mce.c 60.1 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * Machine check handler.
I
Ingo Molnar 已提交
3
 *
L
Linus Torvalds 已提交
4
 * K8 parts Copyright 2002,2003 Andi Kleen, SuSE Labs.
5 6
 * Rest from unknown author(s).
 * 2004 Andi Kleen. Rewrote most of it.
7 8
 * Copyright 2008 Intel Corporation
 * Author: Andi Kleen
L
Linus Torvalds 已提交
9
 */
10 11 12

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

I
Ingo Molnar 已提交
13 14 15 16 17 18 19
#include <linux/thread_info.h>
#include <linux/capability.h>
#include <linux/miscdevice.h>
#include <linux/ratelimit.h>
#include <linux/kallsyms.h>
#include <linux/rcupdate.h>
#include <linux/kobject.h>
20
#include <linux/uaccess.h>
I
Ingo Molnar 已提交
21 22 23
#include <linux/kdebug.h>
#include <linux/kernel.h>
#include <linux/percpu.h>
L
Linus Torvalds 已提交
24
#include <linux/string.h>
25
#include <linux/device.h>
26
#include <linux/syscore_ops.h>
27
#include <linux/delay.h>
28
#include <linux/ctype.h>
I
Ingo Molnar 已提交
29
#include <linux/sched.h>
30
#include <linux/sysfs.h>
I
Ingo Molnar 已提交
31
#include <linux/types.h>
32
#include <linux/slab.h>
I
Ingo Molnar 已提交
33 34 35
#include <linux/init.h>
#include <linux/kmod.h>
#include <linux/poll.h>
36
#include <linux/nmi.h>
I
Ingo Molnar 已提交
37
#include <linux/cpu.h>
38
#include <linux/smp.h>
I
Ingo Molnar 已提交
39
#include <linux/fs.h>
40
#include <linux/mm.h>
41
#include <linux/debugfs.h>
42
#include <linux/irq_work.h>
43
#include <linux/export.h>
I
Ingo Molnar 已提交
44

45
#include <asm/processor.h>
46
#include <asm/traps.h>
A
Andy Lutomirski 已提交
47
#include <asm/tlbflush.h>
I
Ingo Molnar 已提交
48 49
#include <asm/mce.h>
#include <asm/msr.h>
L
Linus Torvalds 已提交
50

51
#include "mce-internal.h"
52

53
static DEFINE_MUTEX(mce_chrdev_read_mutex);
54

55
#define mce_log_get_idx_check(p) \
56
({ \
57 58
	RCU_LOCKDEP_WARN(!rcu_read_lock_sched_held() && \
			 !lockdep_is_held(&mce_chrdev_read_mutex), \
59
			 "suspicious mce_log_get_idx_check() usage"); \
60 61
	smp_load_acquire(&(p)); \
})
62

63 64 65
#define CREATE_TRACE_POINTS
#include <trace/events/mce.h>

66
#define SPINUNIT		100	/* 100ns */
67

68 69
DEFINE_PER_CPU(unsigned, mce_exception_count);

70
struct mce_bank *mce_banks __read_mostly;
71
struct mce_vendor_flags mce_flags __read_mostly;
72

73
struct mca_config mca_cfg __read_mostly = {
74
	.bootlog  = -1,
75 76 77 78 79 80 81
	/*
	 * Tolerant levels:
	 * 0: always panic on uncorrected errors, log corrected errors
	 * 1: panic or SIGBUS on uncorrected errors, log corrected errors
	 * 2: SIGBUS or log uncorrected errors (if possible), log corr. errors
	 * 3: never panic or SIGBUS, log all errors (for testing only)
	 */
82 83
	.tolerant = 1,
	.monarch_timeout = -1
84 85
};

86 87 88 89
/* User mode helper program triggered by machine check event */
static unsigned long		mce_need_notify;
static char			mce_helper[128];
static char			*mce_helper_argv[2] = { mce_helper, NULL };
L
Linus Torvalds 已提交
90

91 92
static DECLARE_WAIT_QUEUE_HEAD(mce_chrdev_wait);

93 94 95
static DEFINE_PER_CPU(struct mce, mces_seen);
static int			cpu_missing;

96 97 98 99
/*
 * MCA banks polled by the period polling timer for corrected events.
 * With Intel CMCI, this only has MCA banks which do not support CMCI (if any).
 */
100 101 102 103
DEFINE_PER_CPU(mce_banks_t, mce_poll_banks) = {
	[0 ... BITS_TO_LONGS(MAX_NR_BANKS)-1] = ~0UL
};

104 105 106 107 108 109 110 111 112
/*
 * MCA banks controlled through firmware first for corrected errors.
 * This is a global list of banks for which we won't enable CMCI and we
 * won't poll. Firmware controls these banks and is responsible for
 * reporting corrected errors through GHES. Uncorrected/recoverable
 * errors are still notified through a machine check.
 */
mce_banks_t mce_banks_ce_disabled;

113 114
static struct work_struct mce_work;
static struct irq_work mce_irq_work;
115

116 117
static void (*quirk_no_way_out)(int bank, struct mce *m, struct pt_regs *regs);

118 119 120 121
/*
 * CPU/chipset specific EDAC code can register a notifier call here to print
 * MCE errors in a human-readable form.
 */
122
ATOMIC_NOTIFIER_HEAD(x86_mce_decoder_chain);
123

124 125 126 127
/* Do initial initialization of a struct mce */
void mce_setup(struct mce *m)
{
	memset(m, 0, sizeof(struct mce));
128
	m->cpu = m->extcpu = smp_processor_id();
129
	m->tsc = rdtsc();
130 131 132 133 134 135 136
	/* We hope get_seconds stays lockless */
	m->time = get_seconds();
	m->cpuvendor = boot_cpu_data.x86_vendor;
	m->cpuid = cpuid_eax(1);
	m->socketid = cpu_data(m->extcpu).phys_proc_id;
	m->apicid = cpu_data(m->extcpu).initial_apicid;
	rdmsrl(MSR_IA32_MCG_CAP, m->mcgcap);
137 138
}

139 140 141
DEFINE_PER_CPU(struct mce, injectm);
EXPORT_PER_CPU_SYMBOL_GPL(injectm);

L
Linus Torvalds 已提交
142 143 144 145 146 147
/*
 * Lockless MCE logging infrastructure.
 * This avoids deadlocks on printk locks without having to break locks. Also
 * separate MCEs from kernel messages to avoid bogus bug reports.
 */

148
static struct mce_log mcelog = {
149 150 151
	.signature	= MCE_LOG_SIGNATURE,
	.len		= MCE_LOG_LEN,
	.recordlen	= sizeof(struct mce),
152
};
L
Linus Torvalds 已提交
153 154 155 156

void mce_log(struct mce *mce)
{
	unsigned next, entry;
I
Ingo Molnar 已提交
157

158 159 160
	/* Emit the trace record: */
	trace_mce_record(mce);

161 162
	if (!mce_gen_pool_add(mce))
		irq_work_queue(&mce_irq_work);
163

L
Linus Torvalds 已提交
164
	mce->finished = 0;
M
Mike Waychison 已提交
165
	wmb();
L
Linus Torvalds 已提交
166
	for (;;) {
167
		entry = mce_log_get_idx_check(mcelog.next);
168
		for (;;) {
169

I
Ingo Molnar 已提交
170 171 172 173 174
			/*
			 * When the buffer fills up discard new entries.
			 * Assume that the earlier errors are the more
			 * interesting ones:
			 */
175
			if (entry >= MCE_LOG_LEN) {
176 177
				set_bit(MCE_OVERFLOW,
					(unsigned long *)&mcelog.flags);
178 179
				return;
			}
I
Ingo Molnar 已提交
180
			/* Old left over entry. Skip: */
181 182 183 184
			if (mcelog.entry[entry].finished) {
				entry++;
				continue;
			}
M
Mike Waychison 已提交
185
			break;
L
Linus Torvalds 已提交
186 187 188 189 190 191 192
		}
		smp_rmb();
		next = entry + 1;
		if (cmpxchg(&mcelog.next, entry, next) == entry)
			break;
	}
	memcpy(mcelog.entry + entry, mce, sizeof(struct mce));
M
Mike Waychison 已提交
193
	wmb();
L
Linus Torvalds 已提交
194
	mcelog.entry[entry].finished = 1;
M
Mike Waychison 已提交
195
	wmb();
L
Linus Torvalds 已提交
196

197
	mce->finished = 1;
198
	set_bit(0, &mce_need_notify);
L
Linus Torvalds 已提交
199 200
}

201
void mce_inject_log(struct mce *m)
B
Borislav Petkov 已提交
202
{
203 204 205
	mutex_lock(&mce_chrdev_read_mutex);
	mce_log(m);
	mutex_unlock(&mce_chrdev_read_mutex);
B
Borislav Petkov 已提交
206
}
207
EXPORT_SYMBOL_GPL(mce_inject_log);
B
Borislav Petkov 已提交
208

209
static struct notifier_block mce_srao_nb;
B
Borislav Petkov 已提交
210

211 212
void mce_register_decode_chain(struct notifier_block *nb)
{
213 214 215 216
	/* Ensure SRAO notifier has the highest priority in the decode chain. */
	if (nb != &mce_srao_nb && nb->priority == INT_MAX)
		nb->priority -= 1;

217 218 219 220 221 222 223 224 225 226
	atomic_notifier_chain_register(&x86_mce_decoder_chain, nb);
}
EXPORT_SYMBOL_GPL(mce_register_decode_chain);

void mce_unregister_decode_chain(struct notifier_block *nb)
{
	atomic_notifier_chain_unregister(&x86_mce_decoder_chain, nb);
}
EXPORT_SYMBOL_GPL(mce_unregister_decode_chain);

H
Hidetoshi Seto 已提交
227
static void print_mce(struct mce *m)
L
Linus Torvalds 已提交
228
{
229 230
	int ret = 0;

H
Huang Ying 已提交
231
	pr_emerg(HW_ERR "CPU %d: Machine Check Exception: %Lx Bank %d: %016Lx\n",
232
	       m->extcpu, m->mcgstatus, m->bank, m->status);
233

234
	if (m->ip) {
H
Huang Ying 已提交
235
		pr_emerg(HW_ERR "RIP%s %02x:<%016Lx> ",
236 237 238
			!(m->mcgstatus & MCG_STATUS_EIPV) ? " !INEXACT!" : "",
				m->cs, m->ip);

L
Linus Torvalds 已提交
239
		if (m->cs == __KERNEL_CS)
240
			print_symbol("{%s}", m->ip);
241
		pr_cont("\n");
L
Linus Torvalds 已提交
242
	}
243

H
Huang Ying 已提交
244
	pr_emerg(HW_ERR "TSC %llx ", m->tsc);
L
Linus Torvalds 已提交
245
	if (m->addr)
246
		pr_cont("ADDR %llx ", m->addr);
L
Linus Torvalds 已提交
247
	if (m->misc)
248
		pr_cont("MISC %llx ", m->misc);
249

250
	pr_cont("\n");
251 252 253 254
	/*
	 * Note this output is parsed by external tools and old fields
	 * should not be changed.
	 */
255
	pr_emerg(HW_ERR "PROCESSOR %u:%x TIME %llu SOCKET %u APIC %x microcode %x\n",
256 257
		m->cpuvendor, m->cpuid, m->time, m->socketid, m->apicid,
		cpu_data(m->extcpu).microcode);
258 259 260

	/*
	 * Print out human-readable details about the MCE error,
261
	 * (if the CPU has an implementation for that)
262
	 */
263 264 265 266 267
	ret = atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, m);
	if (ret == NOTIFY_STOP)
		return;

	pr_emerg_ratelimited(HW_ERR "Run the above through 'mcelog --ascii'\n");
268 269
}

270 271
#define PANIC_TIMEOUT 5 /* 5 seconds */

272
static atomic_t mce_panicked;
273

274
static int fake_panic;
275
static atomic_t mce_fake_panicked;
276

277 278 279 280
/* Panic in progress. Enable interrupts and wait for final IPI */
static void wait_for_panic(void)
{
	long timeout = PANIC_TIMEOUT*USEC_PER_SEC;
281

282 283 284 285
	preempt_disable();
	local_irq_enable();
	while (timeout-- > 0)
		udelay(1);
286
	if (panic_timeout == 0)
287
		panic_timeout = mca_cfg.panic_timeout;
288 289 290
	panic("Panicing machine check CPU died");
}

