1370 1371
static void mce_do_trigger(struct work_struct *work)
{
1372
	call_usermodehelper(mce_helper, mce_helper_argv, NULL, UMH_NO_WAIT);
1373 1374 1375 1376
}

static DECLARE_WORK(mce_trigger_work, mce_do_trigger);

1377
/*
1378 1379 1380
 * Notify the user(s) about new machine check events.
 * Can be called from interrupt context, but not from machine check/NMI
 * context.
1381
 */
1382
int mce_notify_irq(void)
1383
{
1384 1385 1386
	/* Not more than two messages every minute */
	static DEFINE_RATELIMIT_STATE(ratelimit, 60*HZ, 2);

1387
	if (test_and_clear_bit(0, &mce_need_notify)) {
1388 1389
		/* wake processes polling /dev/mcelog */
		wake_up_interruptible(&mce_chrdev_wait);
1390

1391
		if (mce_helper[0])
1392
			schedule_work(&mce_trigger_work);
1393

1394
		if (__ratelimit(&ratelimit))
H
Huang Ying 已提交
1395
			pr_info(HW_ERR "Machine check events logged\n");
1396 1397

		return 1;
L
Linus Torvalds 已提交
1398
	}
1399 1400
	return 0;
}
1401
EXPORT_SYMBOL_GPL(mce_notify_irq);
1402

1403
static int __mcheck_cpu_mce_banks_init(void)
1404 1405
{
	int i;
1406
	u8 num_banks = mca_cfg.banks;
1407

1408
	mce_banks = kzalloc(num_banks * sizeof(struct mce_bank), GFP_KERNEL);
1409 1410
	if (!mce_banks)
		return -ENOMEM;
1411 1412

	for (i = 0; i < num_banks; i++) {
1413
		struct mce_bank *b = &mce_banks[i];
1414

1415 1416 1417 1418 1419 1420
		b->ctl = -1ULL;
		b->init = 1;
	}
	return 0;
}

1421
/*
L
Linus Torvalds 已提交
1422 1423
 * Initialize Machine Checks for a CPU.
 */
1424
static int __mcheck_cpu_cap_init(void)
L
Linus Torvalds 已提交
1425
{
1426
	unsigned b;
I
Ingo Molnar 已提交
1427
	u64 cap;
L
Linus Torvalds 已提交
1428 1429

	rdmsrl(MSR_IA32_MCG_CAP, cap);
1430 1431

	b = cap & MCG_BANKCNT_MASK;
1432
	if (!mca_cfg.banks)
1433
		pr_info("CPU supports %d MCE banks\n", b);
1434

1435
	if (b > MAX_NR_BANKS) {
1436
		pr_warn("Using only %u machine check banks out of %u\n",
1437 1438 1439 1440 1441
			MAX_NR_BANKS, b);
		b = MAX_NR_BANKS;
	}

	/* Don't support asymmetric configurations today */
1442 1443 1444
	WARN_ON(mca_cfg.banks != 0 && b != mca_cfg.banks);
	mca_cfg.banks = b;

1445
	if (!mce_banks) {
H
Hidetoshi Seto 已提交
1446
		int err = __mcheck_cpu_mce_banks_init();
1447

1448 1449
		if (err)
			return err;
L
Linus Torvalds 已提交
1450
	}
1451

1452
	/* Use accurate RIP reporting if available. */
1453
	if ((cap & MCG_EXT_P) && MCG_EXT_CNT(cap) >= 9)
1454
		mca_cfg.rip_msr = MSR_IA32_MCG_EIP;
L
Linus Torvalds 已提交
1455

A
Andi Kleen 已提交
1456
	if (cap & MCG_SER_P)
1457
		mca_cfg.ser = true;
A
Andi Kleen 已提交
1458

1459 1460 1461
	return 0;
}

1462
static void __mcheck_cpu_init_generic(void)
1463
{
1464
	enum mcp_flags m_fl = 0;
I
Ingo Molnar 已提交
1465
	mce_banks_t all_banks;
1466 1467 1468
	u64 cap;
	int i;

1469 1470 1471
	if (!mca_cfg.bootlog)
		m_fl = MCP_DONTLOG;

1472 1473 1474
	/*
	 * Log the machine checks left over from the previous reset.
	 */
1475
	bitmap_fill(all_banks, MAX_NR_BANKS);
1476
	machine_check_poll(MCP_UC | m_fl, &all_banks);
L
Linus Torvalds 已提交
1477

A
Andy Lutomirski 已提交
1478
	cr4_set_bits(X86_CR4_MCE);
L
Linus Torvalds 已提交
1479

1480
	rdmsrl(MSR_IA32_MCG_CAP, cap);
L
Linus Torvalds 已提交
1481 1482 1483
	if (cap & MCG_CTL_P)
		wrmsr(MSR_IA32_MCG_CTL, 0xffffffff, 0xffffffff);

1484
	for (i = 0; i < mca_cfg.banks; i++) {
1485
		struct mce_bank *b = &mce_banks[i];
1486

1487
		if (!b->init)
1488
			continue;
1489 1490
		wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
		wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
1491
	}
L
Linus Torvalds 已提交
1492 1493
}

1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521
/*
 * During IFU recovery Sandy Bridge -EP4S processors set the RIPV and
 * EIPV bits in MCG_STATUS to zero on the affected logical processor (SDM
 * Vol 3B Table 15-20). But this confuses both the code that determines
 * whether the machine check occurred in kernel or user mode, and also
 * the severity assessment code. Pretend that EIPV was set, and take the
 * ip/cs values from the pt_regs that mce_gather_info() ignored earlier.
 */
static void quirk_sandybridge_ifu(int bank, struct mce *m, struct pt_regs *regs)
{
	if (bank != 0)
		return;
	if ((m->mcgstatus & (MCG_STATUS_EIPV|MCG_STATUS_RIPV)) != 0)
		return;
	if ((m->status & (MCI_STATUS_OVER|MCI_STATUS_UC|
		          MCI_STATUS_EN|MCI_STATUS_MISCV|MCI_STATUS_ADDRV|
			  MCI_STATUS_PCC|MCI_STATUS_S|MCI_STATUS_AR|
			  MCACOD)) !=
			 (MCI_STATUS_UC|MCI_STATUS_EN|
			  MCI_STATUS_MISCV|MCI_STATUS_ADDRV|MCI_STATUS_S|
			  MCI_STATUS_AR|MCACOD_INSTR))
		return;

	m->mcgstatus |= MCG_STATUS_EIPV;
	m->ip = regs->ip;
	m->cs = regs->cs;
}

L
Linus Torvalds 已提交
1522
/* Add per CPU specific workarounds here */
1523
static int __mcheck_cpu_apply_quirks(struct cpuinfo_x86 *c)
1524
{
1525 1526
	struct mca_config *cfg = &mca_cfg;

