mce.c 59.8 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * Machine check handler.
I
Ingo Molnar 已提交
3
 *
L
Linus Torvalds 已提交
4
 * K8 parts Copyright 2002,2003 Andi Kleen, SuSE Labs.
5 6
 * Rest from unknown author(s).
 * 2004 Andi Kleen. Rewrote most of it.
7 8
 * Copyright 2008 Intel Corporation
 * Author: Andi Kleen
L
Linus Torvalds 已提交
9
 */
10 11 12

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

I
Ingo Molnar 已提交
13 14 15 16 17 18 19
#include <linux/thread_info.h>
#include <linux/capability.h>
#include <linux/miscdevice.h>
#include <linux/ratelimit.h>
#include <linux/kallsyms.h>
#include <linux/rcupdate.h>
#include <linux/kobject.h>
20
#include <linux/uaccess.h>
I
Ingo Molnar 已提交
21 22 23
#include <linux/kdebug.h>
#include <linux/kernel.h>
#include <linux/percpu.h>
L
Linus Torvalds 已提交
24
#include <linux/string.h>
25
#include <linux/device.h>
26
#include <linux/syscore_ops.h>
27
#include <linux/delay.h>
28
#include <linux/ctype.h>
I
Ingo Molnar 已提交
29
#include <linux/sched.h>
30
#include <linux/sysfs.h>
I
Ingo Molnar 已提交
31
#include <linux/types.h>
32
#include <linux/slab.h>
I
Ingo Molnar 已提交
33 34 35
#include <linux/init.h>
#include <linux/kmod.h>
#include <linux/poll.h>
36
#include <linux/nmi.h>
I
Ingo Molnar 已提交
37
#include <linux/cpu.h>
38
#include <linux/smp.h>
I
Ingo Molnar 已提交
39
#include <linux/fs.h>
40
#include <linux/mm.h>
41
#include <linux/debugfs.h>
42
#include <linux/irq_work.h>
43
#include <linux/export.h>
I
Ingo Molnar 已提交
44

45
#include <asm/processor.h>
46
#include <asm/traps.h>
A
Andy Lutomirski 已提交
47
#include <asm/tlbflush.h>
I
Ingo Molnar 已提交
48 49
#include <asm/mce.h>
#include <asm/msr.h>
L
Linus Torvalds 已提交
50

51
#include "mce-internal.h"
52

53
static DEFINE_MUTEX(mce_chrdev_read_mutex);
54

55
#define rcu_dereference_check_mce(p) \
56 57 58 59 60 61
({ \
	rcu_lockdep_assert(rcu_read_lock_sched_held() || \
			   lockdep_is_held(&mce_chrdev_read_mutex), \
			   "suspicious rcu_dereference_check_mce() usage"); \
	smp_load_acquire(&(p)); \
})
62

63 64 65
#define CREATE_TRACE_POINTS
#include <trace/events/mce.h>

66
#define SPINUNIT		100	/* 100ns */
67

68 69
DEFINE_PER_CPU(unsigned, mce_exception_count);

70
struct mce_bank *mce_banks __read_mostly;
71
struct mce_vendor_flags mce_flags __read_mostly;
72

73
struct mca_config mca_cfg __read_mostly = {
74
	.bootlog  = -1,
75 76 77 78 79 80 81
	/*
	 * Tolerant levels:
	 * 0: always panic on uncorrected errors, log corrected errors
	 * 1: panic or SIGBUS on uncorrected errors, log corrected errors
	 * 2: SIGBUS or log uncorrected errors (if possible), log corr. errors
	 * 3: never panic or SIGBUS, log all errors (for testing only)
	 */
82 83
	.tolerant = 1,
	.monarch_timeout = -1
84 85
};

86 87 88 89
/* User mode helper program triggered by machine check event */
static unsigned long		mce_need_notify;
static char			mce_helper[128];
static char			*mce_helper_argv[2] = { mce_helper, NULL };
L
Linus Torvalds 已提交
90

91 92
static DECLARE_WAIT_QUEUE_HEAD(mce_chrdev_wait);

93 94 95
static DEFINE_PER_CPU(struct mce, mces_seen);
static int			cpu_missing;

96 97 98 99
/*
 * MCA banks polled by the period polling timer for corrected events.
 * With Intel CMCI, this only has MCA banks which do not support CMCI (if any).
 */
100 101 102 103
DEFINE_PER_CPU(mce_banks_t, mce_poll_banks) = {
	[0 ... BITS_TO_LONGS(MAX_NR_BANKS)-1] = ~0UL
};

104 105 106 107 108 109 110 111 112
/*
 * MCA banks controlled through firmware first for corrected errors.
 * This is a global list of banks for which we won't enable CMCI and we
 * won't poll. Firmware controls these banks and is responsible for
 * reporting corrected errors through GHES. Uncorrected/recoverable
 * errors are still notified through a machine check.
 */
mce_banks_t mce_banks_ce_disabled;

113 114
static DEFINE_PER_CPU(struct work_struct, mce_work);

115 116
static void (*quirk_no_way_out)(int bank, struct mce *m, struct pt_regs *regs);

117 118 119 120
/*
 * CPU/chipset specific EDAC code can register a notifier call here to print
 * MCE errors in a human-readable form.
 */
B
Borislav Petkov 已提交
121
static ATOMIC_NOTIFIER_HEAD(x86_mce_decoder_chain);
122