291
static void mce_panic(const char *msg, struct mce *final, char *exp)
292
{
293
	int i, apei_err = 0;
294

295 296 297 298
	if (!fake_panic) {
		/*
		 * Make sure only one CPU runs in machine check panic
		 */
299
		if (atomic_inc_return(&mce_panicked) > 1)
300 301
			wait_for_panic();
		barrier();
302

303 304 305 306
		bust_spinlocks(1);
		console_verbose();
	} else {
		/* Don't log too much for fake panic */
307
		if (atomic_inc_return(&mce_fake_panicked) > 1)
308 309
			return;
	}
310
	/* First print corrected ones that are still unlogged */
L
Linus Torvalds 已提交
311
	for (i = 0; i < MCE_LOG_LEN; i++) {
312
		struct mce *m = &mcelog.entry[i];
H
Hidetoshi Seto 已提交
313 314
		if (!(m->status & MCI_STATUS_VAL))
			continue;
315
		if (!(m->status & MCI_STATUS_UC)) {
H
Hidetoshi Seto 已提交
316
			print_mce(m);
317 318 319
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
320 321 322 323 324
	}
	/* Now print uncorrected but with the final one last */
	for (i = 0; i < MCE_LOG_LEN; i++) {
		struct mce *m = &mcelog.entry[i];
		if (!(m->status & MCI_STATUS_VAL))
L
Linus Torvalds 已提交
325
			continue;
H
Hidetoshi Seto 已提交
326 327
		if (!(m->status & MCI_STATUS_UC))
			continue;
328
		if (!final || memcmp(m, final, sizeof(struct mce))) {
H
Hidetoshi Seto 已提交
329
			print_mce(m);
330 331 332
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
L
Linus Torvalds 已提交
333
	}
334
	if (final) {
H
Hidetoshi Seto 已提交
335
		print_mce(final);
336 337 338
		if (!apei_err)
			apei_err = apei_write_mce(final);
	}
339
	if (cpu_missing)
H
Huang Ying 已提交
340
		pr_emerg(HW_ERR "Some CPUs didn't answer in synchronization\n");
341
	if (exp)
H
Huang Ying 已提交
342
		pr_emerg(HW_ERR "Machine check: %s\n", exp);
343 344
	if (!fake_panic) {
		if (panic_timeout == 0)
345
			panic_timeout = mca_cfg.panic_timeout;
346 347
		panic(msg);
	} else
H
Huang Ying 已提交
348
		pr_emerg(HW_ERR "Fake kernel panic: %s\n", msg);
349
}
L
Linus Torvalds 已提交
350

351 352 353 354
/* Support code for software error injection */

static int msr_to_offset(u32 msr)
{
T
Tejun Heo 已提交
355
	unsigned bank = __this_cpu_read(injectm.bank);
356

357
	if (msr == mca_cfg.rip_msr)
358
		return offsetof(struct mce, ip);
359
	if (msr == MSR_IA32_MCx_STATUS(bank))
360
		return offsetof(struct mce, status);
361
	if (msr == MSR_IA32_MCx_ADDR(bank))
362
		return offsetof(struct mce, addr);
363
	if (msr == MSR_IA32_MCx_MISC(bank))
364 365 366 367 368 369
		return offsetof(struct mce, misc);
	if (msr == MSR_IA32_MCG_STATUS)
		return offsetof(struct mce, mcgstatus);
	return -1;
}

370 371 372 373
/* MSR access wrappers used for error injection */
static u64 mce_rdmsrl(u32 msr)
{
	u64 v;
374

T
Tejun Heo 已提交
375
	if (__this_cpu_read(injectm.finished)) {
376
		int offset = msr_to_offset(msr);
377

378 379
		if (offset < 0)
			return 0;
380
		return *(u64 *)((char *)this_cpu_ptr(&injectm) + offset);
381
	}
382 383 384 385 386 387 388 389 390 391 392

	if (rdmsrl_safe(msr, &v)) {
		WARN_ONCE(1, "mce: Unable to read msr %d!\n", msr);
		/*
		 * Return zero in case the access faulted. This should
		 * not happen normally but can happen if the CPU does
		 * something weird, or if the code is buggy.
		 */
		v = 0;
	}

393 394 395 396 397
	return v;
}

static void mce_wrmsrl(u32 msr, u64 v)
{
T
Tejun Heo 已提交
398
	if (__this_cpu_read(injectm.finished)) {
399
		int offset = msr_to_offset(msr);
400

401
		if (offset >= 0)
402
			*(u64 *)((char *)this_cpu_ptr(&injectm) + offset) = v;
403 404
		return;
	}
405 406 407
	wrmsrl(msr, v);
}

408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425
/*
 * Collect all global (w.r.t. this processor) status about this machine
 * check into our "mce" struct so that we can use it later to assess
 * the severity of the problem as we read per-bank specific details.
 */
static inline void mce_gather_info(struct mce *m, struct pt_regs *regs)
{
	mce_setup(m);

	m->mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
	if (regs) {
		/*
		 * Get the address of the instruction at the time of
		 * the machine check error.
		 */
		if (m->mcgstatus & (MCG_STATUS_RIPV|MCG_STATUS_EIPV)) {
			m->ip = regs->ip;
			m->cs = regs->cs;
426 427 428 429 430 431 432 433

			/*
			 * When in VM86 mode make the cs look like ring 3
			 * always. This is a lie, but it's better than passing
			 * the additional vm86 bit around everywhere.
			 */
			if (v8086_mode(regs))
				m->cs |= 3;
434 435
		}
		/* Use accurate RIP reporting if available. */
436 437
		if (mca_cfg.rip_msr)
			m->ip = mce_rdmsrl(mca_cfg.rip_msr);
438 439 440
	}
}

A
Andi Kleen 已提交
441
int mce_available(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
442
{
443
	if (mca_cfg.disabled)
444
		return 0;
445
	return cpu_has(c, X86_FEATURE_MCE) && cpu_has(c, X86_FEATURE_MCA);
L
Linus Torvalds 已提交
446 447
}

448 449
static void mce_schedule_work(void)
{
450
	if (!mce_gen_pool_empty() && keventd_up())
451
		schedule_work(&mce_work);
452 453
}

454
static void mce_irq_work_cb(struct irq_work *entry)
455
{
456
	mce_notify_irq();
457
	mce_schedule_work();
458 459 460 461 462
}

static void mce_report_event(struct pt_regs *regs)
{
	if (regs->flags & (X86_VM_MASK|X86_EFLAGS_IF)) {
463
		mce_notify_irq();
464 465 466 467 468 469 470
		/*
		 * Triggering the work queue here is just an insurance
		 * policy in case the syscall exit notify handler
		 * doesn't run soon enough or ends up running on the
		 * wrong CPU (can happen when audit sleeps)
		 */
		mce_schedule_work();
471 472 473
		return;
	}

474
	irq_work_queue(&mce_irq_work);
475 476
}

477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498
/*
 * Check if the address reported by the CPU is in a format we can parse.
 * It would be possible to add code for most other cases, but all would
 * be somewhat complicated (e.g. segment offset would require an instruction
 * parser). So only support physical addresses up to page granuality for now.
 */
static int mce_usable_address(struct mce *m)
{
	if (!(m->status & MCI_STATUS_MISCV) || !(m->status & MCI_STATUS_ADDRV))
		return 0;

	/* Checks after this one are Intel-specific: */
	if (boot_cpu_data.x86_vendor != X86_VENDOR_INTEL)
		return 1;

	if (MCI_MISC_ADDR_LSB(m->misc) > PAGE_SHIFT)
		return 0;
	if (MCI_MISC_ADDR_MODE(m->misc) != MCI_MISC_ADDR_PHYS)
		return 0;
	return 1;
}

499 500 501 502 503 504 505 506 507
static int srao_decode_notifier(struct notifier_block *nb, unsigned long val,
				void *data)
{
	struct mce *mce = (struct mce *)data;
	unsigned long pfn;

	if (!mce)
		return NOTIFY_DONE;

B
Borislav Petkov 已提交
508
	if (mce_usable_address(mce) && (mce->severity == MCE_AO_SEVERITY)) {
509 510 511 512 513
		pfn = mce->addr >> PAGE_SHIFT;
		memory_failure(pfn, MCE_VECTOR, 0);
	}

	return NOTIFY_OK;
514
}
515 516 517 518
static struct notifier_block mce_srao_nb = {
	.notifier_call	= srao_decode_notifier,
	.priority = INT_MAX,
};
519

520 521 522 523 524 525 526 527 528 529 530 531 532
/*
 * Read ADDR and MISC registers.
 */
static void mce_read_aux(struct mce *m, int i)
{
	if (m->status & MCI_STATUS_MISCV)
		m->misc = mce_rdmsrl(MSR_IA32_MCx_MISC(i));
	if (m->status & MCI_STATUS_ADDRV) {
		m->addr = mce_rdmsrl(MSR_IA32_MCx_ADDR(i));

		/*
		 * Mask the reported address by the reported granularity.
		 */
533
		if (mca_cfg.ser && (m->status & MCI_STATUS_MISCV)) {
534 535 536 537 538 539 540
			u8 shift = MCI_MISC_ADDR_LSB(m->misc);
			m->addr >>= shift;
			m->addr <<= shift;
		}
	}
}

541 542 543 544 545
static bool memory_error(struct mce *m)
{
	struct cpuinfo_x86 *c = &boot_cpu_data;

	if (c->x86_vendor == X86_VENDOR_AMD) {
546 547 548 549
		/* ErrCodeExt[20:16] */
		u8 xec = (m->status >> 16) & 0x1f;

		return (xec == 0x0 || xec == 0x8);
550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571
	} else if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * Intel SDM Volume 3B - 15.9.2 Compound Error Codes
		 *
		 * Bit 7 of the MCACOD field of IA32_MCi_STATUS is used for
		 * indicating a memory error. Bit 8 is used for indicating a
		 * cache hierarchy error. The combination of bit 2 and bit 3
		 * is used for indicating a `generic' cache hierarchy error
		 * But we can't just blindly check the above bits, because if
		 * bit 11 is set, then it is a bus/interconnect error - and
		 * either way the above bits just gives more detail on what
		 * bus/interconnect error happened. Note that bit 12 can be
		 * ignored, as it's the "filter" bit.
		 */
		return (m->status & 0xef80) == BIT(7) ||
		       (m->status & 0xef00) == BIT(8) ||
		       (m->status & 0xeffc) == 0xc;
	}

	return false;
}

572 573
DEFINE_PER_CPU(unsigned, mce_poll_count);

574
/*
575 576 577 578
 * Poll for corrected events or events that happened before reset.
 * Those are just logged through /dev/mcelog.
 *
 * This is executed in standard interrupt context.
A
Andi Kleen 已提交
579 580 581 582 583 584 585 586 587
 *
 * Note: spec recommends to panic for fatal unsignalled
 * errors here. However this would be quite problematic --
 * we would need to reimplement the Monarch handling and
 * it would mess up the exclusion between exception handler
 * and poll hander -- * so we skip this for now.
 * These cases should not happen anyways, or only when the CPU
 * is already totally * confused. In this case it's likely it will
 * not fully execute the machine check handler either.
588
 */
589
bool machine_check_poll(enum mcp_flags flags, mce_banks_t *b)
590
{
591
	bool error_seen = false;
592
	struct mce m;
593
	int severity;
594 595
	int i;

596
	this_cpu_inc(mce_poll_count);
597

598
	mce_gather_info(&m, NULL);
599

600
	for (i = 0; i < mca_cfg.banks; i++) {
601
		if (!mce_banks[i].ctl || !test_bit(i, *b))
602 603 604 605 606 607 608 609
			continue;

		m.misc = 0;
		m.addr = 0;
		m.bank = i;
		m.tsc = 0;

		barrier();
610
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
611 612 613
		if (!(m.status & MCI_STATUS_VAL))
			continue;

614

615
		/*
A
Andi Kleen 已提交
616 617
		 * Uncorrected or signalled events are handled by the exception
		 * handler when it is enabled, so don't process those here.
618 619 620
		 *
		 * TBD do the same check for MCI_STATUS_EN here?
		 */
A
Andi Kleen 已提交
621
		if (!(flags & MCP_UC) &&
622
		    (m.status & (mca_cfg.ser ? MCI_STATUS_S : MCI_STATUS_UC)))
623 624
			continue;

