mce.c 40.4 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * Machine check handler.
I
Ingo Molnar 已提交
3
 *
L
Linus Torvalds 已提交
4
 * K8 parts Copyright 2002,2003 Andi Kleen, SuSE Labs.
5 6
 * Rest from unknown author(s).
 * 2004 Andi Kleen. Rewrote most of it.
7 8
 * Copyright 2008 Intel Corporation
 * Author: Andi Kleen
L
Linus Torvalds 已提交
9
 */
I
Ingo Molnar 已提交
10 11 12
#include <linux/thread_info.h>
#include <linux/capability.h>
#include <linux/miscdevice.h>
13
#include <linux/interrupt.h>
I
Ingo Molnar 已提交
14 15 16 17
#include <linux/ratelimit.h>
#include <linux/kallsyms.h>
#include <linux/rcupdate.h>
#include <linux/kobject.h>
18
#include <linux/uaccess.h>
I
Ingo Molnar 已提交
19 20 21
#include <linux/kdebug.h>
#include <linux/kernel.h>
#include <linux/percpu.h>
L
Linus Torvalds 已提交
22 23
#include <linux/string.h>
#include <linux/sysdev.h>
24
#include <linux/delay.h>
25
#include <linux/ctype.h>
I
Ingo Molnar 已提交
26
#include <linux/sched.h>
27
#include <linux/sysfs.h>
I
Ingo Molnar 已提交
28 29 30 31
#include <linux/types.h>
#include <linux/init.h>
#include <linux/kmod.h>
#include <linux/poll.h>
32
#include <linux/nmi.h>
I
Ingo Molnar 已提交
33
#include <linux/cpu.h>
34
#include <linux/smp.h>
I
Ingo Molnar 已提交
35 36
#include <linux/fs.h>

37
#include <asm/processor.h>
38 39
#include <asm/hw_irq.h>
#include <asm/apic.h>
40
#include <asm/idle.h>
41
#include <asm/ipi.h>
I
Ingo Molnar 已提交
42 43
#include <asm/mce.h>
#include <asm/msr.h>
L
Linus Torvalds 已提交
44

45
#include "mce-internal.h"
46 47
#include "mce.h"

48 49 50 51 52 53 54 55 56 57
/* Handle unconfigured int18 (should never happen) */
static void unexpected_machine_check(struct pt_regs *regs, long error_code)
{
	printk(KERN_ERR "CPU#%d: Unexpected int18 (Machine Check).\n",
	       smp_processor_id());
}

/* Call the installed machine check handler for this CPU setup. */
void (*machine_check_vector)(struct pt_regs *, long error_code) =
						unexpected_machine_check;
58 59 60

int				mce_disabled;

61
#ifdef CONFIG_X86_NEW_MCE
62

I
Ingo Molnar 已提交
63
#define MISC_MCELOG_MINOR	227
64

65 66
#define SPINUNIT 100	/* 100ns */

67 68
atomic_t mce_entry;

69 70
DEFINE_PER_CPU(unsigned, mce_exception_count);

71 72 73 74 75 76 77
/*
 * Tolerant levels:
 *   0: always panic on uncorrected errors, log corrected errors
 *   1: panic or SIGBUS on uncorrected errors, log corrected errors
 *   2: SIGBUS or log uncorrected errors (if possible), log corrected errors
 *   3: never panic or SIGBUS, log all errors (for testing only)
 */
I
Ingo Molnar 已提交
78 79 80 81 82 83
static int			tolerant = 1;
static int			banks;
static u64			*bank;
static unsigned long		notify_user;
static int			rip_msr;
static int			mce_bootlog = -1;
84
static int			monarch_timeout = -1;
85
static int			mce_panic_timeout;
A
Andi Kleen 已提交
86
int				mce_ser;
87

I
Ingo Molnar 已提交
88 89
static char			trigger[128];
static char			*trigger_argv[2] = { trigger, NULL };
L
Linus Torvalds 已提交
90

91 92
static unsigned long		dont_init_banks;

93
static DECLARE_WAIT_QUEUE_HEAD(mce_wait);
94 95 96
static DEFINE_PER_CPU(struct mce, mces_seen);
static int			cpu_missing;

97

98 99 100 101 102
/* MCA banks polled by the period polling timer for corrected events */
DEFINE_PER_CPU(mce_banks_t, mce_poll_banks) = {
	[0 ... BITS_TO_LONGS(MAX_NR_BANKS)-1] = ~0UL
};

103 104 105 106 107
static inline int skip_bank_init(int i)
{
	return i < BITS_PER_LONG && test_bit(i, &dont_init_banks);
}

108 109 110 111
/* Do initial initialization of a struct mce */
void mce_setup(struct mce *m)
{
	memset(m, 0, sizeof(struct mce));
112
	m->cpu = m->extcpu = smp_processor_id();
113
	rdtscll(m->tsc);
114 115 116 117 118 119 120 121 122
	/* We hope get_seconds stays lockless */
	m->time = get_seconds();
	m->cpuvendor = boot_cpu_data.x86_vendor;
	m->cpuid = cpuid_eax(1);
#ifdef CONFIG_SMP
	m->socketid = cpu_data(m->extcpu).phys_proc_id;
#endif
	m->apicid = cpu_data(m->extcpu).initial_apicid;
	rdmsrl(MSR_IA32_MCG_CAP, m->mcgcap);
123 124
}

125 126 127
DEFINE_PER_CPU(struct mce, injectm);
EXPORT_PER_CPU_SYMBOL_GPL(injectm);

L
Linus Torvalds 已提交
128 129 130 131 132 133
/*
 * Lockless MCE logging infrastructure.
 * This avoids deadlocks on printk locks without having to break locks. Also
 * separate MCEs from kernel messages to avoid bogus bug reports.
 */

134
static struct mce_log mcelog = {
135 136 137
	.signature	= MCE_LOG_SIGNATURE,
	.len		= MCE_LOG_LEN,
	.recordlen	= sizeof(struct mce),
138
};
L
Linus Torvalds 已提交
139 140 141 142

void mce_log(struct mce *mce)
{
	unsigned next, entry;
I
Ingo Molnar 已提交
143

L
Linus Torvalds 已提交
144
	mce->finished = 0;
M
Mike Waychison 已提交
145
	wmb();
L
Linus Torvalds 已提交
146 147
	for (;;) {
		entry = rcu_dereference(mcelog.next);
148
		for (;;) {
I
Ingo Molnar 已提交
149 150 151 152 153
			/*
			 * When the buffer fills up discard new entries.
			 * Assume that the earlier errors are the more
			 * interesting ones:
			 */
154
			if (entry >= MCE_LOG_LEN) {
155 156
				set_bit(MCE_OVERFLOW,
					(unsigned long *)&mcelog.flags);
157 158
				return;
			}
I
Ingo Molnar 已提交
159
			/* Old left over entry. Skip: */
160 161 162 163
			if (mcelog.entry[entry].finished) {
				entry++;
				continue;
			}
M
Mike Waychison 已提交
164
			break;
L
Linus Torvalds 已提交
165 166 167 168 169 170 171
		}
		smp_rmb();
		next = entry + 1;
		if (cmpxchg(&mcelog.next, entry, next) == entry)
			break;
	}
	memcpy(mcelog.entry + entry, mce, sizeof(struct mce));
M
Mike Waychison 已提交
172
	wmb();
L
Linus Torvalds 已提交
173
	mcelog.entry[entry].finished = 1;
M
Mike Waychison 已提交
174
	wmb();
L
Linus Torvalds 已提交
175

176
	mce->finished = 1;
177
	set_bit(0, &notify_user);
L
Linus Torvalds 已提交
178 179
}

180
static void print_mce(struct mce *m, int *first)
L
Linus Torvalds 已提交
181
{
182 183 184 185 186
	if (*first) {
		printk(KERN_EMERG "\n" KERN_EMERG "HARDWARE ERROR\n");
		*first = 0;
	}
	printk(KERN_EMERG
L
Linus Torvalds 已提交
187
	       "CPU %d: Machine Check Exception: %16Lx Bank %d: %016Lx\n",
188
	       m->extcpu, m->mcgstatus, m->bank, m->status);
189
	if (m->ip) {
190
		printk(KERN_EMERG "RIP%s %02x:<%016Lx> ",
L
Linus Torvalds 已提交
191
		       !(m->mcgstatus & MCG_STATUS_EIPV) ? " !INEXACT!" : "",
192
		       m->cs, m->ip);
L
Linus Torvalds 已提交
193
		if (m->cs == __KERNEL_CS)
194
			print_symbol("{%s}", m->ip);
L
Linus Torvalds 已提交
195 196
		printk("\n");
	}
197
	printk(KERN_EMERG "TSC %llx ", m->tsc);
L
Linus Torvalds 已提交
198
	if (m->addr)
199
		printk("ADDR %llx ", m->addr);
L
Linus Torvalds 已提交
200
	if (m->misc)
201
		printk("MISC %llx ", m->misc);
L
Linus Torvalds 已提交
202
	printk("\n");
203 204 205
	printk(KERN_EMERG "PROCESSOR %u:%x TIME %llu SOCKET %u APIC %x\n",
			m->cpuvendor, m->cpuid, m->time, m->socketid,
			m->apicid);
206 207 208 209 210 211
}

static void print_mce_tail(void)
{
	printk(KERN_EMERG "This is not a software problem!\n"
	       KERN_EMERG "Run through mcelog --ascii to decode and contact your hardware vendor\n");
L
Linus Torvalds 已提交
212 213
}