123 124 125 126
/* Do initial initialization of a struct mce */
void mce_setup(struct mce *m)
{
	memset(m, 0, sizeof(struct mce));
127
	m->cpu = m->extcpu = smp_processor_id();
128
	m->tsc = rdtsc();
129 130 131 132 133 134 135
	/* We hope get_seconds stays lockless */
	m->time = get_seconds();
	m->cpuvendor = boot_cpu_data.x86_vendor;
	m->cpuid = cpuid_eax(1);
	m->socketid = cpu_data(m->extcpu).phys_proc_id;
	m->apicid = cpu_data(m->extcpu).initial_apicid;
	rdmsrl(MSR_IA32_MCG_CAP, m->mcgcap);
136 137
}

138 139 140
DEFINE_PER_CPU(struct mce, injectm);
EXPORT_PER_CPU_SYMBOL_GPL(injectm);

L
Linus Torvalds 已提交
141 142 143 144 145 146
/*
 * Lockless MCE logging infrastructure.
 * This avoids deadlocks on printk locks without having to break locks. Also
 * separate MCEs from kernel messages to avoid bogus bug reports.
 */

147
static struct mce_log mcelog = {
148 149 150
	.signature	= MCE_LOG_SIGNATURE,
	.len		= MCE_LOG_LEN,
	.recordlen	= sizeof(struct mce),
151
};
L
Linus Torvalds 已提交
152 153 154 155

void mce_log(struct mce *mce)
{
	unsigned next, entry;
I
Ingo Molnar 已提交
156

157 158 159
	/* Emit the trace record: */
	trace_mce_record(mce);

160
	atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, mce);
161

L
Linus Torvalds 已提交
162
	mce->finished = 0;
M
Mike Waychison 已提交
163
	wmb();
L
Linus Torvalds 已提交
164
	for (;;) {
165
		entry = rcu_dereference_check_mce(mcelog.next);
166
		for (;;) {
167

I
Ingo Molnar 已提交
168 169 170 171 172
			/*
			 * When the buffer fills up discard new entries.
			 * Assume that the earlier errors are the more
			 * interesting ones:
			 */
173
			if (entry >= MCE_LOG_LEN) {
174 175
				set_bit(MCE_OVERFLOW,
					(unsigned long *)&mcelog.flags);
176 177
				return;
			}
I
Ingo Molnar 已提交
178
			/* Old left over entry. Skip: */
179 180 181 182
			if (mcelog.entry[entry].finished) {
				entry++;
				continue;
			}
M
Mike Waychison 已提交
183
			break;
L
Linus Torvalds 已提交
184 185 186 187 188 189 190
		}
		smp_rmb();
		next = entry + 1;
		if (cmpxchg(&mcelog.next, entry, next) == entry)
			break;
	}
	memcpy(mcelog.entry + entry, mce, sizeof(struct mce));
M
Mike Waychison 已提交
191
	wmb();
L
Linus Torvalds 已提交
192
	mcelog.entry[entry].finished = 1;
M
Mike Waychison 已提交
193
	wmb();
L
Linus Torvalds 已提交
194

195
	mce->finished = 1;
196
	set_bit(0, &mce_need_notify);
L
Linus Torvalds 已提交
197 198
}

B
Borislav Petkov 已提交
199 200 201 202
static void drain_mcelog_buffer(void)
{
	unsigned int next, i, prev = 0;

203
	next = ACCESS_ONCE(mcelog.next);
B
Borislav Petkov 已提交
204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221

	do {
		struct mce *m;

		/* drain what was logged during boot */
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;
			unsigned retries = 1;

			m = &mcelog.entry[i];

			while (!m->finished) {
				if (time_after_eq(jiffies, start + 2*retries))
					retries++;

				cpu_relax();

				if (!m->finished && retries >= 4) {
222
					pr_err("skipping error being logged currently!\n");
B
Borislav Petkov 已提交
223 224 225 226 227 228 229 230 231 232 233 234 235 236
					break;
				}
			}
			smp_rmb();
			atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, m);
		}

		memset(mcelog.entry + prev, 0, (next - prev) * sizeof(*m));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
}


237 238 239
void mce_register_decode_chain(struct notifier_block *nb)
{
	atomic_notifier_chain_register(&x86_mce_decoder_chain, nb);
B
Borislav Petkov 已提交
240
	drain_mcelog_buffer();
241 242 243 244 245 246 247 248 249
}
EXPORT_SYMBOL_GPL(mce_register_decode_chain);

void mce_unregister_decode_chain(struct notifier_block *nb)
{
	atomic_notifier_chain_unregister(&x86_mce_decoder_chain, nb);
}
EXPORT_SYMBOL_GPL(mce_unregister_decode_chain);

H
Hidetoshi Seto 已提交
250
static void print_mce(struct mce *m)
L
Linus Torvalds 已提交
251
{
252 253
	int ret = 0;

H
Huang Ying 已提交
254
	pr_emerg(HW_ERR "CPU %d: Machine Check Exception: %Lx Bank %d: %016Lx\n",
255
	       m->extcpu, m->mcgstatus, m->bank, m->status);
256