625 626
		error_seen = true;

627
		mce_read_aux(&m, i);
628 629 630

		if (!(flags & MCP_TIMESTAMP))
			m.tsc = 0;
631 632 633

		severity = mce_severity(&m, mca_cfg.tolerant, NULL, false);

B
Borislav Petkov 已提交
634 635
		if (severity == MCE_DEFERRED_SEVERITY && memory_error(&m))
			if (m.status & MCI_STATUS_ADDRV)
636
				m.severity = severity;
637

638 639 640 641
		/*
		 * Don't get the IP here because it's unlikely to
		 * have anything to do with the actual error location.
		 */
642
		if (!(flags & MCP_DONTLOG) && !mca_cfg.dont_log_ce)
A
Andi Kleen 已提交
643
			mce_log(&m);
B
Borislav Petkov 已提交
644
		else if (mce_usable_address(&m)) {
645 646 647 648 649 650 651
			/*
			 * Although we skipped logging this, we still want
			 * to take action. Add to the pool so the registered
			 * notifiers will see it.
			 */
			if (!mce_gen_pool_add(&m))
				mce_schedule_work();
652
		}
653 654 655 656

		/*
		 * Clear state for this bank.
		 */
657
		mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
658 659 660 661 662 663
	}

	/*
	 * Don't clear MCG_STATUS here because it's only defined for
	 * exceptions.
	 */
664 665

	sync_core();
666

667
	return error_seen;
668
}
669
EXPORT_SYMBOL_GPL(machine_check_poll);
670

671 672 673 674
/*
 * Do a quick check if any of the events requires a panic.
 * This decides if we keep the events around or clear them.
 */
675 676
static int mce_no_way_out(struct mce *m, char **msg, unsigned long *validp,
			  struct pt_regs *regs)
677
{
678
	int i, ret = 0;
679
	char *tmp;
680

681
	for (i = 0; i < mca_cfg.banks; i++) {
682
		m->status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
683
		if (m->status & MCI_STATUS_VAL) {
684
			__set_bit(i, validp);
685 686 687
			if (quirk_no_way_out)
				quirk_no_way_out(i, m, regs);
		}
688 689 690

		if (mce_severity(m, mca_cfg.tolerant, &tmp, true) >= MCE_PANIC_SEVERITY) {
			*msg = tmp;
691
			ret = 1;
692
		}
693
	}
694
	return ret;
695 696
}

697 698 699 700 701 702 703 704 705 706 707 708 709 710
/*
 * Variable to establish order between CPUs while scanning.
 * Each CPU spins initially until executing is equal its number.
 */
static atomic_t mce_executing;

/*
 * Defines order of CPUs on entry. First CPU becomes Monarch.
 */
static atomic_t mce_callin;

/*
 * Check if a timeout waiting for other CPUs happened.
 */
711
static int mce_timed_out(u64 *t, const char *msg)
712 713 714 715 716 717 718 719
{
	/*
	 * The others already did panic for some reason.
	 * Bail out like in a timeout.
	 * rmb() to tell the compiler that system_state
	 * might have been modified by someone else.
	 */
	rmb();
720
	if (atomic_read(&mce_panicked))
721
		wait_for_panic();
722
	if (!mca_cfg.monarch_timeout)
723 724
		goto out;
	if ((s64)*t < SPINUNIT) {
725
		if (mca_cfg.tolerant <= 1)
726
			mce_panic(msg, NULL, NULL);
727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747
		cpu_missing = 1;
		return 1;
	}
	*t -= SPINUNIT;
out:
	touch_nmi_watchdog();
	return 0;
}

/*
 * The Monarch's reign.  The Monarch is the CPU who entered
 * the machine check handler first. It waits for the others to
 * raise the exception too and then grades them. When any
 * error is fatal panic. Only then let the others continue.
 *
 * The other CPUs entering the MCE handler will be controlled by the
 * Monarch. They are called Subjects.
 *
 * This way we prevent any potential data corruption in a unrecoverable case
 * and also makes sure always all CPU's errors are examined.
 *
748
 * Also this detects the case of a machine check event coming from outer
749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773
 * space (not detected by any CPUs) In this case some external agent wants
 * us to shut down, so panic too.
 *
 * The other CPUs might still decide to panic if the handler happens
 * in a unrecoverable place, but in this case the system is in a semi-stable
 * state and won't corrupt anything by itself. It's ok to let the others
 * continue for a bit first.
 *
 * All the spin loops have timeouts; when a timeout happens a CPU
 * typically elects itself to be Monarch.
 */
static void mce_reign(void)
{
	int cpu;
	struct mce *m = NULL;
	int global_worst = 0;
	char *msg = NULL;
	char *nmsg = NULL;

	/*
	 * This CPU is the Monarch and the other CPUs have run
	 * through their handlers.
	 * Grade the severity of the errors of all the CPUs.
	 */
	for_each_possible_cpu(cpu) {
774 775
		int severity = mce_severity(&per_cpu(mces_seen, cpu),
					    mca_cfg.tolerant,
776
					    &nmsg, true);
777 778 779 780 781 782 783 784 785 786 787 788
		if (severity > global_worst) {
			msg = nmsg;
			global_worst = severity;
			m = &per_cpu(mces_seen, cpu);
		}
	}

	/*
	 * Cannot recover? Panic here then.
	 * This dumps all the mces in the log buffer and stops the
	 * other CPUs.
	 */
789
	if (m && global_worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
790
		mce_panic("Fatal machine check", m, msg);
791 792 793 794 795 796 797 798 799 800 801

	/*
	 * For UC somewhere we let the CPU who detects it handle it.
	 * Also must let continue the others, otherwise the handling
	 * CPU could deadlock on a lock.
	 */

	/*
	 * No machine check event found. Must be some external
	 * source or one CPU is hung. Panic.
	 */
802
	if (global_worst <= MCE_KEEP_SEVERITY && mca_cfg.tolerant < 3)
803
		mce_panic("Fatal machine check from unknown source", NULL, NULL);
804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821

	/*
	 * Now clear all the mces_seen so that they don't reappear on
	 * the next mce.
	 */
	for_each_possible_cpu(cpu)
		memset(&per_cpu(mces_seen, cpu), 0, sizeof(struct mce));
}

static atomic_t global_nwo;

/*
 * Start of Monarch synchronization. This waits until all CPUs have
 * entered the exception handler and then determines if any of them
 * saw a fatal event that requires panic. Then it executes them
 * in the entry order.
 * TBD double check parallel CPU hotunplug
 */
H
Hidetoshi Seto 已提交
822
static int mce_start(int *no_way_out)
823
{
H
Hidetoshi Seto 已提交
824
	int order;
825
	int cpus = num_online_cpus();
826
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
827

H
Hidetoshi Seto 已提交
828 829
	if (!timeout)
		return -1;
830

H
Hidetoshi Seto 已提交
831
	atomic_add(*no_way_out, &global_nwo);
832 833 834 835
	/*
	 * global_nwo should be updated before mce_callin
	 */
	smp_wmb();
836
	order = atomic_inc_return(&mce_callin);
837 838 839 840 841

	/*
	 * Wait for everyone.
	 */
	while (atomic_read(&mce_callin) != cpus) {
842 843
		if (mce_timed_out(&timeout,
				  "Timeout: Not all CPUs entered broadcast exception handler")) {
844
			atomic_set(&global_nwo, 0);
H
Hidetoshi Seto 已提交
845
			return -1;
846 847 848 849
		}
		ndelay(SPINUNIT);
	}

850 851 852 853
	/*
	 * mce_callin should be read before global_nwo
	 */
	smp_rmb();
854

H
Hidetoshi Seto 已提交
855 856 857 858
	if (order == 1) {
		/*
		 * Monarch: Starts executing now, the others wait.
		 */
859
		atomic_set(&mce_executing, 1);
H
Hidetoshi Seto 已提交
860 861 862 863 864 865 866 867
	} else {
		/*
		 * Subject: Now start the scanning loop one by one in
		 * the original callin order.
		 * This way when there are any shared banks it will be
		 * only seen by one CPU before cleared, avoiding duplicates.
		 */
		while (atomic_read(&mce_executing) < order) {
868 869
			if (mce_timed_out(&timeout,
					  "Timeout: Subject CPUs unable to finish machine check processing")) {
H
Hidetoshi Seto 已提交
870 871 872 873 874
				atomic_set(&global_nwo, 0);
				return -1;
			}
			ndelay(SPINUNIT);
		}
875 876 877
	}

	/*
H
Hidetoshi Seto 已提交
878
	 * Cache the global no_way_out state.
879
	 */
H
Hidetoshi Seto 已提交
880 881 882
	*no_way_out = atomic_read(&global_nwo);

	return order;
883 884 885 886 887 888 889 890 891
}

/*
 * Synchronize between CPUs after main scanning loop.
 * This invokes the bulk of the Monarch processing.
 */
static int mce_end(int order)
{
	int ret = -1;
892
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912

	if (!timeout)
		goto reset;
	if (order < 0)
		goto reset;

	/*
	 * Allow others to run.
	 */
	atomic_inc(&mce_executing);

	if (order == 1) {
		/* CHECKME: Can this race with a parallel hotplug? */
		int cpus = num_online_cpus();

		/*
		 * Monarch: Wait for everyone to go through their scanning
		 * loops.
		 */
		while (atomic_read(&mce_executing) <= cpus) {
913 914
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU unable to finish machine check processing"))
915 916 917 918 919 920 921 922 923 924 925 926
				goto reset;
			ndelay(SPINUNIT);
		}

		mce_reign();
		barrier();
		ret = 0;
	} else {
		/*
		 * Subject: Wait for Monarch to finish.
		 */
		while (atomic_read(&mce_executing) != 0) {
927 928
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU did not finish machine check processing"))
929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957
				goto reset;
			ndelay(SPINUNIT);
		}

		/*
		 * Don't reset anything. That's done by the Monarch.
		 */
		return 0;
	}

	/*
	 * Reset all global state.
	 */
reset:
	atomic_set(&global_nwo, 0);
	atomic_set(&mce_callin, 0);
	barrier();

	/*
	 * Let others run again.
	 */
	atomic_set(&mce_executing, 0);
	return ret;
}

static void mce_clear_state(unsigned long *toclear)
{
	int i;

958
	for (i = 0; i < mca_cfg.banks; i++) {
959
		if (test_bit(i, toclear))
960
			mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
961 962 963
	}
}

964 965 966 967 968 969 970
/*
 * The actual machine check handler. This only handles real
 * exceptions when something got corrupted coming in through int 18.
 *
 * This is executed in NMI context not subject to normal locking rules. This
 * implies that most kernel services cannot be safely used. Don't even
 * think about putting a printk in there!
971 972 973 974
 *
 * On Intel systems this is entered on all CPUs in parallel through
 * MCE broadcast. However some CPUs might be broken beyond repair,
 * so be always careful when synchronizing with others.
L
Linus Torvalds 已提交
975
 */
I
Ingo Molnar 已提交
976
void do_machine_check(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
977
{
978
	struct mca_config *cfg = &mca_cfg;
979
	struct mce m, *final;
L
Linus Torvalds 已提交
980
	int i;
981 982 983 984 985 986
	int worst = 0;
	int severity;
	/*
	 * Establish sequential order between the CPUs entering the machine
	 * check handler.
	 */
H
Hidetoshi Seto 已提交
987
	int order;
988 989
	/*
	 * If no_way_out gets set, there is no safe way to recover from this
990
	 * MCE.  If mca_cfg.tolerant is cranked up, we'll try anyway.
991 992 993 994 995 996 997
	 */
	int no_way_out = 0;
	/*
	 * If kill_it gets set, there might be a way to recover from this
	 * error.
	 */
	int kill_it = 0;
998
	DECLARE_BITMAP(toclear, MAX_NR_BANKS);
999
	DECLARE_BITMAP(valid_banks, MAX_NR_BANKS);
1000
	char *msg = "Unknown";
1001 1002
	u64 recover_paddr = ~0ull;
	int flags = MF_ACTION_REQUIRED;
A
Ashok Raj 已提交
1003
	int lmce = 0;
L
Linus Torvalds 已提交
1004