1527
	if (c->x86_vendor == X86_VENDOR_UNKNOWN) {
1528
		pr_info("unknown CPU type - not enabling MCE support\n");
1529 1530 1531
		return -EOPNOTSUPP;
	}

L
Linus Torvalds 已提交
1532
	/* This should be disabled by the BIOS, but isn't always */
1533
	if (c->x86_vendor == X86_VENDOR_AMD) {
1534
		if (c->x86 == 15 && cfg->banks > 4) {
I
Ingo Molnar 已提交
1535 1536 1537 1538 1539
			/*
			 * disable GART TBL walk error reporting, which
			 * trips off incorrectly with the IOMMU & 3ware
			 * & Cerberus:
			 */
1540
			clear_bit(10, (unsigned long *)&mce_banks[4].ctl);
I
Ingo Molnar 已提交
1541
		}
1542
		if (c->x86 <= 17 && cfg->bootlog < 0) {
I
Ingo Molnar 已提交
1543 1544 1545 1546
			/*
			 * Lots of broken BIOS around that don't clear them
			 * by default and leave crap in there. Don't log:
			 */
1547
			cfg->bootlog = 0;
I
Ingo Molnar 已提交
1548
		}
1549 1550 1551 1552
		/*
		 * Various K7s with broken bank 0 around. Always disable
		 * by default.
		 */
1553
		if (c->x86 == 6 && cfg->banks > 0)
1554
			mce_banks[0].ctl = 0;
1555

1556 1557 1558 1559 1560 1561 1562
		/*
		 * overflow_recov is supported for F15h Models 00h-0fh
		 * even though we don't have a CPUID bit for it.
		 */
		if (c->x86 == 0x15 && c->x86_model <= 0xf)
			mce_flags.overflow_recov = 1;

1563 1564 1565 1566 1567 1568 1569 1570 1571 1572
		/*
		 * Turn off MC4_MISC thresholding banks on those models since
		 * they're not supported there.
		 */
		if (c->x86 == 0x15 &&
		    (c->x86_model >= 0x10 && c->x86_model <= 0x1f)) {
			int i;
			u64 hwcr;
			bool need_toggle;
			u32 msrs[] = {
1573 1574
				0x00000413, /* MC4_MISC0 */
				0xc0000408, /* MC4_MISC1 */
1575
			};
1576

1577
			rdmsrl(MSR_K7_HWCR, hwcr);
1578

1579 1580
			/* McStatusWrEn has to be set */
			need_toggle = !(hwcr & BIT(18));
1581

1582 1583
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr | BIT(18));
1584

1585 1586 1587
			/* Clear CntP bit safely */
			for (i = 0; i < ARRAY_SIZE(msrs); i++)
				msr_clear_bit(msrs[i], 62);
1588

1589 1590 1591 1592
			/* restore old settings */
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr);
		}
L
Linus Torvalds 已提交
1593
	}
1594

1595 1596 1597 1598 1599 1600 1601 1602 1603 1604
	if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * SDM documents that on family 6 bank 0 should not be written
		 * because it aliases to another special BIOS controlled
		 * register.
		 * But it's not aliased anymore on model 0x1a+
		 * Don't ignore bank 0 completely because there could be a
		 * valid event later, merely don't write CTL0.
		 */

1605
		if (c->x86 == 6 && c->x86_model < 0x1A && cfg->banks > 0)
1606
			mce_banks[0].init = 0;
1607 1608 1609 1610 1611 1612

		/*
		 * All newer Intel systems support MCE broadcasting. Enable
		 * synchronization with a one second timeout.
		 */
		if ((c->x86 > 6 || (c->x86 == 6 && c->x86_model >= 0xe)) &&
1613 1614
			cfg->monarch_timeout < 0)
			cfg->monarch_timeout = USEC_PER_SEC;
1615

1616 1617 1618 1619
		/*
		 * There are also broken BIOSes on some Pentium M and
		 * earlier systems:
		 */
1620 1621
		if (c->x86 == 6 && c->x86_model <= 13 && cfg->bootlog < 0)
			cfg->bootlog = 0;
1622 1623 1624

		if (c->x86 == 6 && c->x86_model == 45)
			quirk_no_way_out = quirk_sandybridge_ifu;
1625
	}
1626 1627 1628
	if (cfg->monarch_timeout < 0)
		cfg->monarch_timeout = 0;
	if (cfg->bootlog != 0)
1629
		cfg->panic_timeout = 30;
1630 1631

	return 0;
1632
}
L
Linus Torvalds 已提交
1633

1634
static int __mcheck_cpu_ancient_init(struct cpuinfo_x86 *c)
1635 1636
{
	if (c->x86 != 5)
1637 1638
		return 0;

1639 1640
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
1641
		intel_p5_mcheck_init(c);
1642
		return 1;
1643 1644 1645
		break;
	case X86_VENDOR_CENTAUR:
		winchip_mcheck_init(c);
1646
		return 1;
1647 1648
		break;
	}
1649 1650

	return 0;
1651 1652
}

1653
static void __mcheck_cpu_init_vendor(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1654 1655 1656 1657
{
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		mce_intel_feature_init(c);
1658
		mce_adjust_timer = cmci_intel_adjust_timer;
L
Linus Torvalds 已提交
1659
		break;
1660 1661 1662 1663

	case X86_VENDOR_AMD: {
		u32 ebx = cpuid_ebx(0x80000007);