257
	if (m->ip) {
H
Huang Ying 已提交
258
		pr_emerg(HW_ERR "RIP%s %02x:<%016Lx> ",
259 260 261
			!(m->mcgstatus & MCG_STATUS_EIPV) ? " !INEXACT!" : "",
				m->cs, m->ip);

L
Linus Torvalds 已提交
262
		if (m->cs == __KERNEL_CS)
263
			print_symbol("{%s}", m->ip);
264
		pr_cont("\n");
L
Linus Torvalds 已提交
265
	}
266

H
Huang Ying 已提交
267
	pr_emerg(HW_ERR "TSC %llx ", m->tsc);
L
Linus Torvalds 已提交
268
	if (m->addr)
269
		pr_cont("ADDR %llx ", m->addr);
L
Linus Torvalds 已提交
270
	if (m->misc)
271
		pr_cont("MISC %llx ", m->misc);
272

273
	pr_cont("\n");
274 275 276 277
	/*
	 * Note this output is parsed by external tools and old fields
	 * should not be changed.
	 */
278
	pr_emerg(HW_ERR "PROCESSOR %u:%x TIME %llu SOCKET %u APIC %x microcode %x\n",
279 280
		m->cpuvendor, m->cpuid, m->time, m->socketid, m->apicid,
		cpu_data(m->extcpu).microcode);
281 282 283

	/*
	 * Print out human-readable details about the MCE error,
284
	 * (if the CPU has an implementation for that)
285
	 */
286 287 288 289 290
	ret = atomic_notifier_call_chain(&x86_mce_decoder_chain, 0, m);
	if (ret == NOTIFY_STOP)
		return;

	pr_emerg_ratelimited(HW_ERR "Run the above through 'mcelog --ascii'\n");
291 292
}

293 294
#define PANIC_TIMEOUT 5 /* 5 seconds */

295
static atomic_t mce_panicked;
296

297
static int fake_panic;
298
static atomic_t mce_fake_panicked;
299

300 301 302 303
/* Panic in progress. Enable interrupts and wait for final IPI */
static void wait_for_panic(void)
{
	long timeout = PANIC_TIMEOUT*USEC_PER_SEC;
304

305 306 307 308
	preempt_disable();
	local_irq_enable();
	while (timeout-- > 0)
		udelay(1);
309
	if (panic_timeout == 0)
310
		panic_timeout = mca_cfg.panic_timeout;
311 312 313
	panic("Panicing machine check CPU died");
}

314
static void mce_panic(const char *msg, struct mce *final, char *exp)
315
{
316
	int i, apei_err = 0;
317

318 319 320 321
	if (!fake_panic) {
		/*
		 * Make sure only one CPU runs in machine check panic
		 */
322
		if (atomic_inc_return(&mce_panicked) > 1)
323 324
			wait_for_panic();
		barrier();
325

326 327 328 329
		bust_spinlocks(1);
		console_verbose();
	} else {
		/* Don't log too much for fake panic */
330
		if (atomic_inc_return(&mce_fake_panicked) > 1)
331 332
			return;
	}
333
	/* First print corrected ones that are still unlogged */
L
Linus Torvalds 已提交
334
	for (i = 0; i < MCE_LOG_LEN; i++) {
335
		struct mce *m = &mcelog.entry[i];
H
Hidetoshi Seto 已提交
336 337
		if (!(m->status & MCI_STATUS_VAL))
			continue;
338
		if (!(m->status & MCI_STATUS_UC)) {
H
Hidetoshi Seto 已提交
339
			print_mce(m);
340 341 342
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
343 344 345 346 347
	}
	/* Now print uncorrected but with the final one last */
	for (i = 0; i < MCE_LOG_LEN; i++) {
		struct mce *m = &mcelog.entry[i];
		if (!(m->status & MCI_STATUS_VAL))
L
Linus Torvalds 已提交
348
			continue;
H
Hidetoshi Seto 已提交
349 350
		if (!(m->status & MCI_STATUS_UC))
			continue;
351
		if (!final || memcmp(m, final, sizeof(struct mce))) {
H
Hidetoshi Seto 已提交
352
			print_mce(m);
353 354 355
			if (!apei_err)
				apei_err = apei_write_mce(m);
		}
L
Linus Torvalds 已提交
356
	}
357
	if (final) {
H
Hidetoshi Seto 已提交
358
		print_mce(final);
359 360 361
		if (!apei_err)
			apei_err = apei_write_mce(final);
	}
362
	if (cpu_missing)
H
Huang Ying 已提交
363
		pr_emerg(HW_ERR "Some CPUs didn't answer in synchronization\n");
364
	if (exp)
H
Huang Ying 已提交
365
		pr_emerg(HW_ERR "Machine check: %s\n", exp);
366 367
	if (!fake_panic) {
		if (panic_timeout == 0)
368
			panic_timeout = mca_cfg.panic_timeout;
369 370
		panic(msg);
	} else
H
Huang Ying 已提交
371
		pr_emerg(HW_ERR "Fake kernel panic: %s\n", msg);
372
}
L
Linus Torvalds 已提交
373

374 375 376 377
/* Support code for software error injection */

static int msr_to_offset(u32 msr)
{
T
Tejun Heo 已提交
378
	unsigned bank = __this_cpu_read(injectm.bank);
379