214 215 216 217 218 219 220 221 222 223 224 225
#define PANIC_TIMEOUT 5 /* 5 seconds */

static atomic_t mce_paniced;

/* Panic in progress. Enable interrupts and wait for final IPI */
static void wait_for_panic(void)
{
	long timeout = PANIC_TIMEOUT*USEC_PER_SEC;
	preempt_disable();
	local_irq_enable();
	while (timeout-- > 0)
		udelay(1);
226 227
	if (panic_timeout == 0)
		panic_timeout = mce_panic_timeout;
228 229 230
	panic("Panicing machine check CPU died");
}

231
static void mce_panic(char *msg, struct mce *final, char *exp)
232
{
L
Linus Torvalds 已提交
233
	int i;
234
	int first = 1;
235

236 237 238 239 240 241 242
	/*
	 * Make sure only one CPU runs in machine check panic
	 */
	if (atomic_add_return(1, &mce_paniced) > 1)
		wait_for_panic();
	barrier();

243 244
	bust_spinlocks(1);
	console_verbose();
245
	/* First print corrected ones that are still unlogged */
L
Linus Torvalds 已提交
246
	for (i = 0; i < MCE_LOG_LEN; i++) {
247 248 249
		struct mce *m = &mcelog.entry[i];
		if ((m->status & MCI_STATUS_VAL) &&
			!(m->status & MCI_STATUS_UC))
250
			print_mce(m, &first);
251 252 253 254 255
	}
	/* Now print uncorrected but with the final one last */
	for (i = 0; i < MCE_LOG_LEN; i++) {
		struct mce *m = &mcelog.entry[i];
		if (!(m->status & MCI_STATUS_VAL))
L
Linus Torvalds 已提交
256
			continue;
257
		if (!final || memcmp(m, final, sizeof(struct mce)))
258
			print_mce(m, &first);
L
Linus Torvalds 已提交
259
	}
260
	if (final)
261
		print_mce(final, &first);
262 263
	if (cpu_missing)
		printk(KERN_EMERG "Some CPUs didn't answer in synchronization\n");
264
	print_mce_tail();
265 266
	if (exp)
		printk(KERN_EMERG "Machine check: %s\n", exp);
267 268
	if (panic_timeout == 0)
		panic_timeout = mce_panic_timeout;
269
	panic(msg);
270
}
L
Linus Torvalds 已提交
271

272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289
/* Support code for software error injection */

static int msr_to_offset(u32 msr)
{
	unsigned bank = __get_cpu_var(injectm.bank);
	if (msr == rip_msr)
		return offsetof(struct mce, ip);
	if (msr == MSR_IA32_MC0_STATUS + bank*4)
		return offsetof(struct mce, status);
	if (msr == MSR_IA32_MC0_ADDR + bank*4)
		return offsetof(struct mce, addr);
	if (msr == MSR_IA32_MC0_MISC + bank*4)
		return offsetof(struct mce, misc);
	if (msr == MSR_IA32_MCG_STATUS)
		return offsetof(struct mce, mcgstatus);
	return -1;
}

290 291 292 293
/* MSR access wrappers used for error injection */
static u64 mce_rdmsrl(u32 msr)
{
	u64 v;
294 295 296 297 298 299
	if (__get_cpu_var(injectm).finished) {
		int offset = msr_to_offset(msr);
		if (offset < 0)
			return 0;
		return *(u64 *)((char *)&__get_cpu_var(injectm) + offset);
	}
300 301 302 303 304 305
	rdmsrl(msr, v);
	return v;
}

static void mce_wrmsrl(u32 msr, u64 v)
{
306 307 308 309 310 311
	if (__get_cpu_var(injectm).finished) {
		int offset = msr_to_offset(msr);
		if (offset >= 0)
			*(u64 *)((char *)&__get_cpu_var(injectm) + offset) = v;
		return;
	}
312 313 314
	wrmsrl(msr, v);
}

A
Andi Kleen 已提交
315
int mce_available(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
316
{
317
	if (mce_disabled)
318
		return 0;
319
	return cpu_has(c, X86_FEATURE_MCE) && cpu_has(c, X86_FEATURE_MCA);
L
Linus Torvalds 已提交
320 321
}

H
Huang Ying 已提交
322 323 324 325
/*
 * Get the address of the instruction at the time of the machine check
 * error.
 */
326 327
static inline void mce_get_rip(struct mce *m, struct pt_regs *regs)
{
H
Huang Ying 已提交
328 329

	if (regs && (m->mcgstatus & (MCG_STATUS_RIPV|MCG_STATUS_EIPV))) {
330
		m->ip = regs->ip;
331 332
		m->cs = regs->cs;
	} else {
333
		m->ip = 0;
334 335
		m->cs = 0;
	}
H
Huang Ying 已提交
336
	if (rip_msr)
337
		m->ip = mce_rdmsrl(rip_msr);
338 339
}

340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387
#ifdef CONFIG_X86_LOCAL_APIC 
/*
 * Called after interrupts have been reenabled again
 * when a MCE happened during an interrupts off region
 * in the kernel.
 */
asmlinkage void smp_mce_self_interrupt(struct pt_regs *regs)
{
	ack_APIC_irq();
	exit_idle();
	irq_enter();
	mce_notify_user();
	irq_exit();
}
#endif

static void mce_report_event(struct pt_regs *regs)
{
	if (regs->flags & (X86_VM_MASK|X86_EFLAGS_IF)) {
		mce_notify_user();
		return;
	}

#ifdef CONFIG_X86_LOCAL_APIC
	/*
	 * Without APIC do not notify. The event will be picked
	 * up eventually.
	 */
	if (!cpu_has_apic)
		return;

	/*
	 * When interrupts are disabled we cannot use
	 * kernel services safely. Trigger an self interrupt
	 * through the APIC to instead do the notification
	 * after interrupts are reenabled again.
	 */
	apic->send_IPI_self(MCE_SELF_VECTOR);

	/*
	 * Wait for idle afterwards again so that we don't leave the
	 * APIC in a non idle state because the normal APIC writes
	 * cannot exclude us.
	 */
	apic_wait_icr_idle();
#endif
}

388 389
DEFINE_PER_CPU(unsigned, mce_poll_count);

390
/*
391 392 393 394
 * Poll for corrected events or events that happened before reset.
 * Those are just logged through /dev/mcelog.
 *
 * This is executed in standard interrupt context.
A
Andi Kleen 已提交
395 396 397 398 399 400 401 402 403
 *
 * Note: spec recommends to panic for fatal unsignalled
 * errors here. However this would be quite problematic --
 * we would need to reimplement the Monarch handling and
 * it would mess up the exclusion between exception handler
 * and poll hander -- * so we skip this for now.
 * These cases should not happen anyways, or only when the CPU
 * is already totally * confused. In this case it's likely it will
 * not fully execute the machine check handler either.
404
 */
405
void machine_check_poll(enum mcp_flags flags, mce_banks_t *b)
406 407 408 409
{
	struct mce m;
	int i;

410 411
	__get_cpu_var(mce_poll_count)++;

412 413
	mce_setup(&m);

414
	m.mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
415
	for (i = 0; i < banks; i++) {
416
		if (!bank[i] || !test_bit(i, *b))
417 418 419 420 421 422 423 424
			continue;

		m.misc = 0;
		m.addr = 0;
		m.bank = i;
		m.tsc = 0;

		barrier();
425
		m.status = mce_rdmsrl(MSR_IA32_MC0_STATUS + i*4);
426 427 428 429
		if (!(m.status & MCI_STATUS_VAL))
			continue;