1664
		mce_amd_feature_init(c);
1665 1666
		mce_flags.overflow_recov = !!(ebx & BIT(0));
		mce_flags.succor	 = !!(ebx & BIT(1));
1667
		break;
1668 1669
		}

L
Linus Torvalds 已提交
1670 1671 1672 1673 1674
	default:
		break;
	}
}

T
Thomas Gleixner 已提交
1675
static void mce_start_timer(unsigned int cpu, struct timer_list *t)
1676
{
1677
	unsigned long iv = check_interval * HZ;
1678

1679
	if (mca_cfg.ignore_ce || !iv)
1680 1681
		return;

1682 1683
	per_cpu(mce_next_interval, cpu) = iv;

T
Thomas Gleixner 已提交
1684
	t->expires = round_jiffies(jiffies + iv);
1685
	add_timer_on(t, cpu);
1686 1687
}

T
Thomas Gleixner 已提交
1688 1689
static void __mcheck_cpu_init_timer(void)
{
1690
	struct timer_list *t = this_cpu_ptr(&mce_timer);
T
Thomas Gleixner 已提交
1691 1692 1693 1694 1695 1696
	unsigned int cpu = smp_processor_id();

	setup_timer(t, mce_timer_fn, cpu);
	mce_start_timer(cpu, t);
}

A
Andi Kleen 已提交
1697 1698 1699
/* Handle unconfigured int18 (should never happen) */
static void unexpected_machine_check(struct pt_regs *regs, long error_code)
{
1700
	pr_err("CPU#%d: Unexpected int18 (Machine Check)\n",
A
Andi Kleen 已提交
1701 1702 1703 1704 1705 1706 1707
	       smp_processor_id());
}

/* Call the installed machine check handler for this CPU setup. */
void (*machine_check_vector)(struct pt_regs *, long error_code) =
						unexpected_machine_check;

1708
/*
L
Linus Torvalds 已提交
1709
 * Called for each booted CPU to set up machine checks.
I
Ingo Molnar 已提交
1710
 * Must be called with preempt off:
L
Linus Torvalds 已提交
1711
 */
1712
void mcheck_cpu_init(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1713
{
1714
	if (mca_cfg.disabled)
1715 1716
		return;

1717 1718
	if (__mcheck_cpu_ancient_init(c))
		return;
1719

1720
	if (!mce_available(c))
L
Linus Torvalds 已提交
1721 1722
		return;

1723
	if (__mcheck_cpu_cap_init() < 0 || __mcheck_cpu_apply_quirks(c) < 0) {
1724
		mca_cfg.disabled = true;
1725 1726 1727
		return;
	}

1728 1729
	machine_check_vector = do_machine_check;

1730 1731 1732
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_vendor(c);
	__mcheck_cpu_init_timer();
1733 1734
	INIT_WORK(this_cpu_ptr(&mce_work), mce_process_work);
	init_irq_work(this_cpu_ptr(&mce_irq_work), &mce_irq_work_cb);
L
Linus Torvalds 已提交
1735 1736 1737
}

/*
1738
 * mce_chrdev: Character device /dev/mcelog to read and clear the MCE log.
L
Linus Torvalds 已提交
1739 1740
 */

1741 1742 1743
static DEFINE_SPINLOCK(mce_chrdev_state_lock);
static int mce_chrdev_open_count;	/* #times opened */
static int mce_chrdev_open_exclu;	/* already open exclusive? */
T
Tim Hockin 已提交
1744

1745
static int mce_chrdev_open(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1746
{
1747
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1748

1749 1750 1751
	if (mce_chrdev_open_exclu ||
	    (mce_chrdev_open_count && (file->f_flags & O_EXCL))) {
		spin_unlock(&mce_chrdev_state_lock);
I
Ingo Molnar 已提交
1752

T
Tim Hockin 已提交
1753 1754 1755 1756
		return -EBUSY;
	}

	if (file->f_flags & O_EXCL)
1757 1758
		mce_chrdev_open_exclu = 1;
	mce_chrdev_open_count++;
T
Tim Hockin 已提交
1759

1760
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1761

1762
	return nonseekable_open(inode, file);
T
Tim Hockin 已提交
1763 1764
}

1765
static int mce_chrdev_release(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1766
{
1767
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1768

1769 1770
	mce_chrdev_open_count--;
	mce_chrdev_open_exclu = 0;
T
Tim Hockin 已提交
1771

1772
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1773 1774 1775 1776

	return 0;
}

1777 1778
static void collect_tscs(void *data)
{
L
Linus Torvalds 已提交
1779
	unsigned long *cpu_tsc = (unsigned long *)data;
1780

L
Linus Torvalds 已提交
1781
	rdtscll(cpu_tsc[smp_processor_id()]);
1782
}
L
Linus Torvalds 已提交
1783

1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799
static int mce_apei_read_done;

/* Collect MCE record of previous boot in persistent storage via APEI ERST. */
static int __mce_read_apei(char __user **ubuf, size_t usize)
{
	int rc;
	u64 record_id;
	struct mce m;

	if (usize < sizeof(struct mce))
		return -EINVAL;

	rc = apei_read_mce(&m, &record_id);
	/* Error or no more MCE record */
	if (rc <= 0) {
		mce_apei_read_done = 1;
1800 1801 1802 1803 1804 1805
		/*
		 * When ERST is disabled, mce_chrdev_read() should return
		 * "no record" instead of "no device."
		 */
		if (rc == -ENODEV)
			return 0;
1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826
		return rc;
	}
	rc = -EFAULT;
	if (copy_to_user(*ubuf, &m, sizeof(struct mce)))
		return rc;
	/*
	 * In fact, we should have cleared the record after that has
	 * been flushed to the disk or sent to network in
	 * /sbin/mcelog, but we have no interface to support that now,
	 * so just clear it to avoid duplication.
	 */
	rc = apei_clear_mce(record_id);
	if (rc) {
		mce_apei_read_done = 1;
		return rc;
	}
	*ubuf += sizeof(struct mce);

	return 0;
}

1827 1828
static ssize_t mce_chrdev_read(struct file *filp, char __user *ubuf,
				size_t usize, loff_t *off)
L
Linus Torvalds 已提交
1829
{
I
Ingo Molnar 已提交
1830
	char __user *buf = ubuf;
1831
	unsigned long *cpu_tsc;
1832
	unsigned prev, next;
L
Linus Torvalds 已提交
1833 1834
	int i, err;