380
	if (msr == mca_cfg.rip_msr)
381
		return offsetof(struct mce, ip);
382
	if (msr == MSR_IA32_MCx_STATUS(bank))
383
		return offsetof(struct mce, status);
384
	if (msr == MSR_IA32_MCx_ADDR(bank))
385
		return offsetof(struct mce, addr);
386
	if (msr == MSR_IA32_MCx_MISC(bank))
387 388 389 390 391 392
		return offsetof(struct mce, misc);
	if (msr == MSR_IA32_MCG_STATUS)
		return offsetof(struct mce, mcgstatus);
	return -1;
}

393 394 395 396
/* MSR access wrappers used for error injection */
static u64 mce_rdmsrl(u32 msr)
{
	u64 v;
397

T
Tejun Heo 已提交
398
	if (__this_cpu_read(injectm.finished)) {
399
		int offset = msr_to_offset(msr);
400

401 402
		if (offset < 0)
			return 0;
403
		return *(u64 *)((char *)this_cpu_ptr(&injectm) + offset);
404
	}
405 406 407 408 409 410 411 412 413 414 415

	if (rdmsrl_safe(msr, &v)) {
		WARN_ONCE(1, "mce: Unable to read msr %d!\n", msr);
		/*
		 * Return zero in case the access faulted. This should
		 * not happen normally but can happen if the CPU does
		 * something weird, or if the code is buggy.
		 */
		v = 0;
	}

416 417 418 419 420
	return v;
}

static void mce_wrmsrl(u32 msr, u64 v)
{
T
Tejun Heo 已提交
421
	if (__this_cpu_read(injectm.finished)) {
422
		int offset = msr_to_offset(msr);
423

424
		if (offset >= 0)
425
			*(u64 *)((char *)this_cpu_ptr(&injectm) + offset) = v;
426 427
		return;
	}
428 429 430
	wrmsrl(msr, v);
}

431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448
/*
 * Collect all global (w.r.t. this processor) status about this machine
 * check into our "mce" struct so that we can use it later to assess
 * the severity of the problem as we read per-bank specific details.
 */
static inline void mce_gather_info(struct mce *m, struct pt_regs *regs)
{
	mce_setup(m);

	m->mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
	if (regs) {
		/*
		 * Get the address of the instruction at the time of
		 * the machine check error.
		 */
		if (m->mcgstatus & (MCG_STATUS_RIPV|MCG_STATUS_EIPV)) {
			m->ip = regs->ip;
			m->cs = regs->cs;
449 450 451 452 453 454 455 456

			/*
			 * When in VM86 mode make the cs look like ring 3
			 * always. This is a lie, but it's better than passing
			 * the additional vm86 bit around everywhere.
			 */
			if (v8086_mode(regs))
				m->cs |= 3;
457 458
		}
		/* Use accurate RIP reporting if available. */
459 460
		if (mca_cfg.rip_msr)
			m->ip = mce_rdmsrl(mca_cfg.rip_msr);
461 462 463
	}
}

464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480
/*
 * Simple lockless ring to communicate PFNs from the exception handler with the
 * process context work function. This is vastly simplified because there's
 * only a single reader and a single writer.
 */
#define MCE_RING_SIZE 16	/* we use one entry less */

struct mce_ring {
	unsigned short start;
	unsigned short end;
	unsigned long ring[MCE_RING_SIZE];
};
static DEFINE_PER_CPU(struct mce_ring, mce_ring);

/* Runs with CPU affinity in workqueue */
static int mce_ring_empty(void)
{
481
	struct mce_ring *r = this_cpu_ptr(&mce_ring);
482 483 484 485 486 487 488 489 490 491 492

	return r->start == r->end;
}

static int mce_ring_get(unsigned long *pfn)
{
	struct mce_ring *r;
	int ret = 0;

	*pfn = 0;
	get_cpu();
493
	r = this_cpu_ptr(&mce_ring);
494 495 496 497 498 499 500 501 502 503 504 505 506
	if (r->start == r->end)
		goto out;
	*pfn = r->ring[r->start];
	r->start = (r->start + 1) % MCE_RING_SIZE;
	ret = 1;
out:
	put_cpu();
	return ret;
}

/* Always runs in MCE context with preempt off */
static int mce_ring_add(unsigned long pfn)
{
507
	struct mce_ring *r = this_cpu_ptr(&mce_ring);
508 509 510 511 512 513 514 515 516 517 518
	unsigned next;

	next = (r->end + 1) % MCE_RING_SIZE;
	if (next == r->start)
		return -1;
	r->ring[r->end] = pfn;
	wmb();
	r->end = next;
	return 0;
}

A
Andi Kleen 已提交
519
int mce_available(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
520
{
521
	if (mca_cfg.disabled)
522
		return 0;
523
	return cpu_has(c, X86_FEATURE_MCE) && cpu_has(c, X86_FEATURE_MCA);
L
Linus Torvalds 已提交
524 525
}

526 527
static void mce_schedule_work(void)
{
528
	if (!mce_ring_empty())
529
		schedule_work(this_cpu_ptr(&mce_work));
530 531
}