		/*
A
Andi Kleen 已提交
430 431
		 * Uncorrected or signalled events are handled by the exception
		 * handler when it is enabled, so don't process those here.
432 433 434
		 *
		 * TBD do the same check for MCI_STATUS_EN here?
		 */
A
Andi Kleen 已提交
435 436
		if (!(flags & MCP_UC) &&
		    (m.status & (mce_ser ? MCI_STATUS_S : MCI_STATUS_UC)))
437 438 439
			continue;

		if (m.status & MCI_STATUS_MISCV)
440
			m.misc = mce_rdmsrl(MSR_IA32_MC0_MISC + i*4);
441
		if (m.status & MCI_STATUS_ADDRV)
442
			m.addr = mce_rdmsrl(MSR_IA32_MC0_ADDR + i*4);
443 444 445 446 447 448 449

		if (!(flags & MCP_TIMESTAMP))
			m.tsc = 0;
		/*
		 * Don't get the IP here because it's unlikely to
		 * have anything to do with the actual error location.
		 */
A
Andi Kleen 已提交
450 451 452 453
		if (!(flags & MCP_DONTLOG)) {
			mce_log(&m);
			add_taint(TAINT_MACHINE_CHECK);
		}
454 455 456 457

		/*
		 * Clear state for this bank.
		 */
458
		mce_wrmsrl(MSR_IA32_MC0_STATUS+4*i, 0);
459 460 461 462 463 464
	}

	/*
	 * Don't clear MCG_STATUS here because it's only defined for
	 * exceptions.
	 */
465 466

	sync_core();
467
}
468
EXPORT_SYMBOL_GPL(machine_check_poll);
469

470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485
/*
 * Do a quick check if any of the events requires a panic.
 * This decides if we keep the events around or clear them.
 */
static int mce_no_way_out(struct mce *m, char **msg)
{
	int i;

	for (i = 0; i < banks; i++) {
		m->status = mce_rdmsrl(MSR_IA32_MC0_STATUS + i*4);
		if (mce_severity(m, tolerant, msg) >= MCE_PANIC_SEVERITY)
			return 1;
	}
	return 0;
}

486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579
/*
 * Variable to establish order between CPUs while scanning.
 * Each CPU spins initially until executing is equal its number.
 */
static atomic_t mce_executing;

/*
 * Defines order of CPUs on entry. First CPU becomes Monarch.
 */
static atomic_t mce_callin;

/*
 * Check if a timeout waiting for other CPUs happened.
 */
static int mce_timed_out(u64 *t)
{
	/*
	 * The others already did panic for some reason.
	 * Bail out like in a timeout.
	 * rmb() to tell the compiler that system_state
	 * might have been modified by someone else.
	 */
	rmb();
	if (atomic_read(&mce_paniced))
		wait_for_panic();
	if (!monarch_timeout)
		goto out;
	if ((s64)*t < SPINUNIT) {
		/* CHECKME: Make panic default for 1 too? */
		if (tolerant < 1)
			mce_panic("Timeout synchronizing machine check over CPUs",
				  NULL, NULL);
		cpu_missing = 1;
		return 1;
	}
	*t -= SPINUNIT;
out:
	touch_nmi_watchdog();
	return 0;
}

/*
 * The Monarch's reign.  The Monarch is the CPU who entered
 * the machine check handler first. It waits for the others to
 * raise the exception too and then grades them. When any
 * error is fatal panic. Only then let the others continue.
 *
 * The other CPUs entering the MCE handler will be controlled by the
 * Monarch. They are called Subjects.
 *
 * This way we prevent any potential data corruption in a unrecoverable case
 * and also makes sure always all CPU's errors are examined.
 *
 * Also this detects the case of an machine check event coming from outer
 * space (not detected by any CPUs) In this case some external agent wants
 * us to shut down, so panic too.
 *
 * The other CPUs might still decide to panic if the handler happens
 * in a unrecoverable place, but in this case the system is in a semi-stable
 * state and won't corrupt anything by itself. It's ok to let the others
 * continue for a bit first.
 *
 * All the spin loops have timeouts; when a timeout happens a CPU
 * typically elects itself to be Monarch.
 */
static void mce_reign(void)
{
	int cpu;
	struct mce *m = NULL;
	int global_worst = 0;
	char *msg = NULL;
	char *nmsg = NULL;

	/*
	 * This CPU is the Monarch and the other CPUs have run
	 * through their handlers.
	 * Grade the severity of the errors of all the CPUs.
	 */
	for_each_possible_cpu(cpu) {
		int severity = mce_severity(&per_cpu(mces_seen, cpu), tolerant,
					    &nmsg);
		if (severity > global_worst) {
			msg = nmsg;
			global_worst = severity;
			m = &per_cpu(mces_seen, cpu);
		}
	}

	/*
	 * Cannot recover? Panic here then.
	 * This dumps all the mces in the log buffer and stops the
	 * other CPUs.
	 */
	if (m && global_worst >= MCE_PANIC_SEVERITY && tolerant < 3)
580
		mce_panic("Fatal Machine check", m, msg);
581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743

	/*
	 * For UC somewhere we let the CPU who detects it handle it.
	 * Also must let continue the others, otherwise the handling
	 * CPU could deadlock on a lock.
	 */

	/*
	 * No machine check event found. Must be some external
	 * source or one CPU is hung. Panic.
	 */
	if (!m && tolerant < 3)
		mce_panic("Machine check from unknown source", NULL, NULL);

	/*
	 * Now clear all the mces_seen so that they don't reappear on
	 * the next mce.
	 */
	for_each_possible_cpu(cpu)
		memset(&per_cpu(mces_seen, cpu), 0, sizeof(struct mce));
}

static atomic_t global_nwo;

/*
 * Start of Monarch synchronization. This waits until all CPUs have
 * entered the exception handler and then determines if any of them
 * saw a fatal event that requires panic. Then it executes them
 * in the entry order.
 * TBD double check parallel CPU hotunplug
 */
static int mce_start(int no_way_out, int *order)
{
	int nwo;
	int cpus = num_online_cpus();
	u64 timeout = (u64)monarch_timeout * NSEC_PER_USEC;

	if (!timeout) {
		*order = -1;
		return no_way_out;
	}

	atomic_add(no_way_out, &global_nwo);

	/*
	 * Wait for everyone.
	 */
	while (atomic_read(&mce_callin) != cpus) {
		if (mce_timed_out(&timeout)) {
			atomic_set(&global_nwo, 0);
			*order = -1;
			return no_way_out;
		}
		ndelay(SPINUNIT);
	}

	/*
	 * Cache the global no_way_out state.
	 */
	nwo = atomic_read(&global_nwo);

	/*
	 * Monarch starts executing now, the others wait.
	 */
	if (*order == 1) {
		atomic_set(&mce_executing, 1);
		return nwo;
	}

	/*
	 * Now start the scanning loop one by one
	 * in the original callin order.
	 * This way when there are any shared banks it will
	 * be only seen by one CPU before cleared, avoiding duplicates.
	 */
	while (atomic_read(&mce_executing) < *order) {
		if (mce_timed_out(&timeout)) {
			atomic_set(&global_nwo, 0);
			*order = -1;
			return no_way_out;
		}
		ndelay(SPINUNIT);
	}
	return nwo;
}

/*
 * Synchronize between CPUs after main scanning loop.
 * This invokes the bulk of the Monarch processing.
 */
static int mce_end(int order)
{
	int ret = -1;
	u64 timeout = (u64)monarch_timeout * NSEC_PER_USEC;

	if (!timeout)
		goto reset;
	if (order < 0)
		goto reset;

	/*
	 * Allow others to run.
	 */
	atomic_inc(&mce_executing);

	if (order == 1) {
		/* CHECKME: Can this race with a parallel hotplug? */
		int cpus = num_online_cpus();

		/*
		 * Monarch: Wait for everyone to go through their scanning
		 * loops.
		 */
		while (atomic_read(&mce_executing) <= cpus) {
			if (mce_timed_out(&timeout))
				goto reset;
			ndelay(SPINUNIT);
		}

		mce_reign();
		barrier();
		ret = 0;
	} else {
		/*
		 * Subject: Wait for Monarch to finish.
		 */
		while (atomic_read(&mce_executing) != 0) {
			if (mce_timed_out(&timeout))
				goto reset;
			ndelay(SPINUNIT);
		}

		/*
		 * Don't reset anything. That's done by the Monarch.
		 */
		return 0;
	}

	/*
	 * Reset all global state.
	 */
reset:
	atomic_set(&global_nwo, 0);
	atomic_set(&mce_callin, 0);
	barrier();