1835
	cpu_tsc = kmalloc(nr_cpu_ids * sizeof(long), GFP_KERNEL);
1836 1837 1838
	if (!cpu_tsc)
		return -ENOMEM;

1839
	mutex_lock(&mce_chrdev_read_mutex);
1840 1841 1842 1843 1844 1845 1846

	if (!mce_apei_read_done) {
		err = __mce_read_apei(&buf, usize);
		if (err || buf != ubuf)
			goto out;
	}

1847
	next = rcu_dereference_check_mce(mcelog.next);
L
Linus Torvalds 已提交
1848 1849

	/* Only supports full reads right now */
1850 1851 1852
	err = -EINVAL;
	if (*off != 0 || usize < MCE_LOG_LEN*sizeof(struct mce))
		goto out;
L
Linus Torvalds 已提交
1853 1854

	err = 0;
1855 1856 1857 1858
	prev = 0;
	do {
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;
H
Hidetoshi Seto 已提交
1859
			struct mce *m = &mcelog.entry[i];
1860

H
Hidetoshi Seto 已提交
1861
			while (!m->finished) {
1862
				if (time_after_eq(jiffies, start + 2)) {
H
Hidetoshi Seto 已提交
1863
					memset(m, 0, sizeof(*m));
1864 1865 1866
					goto timeout;
				}
				cpu_relax();
1867
			}
1868
			smp_rmb();
H
Hidetoshi Seto 已提交
1869 1870
			err |= copy_to_user(buf, m, sizeof(*m));
			buf += sizeof(*m);
1871 1872
timeout:
			;
1873
		}
L
Linus Torvalds 已提交
1874

1875 1876 1877 1878 1879
		memset(mcelog.entry + prev, 0,
		       (next - prev) * sizeof(struct mce));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
L
Linus Torvalds 已提交
1880

1881
	synchronize_sched();
L
Linus Torvalds 已提交
1882

1883 1884 1885 1886
	/*
	 * Collect entries that were still getting written before the
	 * synchronize.
	 */
1887
	on_each_cpu(collect_tscs, cpu_tsc, 1);
I
Ingo Molnar 已提交
1888

1889
	for (i = next; i < MCE_LOG_LEN; i++) {
H
Hidetoshi Seto 已提交
1890 1891 1892 1893
		struct mce *m = &mcelog.entry[i];

		if (m->finished && m->tsc < cpu_tsc[m->cpu]) {
			err |= copy_to_user(buf, m, sizeof(*m));
L
Linus Torvalds 已提交
1894
			smp_rmb();
H
Hidetoshi Seto 已提交
1895 1896
			buf += sizeof(*m);
			memset(m, 0, sizeof(*m));
L
Linus Torvalds 已提交
1897
		}
1898
	}
1899 1900 1901 1902 1903

	if (err)
		err = -EFAULT;

out:
1904
	mutex_unlock(&mce_chrdev_read_mutex);
1905
	kfree(cpu_tsc);
I
Ingo Molnar 已提交
1906

1907
	return err ? err : buf - ubuf;
L
Linus Torvalds 已提交
1908 1909
}

1910
static unsigned int mce_chrdev_poll(struct file *file, poll_table *wait)
1911
{
1912
	poll_wait(file, &mce_chrdev_wait, wait);
1913
	if (rcu_access_index(mcelog.next))
1914
		return POLLIN | POLLRDNORM;
1915 1916
	if (!mce_apei_read_done && apei_check_mce())
		return POLLIN | POLLRDNORM;
1917 1918 1919
	return 0;
}

1920 1921
static long mce_chrdev_ioctl(struct file *f, unsigned int cmd,
				unsigned long arg)
L
Linus Torvalds 已提交
1922 1923
{
	int __user *p = (int __user *)arg;
1924

L
Linus Torvalds 已提交
1925
	if (!capable(CAP_SYS_ADMIN))
1926
		return -EPERM;
I
Ingo Molnar 已提交
1927

L
Linus Torvalds 已提交
1928
	switch (cmd) {
1929
	case MCE_GET_RECORD_LEN:
L
Linus Torvalds 已提交
1930 1931
		return put_user(sizeof(struct mce), p);
	case MCE_GET_LOG_LEN:
1932
		return put_user(MCE_LOG_LEN, p);
L
Linus Torvalds 已提交
1933 1934
	case MCE_GETCLEAR_FLAGS: {
		unsigned flags;
1935 1936

		do {
L
Linus Torvalds 已提交
1937
			flags = mcelog.flags;
1938
		} while (cmpxchg(&mcelog.flags, flags, 0) != flags);
I
Ingo Molnar 已提交
1939

1940
		return put_user(flags, p);
L
Linus Torvalds 已提交
1941 1942
	}
	default:
1943 1944
		return -ENOTTY;
	}
L
Linus Torvalds 已提交
1945 1946
}