B
Borislav Petkov 已提交
532
static DEFINE_PER_CPU(struct irq_work, mce_irq_work);
533 534

static void mce_irq_work_cb(struct irq_work *entry)
535
{
536
	mce_notify_irq();
537
	mce_schedule_work();
538 539 540 541 542
}

static void mce_report_event(struct pt_regs *regs)
{
	if (regs->flags & (X86_VM_MASK|X86_EFLAGS_IF)) {
543
		mce_notify_irq();
544 545 546 547 548 549 550
		/*
		 * Triggering the work queue here is just an insurance
		 * policy in case the syscall exit notify handler
		 * doesn't run soon enough or ends up running on the
		 * wrong CPU (can happen when audit sleeps)
		 */
		mce_schedule_work();
551 552 553
		return;
	}

554
	irq_work_queue(this_cpu_ptr(&mce_irq_work));
555 556
}

557 558 559 560 561 562 563 564 565 566 567 568 569
/*
 * Read ADDR and MISC registers.
 */
static void mce_read_aux(struct mce *m, int i)
{
	if (m->status & MCI_STATUS_MISCV)
		m->misc = mce_rdmsrl(MSR_IA32_MCx_MISC(i));
	if (m->status & MCI_STATUS_ADDRV) {
		m->addr = mce_rdmsrl(MSR_IA32_MCx_ADDR(i));

		/*
		 * Mask the reported address by the reported granularity.
		 */
570
		if (mca_cfg.ser && (m->status & MCI_STATUS_MISCV)) {
571 572 573 574 575 576 577
			u8 shift = MCI_MISC_ADDR_LSB(m->misc);
			m->addr >>= shift;
			m->addr <<= shift;
		}
	}
}

578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608
static bool memory_error(struct mce *m)
{
	struct cpuinfo_x86 *c = &boot_cpu_data;

	if (c->x86_vendor == X86_VENDOR_AMD) {
		/*
		 * coming soon
		 */
		return false;
	} else if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * Intel SDM Volume 3B - 15.9.2 Compound Error Codes
		 *
		 * Bit 7 of the MCACOD field of IA32_MCi_STATUS is used for
		 * indicating a memory error. Bit 8 is used for indicating a
		 * cache hierarchy error. The combination of bit 2 and bit 3
		 * is used for indicating a `generic' cache hierarchy error
		 * But we can't just blindly check the above bits, because if
		 * bit 11 is set, then it is a bus/interconnect error - and
		 * either way the above bits just gives more detail on what
		 * bus/interconnect error happened. Note that bit 12 can be
		 * ignored, as it's the "filter" bit.
		 */
		return (m->status & 0xef80) == BIT(7) ||
		       (m->status & 0xef00) == BIT(8) ||
		       (m->status & 0xeffc) == 0xc;
	}

	return false;
}

609 610
DEFINE_PER_CPU(unsigned, mce_poll_count);

611
/*
612 613 614 615
 * Poll for corrected events or events that happened before reset.
 * Those are just logged through /dev/mcelog.
 *
 * This is executed in standard interrupt context.
A
Andi Kleen 已提交
616 617 618 619 620 621 622 623 624
 *
 * Note: spec recommends to panic for fatal unsignalled
 * errors here. However this would be quite problematic --
 * we would need to reimplement the Monarch handling and
 * it would mess up the exclusion between exception handler
 * and poll hander -- * so we skip this for now.
 * These cases should not happen anyways, or only when the CPU
 * is already totally * confused. In this case it's likely it will
 * not fully execute the machine check handler either.
625
 */
626
bool machine_check_poll(enum mcp_flags flags, mce_banks_t *b)
627
{
628
	bool error_logged = false;
629
	struct mce m;
630
	int severity;
631 632
	int i;

633
	this_cpu_inc(mce_poll_count);
634

635
	mce_gather_info(&m, NULL);
636

637
	for (i = 0; i < mca_cfg.banks; i++) {
638
		if (!mce_banks[i].ctl || !test_bit(i, *b))
639 640 641 642 643 644 645 646
			continue;

		m.misc = 0;
		m.addr = 0;
		m.bank = i;
		m.tsc = 0;

		barrier();
647
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
648 649 650
		if (!(m.status & MCI_STATUS_VAL))
			continue;

651

652
		/*
A
Andi Kleen 已提交
653 654
		 * Uncorrected or signalled events are handled by the exception
		 * handler when it is enabled, so don't process those here.
655 656 657
		 *
		 * TBD do the same check for MCI_STATUS_EN here?
		 */
A
Andi Kleen 已提交
658
		if (!(flags & MCP_UC) &&
659
		    (m.status & (mca_cfg.ser ? MCI_STATUS_S : MCI_STATUS_UC)))
660 661
			continue;

662
		mce_read_aux(&m, i);
663 664 665

		if (!(flags & MCP_TIMESTAMP))
			m.tsc = 0;
666 667 668 669 670 671 672 673 674 675 676 677 678 679

		severity = mce_severity(&m, mca_cfg.tolerant, NULL, false);

		/*
		 * In the cases where we don't have a valid address after all,
		 * do not add it into the ring buffer.
		 */
		if (severity == MCE_DEFERRED_SEVERITY && memory_error(&m)) {
			if (m.status & MCI_STATUS_ADDRV) {
				mce_ring_add(m.addr >> PAGE_SHIFT);
				mce_schedule_work();
			}
		}