	/*
	 * Let others run again.
	 */
	atomic_set(&mce_executing, 0);
	return ret;
}

static void mce_clear_state(unsigned long *toclear)
{
	int i;

	for (i = 0; i < banks; i++) {
		if (test_bit(i, toclear))
			mce_wrmsrl(MSR_IA32_MC0_STATUS+4*i, 0);
	}
}

744 745 746 747 748 749 750
/*
 * The actual machine check handler. This only handles real
 * exceptions when something got corrupted coming in through int 18.
 *
 * This is executed in NMI context not subject to normal locking rules. This
 * implies that most kernel services cannot be safely used. Don't even
 * think about putting a printk in there!
751 752 753 754
 *
 * On Intel systems this is entered on all CPUs in parallel through
 * MCE broadcast. However some CPUs might be broken beyond repair,
 * so be always careful when synchronizing with others.
L
Linus Torvalds 已提交
755
 */
I
Ingo Molnar 已提交
756
void do_machine_check(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
757
{
758
	struct mce m, *final;
L
Linus Torvalds 已提交
759
	int i;
760 761 762 763 764 765 766 767
	int worst = 0;
	int severity;
	/*
	 * Establish sequential order between the CPUs entering the machine
	 * check handler.
	 */
	int order;

768 769 770 771 772 773 774 775 776 777
	/*
	 * If no_way_out gets set, there is no safe way to recover from this
	 * MCE.  If tolerant is cranked up, we'll try anyway.
	 */
	int no_way_out = 0;
	/*
	 * If kill_it gets set, there might be a way to recover from this
	 * error.
	 */
	int kill_it = 0;
778
	DECLARE_BITMAP(toclear, MAX_NR_BANKS);
779
	char *msg = "Unknown";
L
Linus Torvalds 已提交
780

781 782
	atomic_inc(&mce_entry);

783 784
	__get_cpu_var(mce_exception_count)++;

785
	if (notify_die(DIE_NMI, "machine check", regs, error_code,
786
			   18, SIGKILL) == NOTIFY_STOP)
787
		goto out;
788
	if (!banks)
789
		goto out;
L
Linus Torvalds 已提交
790

791
	order = atomic_add_return(1, &mce_callin);
792 793
	mce_setup(&m);

794
	m.mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
795
	no_way_out = mce_no_way_out(&m, &msg);
796

797 798 799
	final = &__get_cpu_var(mces_seen);
	*final = m;

L
Linus Torvalds 已提交
800 801
	barrier();

A
Andi Kleen 已提交
802 803 804 805 806 807
	/*
	 * When no restart IP must always kill or panic.
	 */
	if (!(m.mcgstatus & MCG_STATUS_RIPV))
		kill_it = 1;

808 809 810 811 812 813
	/*
	 * Go through all the banks in exclusion of the other CPUs.
	 * This way we don't report duplicated events on shared banks
	 * because the first one to see it will clear it.
	 */
	no_way_out = mce_start(no_way_out, &order);
L
Linus Torvalds 已提交
814
	for (i = 0; i < banks; i++) {
815
		__clear_bit(i, toclear);
816
		if (!bank[i])
L
Linus Torvalds 已提交
817
			continue;
818 819

		m.misc = 0;
L
Linus Torvalds 已提交
820 821 822
		m.addr = 0;
		m.bank = i;

823
		m.status = mce_rdmsrl(MSR_IA32_MC0_STATUS + i*4);
L
Linus Torvalds 已提交
824 825 826
		if ((m.status & MCI_STATUS_VAL) == 0)
			continue;

827
		/*
A
Andi Kleen 已提交
828 829
		 * Non uncorrected or non signaled errors are handled by
		 * machine_check_poll. Leave them alone, unless this panics.
830
		 */
A
Andi Kleen 已提交
831 832
		if (!(m.status & (mce_ser ? MCI_STATUS_S : MCI_STATUS_UC)) &&
			!no_way_out)
833 834 835 836 837 838 839
			continue;

		/*
		 * Set taint even when machine check was not enabled.
		 */
		add_taint(TAINT_MACHINE_CHECK);

A
Andi Kleen 已提交
840
		severity = mce_severity(&m, tolerant, NULL);
841

A
Andi Kleen 已提交
842 843 844 845 846 847 848 849
		/*
		 * When machine check was for corrected handler don't touch,
		 * unless we're panicing.
		 */
		if (severity == MCE_KEEP_SEVERITY && !no_way_out)
			continue;
		__set_bit(i, toclear);
		if (severity == MCE_NO_SEVERITY) {
850 851 852 853 854
			/*
			 * Machine check event was not enabled. Clear, but
			 * ignore.
			 */
			continue;
L
Linus Torvalds 已提交
855 856
		}

A
Andi Kleen 已提交
857 858 859 860 861 862
		/*
		 * Kill on action required.
		 */
		if (severity == MCE_AR_SEVERITY)
			kill_it = 1;

L
Linus Torvalds 已提交
863
		if (m.status & MCI_STATUS_MISCV)
864
			m.misc = mce_rdmsrl(MSR_IA32_MC0_MISC + i*4);
L
Linus Torvalds 已提交
865
		if (m.status & MCI_STATUS_ADDRV)
866
			m.addr = mce_rdmsrl(MSR_IA32_MC0_ADDR + i*4);
L
Linus Torvalds 已提交
867

868
		mce_get_rip(&m, regs);
869
		mce_log(&m);
L
Linus Torvalds 已提交
870

871 872 873
		if (severity > worst) {
			*final = m;
			worst = severity;
L
Linus Torvalds 已提交
874 875 876
		}
	}

877 878 879
	if (!no_way_out)
		mce_clear_state(toclear);

I
Ingo Molnar 已提交
880
	/*
881 882
	 * Do most of the synchronization with other CPUs.
	 * When there's any problem use only local no_way_out state.
I
Ingo Molnar 已提交
883
	 */
884 885
	if (mce_end(order) < 0)
		no_way_out = worst >= MCE_PANIC_SEVERITY;
886 887 888

	/*
	 * If we have decided that we just CAN'T continue, and the user
I
Ingo Molnar 已提交
889
	 * has not set tolerant to an insane level, give up and die.
890 891 892
	 *
	 * This is mainly used in the case when the system doesn't
	 * support MCE broadcasting or it has been disabled.
893 894
	 */
	if (no_way_out && tolerant < 3)
895
		mce_panic("Fatal machine check on current CPU", final, msg);
896 897 898 899 900 901 902 903

	/*
	 * If the error seems to be unrecoverable, something should be
	 * done.  Try to kill as little as possible.  If we can kill just
	 * one task, do that.  If the user has set the tolerance very
	 * high, don't try to do anything at all.
	 */

A
Andi Kleen 已提交
904 905
	if (kill_it && tolerant < 3)
		force_sig(SIGBUS, current);
L
Linus Torvalds 已提交
906

907 908 909
	/* notify userspace ASAP */
	set_thread_flag(TIF_MCE_NOTIFY);

910 911
	if (worst > 0)
		mce_report_event(regs);
912
	mce_wrmsrl(MSR_IA32_MCG_STATUS, 0);
913
out:
914
	atomic_dec(&mce_entry);
915
	sync_core();
L
Linus Torvalds 已提交
916
}
917
EXPORT_SYMBOL_GPL(do_machine_check);
L
Linus Torvalds 已提交
918

919 920 921
#ifdef CONFIG_X86_MCE_INTEL
/***
 * mce_log_therm_throt_event - Logs the thermal throttling event to mcelog
S
Simon Arlott 已提交
922
 * @cpu: The CPU on which the event occurred.
923 924 925 926 927 928 929 930 931 932
 * @status: Event status information
 *
 * This function should be called by the thermal interrupt after the
 * event has been processed and the decision was made to log the event
 * further.
 *
 * The status parameter will be saved to the 'status' field of 'struct mce'
 * and historically has been the register value of the
 * MSR_IA32_THERMAL_STATUS (Intel) msr.
 */
933
void mce_log_therm_throt_event(__u64 status)
934 935 936
{
	struct mce m;

937
	mce_setup(&m);
938 939 940 941 942 943
	m.bank = MCE_THERMAL_BANK;
	m.status = status;
	mce_log(&m);
}
#endif /* CONFIG_X86_MCE_INTEL */

L
Linus Torvalds 已提交
944
/*
945 946 947
 * Periodic polling timer for "silent" machine check errors.  If the
 * poller finds an MCE, poll 2x faster.  When the poller finds no more
 * errors, poll 2x slower (up to check_interval seconds).
L
Linus Torvalds 已提交
948 949
 */
static int check_interval = 5 * 60; /* 5 minutes */
I
Ingo Molnar 已提交
950