1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015
	/* If this CPU is offline, just bail out. */
	if (cpu_is_offline(smp_processor_id())) {
		u64 mcgstatus;

		mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
		if (mcgstatus & MCG_STATUS_RIPV) {
			mce_wrmsrl(MSR_IA32_MCG_STATUS, 0);
			return;
		}
	}

1016
	ist_enter(regs);
1017

1018
	this_cpu_inc(mce_exception_count);
1019

1020
	if (!cfg->banks)
1021
		goto out;
L
Linus Torvalds 已提交
1022

1023
	mce_gather_info(&m, regs);
1024

1025
	final = this_cpu_ptr(&mces_seen);
1026 1027
	*final = m;

1028
	memset(valid_banks, 0, sizeof(valid_banks));
1029
	no_way_out = mce_no_way_out(&m, &msg, valid_banks, regs);
1030

L
Linus Torvalds 已提交
1031 1032
	barrier();

A
Andi Kleen 已提交
1033
	/*
1034 1035 1036
	 * When no restart IP might need to kill or panic.
	 * Assume the worst for now, but if we find the
	 * severity is MCE_AR_SEVERITY we have other options.
A
Andi Kleen 已提交
1037 1038 1039 1040
	 */
	if (!(m.mcgstatus & MCG_STATUS_RIPV))
		kill_it = 1;

1041
	/*
A
Ashok Raj 已提交
1042
	 * Check if this MCE is signaled to only this logical processor
1043
	 */
A
Ashok Raj 已提交
1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055
	if (m.mcgstatus & MCG_STATUS_LMCES)
		lmce = 1;
	else {
		/*
		 * Go through all the banks in exclusion of the other CPUs.
		 * This way we don't report duplicated events on shared banks
		 * because the first one to see it will clear it.
		 * If this is a Local MCE, then no need to perform rendezvous.
		 */
		order = mce_start(&no_way_out);
	}

1056
	for (i = 0; i < cfg->banks; i++) {
1057
		__clear_bit(i, toclear);
1058 1059
		if (!test_bit(i, valid_banks))
			continue;
1060
		if (!mce_banks[i].ctl)
L
Linus Torvalds 已提交
1061
			continue;
1062 1063

		m.misc = 0;
L
Linus Torvalds 已提交
1064 1065 1066
		m.addr = 0;
		m.bank = i;

1067
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
L
Linus Torvalds 已提交
1068 1069 1070
		if ((m.status & MCI_STATUS_VAL) == 0)
			continue;

1071
		/*
A
Andi Kleen 已提交
1072 1073
		 * Non uncorrected or non signaled errors are handled by
		 * machine_check_poll. Leave them alone, unless this panics.
1074
		 */
1075
		if (!(m.status & (cfg->ser ? MCI_STATUS_S : MCI_STATUS_UC)) &&
A
Andi Kleen 已提交
1076
			!no_way_out)
1077 1078 1079 1080 1081
			continue;

		/*
		 * Set taint even when machine check was not enabled.
		 */
1082
		add_taint(TAINT_MACHINE_CHECK, LOCKDEP_NOW_UNRELIABLE);
1083

1084
		severity = mce_severity(&m, cfg->tolerant, NULL, true);
1085

A
Andi Kleen 已提交
1086
		/*
1087 1088
		 * When machine check was for corrected/deferred handler don't
		 * touch, unless we're panicing.
A
Andi Kleen 已提交
1089
		 */
1090 1091
		if ((severity == MCE_KEEP_SEVERITY ||
		     severity == MCE_UCNA_SEVERITY) && !no_way_out)
A
Andi Kleen 已提交
1092 1093 1094
			continue;
		__set_bit(i, toclear);
		if (severity == MCE_NO_SEVERITY) {
1095 1096 1097 1098 1099
			/*
			 * Machine check event was not enabled. Clear, but
			 * ignore.
			 */
			continue;
L
Linus Torvalds 已提交
1100 1101
		}

1102
		mce_read_aux(&m, i);
L
Linus Torvalds 已提交
1103

1104 1105
		/* assuming valid severity level != 0 */
		m.severity = severity;
1106

1107
		mce_log(&m);
L
Linus Torvalds 已提交
1108

1109 1110 1111
		if (severity > worst) {
			*final = m;
			worst = severity;
L
Linus Torvalds 已提交
1112 1113 1114
		}
	}

1115 1116 1117
	/* mce_clear_state will clear *final, save locally for use later */
	m = *final;

1118 1119 1120
	if (!no_way_out)
		mce_clear_state(toclear);

I
Ingo Molnar 已提交
1121
	/*
1122 1123
	 * Do most of the synchronization with other CPUs.
	 * When there's any problem use only local no_way_out state.
I
Ingo Molnar 已提交
1124
	 */
A
Ashok Raj 已提交
1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136
	if (!lmce) {
		if (mce_end(order) < 0)
			no_way_out = worst >= MCE_PANIC_SEVERITY;
	} else {
		/*
		 * Local MCE skipped calling mce_reign()
		 * If we found a fatal error, we need to panic here.
		 */
		 if (worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
			mce_panic("Machine check from unknown source",
				NULL, NULL);
	}
1137 1138

	/*
1139 1140 1141 1142
	 * At insane "tolerant" levels we take no action. Otherwise
	 * we only die if we have no other choice. For less serious
	 * issues we try to recover, or limit damage to the current
	 * process.
1143
	 */
1144
	if (cfg->tolerant < 3) {
1145 1146 1147
		if (no_way_out)
			mce_panic("Fatal machine check on current CPU", &m, msg);
		if (worst == MCE_AR_SEVERITY) {
1148 1149 1150
			recover_paddr = m.addr;
			if (!(m.mcgstatus & MCG_STATUS_RIPV))
				flags |= MF_MUST_KILL;
1151 1152 1153 1154
		} else if (kill_it) {
			force_sig(SIGBUS, current);
		}
	}
1155

1156 1157
	if (worst > 0)
		mce_report_event(regs);
1158
	mce_wrmsrl(MSR_IA32_MCG_STATUS, 0);
1159
out:
1160
	sync_core();
1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180

	if (recover_paddr == ~0ull)
		goto done;

	pr_err("Uncorrected hardware memory error in user-access at %llx",
		 recover_paddr);
	/*
	 * We must call memory_failure() here even if the current process is
	 * doomed. We still need to mark the page as poisoned and alert any
	 * other users of the page.
	 */
	ist_begin_non_atomic(regs);
	local_irq_enable();
	if (memory_failure(recover_paddr >> PAGE_SHIFT, MCE_VECTOR, flags) < 0) {
		pr_err("Memory error not recovered");
		force_sig(SIGBUS, current);
	}
	local_irq_disable();
	ist_end_non_atomic();
done:
1181
	ist_exit(regs);
L
Linus Torvalds 已提交
1182
}
1183
EXPORT_SYMBOL_GPL(do_machine_check);
L
Linus Torvalds 已提交
1184

1185 1186
#ifndef CONFIG_MEMORY_FAILURE
int memory_failure(unsigned long pfn, int vector, int flags)
1187
{
1188 1189
	/* mce_severity() should not hand us an ACTION_REQUIRED error */
	BUG_ON(flags & MF_ACTION_REQUIRED);
1190 1191 1192
	pr_err("Uncorrected memory error in page 0x%lx ignored\n"
	       "Rebuild kernel with CONFIG_MEMORY_FAILURE=y for smarter handling\n",
	       pfn);
1193 1194

	return 0;
1195
}
1196
#endif
1197

1198 1199 1200
/*
 * Action optional processing happens here (picking up
 * from the list of faulting pages that do_machine_check()
1201
 * placed into the genpool).
1202
 */
1203 1204
static void mce_process_work(struct work_struct *dummy)
{
1205
	mce_gen_pool_process();
1206 1207
}

1208 1209 1210
#ifdef CONFIG_X86_MCE_INTEL
/***
 * mce_log_therm_throt_event - Logs the thermal throttling event to mcelog
S
Simon Arlott 已提交
1211
 * @cpu: The CPU on which the event occurred.
1212 1213 1214 1215 1216 1217 1218 1219 1220 1221
 * @status: Event status information
 *
 * This function should be called by the thermal interrupt after the
 * event has been processed and the decision was made to log the event
 * further.
 *
 * The status parameter will be saved to the 'status' field of 'struct mce'
 * and historically has been the register value of the
 * MSR_IA32_THERMAL_STATUS (Intel) msr.
 */
1222
void mce_log_therm_throt_event(__u64 status)
1223 1224 1225
{
	struct mce m;

1226
	mce_setup(&m);
1227 1228 1229 1230 1231 1232
	m.bank = MCE_THERMAL_BANK;
	m.status = status;
	mce_log(&m);
}
#endif /* CONFIG_X86_MCE_INTEL */

L
Linus Torvalds 已提交
1233
/*
1234 1235 1236
 * Periodic polling timer for "silent" machine check errors.  If the
 * poller finds an MCE, poll 2x faster.  When the poller finds no more
 * errors, poll 2x slower (up to check_interval seconds).
L
Linus Torvalds 已提交
1237
 */
1238
static unsigned long check_interval = INITIAL_CHECK_INTERVAL;
I
Ingo Molnar 已提交
1239

T
Thomas Gleixner 已提交
1240
static DEFINE_PER_CPU(unsigned long, mce_next_interval); /* in jiffies */
1241
static DEFINE_PER_CPU(struct timer_list, mce_timer);
L
Linus Torvalds 已提交
1242

C
Chen Gong 已提交
1243 1244 1245 1246 1247
static unsigned long mce_adjust_timer_default(unsigned long interval)
{
	return interval;
}

1248
static unsigned long (*mce_adjust_timer)(unsigned long interval) = mce_adjust_timer_default;
C
Chen Gong 已提交
1249

1250
static void __restart_timer(struct timer_list *t, unsigned long interval)
1251
{
1252 1253
	unsigned long when = jiffies + interval;
	unsigned long flags;
1254

1255
	local_irq_save(flags);
1256

1257 1258 1259 1260 1261 1262 1263 1264 1265
	if (timer_pending(t)) {
		if (time_before(when, t->expires))
			mod_timer_pinned(t, when);
	} else {
		t->expires = round_jiffies(when);
		add_timer_on(t, smp_processor_id());
	}

	local_irq_restore(flags);
1266 1267
}

T
Thomas Gleixner 已提交
1268
static void mce_timer_fn(unsigned long data)
L
Linus Torvalds 已提交
1269
{
1270
	struct timer_list *t = this_cpu_ptr(&mce_timer);
1271
	int cpu = smp_processor_id();
T
Thomas Gleixner 已提交
1272
	unsigned long iv;
1273

1274 1275 1276
	WARN_ON(cpu != data);

	iv = __this_cpu_read(mce_next_interval);
1277

1278
	if (mce_available(this_cpu_ptr(&cpu_info))) {
1279 1280 1281 1282 1283 1284
		machine_check_poll(MCP_TIMESTAMP, this_cpu_ptr(&mce_poll_banks));

		if (mce_intel_cmci_poll()) {
			iv = mce_adjust_timer(iv);
			goto done;
		}
I
Ingo Molnar 已提交
1285
	}
L
Linus Torvalds 已提交
1286 1287

	/*
1288 1289
	 * Alert userspace if needed. If we logged an MCE, reduce the polling
	 * interval, otherwise increase the polling interval.
L
Linus Torvalds 已提交
1290
	 */
1291
	if (mce_notify_irq())
1292
		iv = max(iv / 2, (unsigned long) HZ/100);
1293
	else
T
Thomas Gleixner 已提交
1294
		iv = min(iv * 2, round_jiffies_relative(check_interval * HZ));
1295 1296

done:
T
Thomas Gleixner 已提交
1297
	__this_cpu_write(mce_next_interval, iv);
1298
	__restart_timer(t, iv);
C
Chen Gong 已提交
1299
}
1300

C
Chen Gong 已提交
1301 1302 1303 1304 1305
/*
 * Ensure that the timer is firing in @interval from now.
 */
void mce_timer_kick(unsigned long interval)
{
1306
	struct timer_list *t = this_cpu_ptr(&mce_timer);
C
Chen Gong 已提交
1307 1308
	unsigned long iv = __this_cpu_read(mce_next_interval);

1309 1310
	__restart_timer(t, interval);

C
Chen Gong 已提交
1311 1312
	if (interval < iv)
		__this_cpu_write(mce_next_interval, interval);
1313 1314
}