1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967
static ssize_t (*mce_write)(struct file *filp, const char __user *ubuf,
			    size_t usize, loff_t *off);

void register_mce_write_callback(ssize_t (*fn)(struct file *filp,
			     const char __user *ubuf,
			     size_t usize, loff_t *off))
{
	mce_write = fn;
}
EXPORT_SYMBOL_GPL(register_mce_write_callback);

ssize_t mce_chrdev_write(struct file *filp, const char __user *ubuf,
			 size_t usize, loff_t *off)
{
	if (mce_write)
		return mce_write(filp, ubuf, usize, off);
	else
		return -EINVAL;
}

static const struct file_operations mce_chrdev_ops = {
1968 1969 1970
	.open			= mce_chrdev_open,
	.release		= mce_chrdev_release,
	.read			= mce_chrdev_read,
1971
	.write			= mce_chrdev_write,
1972 1973 1974
	.poll			= mce_chrdev_poll,
	.unlocked_ioctl		= mce_chrdev_ioctl,
	.llseek			= no_llseek,
L
Linus Torvalds 已提交
1975 1976
};

1977
static struct miscdevice mce_chrdev_device = {
L
Linus Torvalds 已提交
1978 1979 1980 1981 1982
	MISC_MCELOG_MINOR,
	"mcelog",
	&mce_chrdev_ops,
};

1983 1984 1985
static void __mce_disable_bank(void *arg)
{
	int bank = *((int *)arg);
1986
	__clear_bit(bank, this_cpu_ptr(mce_poll_banks));
1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001
	cmci_disable_bank(bank);
}

void mce_disable_bank(int bank)
{
	if (bank >= mca_cfg.banks) {
		pr_warn(FW_BUG
			"Ignoring request to disable invalid MCA bank %d.\n",
			bank);
		return;
	}
	set_bit(bank, mce_banks_ce_disabled);
	on_each_cpu(__mce_disable_bank, &bank, 1);
}

H
Hidetoshi Seto 已提交
2002
/*
2003 2004
 * mce=off Disables machine check
 * mce=no_cmci Disables CMCI
2005
 * mce=no_lmce Disables LMCE
2006 2007
 * mce=dont_log_ce Clears corrected events silently, no log created for CEs.
 * mce=ignore_ce Disables polling and CMCI, corrected events are not cleared.
2008 2009 2010
 * mce=TOLERANCELEVEL[,monarchtimeout] (number, see above)
 *	monarchtimeout is how long to wait for other CPUs on machine
 *	check, or 0 to not wait
H
Hidetoshi Seto 已提交
2011 2012
 * mce=bootlog Log MCEs from before booting. Disabled by default on AMD.
 * mce=nobootlog Don't log MCEs from before booting.
2013
 * mce=bios_cmci_threshold Don't program the CMCI threshold
H
Hidetoshi Seto 已提交
2014
 */
L
Linus Torvalds 已提交
2015 2016
static int __init mcheck_enable(char *str)
{
2017 2018
	struct mca_config *cfg = &mca_cfg;

2019
	if (*str == 0) {
2020
		enable_p5_mce();
2021 2022
		return 1;
	}
2023 2024
	if (*str == '=')
		str++;
L
Linus Torvalds 已提交
2025
	if (!strcmp(str, "off"))
2026
		cfg->disabled = true;
2027
	else if (!strcmp(str, "no_cmci"))
2028
		cfg->cmci_disabled = true;
2029 2030
	else if (!strcmp(str, "no_lmce"))
		cfg->lmce_disabled = true;
2031
	else if (!strcmp(str, "dont_log_ce"))
2032
		cfg->dont_log_ce = true;
2033
	else if (!strcmp(str, "ignore_ce"))
2034
		cfg->ignore_ce = true;
H
Hidetoshi Seto 已提交
2035
	else if (!strcmp(str, "bootlog") || !strcmp(str, "nobootlog"))
2036
		cfg->bootlog = (str[0] == 'b');
2037
	else if (!strcmp(str, "bios_cmci_threshold"))
2038
		cfg->bios_cmci_threshold = true;
2039
	else if (isdigit(str[0])) {
2040
		if (get_option(&str, &cfg->tolerant) == 2)
2041
			get_option(&str, &(cfg->monarch_timeout));
2042
	} else {
2043
		pr_info("mce argument %s ignored. Please use /sys\n", str);
H
Hidetoshi Seto 已提交
2044 2045
		return 0;
	}
2046
	return 1;
L
Linus Torvalds 已提交
2047
}
2048
__setup("mce", mcheck_enable);
L
Linus Torvalds 已提交
2049

2050
int __init mcheck_init(void)
2051
{
2052
	mcheck_intel_therm_init();
2053
	mcheck_vendor_init_severity();
2054

2055 2056 2057
	return 0;
}

2058
/*
2059
 * mce_syscore: PM support
2060
 */
L
Linus Torvalds 已提交
2061

2062 2063 2064 2065
/*
 * Disable machine checks on suspend and shutdown. We can't really handle
 * them later.
 */
2066
static int mce_disable_error_reporting(void)
2067 2068 2069
{
	int i;

2070
	for (i = 0; i < mca_cfg.banks; i++) {
2071
		struct mce_bank *b = &mce_banks[i];
2072

2073
		if (b->init)
2074
			wrmsrl(MSR_IA32_MCx_CTL(i), 0);
2075
	}
2076 2077 2078
	return 0;
}

2079
static int mce_syscore_suspend(void)
2080
{
2081
	return mce_disable_error_reporting();
2082 2083
}

2084
static void mce_syscore_shutdown(void)
2085
{
2086
	mce_disable_error_reporting();
2087 2088
}

I
Ingo Molnar 已提交
2089 2090 2091 2092 2093
/*
 * On resume clear all MCE state. Don't want to see leftovers from the BIOS.
 * Only one CPU is active at this time, the others get re-added later using
 * CPU hotplug:
 */
2094
static void mce_syscore_resume(void)
L
Linus Torvalds 已提交
2095
{
2096
	__mcheck_cpu_init_generic();
2097
	__mcheck_cpu_init_vendor(raw_cpu_ptr(&cpu_info));
L
Linus Torvalds 已提交
2098 2099
}

2100
static struct syscore_ops mce_syscore_ops = {
2101 2102 2103
	.suspend	= mce_syscore_suspend,
	.shutdown	= mce_syscore_shutdown,
	.resume		= mce_syscore_resume,
2104 2105
};