951
static DEFINE_PER_CPU(int, next_interval); /* in jiffies */
952
static DEFINE_PER_CPU(struct timer_list, mce_timer);
L
Linus Torvalds 已提交
953

954
static void mcheck_timer(unsigned long data)
L
Linus Torvalds 已提交
955
{
956
	struct timer_list *t = &per_cpu(mce_timer, data);
957
	int *n;
958 959 960

	WARN_ON(smp_processor_id() != data);

I
Ingo Molnar 已提交
961
	if (mce_available(&current_cpu_data)) {
962 963
		machine_check_poll(MCP_TIMESTAMP,
				&__get_cpu_var(mce_poll_banks));
I
Ingo Molnar 已提交
964
	}
L
Linus Torvalds 已提交
965 966

	/*
967 968
	 * Alert userspace if needed.  If we logged an MCE, reduce the
	 * polling interval, otherwise increase the polling interval.
L
Linus Torvalds 已提交
969
	 */
970
	n = &__get_cpu_var(next_interval);
971
	if (mce_notify_user())
972
		*n = max(*n/2, HZ/100);
973
	else
974
		*n = min(*n*2, (int)round_jiffies_relative(check_interval*HZ));
975

976
	t->expires = jiffies + *n;
977
	add_timer(t);
978 979
}

980 981 982 983 984 985 986
static void mce_do_trigger(struct work_struct *work)
{
	call_usermodehelper(trigger, trigger_argv, NULL, UMH_NO_WAIT);
}

static DECLARE_WORK(mce_trigger_work, mce_do_trigger);

987
/*
988 989 990
 * Notify the user(s) about new machine check events.
 * Can be called from interrupt context, but not from machine check/NMI
 * context.
991 992 993
 */
int mce_notify_user(void)
{
994 995 996
	/* Not more than two messages every minute */
	static DEFINE_RATELIMIT_STATE(ratelimit, 60*HZ, 2);

997
	clear_thread_flag(TIF_MCE_NOTIFY);
I
Ingo Molnar 已提交
998

999 1000
	if (test_and_clear_bit(0, &notify_user)) {
		wake_up_interruptible(&mce_wait);
1001 1002 1003 1004 1005 1006 1007 1008

		/*
		 * There is no risk of missing notifications because
		 * work_pending is always cleared before the function is
		 * executed.
		 */
		if (trigger[0] && !work_pending(&mce_trigger_work))
			schedule_work(&mce_trigger_work);
1009

1010
		if (__ratelimit(&ratelimit))
1011
			printk(KERN_INFO "Machine check events logged\n");
1012 1013

		return 1;
L
Linus Torvalds 已提交
1014
	}
1015 1016
	return 0;
}
1017
EXPORT_SYMBOL_GPL(mce_notify_user);
1018

1019
/*
L
Linus Torvalds 已提交
1020 1021
 * Initialize Machine Checks for a CPU.
 */
1022
static int mce_cap_init(void)
L
Linus Torvalds 已提交
1023
{
1024
	unsigned b;
I
Ingo Molnar 已提交
1025
	u64 cap;
L
Linus Torvalds 已提交
1026 1027

	rdmsrl(MSR_IA32_MCG_CAP, cap);
1028 1029

	b = cap & MCG_BANKCNT_MASK;
1030 1031
	printk(KERN_INFO "mce: CPU supports %d MCE banks\n", b);

1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046
	if (b > MAX_NR_BANKS) {
		printk(KERN_WARNING
		       "MCE: Using only %u machine check banks out of %u\n",
			MAX_NR_BANKS, b);
		b = MAX_NR_BANKS;
	}

	/* Don't support asymmetric configurations today */
	WARN_ON(banks != 0 && b != banks);
	banks = b;
	if (!bank) {
		bank = kmalloc(banks * sizeof(u64), GFP_KERNEL);
		if (!bank)
			return -ENOMEM;
		memset(bank, 0xff, banks * sizeof(u64));
L
Linus Torvalds 已提交
1047
	}
1048

1049
	/* Use accurate RIP reporting if available. */
1050
	if ((cap & MCG_EXT_P) && MCG_EXT_CNT(cap) >= 9)
1051
		rip_msr = MSR_IA32_MCG_EIP;
L
Linus Torvalds 已提交
1052

A
Andi Kleen 已提交
1053 1054 1055
	if (cap & MCG_SER_P)
		mce_ser = 1;

1056 1057 1058
	return 0;
}

1059
static void mce_init(void)
1060
{
I
Ingo Molnar 已提交
1061
	mce_banks_t all_banks;
1062 1063 1064
	u64 cap;
	int i;

1065 1066 1067
	/*
	 * Log the machine checks left over from the previous reset.
	 */
1068
	bitmap_fill(all_banks, MAX_NR_BANKS);
A
Andi Kleen 已提交
1069
	machine_check_poll(MCP_UC|(!mce_bootlog ? MCP_DONTLOG : 0), &all_banks);
L
Linus Torvalds 已提交
1070 1071 1072

	set_in_cr4(X86_CR4_MCE);

1073
	rdmsrl(MSR_IA32_MCG_CAP, cap);
L
Linus Torvalds 已提交
1074 1075 1076 1077
	if (cap & MCG_CTL_P)
		wrmsr(MSR_IA32_MCG_CTL, 0xffffffff, 0xffffffff);

	for (i = 0; i < banks; i++) {
1078 1079
		if (skip_bank_init(i))
			continue;
1080
		wrmsrl(MSR_IA32_MC0_CTL+4*i, bank[i]);
L
Linus Torvalds 已提交
1081
		wrmsrl(MSR_IA32_MC0_STATUS+4*i, 0);
1082
	}
L
Linus Torvalds 已提交
1083 1084 1085
}

/* Add per CPU specific workarounds here */
1086
static void mce_cpu_quirks(struct cpuinfo_x86 *c)
1087
{
L
Linus Torvalds 已提交
1088
	/* This should be disabled by the BIOS, but isn't always */
1089
	if (c->x86_vendor == X86_VENDOR_AMD) {
I
Ingo Molnar 已提交
1090 1091 1092 1093 1094 1095
		if (c->x86 == 15 && banks > 4) {
			/*
			 * disable GART TBL walk error reporting, which
			 * trips off incorrectly with the IOMMU & 3ware
			 * & Cerberus:
			 */
1096
			clear_bit(10, (unsigned long *)&bank[4]);
I
Ingo Molnar 已提交
1097 1098 1099 1100 1101 1102
		}
		if (c->x86 <= 17 && mce_bootlog < 0) {
			/*
			 * Lots of broken BIOS around that don't clear them
			 * by default and leave crap in there. Don't log:
			 */
1103
			mce_bootlog = 0;
I
Ingo Molnar 已提交
1104
		}
1105 1106 1107 1108 1109 1110
		/*
		 * Various K7s with broken bank 0 around. Always disable
		 * by default.
		 */
		 if (c->x86 == 6)
			bank[0] = 0;
L
Linus Torvalds 已提交
1111
	}
1112

1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124
	if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * SDM documents that on family 6 bank 0 should not be written
		 * because it aliases to another special BIOS controlled
		 * register.
		 * But it's not aliased anymore on model 0x1a+
		 * Don't ignore bank 0 completely because there could be a
		 * valid event later, merely don't write CTL0.
		 */

		if (c->x86 == 6 && c->x86_model < 0x1A)
			__set_bit(0, &dont_init_banks);
1125 1126 1127 1128 1129 1130 1131 1132

		/*
		 * All newer Intel systems support MCE broadcasting. Enable
		 * synchronization with a one second timeout.
		 */
		if ((c->x86 > 6 || (c->x86 == 6 && c->x86_model >= 0xe)) &&
			monarch_timeout < 0)
			monarch_timeout = USEC_PER_SEC;
1133
	}
1134 1135
	if (monarch_timeout < 0)
		monarch_timeout = 0;
1136 1137
	if (mce_bootlog != 0)
		mce_panic_timeout = 30;
1138
}
L
Linus Torvalds 已提交
1139

1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154
static void __cpuinit mce_ancient_init(struct cpuinfo_x86 *c)
{
	if (c->x86 != 5)
		return;
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		if (mce_p5_enabled())
			intel_p5_mcheck_init(c);
		break;
	case X86_VENDOR_CENTAUR:
		winchip_mcheck_init(c);
		break;
	}
}

1155
static void mce_cpu_features(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1156 1157 1158 1159 1160
{
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		mce_intel_feature_init(c);
		break;
1161 1162 1163
	case X86_VENDOR_AMD:
		mce_amd_feature_init(c);
		break;
L
Linus Torvalds 已提交
1164 1165 1166 1167 1168
	default:
		break;
	}
}