1315 1316 1317 1318 1319 1320 1321 1322 1323
/* Must not be called in IRQ context where del_timer_sync() can deadlock */
static void mce_timer_delete_all(void)
{
	int cpu;

	for_each_online_cpu(cpu)
		del_timer_sync(&per_cpu(mce_timer, cpu));
}

1324 1325
static void mce_do_trigger(struct work_struct *work)
{
1326
	call_usermodehelper(mce_helper, mce_helper_argv, NULL, UMH_NO_WAIT);
1327 1328 1329 1330
}

static DECLARE_WORK(mce_trigger_work, mce_do_trigger);

1331
/*
1332 1333 1334
 * Notify the user(s) about new machine check events.
 * Can be called from interrupt context, but not from machine check/NMI
 * context.
1335
 */
1336
int mce_notify_irq(void)
1337
{
1338 1339 1340
	/* Not more than two messages every minute */
	static DEFINE_RATELIMIT_STATE(ratelimit, 60*HZ, 2);

1341
	if (test_and_clear_bit(0, &mce_need_notify)) {
1342 1343
		/* wake processes polling /dev/mcelog */
		wake_up_interruptible(&mce_chrdev_wait);
1344

1345
		if (mce_helper[0])
1346
			schedule_work(&mce_trigger_work);
1347

1348
		if (__ratelimit(&ratelimit))
H
Huang Ying 已提交
1349
			pr_info(HW_ERR "Machine check events logged\n");
1350 1351

		return 1;
L
Linus Torvalds 已提交
1352
	}
1353 1354
	return 0;
}
1355
EXPORT_SYMBOL_GPL(mce_notify_irq);
1356

1357
static int __mcheck_cpu_mce_banks_init(void)
1358 1359
{
	int i;
1360
	u8 num_banks = mca_cfg.banks;
1361

1362
	mce_banks = kzalloc(num_banks * sizeof(struct mce_bank), GFP_KERNEL);
1363 1364
	if (!mce_banks)
		return -ENOMEM;
1365 1366

	for (i = 0; i < num_banks; i++) {
1367
		struct mce_bank *b = &mce_banks[i];
1368

1369 1370 1371 1372 1373 1374
		b->ctl = -1ULL;
		b->init = 1;
	}
	return 0;
}

1375
/*
L
Linus Torvalds 已提交
1376 1377
 * Initialize Machine Checks for a CPU.
 */
1378
static int __mcheck_cpu_cap_init(void)
L
Linus Torvalds 已提交
1379
{
1380
	unsigned b;
I
Ingo Molnar 已提交
1381
	u64 cap;
L
Linus Torvalds 已提交
1382 1383

	rdmsrl(MSR_IA32_MCG_CAP, cap);
1384 1385

	b = cap & MCG_BANKCNT_MASK;
1386
	if (!mca_cfg.banks)
1387
		pr_info("CPU supports %d MCE banks\n", b);
1388

1389
	if (b > MAX_NR_BANKS) {
1390
		pr_warn("Using only %u machine check banks out of %u\n",
1391 1392 1393 1394 1395
			MAX_NR_BANKS, b);
		b = MAX_NR_BANKS;
	}

	/* Don't support asymmetric configurations today */
1396 1397 1398
	WARN_ON(mca_cfg.banks != 0 && b != mca_cfg.banks);
	mca_cfg.banks = b;

1399
	if (!mce_banks) {
H
Hidetoshi Seto 已提交
1400
		int err = __mcheck_cpu_mce_banks_init();
1401

1402 1403
		if (err)
			return err;
L
Linus Torvalds 已提交
1404
	}
1405

1406
	/* Use accurate RIP reporting if available. */
1407
	if ((cap & MCG_EXT_P) && MCG_EXT_CNT(cap) >= 9)
1408
		mca_cfg.rip_msr = MSR_IA32_MCG_EIP;
L
Linus Torvalds 已提交
1409

A
Andi Kleen 已提交
1410
	if (cap & MCG_SER_P)
1411
		mca_cfg.ser = true;
A
Andi Kleen 已提交
1412

1413 1414 1415
	return 0;
}

1416
static void __mcheck_cpu_init_generic(void)
1417
{
1418
	enum mcp_flags m_fl = 0;
I
Ingo Molnar 已提交
1419
	mce_banks_t all_banks;
1420 1421 1422
	u64 cap;
	int i;

1423 1424 1425
	if (!mca_cfg.bootlog)
		m_fl = MCP_DONTLOG;

1426 1427 1428
	/*
	 * Log the machine checks left over from the previous reset.
	 */
1429
	bitmap_fill(all_banks, MAX_NR_BANKS);
1430
	machine_check_poll(MCP_UC | m_fl, &all_banks);
L
Linus Torvalds 已提交
1431

A
Andy Lutomirski 已提交
1432
	cr4_set_bits(X86_CR4_MCE);
L
Linus Torvalds 已提交
1433

1434
	rdmsrl(MSR_IA32_MCG_CAP, cap);
L
Linus Torvalds 已提交
1435 1436 1437
	if (cap & MCG_CTL_P)
		wrmsr(MSR_IA32_MCG_CTL, 0xffffffff, 0xffffffff);

1438
	for (i = 0; i < mca_cfg.banks; i++) {
1439
		struct mce_bank *b = &mce_banks[i];
1440

1441
		if (!b->init)
1442
			continue;
1443 1444
		wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
		wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
1445
	}
L
Linus Torvalds 已提交
1446 1447
}

1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475
/*
 * During IFU recovery Sandy Bridge -EP4S processors set the RIPV and
 * EIPV bits in MCG_STATUS to zero on the affected logical processor (SDM
 * Vol 3B Table 15-20). But this confuses both the code that determines
 * whether the machine check occurred in kernel or user mode, and also
 * the severity assessment code. Pretend that EIPV was set, and take the
 * ip/cs values from the pt_regs that mce_gather_info() ignored earlier.
 */
static void quirk_sandybridge_ifu(int bank, struct mce *m, struct pt_regs *regs)
{
	if (bank != 0)
		return;
	if ((m->mcgstatus & (MCG_STATUS_EIPV|MCG_STATUS_RIPV)) != 0)
		return;
	if ((m->status & (MCI_STATUS_OVER|MCI_STATUS_UC|
		          MCI_STATUS_EN|MCI_STATUS_MISCV|MCI_STATUS_ADDRV|
			  MCI_STATUS_PCC|MCI_STATUS_S|MCI_STATUS_AR|
			  MCACOD)) !=
			 (MCI_STATUS_UC|MCI_STATUS_EN|
			  MCI_STATUS_MISCV|MCI_STATUS_ADDRV|MCI_STATUS_S|
			  MCI_STATUS_AR|MCACOD_INSTR))
		return;

	m->mcgstatus |= MCG_STATUS_EIPV;
	m->ip = regs->ip;
	m->cs = regs->cs;
}

L
Linus Torvalds 已提交
1476
/* Add per CPU specific workarounds here */
1477
static int __mcheck_cpu_apply_quirks(struct cpuinfo_x86 *c)
1478
{
1479 1480
	struct mca_config *cfg = &mca_cfg;

1481
	if (c->x86_vendor == X86_VENDOR_UNKNOWN) {
1482
		pr_info("unknown CPU type - not enabling MCE support\n");
1483 1484 1485
		return -EOPNOTSUPP;
	}

L
Linus Torvalds 已提交
1486
	/* This should be disabled by the BIOS, but isn't always */
1487
	if (c->x86_vendor == X86_VENDOR_AMD) {
1488
		if (c->x86 == 15 && cfg->banks > 4) {
I
Ingo Molnar 已提交
1489 1490 1491 1492 1493
			/*
			 * disable GART TBL walk error reporting, which
			 * trips off incorrectly with the IOMMU & 3ware
			 * & Cerberus:
			 */
1494
			clear_bit(10, (unsigned long *)&mce_banks[4].ctl);
I
Ingo Molnar 已提交
1495
		}
1496
		if (c->x86 <= 17 && cfg->bootlog < 0) {
I
Ingo Molnar 已提交
1497 1498 1499 1500
			/*
			 * Lots of broken BIOS around that don't clear them
			 * by default and leave crap in there. Don't log:
			 */
1501
			cfg->bootlog = 0;
I
Ingo Molnar 已提交
1502
		}
1503 1504 1505 1506
		/*
		 * Various K7s with broken bank 0 around. Always disable
		 * by default.
		 */
1507
		if (c->x86 == 6 && cfg->banks > 0)
1508
			mce_banks[0].ctl = 0;
1509

1510 1511 1512 1513 1514 1515 1516
		/*
		 * overflow_recov is supported for F15h Models 00h-0fh
		 * even though we don't have a CPUID bit for it.
		 */
		if (c->x86 == 0x15 && c->x86_model <= 0xf)
			mce_flags.overflow_recov = 1;

1517 1518 1519 1520 1521 1522 1523 1524 1525 1526
		/*
		 * Turn off MC4_MISC thresholding banks on those models since
		 * they're not supported there.
		 */
		if (c->x86 == 0x15 &&
		    (c->x86_model >= 0x10 && c->x86_model <= 0x1f)) {
			int i;
			u64 hwcr;
			bool need_toggle;
			u32 msrs[] = {
1527 1528
				0x00000413, /* MC4_MISC0 */
				0xc0000408, /* MC4_MISC1 */
1529
			};
1530

1531
			rdmsrl(MSR_K7_HWCR, hwcr);
1532

1533 1534
			/* McStatusWrEn has to be set */
			need_toggle = !(hwcr & BIT(18));
1535

1536 1537
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr | BIT(18));
1538

1539 1540 1541
			/* Clear CntP bit safely */
			for (i = 0; i < ARRAY_SIZE(msrs); i++)
				msr_clear_bit(msrs[i], 62);
1542

1543 1544 1545 1546
			/* restore old settings */
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr);
		}
L
Linus Torvalds 已提交
1547
	}
1548

1549 1550 1551 1552 1553 1554 1555 1556 1557 1558
	if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * SDM documents that on family 6 bank 0 should not be written
		 * because it aliases to another special BIOS controlled
		 * register.
		 * But it's not aliased anymore on model 0x1a+
		 * Don't ignore bank 0 completely because there could be a
		 * valid event later, merely don't write CTL0.
		 */

1559
		if (c->x86 == 6 && c->x86_model < 0x1A && cfg->banks > 0)
1560
			mce_banks[0].init = 0;
1561 1562 1563 1564 1565 1566

		/*
		 * All newer Intel systems support MCE broadcasting. Enable
		 * synchronization with a one second timeout.
		 */
		if ((c->x86 > 6 || (c->x86 == 6 && c->x86_model >= 0xe)) &&
1567 1568
			cfg->monarch_timeout < 0)
			cfg->monarch_timeout = USEC_PER_SEC;
1569

1570 1571 1572 1573
		/*
		 * There are also broken BIOSes on some Pentium M and
		 * earlier systems:
		 */
1574 1575
		if (c->x86 == 6 && c->x86_model <= 13 && cfg->bootlog < 0)
			cfg->bootlog = 0;
1576 1577 1578

		if (c->x86 == 6 && c->x86_model == 45)
			quirk_no_way_out = quirk_sandybridge_ifu;
1579
	}
1580 1581 1582
	if (cfg->monarch_timeout < 0)
		cfg->monarch_timeout = 0;
	if (cfg->bootlog != 0)
1583
		cfg->panic_timeout = 30;
1584 1585

	return 0;
1586
}
L
Linus Torvalds 已提交
1587

1588
static int __mcheck_cpu_ancient_init(struct cpuinfo_x86 *c)
1589 1590
{
	if (c->x86 != 5)
1591 1592
		return 0;

1593 1594
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
1595
		intel_p5_mcheck_init(c);
1596
		return 1;
1597 1598 1599
		break;
	case X86_VENDOR_CENTAUR:
		winchip_mcheck_init(c);
1600
		return 1;
1601
		break;
1602 1603
	default:
		return 0;
1604
	}
1605 1606

	return 0;
1607 1608
}

1609
static void __mcheck_cpu_init_vendor(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1610 1611 1612 1613
{
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		mce_intel_feature_init(c);
1614
		mce_adjust_timer = cmci_intel_adjust_timer;
L
Linus Torvalds 已提交
1615
		break;
1616 1617 1618 1619

	case X86_VENDOR_AMD: {
		u32 ebx = cpuid_ebx(0x80000007);