680 681 682 683
		/*
		 * Don't get the IP here because it's unlikely to
		 * have anything to do with the actual error location.
		 */
684 685
		if (!(flags & MCP_DONTLOG) && !mca_cfg.dont_log_ce) {
			error_logged = true;
A
Andi Kleen 已提交
686
			mce_log(&m);
687
		}
688 689 690 691

		/*
		 * Clear state for this bank.
		 */
692
		mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
693 694 695 696 697 698
	}

	/*
	 * Don't clear MCG_STATUS here because it's only defined for
	 * exceptions.
	 */
699 700

	sync_core();
701 702

	return error_logged;
703
}
704
EXPORT_SYMBOL_GPL(machine_check_poll);
705

706 707 708 709
/*
 * Do a quick check if any of the events requires a panic.
 * This decides if we keep the events around or clear them.
 */
710 711
static int mce_no_way_out(struct mce *m, char **msg, unsigned long *validp,
			  struct pt_regs *regs)
712
{
713
	int i, ret = 0;
714
	char *tmp;
715

716
	for (i = 0; i < mca_cfg.banks; i++) {
717
		m->status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
718
		if (m->status & MCI_STATUS_VAL) {
719
			__set_bit(i, validp);
720 721 722
			if (quirk_no_way_out)
				quirk_no_way_out(i, m, regs);
		}
723 724 725

		if (mce_severity(m, mca_cfg.tolerant, &tmp, true) >= MCE_PANIC_SEVERITY) {
			*msg = tmp;
726
			ret = 1;
727
		}
728
	}
729
	return ret;
730 731
}

732 733 734 735 736 737 738 739 740 741 742 743 744 745
/*
 * Variable to establish order between CPUs while scanning.
 * Each CPU spins initially until executing is equal its number.
 */
static atomic_t mce_executing;

/*
 * Defines order of CPUs on entry. First CPU becomes Monarch.
 */
static atomic_t mce_callin;

/*
 * Check if a timeout waiting for other CPUs happened.
 */
746
static int mce_timed_out(u64 *t, const char *msg)
747 748 749 750 751 752 753 754
{
	/*
	 * The others already did panic for some reason.
	 * Bail out like in a timeout.
	 * rmb() to tell the compiler that system_state
	 * might have been modified by someone else.
	 */
	rmb();
755
	if (atomic_read(&mce_panicked))
756
		wait_for_panic();
757
	if (!mca_cfg.monarch_timeout)
758 759
		goto out;
	if ((s64)*t < SPINUNIT) {
760
		if (mca_cfg.tolerant <= 1)
761
			mce_panic(msg, NULL, NULL);
762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782
		cpu_missing = 1;
		return 1;
	}
	*t -= SPINUNIT;
out:
	touch_nmi_watchdog();
	return 0;
}

/*
 * The Monarch's reign.  The Monarch is the CPU who entered
 * the machine check handler first. It waits for the others to
 * raise the exception too and then grades them. When any
 * error is fatal panic. Only then let the others continue.
 *
 * The other CPUs entering the MCE handler will be controlled by the
 * Monarch. They are called Subjects.
 *
 * This way we prevent any potential data corruption in a unrecoverable case
 * and also makes sure always all CPU's errors are examined.
 *
783
 * Also this detects the case of a machine check event coming from outer
784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808
 * space (not detected by any CPUs) In this case some external agent wants
 * us to shut down, so panic too.
 *
 * The other CPUs might still decide to panic if the handler happens
 * in a unrecoverable place, but in this case the system is in a semi-stable
 * state and won't corrupt anything by itself. It's ok to let the others
 * continue for a bit first.
 *
 * All the spin loops have timeouts; when a timeout happens a CPU
 * typically elects itself to be Monarch.
 */
static void mce_reign(void)
{
	int cpu;
	struct mce *m = NULL;
	int global_worst = 0;
	char *msg = NULL;
	char *nmsg = NULL;

	/*
	 * This CPU is the Monarch and the other CPUs have run
	 * through their handlers.
	 * Grade the severity of the errors of all the CPUs.
	 */
	for_each_possible_cpu(cpu) {
809 810
		int severity = mce_severity(&per_cpu(mces_seen, cpu),
					    mca_cfg.tolerant,
811
					    &nmsg, true);
812 813 814 815 816 817 818 819 820 821 822 823
		if (severity > global_worst) {
			msg = nmsg;
			global_worst = severity;
			m = &per_cpu(mces_seen, cpu);
		}
	}

	/*
	 * Cannot recover? Panic here then.
	 * This dumps all the mces in the log buffer and stops the
	 * other CPUs.
	 */
824
	if (m && global_worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
825
		mce_panic("Fatal machine check", m, msg);
826 827 828 829 830 831 832 833 834 835 836

	/*
	 * For UC somewhere we let the CPU who detects it handle it.
	 * Also must let continue the others, otherwise the handling
	 * CPU could deadlock on a lock.
	 */

	/*
	 * No machine check event found. Must be some external
	 * source or one CPU is hung. Panic.
	 */
837
	if (global_worst <= MCE_KEEP_SEVERITY && mca_cfg.tolerant < 3)
838
		mce_panic("Fatal machine check from unknown source", NULL, NULL);
839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856

	/*
	 * Now clear all the mces_seen so that they don't reappear on
	 * the next mce.
	 */
	for_each_possible_cpu(cpu)
		memset(&per_cpu(mces_seen, cpu), 0, sizeof(struct mce));
}

static atomic_t global_nwo;