1169 1170 1171
static void mce_init_timer(void)
{
	struct timer_list *t = &__get_cpu_var(mce_timer);
1172
	int *n = &__get_cpu_var(next_interval);
1173

1174 1175
	*n = check_interval * HZ;
	if (!*n)
1176 1177
		return;
	setup_timer(t, mcheck_timer, smp_processor_id());
1178
	t->expires = round_jiffies(jiffies + *n);
1179 1180 1181
	add_timer(t);
}

1182
/*
L
Linus Torvalds 已提交
1183
 * Called for each booted CPU to set up machine checks.
I
Ingo Molnar 已提交
1184
 * Must be called with preempt off:
L
Linus Torvalds 已提交
1185
 */
1186
void __cpuinit mcheck_init(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1187
{
1188 1189 1190 1191 1192
	if (mce_disabled)
		return;

	mce_ancient_init(c);

1193
	if (!mce_available(c))
L
Linus Torvalds 已提交
1194 1195
		return;

1196
	if (mce_cap_init() < 0) {
1197
		mce_disabled = 1;
1198 1199 1200 1201
		return;
	}
	mce_cpu_quirks(c);

1202 1203
	machine_check_vector = do_machine_check;

1204
	mce_init();
L
Linus Torvalds 已提交
1205
	mce_cpu_features(c);
1206
	mce_init_timer();
L
Linus Torvalds 已提交
1207 1208 1209 1210 1211 1212
}

/*
 * Character device to read and clear the MCE log.
 */

T
Tim Hockin 已提交
1213
static DEFINE_SPINLOCK(mce_state_lock);
I
Ingo Molnar 已提交
1214 1215
static int		open_count;		/* #times opened */
static int		open_exclu;		/* already open exclusive? */
T
Tim Hockin 已提交
1216 1217 1218 1219 1220 1221 1222

static int mce_open(struct inode *inode, struct file *file)
{
	spin_lock(&mce_state_lock);

	if (open_exclu || (open_count && (file->f_flags & O_EXCL))) {
		spin_unlock(&mce_state_lock);
I
Ingo Molnar 已提交
1223

T
Tim Hockin 已提交
1224 1225 1226 1227 1228 1229 1230 1231 1232
		return -EBUSY;
	}

	if (file->f_flags & O_EXCL)
		open_exclu = 1;
	open_count++;

	spin_unlock(&mce_state_lock);

1233
	return nonseekable_open(inode, file);
T
Tim Hockin 已提交
1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247
}

static int mce_release(struct inode *inode, struct file *file)
{
	spin_lock(&mce_state_lock);

	open_count--;
	open_exclu = 0;

	spin_unlock(&mce_state_lock);

	return 0;
}

1248 1249
static void collect_tscs(void *data)
{
L
Linus Torvalds 已提交
1250
	unsigned long *cpu_tsc = (unsigned long *)data;
1251

L
Linus Torvalds 已提交
1252
	rdtscll(cpu_tsc[smp_processor_id()]);
1253
}
L
Linus Torvalds 已提交
1254

I
Ingo Molnar 已提交
1255 1256
static DEFINE_MUTEX(mce_read_mutex);

1257 1258
static ssize_t mce_read(struct file *filp, char __user *ubuf, size_t usize,
			loff_t *off)
L
Linus Torvalds 已提交
1259
{
I
Ingo Molnar 已提交
1260
	char __user *buf = ubuf;
1261
	unsigned long *cpu_tsc;
1262
	unsigned prev, next;
L
Linus Torvalds 已提交
1263 1264
	int i, err;

1265
	cpu_tsc = kmalloc(nr_cpu_ids * sizeof(long), GFP_KERNEL);
1266 1267 1268
	if (!cpu_tsc)
		return -ENOMEM;

1269
	mutex_lock(&mce_read_mutex);
L
Linus Torvalds 已提交
1270 1271 1272
	next = rcu_dereference(mcelog.next);

	/* Only supports full reads right now */
1273
	if (*off != 0 || usize < MCE_LOG_LEN*sizeof(struct mce)) {
1274
		mutex_unlock(&mce_read_mutex);
1275
		kfree(cpu_tsc);
I
Ingo Molnar 已提交
1276

L
Linus Torvalds 已提交
1277 1278 1279 1280
		return -EINVAL;
	}

	err = 0;
1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292
	prev = 0;
	do {
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;

			while (!mcelog.entry[i].finished) {
				if (time_after_eq(jiffies, start + 2)) {
					memset(mcelog.entry + i, 0,
					       sizeof(struct mce));
					goto timeout;
				}
				cpu_relax();
1293
			}
1294 1295 1296 1297 1298 1299
			smp_rmb();
			err |= copy_to_user(buf, mcelog.entry + i,
					    sizeof(struct mce));
			buf += sizeof(struct mce);
timeout:
			;
1300
		}
L
Linus Torvalds 已提交
1301

1302 1303 1304 1305 1306
		memset(mcelog.entry + prev, 0,
		       (next - prev) * sizeof(struct mce));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
L
Linus Torvalds 已提交
1307

1308
	synchronize_sched();
L
Linus Torvalds 已提交
1309

1310 1311 1312 1313
	/*
	 * Collect entries that were still getting written before the
	 * synchronize.
	 */
1314
	on_each_cpu(collect_tscs, cpu_tsc, 1);
I
Ingo Molnar 已提交
1315

1316 1317 1318 1319 1320
	for (i = next; i < MCE_LOG_LEN; i++) {
		if (mcelog.entry[i].finished &&
		    mcelog.entry[i].tsc < cpu_tsc[mcelog.entry[i].cpu]) {
			err |= copy_to_user(buf, mcelog.entry+i,
					    sizeof(struct mce));
L
Linus Torvalds 已提交
1321 1322 1323 1324
			smp_rmb();
			buf += sizeof(struct mce);
			memset(&mcelog.entry[i], 0, sizeof(struct mce));
		}
1325
	}
1326
	mutex_unlock(&mce_read_mutex);
1327
	kfree(cpu_tsc);
I
Ingo Molnar 已提交
1328

1329
	return err ? -EFAULT : buf - ubuf;
L
Linus Torvalds 已提交
1330 1331
}

1332 1333 1334 1335 1336 1337 1338 1339
static unsigned int mce_poll(struct file *file, poll_table *wait)
{
	poll_wait(file, &mce_wait, wait);
	if (rcu_dereference(mcelog.next))
		return POLLIN | POLLRDNORM;
	return 0;
}

1340
static long mce_ioctl(struct file *f, unsigned int cmd, unsigned long arg)
L
Linus Torvalds 已提交
1341 1342
{
	int __user *p = (int __user *)arg;
1343

L
Linus Torvalds 已提交
1344
	if (!capable(CAP_SYS_ADMIN))
1345
		return -EPERM;
I
Ingo Molnar 已提交
1346

L
Linus Torvalds 已提交
1347
	switch (cmd) {
1348
	case MCE_GET_RECORD_LEN:
L
Linus Torvalds 已提交
1349 1350
		return put_user(sizeof(struct mce), p);
	case MCE_GET_LOG_LEN:
1351
		return put_user(MCE_LOG_LEN, p);
L
Linus Torvalds 已提交
1352 1353
	case MCE_GETCLEAR_FLAGS: {
		unsigned flags;
1354 1355

		do {
L
Linus Torvalds 已提交
1356
			flags = mcelog.flags;
1357
		} while (cmpxchg(&mcelog.flags, flags, 0) != flags);
I
Ingo Molnar 已提交
1358

1359
		return put_user(flags, p);
L
Linus Torvalds 已提交
1360 1361
	}
	default:
1362 1363
		return -ENOTTY;
	}
L
Linus Torvalds 已提交
1364 1365
}

1366
/* Modified in mce-inject.c, so not static or const */
1367
struct file_operations mce_chrdev_ops = {
I
Ingo Molnar 已提交
1368 1369 1370 1371 1372
	.open			= mce_open,
	.release		= mce_release,
	.read			= mce_read,
	.poll			= mce_poll,
	.unlocked_ioctl		= mce_ioctl,
L
Linus Torvalds 已提交
1373
};
1374
EXPORT_SYMBOL_GPL(mce_chrdev_ops);
L
Linus Torvalds 已提交
1375 1376 1377 1378 1379 1380 1381

static struct miscdevice mce_log_device = {
	MISC_MCELOG_MINOR,
	"mcelog",
	&mce_chrdev_ops,
};