1620
		mce_amd_feature_init(c);
1621 1622
		mce_flags.overflow_recov = !!(ebx & BIT(0));
		mce_flags.succor	 = !!(ebx & BIT(1));
1623 1624
		mce_flags.smca		 = !!(ebx & BIT(3));

1625
		break;
1626 1627
		}

L
Linus Torvalds 已提交
1628 1629 1630 1631 1632
	default:
		break;
	}
}

1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643
static void __mcheck_cpu_clear_vendor(struct cpuinfo_x86 *c)
{
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		mce_intel_feature_clear(c);
		break;
	default:
		break;
	}
}

T
Thomas Gleixner 已提交
1644
static void mce_start_timer(unsigned int cpu, struct timer_list *t)
1645
{
1646
	unsigned long iv = check_interval * HZ;
1647

1648
	if (mca_cfg.ignore_ce || !iv)
1649 1650
		return;

1651 1652
	per_cpu(mce_next_interval, cpu) = iv;

T
Thomas Gleixner 已提交
1653
	t->expires = round_jiffies(jiffies + iv);
1654
	add_timer_on(t, cpu);
1655 1656
}

T
Thomas Gleixner 已提交
1657 1658
static void __mcheck_cpu_init_timer(void)
{
1659
	struct timer_list *t = this_cpu_ptr(&mce_timer);
T
Thomas Gleixner 已提交
1660 1661 1662 1663 1664 1665
	unsigned int cpu = smp_processor_id();

	setup_timer(t, mce_timer_fn, cpu);
	mce_start_timer(cpu, t);
}

A
Andi Kleen 已提交
1666 1667 1668
/* Handle unconfigured int18 (should never happen) */
static void unexpected_machine_check(struct pt_regs *regs, long error_code)
{
1669
	pr_err("CPU#%d: Unexpected int18 (Machine Check)\n",
A
Andi Kleen 已提交
1670 1671 1672 1673 1674 1675 1676
	       smp_processor_id());
}

/* Call the installed machine check handler for this CPU setup. */
void (*machine_check_vector)(struct pt_regs *, long error_code) =
						unexpected_machine_check;

1677
/*
L
Linus Torvalds 已提交
1678
 * Called for each booted CPU to set up machine checks.
I
Ingo Molnar 已提交
1679
 * Must be called with preempt off:
L
Linus Torvalds 已提交
1680
 */
1681
void mcheck_cpu_init(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1682
{
1683
	if (mca_cfg.disabled)
1684 1685
		return;

1686 1687
	if (__mcheck_cpu_ancient_init(c))
		return;
1688

1689
	if (!mce_available(c))
L
Linus Torvalds 已提交
1690 1691
		return;

1692
	if (__mcheck_cpu_cap_init() < 0 || __mcheck_cpu_apply_quirks(c) < 0) {
1693
		mca_cfg.disabled = true;
1694 1695 1696
		return;
	}

1697 1698 1699 1700 1701 1702
	if (mce_gen_pool_init()) {
		mca_cfg.disabled = true;
		pr_emerg("Couldn't allocate MCE records pool!\n");
		return;
	}

1703 1704
	machine_check_vector = do_machine_check;

1705 1706 1707
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_vendor(c);
	__mcheck_cpu_init_timer();
L
Linus Torvalds 已提交
1708 1709
}

1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726
/*
 * Called for each booted CPU to clear some machine checks opt-ins
 */
void mcheck_cpu_clear(struct cpuinfo_x86 *c)
{
	if (mca_cfg.disabled)
		return;

	if (!mce_available(c))
		return;

	/*
	 * Possibly to clear general settings generic to x86
	 * __mcheck_cpu_clear_generic(c);
	 */
	__mcheck_cpu_clear_vendor(c);

L
Linus Torvalds 已提交
1727 1728 1729
}

/*
1730
 * mce_chrdev: Character device /dev/mcelog to read and clear the MCE log.
L
Linus Torvalds 已提交
1731 1732
 */

1733 1734 1735
static DEFINE_SPINLOCK(mce_chrdev_state_lock);
static int mce_chrdev_open_count;	/* #times opened */
static int mce_chrdev_open_exclu;	/* already open exclusive? */
T
Tim Hockin 已提交
1736

1737
static int mce_chrdev_open(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1738
{
1739
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1740

1741 1742 1743
	if (mce_chrdev_open_exclu ||
	    (mce_chrdev_open_count && (file->f_flags & O_EXCL))) {
		spin_unlock(&mce_chrdev_state_lock);
I
Ingo Molnar 已提交
1744

T
Tim Hockin 已提交
1745 1746 1747 1748
		return -EBUSY;
	}

	if (file->f_flags & O_EXCL)
1749 1750
		mce_chrdev_open_exclu = 1;
	mce_chrdev_open_count++;
T
Tim Hockin 已提交
1751

1752
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1753

1754
	return nonseekable_open(inode, file);
T
Tim Hockin 已提交
1755 1756
}

1757
static int mce_chrdev_release(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1758
{
1759
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1760

1761 1762
	mce_chrdev_open_count--;
	mce_chrdev_open_exclu = 0;
T
Tim Hockin 已提交
1763

1764
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1765 1766 1767 1768

	return 0;
}

1769 1770
static void collect_tscs(void *data)
{
L
Linus Torvalds 已提交
1771
	unsigned long *cpu_tsc = (unsigned long *)data;
1772

1773
	cpu_tsc[smp_processor_id()] = rdtsc();
1774
}
L
Linus Torvalds 已提交
1775

1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791
static int mce_apei_read_done;

/* Collect MCE record of previous boot in persistent storage via APEI ERST. */
static int __mce_read_apei(char __user **ubuf, size_t usize)
{
	int rc;
	u64 record_id;
	struct mce m;

	if (usize < sizeof(struct mce))
		return -EINVAL;

	rc = apei_read_mce(&m, &record_id);
	/* Error or no more MCE record */
	if (rc <= 0) {
		mce_apei_read_done = 1;
1792 1793 1794 1795 1796 1797
		/*
		 * When ERST is disabled, mce_chrdev_read() should return
		 * "no record" instead of "no device."
		 */
		if (rc == -ENODEV)
			return 0;
1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818
		return rc;
	}
	rc = -EFAULT;
	if (copy_to_user(*ubuf, &m, sizeof(struct mce)))
		return rc;
	/*
	 * In fact, we should have cleared the record after that has
	 * been flushed to the disk or sent to network in
	 * /sbin/mcelog, but we have no interface to support that now,
	 * so just clear it to avoid duplication.
	 */
	rc = apei_clear_mce(record_id);
	if (rc) {
		mce_apei_read_done = 1;
		return rc;
	}
	*ubuf += sizeof(struct mce);

	return 0;
}

1819 1820
static ssize_t mce_chrdev_read(struct file *filp, char __user *ubuf,
				size_t usize, loff_t *off)
L
Linus Torvalds 已提交
1821
{
I
Ingo Molnar 已提交
1822
	char __user *buf = ubuf;
1823
	unsigned long *cpu_tsc;
1824
	unsigned prev, next;
L
Linus Torvalds 已提交
1825 1826
	int i, err;

1827
	cpu_tsc = kmalloc(nr_cpu_ids * sizeof(long), GFP_KERNEL);
1828 1829 1830
	if (!cpu_tsc)
		return -ENOMEM;

1831
	mutex_lock(&mce_chrdev_read_mutex);
1832 1833 1834 1835 1836 1837 1838

	if (!mce_apei_read_done) {
		err = __mce_read_apei(&buf, usize);
		if (err || buf != ubuf)
			goto out;
	}

1839
	next = mce_log_get_idx_check(mcelog.next);
L
Linus Torvalds 已提交
1840 1841

	/* Only supports full reads right now */
1842 1843 1844
	err = -EINVAL;
	if (*off != 0 || usize < MCE_LOG_LEN*sizeof(struct mce))
		goto out;
L
Linus Torvalds 已提交
1845 1846

	err = 0;
1847 1848 1849 1850
	prev = 0;
	do {
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;
H
Hidetoshi Seto 已提交
1851
			struct mce *m = &mcelog.entry[i];
1852

H
Hidetoshi Seto 已提交
1853
			while (!m->finished) {
1854
				if (time_after_eq(jiffies, start + 2)) {
H
Hidetoshi Seto 已提交
1855
					memset(m, 0, sizeof(*m));
1856 1857 1858
					goto timeout;
				}
				cpu_relax();
1859
			}
1860
			smp_rmb();
H
Hidetoshi Seto 已提交
1861 1862
			err |= copy_to_user(buf, m, sizeof(*m));
			buf += sizeof(*m);
1863 1864
timeout:
			;
1865
		}
L
Linus Torvalds 已提交
1866

1867 1868 1869 1870 1871
		memset(mcelog.entry + prev, 0,
		       (next - prev) * sizeof(struct mce));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
L
Linus Torvalds 已提交
1872

1873
	synchronize_sched();
L
Linus Torvalds 已提交
1874

1875 1876 1877 1878
	/*
	 * Collect entries that were still getting written before the
	 * synchronize.
	 */
1879
	on_each_cpu(collect_tscs, cpu_tsc, 1);
I
Ingo Molnar 已提交
1880

1881
	for (i = next; i < MCE_LOG_LEN; i++) {
H
Hidetoshi Seto 已提交
1882 1883 1884 1885
		struct mce *m = &mcelog.entry[i];

		if (m->finished && m->tsc < cpu_tsc[m->cpu]) {
			err |= copy_to_user(buf, m, sizeof(*m));
L
Linus Torvalds 已提交
1886
			smp_rmb();
H
Hidetoshi Seto 已提交
1887 1888
			buf += sizeof(*m);
			memset(m, 0, sizeof(*m));
L
Linus Torvalds 已提交
1889
		}
1890
	}
1891 1892 1893 1894 1895

	if (err)
		err = -EFAULT;

out:
1896
	mutex_unlock(&mce_chrdev_read_mutex);
1897
	kfree(cpu_tsc);
I
Ingo Molnar 已提交
1898

1899
	return err ? err : buf - ubuf;
L
Linus Torvalds 已提交
1900 1901
}

1902
static unsigned int mce_chrdev_poll(struct file *file, poll_table *wait)
1903
{
1904
	poll_wait(file, &mce_chrdev_wait, wait);
1905
	if (READ_ONCE(mcelog.next))
1906
		return POLLIN | POLLRDNORM;
1907 1908
	if (!mce_apei_read_done && apei_check_mce())
		return POLLIN | POLLRDNORM;
1909 1910 1911
	return 0;
}

1912 1913
static long mce_chrdev_ioctl(struct file *f, unsigned int cmd,
				unsigned long arg)
L
Linus Torvalds 已提交
1914 1915
{
	int __user *p = (int __user *)arg;
1916

L
Linus Torvalds 已提交
1917
	if (!capable(CAP_SYS_ADMIN))
1918
		return -EPERM;
I
Ingo Molnar 已提交
1919

L
Linus Torvalds 已提交
1920
	switch (cmd) {
1921
	case MCE_GET_RECORD_LEN:
L
Linus Torvalds 已提交
1922 1923
		return put_user(sizeof(struct mce), p);
	case MCE_GET_LOG_LEN:
1924
		return put_user(MCE_LOG_LEN, p);
L
Linus Torvalds 已提交
1925 1926
	case MCE_GETCLEAR_FLAGS: {
		unsigned flags;
1927 1928

		do {
L
Linus Torvalds 已提交
1929
			flags = mcelog.flags;
1930
		} while (cmpxchg(&mcelog.flags, flags, 0) != flags);
I
Ingo Molnar 已提交
1931

1932
		return put_user(flags, p);
L
Linus Torvalds 已提交
1933 1934
	}
	default:
1935 1936
		return -ENOTTY;
	}
L
Linus Torvalds 已提交
1937 1938
}

1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949
static ssize_t (*mce_write)(struct file *filp, const char __user *ubuf,
			    size_t usize, loff_t *off);

void register_mce_write_callback(ssize_t (*fn)(struct file *filp,
			     const char __user *ubuf,
			     size_t usize, loff_t *off))
{
	mce_write = fn;
}
EXPORT_SYMBOL_GPL(register_mce_write_callback);