2106
/*
2107
 * mce_device: Sysfs support
2108 2109
 */

2110 2111
static void mce_cpu_restart(void *data)
{
2112
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2113
		return;
2114 2115
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_timer();
2116 2117
}

L
Linus Torvalds 已提交
2118
/* Reinit MCEs after user configuration changes */
2119 2120
static void mce_restart(void)
{
2121
	mce_timer_delete_all();
2122
	on_each_cpu(mce_cpu_restart, NULL, 1);
L
Linus Torvalds 已提交
2123 2124
}

2125
/* Toggle features for corrected errors */
2126
static void mce_disable_cmci(void *data)
2127
{
2128
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2129 2130 2131 2132 2133 2134
		return;
	cmci_clear();
}

static void mce_enable_ce(void *all)
{
2135
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2136 2137 2138 2139
		return;
	cmci_reenable();
	cmci_recheck();
	if (all)
2140
		__mcheck_cpu_init_timer();
2141 2142
}

2143
static struct bus_type mce_subsys = {
I
Ingo Molnar 已提交
2144
	.name		= "machinecheck",
2145
	.dev_name	= "machinecheck",
L
Linus Torvalds 已提交
2146 2147
};

2148
DEFINE_PER_CPU(struct device *, mce_device);
I
Ingo Molnar 已提交
2149 2150

void (*threshold_cpu_callback)(unsigned long action, unsigned int cpu);
L
Linus Torvalds 已提交
2151

2152
static inline struct mce_bank *attr_to_bank(struct device_attribute *attr)
2153 2154 2155
{
	return container_of(attr, struct mce_bank, attr);
}
2156

2157
static ssize_t show_bank(struct device *s, struct device_attribute *attr,
2158 2159
			 char *buf)
{
2160
	return sprintf(buf, "%llx\n", attr_to_bank(attr)->ctl);
2161 2162
}

2163
static ssize_t set_bank(struct device *s, struct device_attribute *attr,
H
Hidetoshi Seto 已提交
2164
			const char *buf, size_t size)
2165
{
H
Hidetoshi Seto 已提交
2166
	u64 new;
I
Ingo Molnar 已提交
2167

2168
	if (kstrtou64(buf, 0, &new) < 0)
2169
		return -EINVAL;
I
Ingo Molnar 已提交
2170

2171
	attr_to_bank(attr)->ctl = new;
2172
	mce_restart();
I
Ingo Molnar 已提交
2173

H
Hidetoshi Seto 已提交
2174
	return size;
2175
}
2176

I
Ingo Molnar 已提交
2177
static ssize_t
2178
show_trigger(struct device *s, struct device_attribute *attr, char *buf)
2179
{
2180
	strcpy(buf, mce_helper);
2181
	strcat(buf, "\n");
2182
	return strlen(mce_helper) + 1;
2183 2184
}

2185
static ssize_t set_trigger(struct device *s, struct device_attribute *attr,
I
Ingo Molnar 已提交
2186
				const char *buf, size_t siz)
2187 2188
{
	char *p;
I
Ingo Molnar 已提交
2189

2190 2191 2192
	strncpy(mce_helper, buf, sizeof(mce_helper));
	mce_helper[sizeof(mce_helper)-1] = 0;
	p = strchr(mce_helper, '\n');
I
Ingo Molnar 已提交
2193

2194
	if (p)
I
Ingo Molnar 已提交
2195 2196
		*p = 0;

2197
	return strlen(mce_helper) + !!p;
2198 2199
}

2200 2201
static ssize_t set_ignore_ce(struct device *s,
			     struct device_attribute *attr,
2202 2203 2204 2205
			     const char *buf, size_t size)
{
	u64 new;

2206
	if (kstrtou64(buf, 0, &new) < 0)
2207 2208
		return -EINVAL;

2209
	if (mca_cfg.ignore_ce ^ !!new) {
2210 2211
		if (new) {
			/* disable ce features */
2212 2213
			mce_timer_delete_all();
			on_each_cpu(mce_disable_cmci, NULL, 1);
2214
			mca_cfg.ignore_ce = true;
2215 2216
		} else {
			/* enable ce features */
2217
			mca_cfg.ignore_ce = false;
2218 2219 2220 2221 2222 2223
			on_each_cpu(mce_enable_ce, (void *)1, 1);
		}
	}
	return size;
}

2224 2225
static ssize_t set_cmci_disabled(struct device *s,
				 struct device_attribute *attr,
2226 2227 2228 2229
				 const char *buf, size_t size)
{
	u64 new;

2230
	if (kstrtou64(buf, 0, &new) < 0)
2231 2232
		return -EINVAL;

2233
	if (mca_cfg.cmci_disabled ^ !!new) {
2234 2235
		if (new) {
			/* disable cmci */
2236
			on_each_cpu(mce_disable_cmci, NULL, 1);
2237
			mca_cfg.cmci_disabled = true;
2238 2239
		} else {
			/* enable cmci */
2240
			mca_cfg.cmci_disabled = false;
2241 2242 2243 2244 2245 2246
			on_each_cpu(mce_enable_ce, NULL, 1);
		}
	}
	return size;
}

2247 2248
static ssize_t store_int_with_restart(struct device *s,
				      struct device_attribute *attr,
2249 2250
				      const char *buf, size_t size)
{
2251
	ssize_t ret = device_store_int(s, attr, buf, size);
2252 2253 2254 2255
	mce_restart();
	return ret;
}

2256
static DEVICE_ATTR(trigger, 0644, show_trigger, set_trigger);
2257
static DEVICE_INT_ATTR(tolerant, 0644, mca_cfg.tolerant);
2258
static DEVICE_INT_ATTR(monarch_timeout, 0644, mca_cfg.monarch_timeout);
2259
static DEVICE_BOOL_ATTR(dont_log_ce, 0644, mca_cfg.dont_log_ce);
I
Ingo Molnar 已提交
2260

2261 2262
static struct dev_ext_attribute dev_attr_check_interval = {
	__ATTR(check_interval, 0644, device_show_int, store_int_with_restart),
2263 2264
	&check_interval
};
I
Ingo Molnar 已提交
2265