H
Hidetoshi Seto 已提交
1382 1383
/*
 * mce=off disables machine check
1384 1385 1386
 * mce=TOLERANCELEVEL[,monarchtimeout] (number, see above)
 *	monarchtimeout is how long to wait for other CPUs on machine
 *	check, or 0 to not wait
H
Hidetoshi Seto 已提交
1387 1388 1389
 * mce=bootlog Log MCEs from before booting. Disabled by default on AMD.
 * mce=nobootlog Don't log MCEs from before booting.
 */
L
Linus Torvalds 已提交
1390 1391
static int __init mcheck_enable(char *str)
{
1392 1393 1394 1395
	if (*str == 0)
		enable_p5_mce();
	if (*str == '=')
		str++;
L
Linus Torvalds 已提交
1396
	if (!strcmp(str, "off"))
1397
		mce_disabled = 1;
H
Hidetoshi Seto 已提交
1398 1399
	else if (!strcmp(str, "bootlog") || !strcmp(str, "nobootlog"))
		mce_bootlog = (str[0] == 'b');
1400
	else if (isdigit(str[0])) {
1401
		get_option(&str, &tolerant);
1402 1403 1404 1405 1406
		if (*str == ',') {
			++str;
			get_option(&str, &monarch_timeout);
		}
	} else {
1407
		printk(KERN_INFO "mce argument %s ignored. Please use /sys\n",
H
Hidetoshi Seto 已提交
1408 1409 1410
		       str);
		return 0;
	}
1411
	return 1;
L
Linus Torvalds 已提交
1412
}
1413
__setup("mce", mcheck_enable);
L
Linus Torvalds 已提交
1414

1415
/*
L
Linus Torvalds 已提交
1416
 * Sysfs support
1417
 */
L
Linus Torvalds 已提交
1418

1419 1420 1421 1422 1423 1424 1425 1426
/*
 * Disable machine checks on suspend and shutdown. We can't really handle
 * them later.
 */
static int mce_disable(void)
{
	int i;

1427 1428 1429 1430
	for (i = 0; i < banks; i++) {
		if (!skip_bank_init(i))
			wrmsrl(MSR_IA32_MC0_CTL + i*4, 0);
	}
1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443
	return 0;
}

static int mce_suspend(struct sys_device *dev, pm_message_t state)
{
	return mce_disable();
}

static int mce_shutdown(struct sys_device *dev)
{
	return mce_disable();
}

I
Ingo Molnar 已提交
1444 1445 1446 1447 1448
/*
 * On resume clear all MCE state. Don't want to see leftovers from the BIOS.
 * Only one CPU is active at this time, the others get re-added later using
 * CPU hotplug:
 */
L
Linus Torvalds 已提交
1449 1450
static int mce_resume(struct sys_device *dev)
{
1451
	mce_init();
1452
	mce_cpu_features(&current_cpu_data);
I
Ingo Molnar 已提交
1453

L
Linus Torvalds 已提交
1454 1455 1456
	return 0;
}

1457 1458 1459 1460
static void mce_cpu_restart(void *data)
{
	del_timer_sync(&__get_cpu_var(mce_timer));
	if (mce_available(&current_cpu_data))
1461
		mce_init();
1462 1463 1464
	mce_init_timer();
}

L
Linus Torvalds 已提交
1465
/* Reinit MCEs after user configuration changes */
1466 1467
static void mce_restart(void)
{
1468
	on_each_cpu(mce_cpu_restart, NULL, 1);
L
Linus Torvalds 已提交
1469 1470 1471
}

static struct sysdev_class mce_sysclass = {
I
Ingo Molnar 已提交
1472 1473 1474 1475
	.suspend	= mce_suspend,
	.shutdown	= mce_shutdown,
	.resume		= mce_resume,
	.name		= "machinecheck",
L
Linus Torvalds 已提交
1476 1477
};

I
Ingo Molnar 已提交
1478
DEFINE_PER_CPU(struct sys_device, mce_dev);
I
Ingo Molnar 已提交
1479 1480 1481

__cpuinitdata
void (*threshold_cpu_callback)(unsigned long action, unsigned int cpu);
L
Linus Torvalds 已提交
1482

1483 1484 1485 1486 1487 1488
static struct sysdev_attribute *bank_attrs;

static ssize_t show_bank(struct sys_device *s, struct sysdev_attribute *attr,
			 char *buf)
{
	u64 b = bank[attr - bank_attrs];
I
Ingo Molnar 已提交
1489

1490
	return sprintf(buf, "%llx\n", b);
1491 1492 1493
}

static ssize_t set_bank(struct sys_device *s, struct sysdev_attribute *attr,
H
Hidetoshi Seto 已提交
1494
			const char *buf, size_t size)
1495
{
H
Hidetoshi Seto 已提交
1496
	u64 new;
I
Ingo Molnar 已提交
1497

H
Hidetoshi Seto 已提交
1498
	if (strict_strtoull(buf, 0, &new) < 0)
1499
		return -EINVAL;
I
Ingo Molnar 已提交
1500

1501 1502
	bank[attr - bank_attrs] = new;
	mce_restart();
I
Ingo Molnar 已提交
1503

H
Hidetoshi Seto 已提交
1504
	return size;
1505
}
1506

I
Ingo Molnar 已提交
1507 1508
static ssize_t
show_trigger(struct sys_device *s, struct sysdev_attribute *attr, char *buf)
1509 1510 1511 1512 1513 1514
{
	strcpy(buf, trigger);
	strcat(buf, "\n");
	return strlen(trigger) + 1;
}

1515
static ssize_t set_trigger(struct sys_device *s, struct sysdev_attribute *attr,
I
Ingo Molnar 已提交
1516
				const char *buf, size_t siz)
1517 1518 1519
{
	char *p;
	int len;
I
Ingo Molnar 已提交
1520

1521 1522 1523 1524
	strncpy(trigger, buf, sizeof(trigger));
	trigger[sizeof(trigger)-1] = 0;
	len = strlen(trigger);
	p = strchr(trigger, '\n');
I
Ingo Molnar 已提交
1525 1526 1527 1528

	if (*p)
		*p = 0;

1529 1530 1531
	return len;
}

1532 1533 1534 1535 1536 1537 1538 1539 1540
static ssize_t store_int_with_restart(struct sys_device *s,
				      struct sysdev_attribute *attr,
				      const char *buf, size_t size)
{
	ssize_t ret = sysdev_store_int(s, attr, buf, size);
	mce_restart();
	return ret;
}

1541
static SYSDEV_ATTR(trigger, 0644, show_trigger, set_trigger);
1542
static SYSDEV_INT_ATTR(tolerant, 0644, tolerant);
1543
static SYSDEV_INT_ATTR(monarch_timeout, 0644, monarch_timeout);
I
Ingo Molnar 已提交
1544

1545 1546 1547 1548 1549
static struct sysdev_ext_attribute attr_check_interval = {
	_SYSDEV_ATTR(check_interval, 0644, sysdev_show_int,
		     store_int_with_restart),
	&check_interval
};
I
Ingo Molnar 已提交
1550

I
Ingo Molnar 已提交
1551
static struct sysdev_attribute *mce_attrs[] = {
1552
	&attr_tolerant.attr, &attr_check_interval.attr, &attr_trigger,
1553
	&attr_monarch_timeout.attr,
1554 1555
	NULL
};
L
Linus Torvalds 已提交
1556

I
Ingo Molnar 已提交
1557
static cpumask_var_t mce_dev_initialized;
1558

I
Ingo Molnar 已提交
1559
/* Per cpu sysdev init. All of the cpus still share the same ctrl bank: */
1560
static __cpuinit int mce_create_device(unsigned int cpu)
L
Linus Torvalds 已提交
1561 1562
{
	int err;
1563
	int i;
1564

A
Andreas Herrmann 已提交
1565
	if (!mce_available(&boot_cpu_data))
1566 1567
		return -EIO;

I
Ingo Molnar 已提交
1568 1569 1570
	memset(&per_cpu(mce_dev, cpu).kobj, 0, sizeof(struct kobject));
	per_cpu(mce_dev, cpu).id	= cpu;
	per_cpu(mce_dev, cpu).cls	= &mce_sysclass;
1571

I
Ingo Molnar 已提交
1572
	err = sysdev_register(&per_cpu(mce_dev, cpu));
1573 1574 1575
	if (err)
		return err;