1950 1951
static ssize_t mce_chrdev_write(struct file *filp, const char __user *ubuf,
				size_t usize, loff_t *off)
1952 1953 1954 1955 1956 1957 1958 1959
{
	if (mce_write)
		return mce_write(filp, ubuf, usize, off);
	else
		return -EINVAL;
}

static const struct file_operations mce_chrdev_ops = {
1960 1961 1962
	.open			= mce_chrdev_open,
	.release		= mce_chrdev_release,
	.read			= mce_chrdev_read,
1963
	.write			= mce_chrdev_write,
1964 1965 1966
	.poll			= mce_chrdev_poll,
	.unlocked_ioctl		= mce_chrdev_ioctl,
	.llseek			= no_llseek,
L
Linus Torvalds 已提交
1967 1968
};

1969
static struct miscdevice mce_chrdev_device = {
L
Linus Torvalds 已提交
1970 1971 1972 1973 1974
	MISC_MCELOG_MINOR,
	"mcelog",
	&mce_chrdev_ops,
};

1975 1976 1977
static void __mce_disable_bank(void *arg)
{
	int bank = *((int *)arg);
1978
	__clear_bit(bank, this_cpu_ptr(mce_poll_banks));
1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993
	cmci_disable_bank(bank);
}

void mce_disable_bank(int bank)
{
	if (bank >= mca_cfg.banks) {
		pr_warn(FW_BUG
			"Ignoring request to disable invalid MCA bank %d.\n",
			bank);
		return;
	}
	set_bit(bank, mce_banks_ce_disabled);
	on_each_cpu(__mce_disable_bank, &bank, 1);
}

H
Hidetoshi Seto 已提交
1994
/*
1995 1996
 * mce=off Disables machine check
 * mce=no_cmci Disables CMCI
1997
 * mce=no_lmce Disables LMCE
1998 1999
 * mce=dont_log_ce Clears corrected events silently, no log created for CEs.
 * mce=ignore_ce Disables polling and CMCI, corrected events are not cleared.
2000 2001 2002
 * mce=TOLERANCELEVEL[,monarchtimeout] (number, see above)
 *	monarchtimeout is how long to wait for other CPUs on machine
 *	check, or 0 to not wait
H
Hidetoshi Seto 已提交
2003 2004
 * mce=bootlog Log MCEs from before booting. Disabled by default on AMD.
 * mce=nobootlog Don't log MCEs from before booting.
2005
 * mce=bios_cmci_threshold Don't program the CMCI threshold
H
Hidetoshi Seto 已提交
2006
 */
L
Linus Torvalds 已提交
2007 2008
static int __init mcheck_enable(char *str)
{
2009 2010
	struct mca_config *cfg = &mca_cfg;

2011
	if (*str == 0) {
2012
		enable_p5_mce();
2013 2014
		return 1;
	}
2015 2016
	if (*str == '=')
		str++;
L
Linus Torvalds 已提交
2017
	if (!strcmp(str, "off"))
2018
		cfg->disabled = true;
2019
	else if (!strcmp(str, "no_cmci"))
2020
		cfg->cmci_disabled = true;
2021 2022
	else if (!strcmp(str, "no_lmce"))
		cfg->lmce_disabled = true;
2023
	else if (!strcmp(str, "dont_log_ce"))
2024
		cfg->dont_log_ce = true;
2025
	else if (!strcmp(str, "ignore_ce"))
2026
		cfg->ignore_ce = true;
H
Hidetoshi Seto 已提交
2027
	else if (!strcmp(str, "bootlog") || !strcmp(str, "nobootlog"))
2028
		cfg->bootlog = (str[0] == 'b');
2029
	else if (!strcmp(str, "bios_cmci_threshold"))
2030
		cfg->bios_cmci_threshold = true;
2031
	else if (isdigit(str[0])) {
2032
		if (get_option(&str, &cfg->tolerant) == 2)
2033
			get_option(&str, &(cfg->monarch_timeout));
2034
	} else {
2035
		pr_info("mce argument %s ignored. Please use /sys\n", str);
H
Hidetoshi Seto 已提交
2036 2037
		return 0;
	}
2038
	return 1;
L
Linus Torvalds 已提交
2039
}
2040
__setup("mce", mcheck_enable);
L
Linus Torvalds 已提交
2041

2042
int __init mcheck_init(void)
2043
{
2044
	mcheck_intel_therm_init();
2045
	mce_register_decode_chain(&mce_srao_nb);
2046
	mcheck_vendor_init_severity();
2047

2048 2049 2050
	INIT_WORK(&mce_work, mce_process_work);
	init_irq_work(&mce_irq_work, mce_irq_work_cb);

2051 2052 2053
	return 0;
}

2054
/*
2055
 * mce_syscore: PM support
2056
 */
L
Linus Torvalds 已提交
2057

2058 2059 2060 2061
/*
 * Disable machine checks on suspend and shutdown. We can't really handle
 * them later.
 */
2062
static void mce_disable_error_reporting(void)
2063 2064 2065
{
	int i;

2066
	for (i = 0; i < mca_cfg.banks; i++) {
2067
		struct mce_bank *b = &mce_banks[i];
2068

2069
		if (b->init)
2070
			wrmsrl(MSR_IA32_MCx_CTL(i), 0);
2071
	}
2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086
	return;
}

static void vendor_disable_error_reporting(void)
{
	/*
	 * Don't clear on Intel CPUs. Some of these MSRs are socket-wide.
	 * Disabling them for just a single offlined CPU is bad, since it will
	 * inhibit reporting for all shared resources on the socket like the
	 * last level cache (LLC), the integrated memory controller (iMC), etc.
	 */
	if (boot_cpu_data.x86_vendor == X86_VENDOR_INTEL)
		return;

	mce_disable_error_reporting();
2087 2088
}

2089
static int mce_syscore_suspend(void)
2090
{
2091 2092
	vendor_disable_error_reporting();
	return 0;
2093 2094
}

2095
static void mce_syscore_shutdown(void)
2096
{
2097
	vendor_disable_error_reporting();
2098 2099
}

I
Ingo Molnar 已提交
2100 2101 2102 2103 2104
/*
 * On resume clear all MCE state. Don't want to see leftovers from the BIOS.
 * Only one CPU is active at this time, the others get re-added later using
 * CPU hotplug:
 */
2105
static void mce_syscore_resume(void)
L
Linus Torvalds 已提交
2106
{
2107
	__mcheck_cpu_init_generic();
2108
	__mcheck_cpu_init_vendor(raw_cpu_ptr(&cpu_info));
L
Linus Torvalds 已提交
2109 2110
}

2111
static struct syscore_ops mce_syscore_ops = {
2112 2113 2114
	.suspend	= mce_syscore_suspend,
	.shutdown	= mce_syscore_shutdown,
	.resume		= mce_syscore_resume,
2115 2116
};

2117
/*
2118
 * mce_device: Sysfs support
2119 2120
 */

2121 2122
static void mce_cpu_restart(void *data)
{
2123
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2124
		return;
2125 2126
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_timer();
2127 2128
}

L
Linus Torvalds 已提交
2129
/* Reinit MCEs after user configuration changes */
2130 2131
static void mce_restart(void)
{
2132
	mce_timer_delete_all();
2133
	on_each_cpu(mce_cpu_restart, NULL, 1);
L
Linus Torvalds 已提交
2134 2135
}

2136
/* Toggle features for corrected errors */
2137
static void mce_disable_cmci(void *data)
2138
{
2139
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2140 2141 2142 2143 2144 2145
		return;
	cmci_clear();
}

static void mce_enable_ce(void *all)
{
2146
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2147 2148 2149 2150
		return;
	cmci_reenable();
	cmci_recheck();
	if (all)
2151
		__mcheck_cpu_init_timer();
2152 2153
}

2154
static struct bus_type mce_subsys = {
I
Ingo Molnar 已提交
2155
	.name		= "machinecheck",
2156
	.dev_name	= "machinecheck",
L
Linus Torvalds 已提交
2157 2158
};

2159
DEFINE_PER_CPU(struct device *, mce_device);
I
Ingo Molnar 已提交
2160 2161

void (*threshold_cpu_callback)(unsigned long action, unsigned int cpu);
L
Linus Torvalds 已提交
2162

2163
static inline struct mce_bank *attr_to_bank(struct device_attribute *attr)
2164 2165 2166
{
	return container_of(attr, struct mce_bank, attr);
}
2167

2168
static ssize_t show_bank(struct device *s, struct device_attribute *attr,
2169 2170
			 char *buf)
{
2171
	return sprintf(buf, "%llx\n", attr_to_bank(attr)->ctl);
2172 2173
}

2174
static ssize_t set_bank(struct device *s, struct device_attribute *attr,
H
Hidetoshi Seto 已提交
2175
			const char *buf, size_t size)
2176
{
H
Hidetoshi Seto 已提交
2177
	u64 new;
I
Ingo Molnar 已提交
2178

2179
	if (kstrtou64(buf, 0, &new) < 0)
2180
		return -EINVAL;
I
Ingo Molnar 已提交
2181

2182
	attr_to_bank(attr)->ctl = new;
2183
	mce_restart();
I
Ingo Molnar 已提交
2184

H
Hidetoshi Seto 已提交
2185
	return size;
2186
}
2187

I
Ingo Molnar 已提交
2188
static ssize_t
2189
show_trigger(struct device *s, struct device_attribute *attr, char *buf)
2190
{
2191
	strcpy(buf, mce_helper);
2192
	strcat(buf, "\n");
2193
	return strlen(mce_helper) + 1;
2194 2195
}

2196
static ssize_t set_trigger(struct device *s, struct device_attribute *attr,
I
Ingo Molnar 已提交
2197
				const char *buf, size_t siz)
2198 2199
{
	char *p;
I
Ingo Molnar 已提交
2200

2201 2202 2203
	strncpy(mce_helper, buf, sizeof(mce_helper));
	mce_helper[sizeof(mce_helper)-1] = 0;
	p = strchr(mce_helper, '\n');
I
Ingo Molnar 已提交
2204

2205
	if (p)
I
Ingo Molnar 已提交
2206 2207
		*p = 0;

2208
	return strlen(mce_helper) + !!p;
2209 2210
}

2211 2212
static ssize_t set_ignore_ce(struct device *s,
			     struct device_attribute *attr,
2213 2214 2215 2216
			     const char *buf, size_t size)
{
	u64 new;

2217
	if (kstrtou64(buf, 0, &new) < 0)
2218 2219
		return -EINVAL;

2220
	if (mca_cfg.ignore_ce ^ !!new) {
2221 2222
		if (new) {
			/* disable ce features */
2223 2224
			mce_timer_delete_all();
			on_each_cpu(mce_disable_cmci, NULL, 1);
2225
			mca_cfg.ignore_ce = true;
2226 2227
		} else {
			/* enable ce features */
2228
			mca_cfg.ignore_ce = false;
2229 2230 2231 2232 2233 2234
			on_each_cpu(mce_enable_ce, (void *)1, 1);
		}
	}
	return size;
}

2235 2236
static ssize_t set_cmci_disabled(struct device *s,
				 struct device_attribute *attr,
2237 2238 2239 2240
				 const char *buf, size_t size)
{
	u64 new;

2241
	if (kstrtou64(buf, 0, &new) < 0)
2242 2243
		return -EINVAL;

2244
	if (mca_cfg.cmci_disabled ^ !!new) {
2245 2246
		if (new) {
			/* disable cmci */
2247
			on_each_cpu(mce_disable_cmci, NULL, 1);
2248
			mca_cfg.cmci_disabled = true;
2249 2250
		} else {
			/* enable cmci */
2251
			mca_cfg.cmci_disabled = false;
2252 2253 2254 2255 2256 2257
			on_each_cpu(mce_enable_ce, NULL, 1);
		}
	}
	return size;
}

2258 2259
static ssize_t store_int_with_restart(struct device *s,
				      struct device_attribute *attr,
2260 2261
				      const char *buf, size_t size)
{
2262
	ssize_t ret = device_store_int(s, attr, buf, size);
2263 2264 2265 2266
	mce_restart();
	return ret;
}

2267
static DEVICE_ATTR(trigger, 0644, show_trigger, set_trigger);
2268
static DEVICE_INT_ATTR(tolerant, 0644, mca_cfg.tolerant);
2269
static DEVICE_INT_ATTR(monarch_timeout, 0644, mca_cfg.monarch_timeout);
2270
static DEVICE_BOOL_ATTR(dont_log_ce, 0644, mca_cfg.dont_log_ce);
I
Ingo Molnar 已提交
2271