2266
static struct dev_ext_attribute dev_attr_ignore_ce = {
2267 2268
	__ATTR(ignore_ce, 0644, device_show_bool, set_ignore_ce),
	&mca_cfg.ignore_ce
2269 2270
};

2271
static struct dev_ext_attribute dev_attr_cmci_disabled = {
2272 2273
	__ATTR(cmci_disabled, 0644, device_show_bool, set_cmci_disabled),
	&mca_cfg.cmci_disabled
2274 2275
};

2276 2277 2278 2279 2280 2281 2282 2283
static struct device_attribute *mce_device_attrs[] = {
	&dev_attr_tolerant.attr,
	&dev_attr_check_interval.attr,
	&dev_attr_trigger,
	&dev_attr_monarch_timeout.attr,
	&dev_attr_dont_log_ce.attr,
	&dev_attr_ignore_ce.attr,
	&dev_attr_cmci_disabled.attr,
2284 2285
	NULL
};
L
Linus Torvalds 已提交
2286

2287
static cpumask_var_t mce_device_initialized;
2288

2289 2290 2291 2292 2293
static void mce_device_release(struct device *dev)
{
	kfree(dev);
}

2294
/* Per cpu device init. All of the cpus still share the same ctrl bank: */
2295
static int mce_device_create(unsigned int cpu)
L
Linus Torvalds 已提交
2296
{
2297
	struct device *dev;
L
Linus Torvalds 已提交
2298
	int err;
2299
	int i, j;
2300

A
Andreas Herrmann 已提交
2301
	if (!mce_available(&boot_cpu_data))
2302 2303
		return -EIO;

2304 2305 2306
	dev = kzalloc(sizeof *dev, GFP_KERNEL);
	if (!dev)
		return -ENOMEM;
2307 2308
	dev->id  = cpu;
	dev->bus = &mce_subsys;
2309
	dev->release = &mce_device_release;
2310

2311
	err = device_register(dev);
2312 2313
	if (err) {
		put_device(dev);
2314
		return err;
2315
	}
2316

2317 2318
	for (i = 0; mce_device_attrs[i]; i++) {
		err = device_create_file(dev, mce_device_attrs[i]);
2319 2320 2321
		if (err)
			goto error;
	}
2322
	for (j = 0; j < mca_cfg.banks; j++) {
2323
		err = device_create_file(dev, &mce_banks[j].attr);
2324 2325 2326
		if (err)
			goto error2;
	}
2327
	cpumask_set_cpu(cpu, mce_device_initialized);
2328
	per_cpu(mce_device, cpu) = dev;
2329

2330
	return 0;
2331
error2:
2332
	while (--j >= 0)
2333
		device_remove_file(dev, &mce_banks[j].attr);
2334
error:
I
Ingo Molnar 已提交
2335
	while (--i >= 0)
2336
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2337

2338
	device_unregister(dev);
2339

2340 2341 2342
	return err;
}

2343
static void mce_device_remove(unsigned int cpu)
2344
{
2345
	struct device *dev = per_cpu(mce_device, cpu);
2346 2347
	int i;

2348
	if (!cpumask_test_cpu(cpu, mce_device_initialized))
2349 2350
		return;

2351 2352
	for (i = 0; mce_device_attrs[i]; i++)
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2353

2354
	for (i = 0; i < mca_cfg.banks; i++)
2355
		device_remove_file(dev, &mce_banks[i].attr);
I
Ingo Molnar 已提交
2356

2357 2358
	device_unregister(dev);
	cpumask_clear_cpu(cpu, mce_device_initialized);
2359
	per_cpu(mce_device, cpu) = NULL;
2360 2361
}

2362
/* Make sure there are no machine checks on offlined CPUs. */
2363
static void mce_disable_cpu(void *h)
2364
{
A
Andi Kleen 已提交
2365
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
2366
	int i;
2367

2368
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2369
		return;
2370

A
Andi Kleen 已提交
2371 2372
	if (!(action & CPU_TASKS_FROZEN))
		cmci_clear();
2373
	for (i = 0; i < mca_cfg.banks; i++) {
2374
		struct mce_bank *b = &mce_banks[i];
2375

2376
		if (b->init)
2377
			wrmsrl(MSR_IA32_MCx_CTL(i), 0);
2378
	}
2379 2380
}

2381
static void mce_reenable_cpu(void *h)
2382
{
A
Andi Kleen 已提交
2383
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
2384
	int i;
2385

2386
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2387
		return;
I
Ingo Molnar 已提交
2388

A
Andi Kleen 已提交
2389 2390
	if (!(action & CPU_TASKS_FROZEN))
		cmci_reenable();
2391
	for (i = 0; i < mca_cfg.banks; i++) {
2392
		struct mce_bank *b = &mce_banks[i];
2393

2394
		if (b->init)
2395
			wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
2396
	}
2397 2398
}

2399
/* Get notified when a cpu comes on/off. Be hotplug friendly. */
2400
static int
I
Ingo Molnar 已提交
2401
mce_cpu_callback(struct notifier_block *nfb, unsigned long action, void *hcpu)
2402 2403
{
	unsigned int cpu = (unsigned long)hcpu;
2404
	struct timer_list *t = &per_cpu(mce_timer, cpu);
2405

2406
	switch (action & ~CPU_TASKS_FROZEN) {
2407
	case CPU_ONLINE:
2408
		mce_device_create(cpu);
2409 2410
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2411 2412
		break;
	case CPU_DEAD:
2413 2414
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2415
		mce_device_remove(cpu);
C
Chen Gong 已提交
2416
		mce_intel_hcpu_update(cpu);
B
Borislav Petkov 已提交
2417 2418 2419 2420