I
Ingo Molnar 已提交
1576 1577
	for (i = 0; mce_attrs[i]; i++) {
		err = sysdev_create_file(&per_cpu(mce_dev, cpu), mce_attrs[i]);
1578 1579 1580
		if (err)
			goto error;
	}
1581
	for (i = 0; i < banks; i++) {
I
Ingo Molnar 已提交
1582
		err = sysdev_create_file(&per_cpu(mce_dev, cpu),
1583 1584 1585 1586
					&bank_attrs[i]);
		if (err)
			goto error2;
	}
I
Ingo Molnar 已提交
1587
	cpumask_set_cpu(cpu, mce_dev_initialized);
1588

1589
	return 0;
1590
error2:
I
Ingo Molnar 已提交
1591 1592
	while (--i >= 0)
		sysdev_remove_file(&per_cpu(mce_dev, cpu), &bank_attrs[i]);
1593
error:
I
Ingo Molnar 已提交
1594 1595 1596 1597
	while (--i >= 0)
		sysdev_remove_file(&per_cpu(mce_dev, cpu), mce_attrs[i]);

	sysdev_unregister(&per_cpu(mce_dev, cpu));
1598

1599 1600 1601
	return err;
}

1602
static __cpuinit void mce_remove_device(unsigned int cpu)
1603
{
1604 1605
	int i;

I
Ingo Molnar 已提交
1606
	if (!cpumask_test_cpu(cpu, mce_dev_initialized))
1607 1608
		return;

I
Ingo Molnar 已提交
1609 1610 1611
	for (i = 0; mce_attrs[i]; i++)
		sysdev_remove_file(&per_cpu(mce_dev, cpu), mce_attrs[i]);

1612
	for (i = 0; i < banks; i++)
I
Ingo Molnar 已提交
1613 1614 1615 1616
		sysdev_remove_file(&per_cpu(mce_dev, cpu), &bank_attrs[i]);

	sysdev_unregister(&per_cpu(mce_dev, cpu));
	cpumask_clear_cpu(cpu, mce_dev_initialized);
1617 1618
}

1619
/* Make sure there are no machine checks on offlined CPUs. */
1620
static void mce_disable_cpu(void *h)
1621
{
A
Andi Kleen 已提交
1622
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
1623
	int i;
1624 1625 1626

	if (!mce_available(&current_cpu_data))
		return;
A
Andi Kleen 已提交
1627 1628
	if (!(action & CPU_TASKS_FROZEN))
		cmci_clear();
1629 1630 1631 1632
	for (i = 0; i < banks; i++) {
		if (!skip_bank_init(i))
			wrmsrl(MSR_IA32_MC0_CTL + i*4, 0);
	}
1633 1634
}

1635
static void mce_reenable_cpu(void *h)
1636
{
A
Andi Kleen 已提交
1637
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
1638
	int i;
1639 1640 1641

	if (!mce_available(&current_cpu_data))
		return;
I
Ingo Molnar 已提交
1642

A
Andi Kleen 已提交
1643 1644
	if (!(action & CPU_TASKS_FROZEN))
		cmci_reenable();
1645 1646 1647 1648
	for (i = 0; i < banks; i++) {
		if (!skip_bank_init(i))
			wrmsrl(MSR_IA32_MC0_CTL + i*4, bank[i]);
	}
1649 1650
}

1651
/* Get notified when a cpu comes on/off. Be hotplug friendly. */
I
Ingo Molnar 已提交
1652 1653
static int __cpuinit
mce_cpu_callback(struct notifier_block *nfb, unsigned long action, void *hcpu)
1654 1655
{
	unsigned int cpu = (unsigned long)hcpu;
1656
	struct timer_list *t = &per_cpu(mce_timer, cpu);
1657 1658

	switch (action) {
1659 1660 1661
	case CPU_ONLINE:
	case CPU_ONLINE_FROZEN:
		mce_create_device(cpu);
1662 1663
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
1664 1665
		break;
	case CPU_DEAD:
1666
	case CPU_DEAD_FROZEN:
1667 1668
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
1669 1670
		mce_remove_device(cpu);
		break;
1671 1672 1673
	case CPU_DOWN_PREPARE:
	case CPU_DOWN_PREPARE_FROZEN:
		del_timer_sync(t);
A
Andi Kleen 已提交
1674
		smp_call_function_single(cpu, mce_disable_cpu, &action, 1);
1675 1676 1677
		break;
	case CPU_DOWN_FAILED:
	case CPU_DOWN_FAILED_FROZEN:
1678 1679
		t->expires = round_jiffies(jiffies +
						__get_cpu_var(next_interval));
1680
		add_timer_on(t, cpu);
A
Andi Kleen 已提交
1681 1682 1683 1684 1685
		smp_call_function_single(cpu, mce_reenable_cpu, &action, 1);
		break;
	case CPU_POST_DEAD:
		/* intentionally ignoring frozen here */
		cmci_rediscover(cpu);
1686
		break;
1687
	}
1688
	return NOTIFY_OK;
1689 1690
}

1691
static struct notifier_block mce_cpu_notifier __cpuinitdata = {
1692 1693 1694
	.notifier_call = mce_cpu_callback,
};

1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705
static __init int mce_init_banks(void)
{
	int i;

	bank_attrs = kzalloc(sizeof(struct sysdev_attribute) * banks,
				GFP_KERNEL);
	if (!bank_attrs)
		return -ENOMEM;

	for (i = 0; i < banks; i++) {
		struct sysdev_attribute *a = &bank_attrs[i];
I
Ingo Molnar 已提交
1706 1707

		a->attr.name	= kasprintf(GFP_KERNEL, "bank%d", i);
1708 1709
		if (!a->attr.name)
			goto nomem;
I
Ingo Molnar 已提交
1710 1711 1712 1713

		a->attr.mode	= 0644;
		a->show		= show_bank;
		a->store	= set_bank;
1714 1715 1716 1717 1718 1719 1720 1721
	}
	return 0;

nomem:
	while (--i >= 0)
		kfree(bank_attrs[i].attr.name);
	kfree(bank_attrs);
	bank_attrs = NULL;
I
Ingo Molnar 已提交
1722

1723 1724 1725
	return -ENOMEM;
}

1726 1727 1728 1729 1730
static __init int mce_init_device(void)
{
	int err;
	int i = 0;

L
Linus Torvalds 已提交
1731 1732
	if (!mce_available(&boot_cpu_data))
		return -EIO;
1733

I
Ingo Molnar 已提交
1734
	alloc_cpumask_var(&mce_dev_initialized, GFP_KERNEL);
1735

1736 1737 1738 1739
	err = mce_init_banks();
	if (err)
		return err;

L
Linus Torvalds 已提交
1740
	err = sysdev_class_register(&mce_sysclass);
1741 1742
	if (err)
		return err;
1743 1744

	for_each_online_cpu(i) {
1745 1746 1747
		err = mce_create_device(i);
		if (err)
			return err;
1748 1749
	}

1750
	register_hotcpu_notifier(&mce_cpu_notifier);
L
Linus Torvalds 已提交
1751
	misc_register(&mce_log_device);
I
Ingo Molnar 已提交
1752

L
Linus Torvalds 已提交
1753 1754
	return err;
}
1755

L
Linus Torvalds 已提交
1756
device_initcall(mce_init_device);
I
Ingo Molnar 已提交
1757

1758
#else /* CONFIG_X86_OLD_MCE: */
I
Ingo Molnar 已提交
1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790

int nr_mce_banks;
EXPORT_SYMBOL_GPL(nr_mce_banks);	/* non-fatal.o */

/* This has to be run for each processor */
void mcheck_init(struct cpuinfo_x86 *c)
{
	if (mce_disabled == 1)
		return;

	switch (c->x86_vendor) {
	case X86_VENDOR_AMD:
		amd_mcheck_init(c);
		break;

	case X86_VENDOR_INTEL:
		if (c->x86 == 5)
			intel_p5_mcheck_init(c);
		if (c->x86 == 6)
			intel_p6_mcheck_init(c);
		if (c->x86 == 15)
			intel_p4_mcheck_init(c);
		break;

	case X86_VENDOR_CENTAUR:
		if (c->x86 == 5)
			winchip_mcheck_init(c);
		break;

	default:
		break;
	}
1791
	printk(KERN_INFO "mce: CPU supports %d MCE banks\n", nr_mce_banks);
I
Ingo Molnar 已提交
1792 1793 1794 1795 1796 1797 1798 1799 1800 1801
}

static int __init mcheck_enable(char *str)
{
	mce_disabled = -1;
	return 1;
}

__setup("mce", mcheck_enable);

1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812
#endif /* CONFIG_X86_OLD_MCE */

/*
 * Old style boot options parsing. Only for compatibility.
 */
static int __init mcheck_disable(char *str)
{
	mce_disabled = 1;
	return 1;
}
__setup("nomce", mcheck_disable);