/*
 * Start of Monarch synchronization. This waits until all CPUs have
 * entered the exception handler and then determines if any of them
 * saw a fatal event that requires panic. Then it executes them
 * in the entry order.
 * TBD double check parallel CPU hotunplug
 */
H
Hidetoshi Seto 已提交
857
static int mce_start(int *no_way_out)
858
{
H
Hidetoshi Seto 已提交
859
	int order;
860
	int cpus = num_online_cpus();
861
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
862

H
Hidetoshi Seto 已提交
863 864
	if (!timeout)
		return -1;
865

H
Hidetoshi Seto 已提交
866
	atomic_add(*no_way_out, &global_nwo);
867 868 869 870
	/*
	 * global_nwo should be updated before mce_callin
	 */
	smp_wmb();
871
	order = atomic_inc_return(&mce_callin);
872 873 874 875 876

	/*
	 * Wait for everyone.
	 */
	while (atomic_read(&mce_callin) != cpus) {
877 878
		if (mce_timed_out(&timeout,
				  "Timeout: Not all CPUs entered broadcast exception handler")) {
879
			atomic_set(&global_nwo, 0);
H
Hidetoshi Seto 已提交
880
			return -1;
881 882 883 884
		}
		ndelay(SPINUNIT);
	}

885 886 887 888
	/*
	 * mce_callin should be read before global_nwo
	 */
	smp_rmb();
889

H
Hidetoshi Seto 已提交
890 891 892 893
	if (order == 1) {
		/*
		 * Monarch: Starts executing now, the others wait.
		 */
894
		atomic_set(&mce_executing, 1);
H
Hidetoshi Seto 已提交
895 896 897 898 899 900 901 902
	} else {
		/*
		 * Subject: Now start the scanning loop one by one in
		 * the original callin order.
		 * This way when there are any shared banks it will be
		 * only seen by one CPU before cleared, avoiding duplicates.
		 */
		while (atomic_read(&mce_executing) < order) {
903 904
			if (mce_timed_out(&timeout,
					  "Timeout: Subject CPUs unable to finish machine check processing")) {
H
Hidetoshi Seto 已提交
905 906 907 908 909
				atomic_set(&global_nwo, 0);
				return -1;
			}
			ndelay(SPINUNIT);
		}
910 911 912
	}

	/*
H
Hidetoshi Seto 已提交
913
	 * Cache the global no_way_out state.
914
	 */
H
Hidetoshi Seto 已提交
915 916 917
	*no_way_out = atomic_read(&global_nwo);

	return order;
918 919 920 921 922 923 924 925 926
}

/*
 * Synchronize between CPUs after main scanning loop.
 * This invokes the bulk of the Monarch processing.
 */
static int mce_end(int order)
{
	int ret = -1;
927
	u64 timeout = (u64)mca_cfg.monarch_timeout * NSEC_PER_USEC;
928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947

	if (!timeout)
		goto reset;
	if (order < 0)
		goto reset;

	/*
	 * Allow others to run.
	 */
	atomic_inc(&mce_executing);

	if (order == 1) {
		/* CHECKME: Can this race with a parallel hotplug? */
		int cpus = num_online_cpus();

		/*
		 * Monarch: Wait for everyone to go through their scanning
		 * loops.
		 */
		while (atomic_read(&mce_executing) <= cpus) {
948 949
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU unable to finish machine check processing"))
950 951 952 953 954 955 956 957 958 959 960 961
				goto reset;
			ndelay(SPINUNIT);
		}

		mce_reign();
		barrier();
		ret = 0;
	} else {
		/*
		 * Subject: Wait for Monarch to finish.
		 */
		while (atomic_read(&mce_executing) != 0) {
962 963
			if (mce_timed_out(&timeout,
					  "Timeout: Monarch CPU did not finish machine check processing"))
964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988
				goto reset;
			ndelay(SPINUNIT);
		}

		/*
		 * Don't reset anything. That's done by the Monarch.
		 */
		return 0;
	}

	/*
	 * Reset all global state.
	 */
reset:
	atomic_set(&global_nwo, 0);
	atomic_set(&mce_callin, 0);
	barrier();

	/*
	 * Let others run again.
	 */
	atomic_set(&mce_executing, 0);
	return ret;
}

989 990 991 992
/*
 * Check if the address reported by the CPU is in a format we can parse.
 * It would be possible to add code for most other cases, but all would
 * be somewhat complicated (e.g. segment offset would require an instruction
L
Lucas De Marchi 已提交
993
 * parser). So only support physical addresses up to page granuality for now.
994 995 996 997 998
 */
static int mce_usable_address(struct mce *m)
{
	if (!(m->status & MCI_STATUS_MISCV) || !(m->status & MCI_STATUS_ADDRV))
		return 0;
999
	if (MCI_MISC_ADDR_LSB(m->misc) > PAGE_SHIFT)
1000
		return 0;
1001
	if (MCI_MISC_ADDR_MODE(m->misc) != MCI_MISC_ADDR_PHYS)
1002 1003 1004 1005
		return 0;
	return 1;
}

1006 1007 1008 1009
static void mce_clear_state(unsigned long *toclear)
{
	int i;