		/* intentionally ignoring frozen here */
		if (!(action & CPU_TASKS_FROZEN))
			cmci_rediscover();
2421
		break;
2422
	case CPU_DOWN_PREPARE:
A
Andi Kleen 已提交
2423
		smp_call_function_single(cpu, mce_disable_cpu, &action, 1);
C
Chen Gong 已提交
2424
		del_timer_sync(t);
2425 2426
		break;
	case CPU_DOWN_FAILED:
A
Andi Kleen 已提交
2427
		smp_call_function_single(cpu, mce_reenable_cpu, &action, 1);
T
Thomas Gleixner 已提交
2428
		mce_start_timer(cpu, t);
A
Andi Kleen 已提交
2429
		break;
2430 2431
	}

2432
	return NOTIFY_OK;
2433 2434
}

2435
static struct notifier_block mce_cpu_notifier = {
2436 2437 2438
	.notifier_call = mce_cpu_callback,
};

2439
static __init void mce_init_banks(void)
2440 2441 2442
{
	int i;

2443
	for (i = 0; i < mca_cfg.banks; i++) {
2444
		struct mce_bank *b = &mce_banks[i];
2445
		struct device_attribute *a = &b->attr;
I
Ingo Molnar 已提交
2446

2447
		sysfs_attr_init(&a->attr);
2448 2449
		a->attr.name	= b->attrname;
		snprintf(b->attrname, ATTR_LEN, "bank%d", i);
I
Ingo Molnar 已提交
2450 2451 2452 2453

		a->attr.mode	= 0644;
		a->show		= show_bank;
		a->store	= set_bank;
2454 2455 2456
	}
}

2457
static __init int mcheck_init_device(void)
2458 2459 2460 2461
{
	int err;
	int i = 0;

2462 2463 2464 2465
	if (!mce_available(&boot_cpu_data)) {
		err = -EIO;
		goto err_out;
	}
2466

2467 2468 2469 2470
	if (!zalloc_cpumask_var(&mce_device_initialized, GFP_KERNEL)) {
		err = -ENOMEM;
		goto err_out;
	}
2471

2472
	mce_init_banks();
2473

2474
	err = subsys_system_register(&mce_subsys, NULL);
2475
	if (err)
2476
		goto err_out_mem;
2477

2478
	cpu_notifier_register_begin();
2479
	for_each_online_cpu(i) {
2480
		err = mce_device_create(i);
2481
		if (err) {
2482 2483 2484 2485 2486 2487
			/*
			 * Register notifier anyway (and do not unreg it) so
			 * that we don't leave undeleted timers, see notifier
			 * callback above.
			 */
			__register_hotcpu_notifier(&mce_cpu_notifier);
2488
			cpu_notifier_register_done();
2489
			goto err_device_create;
2490
		}
2491 2492
	}

2493 2494
	__register_hotcpu_notifier(&mce_cpu_notifier);
	cpu_notifier_register_done();
2495

2496 2497
	register_syscore_ops(&mce_syscore_ops);

2498
	/* register character device /dev/mcelog */
2499 2500 2501 2502 2503 2504 2505 2506 2507 2508 2509 2510 2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522
	err = misc_register(&mce_chrdev_device);
	if (err)
		goto err_register;

	return 0;

err_register:
	unregister_syscore_ops(&mce_syscore_ops);

err_device_create:
	/*
	 * We didn't keep track of which devices were created above, but
	 * even if we had, the set of online cpus might have changed.
	 * Play safe and remove for every possible cpu, since
	 * mce_device_remove() will do the right thing.
	 */
	for_each_possible_cpu(i)
		mce_device_remove(i);

err_out_mem:
	free_cpumask_var(mce_device_initialized);

err_out:
	pr_err("Unable to init device /dev/mcelog (rc: %d)\n", err);
I
Ingo Molnar 已提交
2523

L
Linus Torvalds 已提交
2524 2525
	return err;
}
2526
device_initcall_sync(mcheck_init_device);
I
Ingo Molnar 已提交
2527

2528 2529 2530 2531 2532
/*
 * Old style boot options parsing. Only for compatibility.
 */
static int __init mcheck_disable(char *str)
{
2533
	mca_cfg.disabled = true;
2534 2535 2536
	return 1;
}
__setup("nomce", mcheck_disable);
I
Ingo Molnar 已提交
2537

2538 2539
#ifdef CONFIG_DEBUG_FS
struct dentry *mce_get_debugfs_dir(void)
I
Ingo Molnar 已提交
2540
{
2541
	static struct dentry *dmce;
I
Ingo Molnar 已提交
2542

2543 2544
	if (!dmce)
		dmce = debugfs_create_dir("mce", NULL);
I
Ingo Molnar 已提交
2545

2546 2547
	return dmce;
}
I
Ingo Molnar 已提交
2548

2549 2550 2551
static void mce_reset(void)
{
	cpu_missing = 0;
2552
	atomic_set(&mce_fake_panicked, 0);
2553 2554 2555 2556
	atomic_set(&mce_executing, 0);
	atomic_set(&mce_callin, 0);
	atomic_set(&global_nwo, 0);
}
I
Ingo Molnar 已提交
2557

2558 2559 2560 2561
static int fake_panic_get(void *data, u64 *val)
{
	*val = fake_panic;
	return 0;
I
Ingo Molnar 已提交
2562 2563
}

2564
static int fake_panic_set(void *data, u64 val)
I
Ingo Molnar 已提交
2565
{
2566 2567 2568
	mce_reset();
	fake_panic = val;
	return 0;
I
Ingo Molnar 已提交
2569 2570
}

2571 2572
DEFINE_SIMPLE_ATTRIBUTE(fake_panic_fops, fake_panic_get,
			fake_panic_set, "%llu\n");
2573

2574
static int __init mcheck_debugfs_init(void)
2575
{
2576 2577 2578 2579 2580 2581 2582 2583 2584 2585 2586
	struct dentry *dmce, *ffake_panic;

	dmce = mce_get_debugfs_dir();
	if (!dmce)
		return -ENOMEM;
	ffake_panic = debugfs_create_file("fake_panic", 0444, dmce, NULL,
					  &fake_panic_fops);
	if (!ffake_panic)
		return -ENOMEM;

	return 0;
2587
}
2588
late_initcall(mcheck_debugfs_init);
2589
#endif