2272 2273
static struct dev_ext_attribute dev_attr_check_interval = {
	__ATTR(check_interval, 0644, device_show_int, store_int_with_restart),
2274 2275
	&check_interval
};
I
Ingo Molnar 已提交
2276

2277
static struct dev_ext_attribute dev_attr_ignore_ce = {
2278 2279
	__ATTR(ignore_ce, 0644, device_show_bool, set_ignore_ce),
	&mca_cfg.ignore_ce
2280 2281
};

2282
static struct dev_ext_attribute dev_attr_cmci_disabled = {
2283 2284
	__ATTR(cmci_disabled, 0644, device_show_bool, set_cmci_disabled),
	&mca_cfg.cmci_disabled
2285 2286
};

2287 2288 2289 2290 2291 2292 2293 2294
static struct device_attribute *mce_device_attrs[] = {
	&dev_attr_tolerant.attr,
	&dev_attr_check_interval.attr,
	&dev_attr_trigger,
	&dev_attr_monarch_timeout.attr,
	&dev_attr_dont_log_ce.attr,
	&dev_attr_ignore_ce.attr,
	&dev_attr_cmci_disabled.attr,
2295 2296
	NULL
};
L
Linus Torvalds 已提交
2297

2298
static cpumask_var_t mce_device_initialized;
2299

2300 2301 2302 2303 2304
static void mce_device_release(struct device *dev)
{
	kfree(dev);
}

2305
/* Per cpu device init. All of the cpus still share the same ctrl bank: */
2306
static int mce_device_create(unsigned int cpu)
L
Linus Torvalds 已提交
2307
{
2308
	struct device *dev;
L
Linus Torvalds 已提交
2309
	int err;
2310
	int i, j;
2311

A
Andreas Herrmann 已提交
2312
	if (!mce_available(&boot_cpu_data))
2313 2314
		return -EIO;

2315 2316 2317
	dev = kzalloc(sizeof *dev, GFP_KERNEL);
	if (!dev)
		return -ENOMEM;
2318 2319
	dev->id  = cpu;
	dev->bus = &mce_subsys;
2320
	dev->release = &mce_device_release;
2321

2322
	err = device_register(dev);
2323 2324
	if (err) {
		put_device(dev);
2325
		return err;
2326
	}
2327

2328 2329
	for (i = 0; mce_device_attrs[i]; i++) {
		err = device_create_file(dev, mce_device_attrs[i]);
2330 2331 2332
		if (err)
			goto error;
	}
2333
	for (j = 0; j < mca_cfg.banks; j++) {
2334
		err = device_create_file(dev, &mce_banks[j].attr);
2335 2336 2337
		if (err)
			goto error2;
	}
2338
	cpumask_set_cpu(cpu, mce_device_initialized);
2339
	per_cpu(mce_device, cpu) = dev;
2340

2341
	return 0;
2342
error2:
2343
	while (--j >= 0)
2344
		device_remove_file(dev, &mce_banks[j].attr);
2345
error:
I
Ingo Molnar 已提交
2346
	while (--i >= 0)
2347
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2348

2349
	device_unregister(dev);
2350

2351 2352 2353
	return err;
}

2354
static void mce_device_remove(unsigned int cpu)
2355
{
2356
	struct device *dev = per_cpu(mce_device, cpu);
2357 2358
	int i;

2359
	if (!cpumask_test_cpu(cpu, mce_device_initialized))
2360 2361
		return;

2362 2363
	for (i = 0; mce_device_attrs[i]; i++)
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2364

2365
	for (i = 0; i < mca_cfg.banks; i++)
2366
		device_remove_file(dev, &mce_banks[i].attr);
I
Ingo Molnar 已提交
2367

2368 2369
	device_unregister(dev);
	cpumask_clear_cpu(cpu, mce_device_initialized);
2370
	per_cpu(mce_device, cpu) = NULL;
2371 2372
}

2373
/* Make sure there are no machine checks on offlined CPUs. */
2374
static void mce_disable_cpu(void *h)
2375
{
A
Andi Kleen 已提交
2376
	unsigned long action = *(unsigned long *)h;
2377

2378
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2379
		return;
2380

A
Andi Kleen 已提交
2381 2382
	if (!(action & CPU_TASKS_FROZEN))
		cmci_clear();
2383

2384
	vendor_disable_error_reporting();
2385 2386
}

2387
static void mce_reenable_cpu(void *h)
2388
{
A
Andi Kleen 已提交
2389
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
2390
	int i;
2391

2392
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2393
		return;
I
Ingo Molnar 已提交
2394

A
Andi Kleen 已提交
2395 2396
	if (!(action & CPU_TASKS_FROZEN))
		cmci_reenable();
2397
	for (i = 0; i < mca_cfg.banks; i++) {
2398
		struct mce_bank *b = &mce_banks[i];
2399

2400
		if (b->init)
2401
			wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
2402
	}
2403 2404
}

2405
/* Get notified when a cpu comes on/off. Be hotplug friendly. */
2406
static int
I
Ingo Molnar 已提交
2407
mce_cpu_callback(struct notifier_block *nfb, unsigned long action, void *hcpu)
2408 2409
{
	unsigned int cpu = (unsigned long)hcpu;
2410
	struct timer_list *t = &per_cpu(mce_timer, cpu);
2411

2412
	switch (action & ~CPU_TASKS_FROZEN) {
2413
	case CPU_ONLINE:
2414
		mce_device_create(cpu);
2415 2416
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2417 2418
		break;
	case CPU_DEAD:
2419 2420
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2421
		mce_device_remove(cpu);
C
Chen Gong 已提交
2422
		mce_intel_hcpu_update(cpu);
B
Borislav Petkov 已提交
2423 2424 2425 2426

		/* intentionally ignoring frozen here */
		if (!(action & CPU_TASKS_FROZEN))
			cmci_rediscover();
2427
		break;
2428
	case CPU_DOWN_PREPARE:
A
Andi Kleen 已提交
2429
		smp_call_function_single(cpu, mce_disable_cpu, &action, 1);
C
Chen Gong 已提交
2430
		del_timer_sync(t);
2431 2432
		break;
	case CPU_DOWN_FAILED:
A
Andi Kleen 已提交
2433
		smp_call_function_single(cpu, mce_reenable_cpu, &action, 1);
T
Thomas Gleixner 已提交
2434
		mce_start_timer(cpu, t);
A
Andi Kleen 已提交
2435
		break;
2436 2437
	}

2438
	return NOTIFY_OK;
2439 2440
}

2441
static struct notifier_block mce_cpu_notifier = {
2442 2443 2444
	.notifier_call = mce_cpu_callback,
};

2445
static __init void mce_init_banks(void)
2446 2447 2448
{
	int i;

2449
	for (i = 0; i < mca_cfg.banks; i++) {
2450
		struct mce_bank *b = &mce_banks[i];
2451
		struct device_attribute *a = &b->attr;
I
Ingo Molnar 已提交
2452

2453
		sysfs_attr_init(&a->attr);
2454 2455
		a->attr.name	= b->attrname;
		snprintf(b->attrname, ATTR_LEN, "bank%d", i);
I
Ingo Molnar 已提交
2456 2457 2458 2459

		a->attr.mode	= 0644;
		a->show		= show_bank;
		a->store	= set_bank;
2460 2461 2462
	}
}

2463
static __init int mcheck_init_device(void)
2464 2465 2466 2467
{
	int err;
	int i = 0;

2468 2469 2470 2471
	if (!mce_available(&boot_cpu_data)) {
		err = -EIO;
		goto err_out;
	}
2472

2473 2474 2475 2476
	if (!zalloc_cpumask_var(&mce_device_initialized, GFP_KERNEL)) {
		err = -ENOMEM;
		goto err_out;
	}
2477

2478
	mce_init_banks();
2479

2480
	err = subsys_system_register(&mce_subsys, NULL);
2481
	if (err)
2482
		goto err_out_mem;
2483

2484
	cpu_notifier_register_begin();
2485
	for_each_online_cpu(i) {
2486
		err = mce_device_create(i);
2487
		if (err) {
2488 2489 2490 2491 2492 2493
			/*
			 * Register notifier anyway (and do not unreg it) so
			 * that we don't leave undeleted timers, see notifier
			 * callback above.
			 */
			__register_hotcpu_notifier(&mce_cpu_notifier);
2494
			cpu_notifier_register_done();
2495
			goto err_device_create;
2496
		}
2497 2498
	}

2499 2500
	__register_hotcpu_notifier(&mce_cpu_notifier);
	cpu_notifier_register_done();
2501

2502 2503
	register_syscore_ops(&mce_syscore_ops);

2504
	/* register character device /dev/mcelog */
2505 2506 2507 2508 2509 2510 2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527 2528
	err = misc_register(&mce_chrdev_device);
	if (err)
		goto err_register;

	return 0;

err_register:
	unregister_syscore_ops(&mce_syscore_ops);

err_device_create:
	/*
	 * We didn't keep track of which devices were created above, but
	 * even if we had, the set of online cpus might have changed.
	 * Play safe and remove for every possible cpu, since
	 * mce_device_remove() will do the right thing.
	 */
	for_each_possible_cpu(i)
		mce_device_remove(i);

err_out_mem:
	free_cpumask_var(mce_device_initialized);

err_out:
	pr_err("Unable to init device /dev/mcelog (rc: %d)\n", err);
I
Ingo Molnar 已提交
2529

L
Linus Torvalds 已提交
2530 2531
	return err;
}
2532
device_initcall_sync(mcheck_init_device);
I
Ingo Molnar 已提交
2533

2534 2535 2536 2537 2538
/*
 * Old style boot options parsing. Only for compatibility.
 */
static int __init mcheck_disable(char *str)
{
2539
	mca_cfg.disabled = true;
2540 2541 2542
	return 1;
}
__setup("nomce", mcheck_disable);
I
Ingo Molnar 已提交
2543

2544 2545
#ifdef CONFIG_DEBUG_FS
struct dentry *mce_get_debugfs_dir(void)
I
Ingo Molnar 已提交
2546
{
2547
	static struct dentry *dmce;
I
Ingo Molnar 已提交
2548

2549 2550
	if (!dmce)
		dmce = debugfs_create_dir("mce", NULL);
I
Ingo Molnar 已提交
2551

2552 2553
	return dmce;
}
I
Ingo Molnar 已提交
2554

2555 2556 2557
static void mce_reset(void)
{
	cpu_missing = 0;
2558
	atomic_set(&mce_fake_panicked, 0);
2559 2560 2561 2562
	atomic_set(&mce_executing, 0);
	atomic_set(&mce_callin, 0);
	atomic_set(&global_nwo, 0);
}
I
Ingo Molnar 已提交
2563

2564 2565 2566 2567
static int fake_panic_get(void *data, u64 *val)
{
	*val = fake_panic;
	return 0;
I
Ingo Molnar 已提交
2568 2569
}

2570
static int fake_panic_set(void *data, u64 val)
I
Ingo Molnar 已提交
2571
{
2572 2573 2574
	mce_reset();
	fake_panic = val;
	return 0;
I
Ingo Molnar 已提交
2575 2576
}

2577 2578
DEFINE_SIMPLE_ATTRIBUTE(fake_panic_fops, fake_panic_get,
			fake_panic_set, "%llu\n");
2579

2580
static int __init mcheck_debugfs_init(void)
2581
{
2582 2583 2584 2585 2586 2587 2588 2589 2590 2591 2592
	struct dentry *dmce, *ffake_panic;

	dmce = mce_get_debugfs_dir();
	if (!dmce)
		return -ENOMEM;
	ffake_panic = debugfs_create_file("fake_panic", 0444, dmce, NULL,
					  &fake_panic_fops);
	if (!ffake_panic)
		return -ENOMEM;

	return 0;
2593
}
2594 2595
#else
static int __init mcheck_debugfs_init(void) { return -EINVAL; }
2596
#endif
2597 2598 2599 2600 2601 2602 2603 2604 2605 2606 2607 2608 2609 2610

static int __init mcheck_late_init(void)
{
	mcheck_debugfs_init();

	/*
	 * Flush out everything that has been logged during early boot, now that
	 * everything has been initialized (workqueues, decoders, ...).
	 */
	mce_schedule_work();

	return 0;
}
late_initcall(mcheck_late_init);