1010
	for (i = 0; i < mca_cfg.banks; i++) {
1011
		if (test_bit(i, toclear))
1012
			mce_wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
1013 1014 1015
	}
}

1016 1017 1018 1019 1020 1021 1022
/*
 * The actual machine check handler. This only handles real
 * exceptions when something got corrupted coming in through int 18.
 *
 * This is executed in NMI context not subject to normal locking rules. This
 * implies that most kernel services cannot be safely used. Don't even
 * think about putting a printk in there!
1023 1024 1025 1026
 *
 * On Intel systems this is entered on all CPUs in parallel through
 * MCE broadcast. However some CPUs might be broken beyond repair,
 * so be always careful when synchronizing with others.
L
Linus Torvalds 已提交
1027
 */
I
Ingo Molnar 已提交
1028
void do_machine_check(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
1029
{
1030
	struct mca_config *cfg = &mca_cfg;
1031
	struct mce m, *final;
L
Linus Torvalds 已提交
1032
	int i;
1033 1034 1035 1036 1037 1038
	int worst = 0;
	int severity;
	/*
	 * Establish sequential order between the CPUs entering the machine
	 * check handler.
	 */
H
Hidetoshi Seto 已提交
1039
	int order;
1040 1041
	/*
	 * If no_way_out gets set, there is no safe way to recover from this
1042
	 * MCE.  If mca_cfg.tolerant is cranked up, we'll try anyway.
1043 1044 1045 1046 1047 1048 1049
	 */
	int no_way_out = 0;
	/*
	 * If kill_it gets set, there might be a way to recover from this
	 * error.
	 */
	int kill_it = 0;
1050
	DECLARE_BITMAP(toclear, MAX_NR_BANKS);
1051
	DECLARE_BITMAP(valid_banks, MAX_NR_BANKS);
1052
	char *msg = "Unknown";
1053 1054
	u64 recover_paddr = ~0ull;
	int flags = MF_ACTION_REQUIRED;
A
Ashok Raj 已提交
1055
	int lmce = 0;
L
Linus Torvalds 已提交
1056

1057
	ist_enter(regs);
1058

1059
	this_cpu_inc(mce_exception_count);
1060

1061
	if (!cfg->banks)
1062
		goto out;
L
Linus Torvalds 已提交
1063

1064
	mce_gather_info(&m, regs);
1065

1066
	final = this_cpu_ptr(&mces_seen);
1067 1068
	*final = m;

1069
	memset(valid_banks, 0, sizeof(valid_banks));
1070
	no_way_out = mce_no_way_out(&m, &msg, valid_banks, regs);
1071

L
Linus Torvalds 已提交
1072 1073
	barrier();

A
Andi Kleen 已提交
1074
	/*
1075 1076 1077
	 * When no restart IP might need to kill or panic.
	 * Assume the worst for now, but if we find the
	 * severity is MCE_AR_SEVERITY we have other options.
A
Andi Kleen 已提交
1078 1079 1080 1081
	 */
	if (!(m.mcgstatus & MCG_STATUS_RIPV))
		kill_it = 1;

1082
	/*
A
Ashok Raj 已提交
1083
	 * Check if this MCE is signaled to only this logical processor
1084
	 */
A
Ashok Raj 已提交
1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096
	if (m.mcgstatus & MCG_STATUS_LMCES)
		lmce = 1;
	else {
		/*
		 * Go through all the banks in exclusion of the other CPUs.
		 * This way we don't report duplicated events on shared banks
		 * because the first one to see it will clear it.
		 * If this is a Local MCE, then no need to perform rendezvous.
		 */
		order = mce_start(&no_way_out);
	}

1097
	for (i = 0; i < cfg->banks; i++) {
1098
		__clear_bit(i, toclear);
1099 1100
		if (!test_bit(i, valid_banks))
			continue;
1101
		if (!mce_banks[i].ctl)
L
Linus Torvalds 已提交
1102
			continue;
1103 1104

		m.misc = 0;
L
Linus Torvalds 已提交
1105 1106 1107
		m.addr = 0;
		m.bank = i;

1108
		m.status = mce_rdmsrl(MSR_IA32_MCx_STATUS(i));
L
Linus Torvalds 已提交
1109 1110 1111
		if ((m.status & MCI_STATUS_VAL) == 0)
			continue;

1112
		/*
A
Andi Kleen 已提交
1113 1114
		 * Non uncorrected or non signaled errors are handled by
		 * machine_check_poll. Leave them alone, unless this panics.
1115
		 */
1116
		if (!(m.status & (cfg->ser ? MCI_STATUS_S : MCI_STATUS_UC)) &&
A
Andi Kleen 已提交
1117
			!no_way_out)
1118 1119 1120 1121 1122
			continue;

		/*
		 * Set taint even when machine check was not enabled.
		 */
1123
		add_taint(TAINT_MACHINE_CHECK, LOCKDEP_NOW_UNRELIABLE);
1124

1125
		severity = mce_severity(&m, cfg->tolerant, NULL, true);
1126

A
Andi Kleen 已提交
1127
		/*
1128 1129
		 * When machine check was for corrected/deferred handler don't
		 * touch, unless we're panicing.
A
Andi Kleen 已提交
1130
		 */
1131 1132
		if ((severity == MCE_KEEP_SEVERITY ||
		     severity == MCE_UCNA_SEVERITY) && !no_way_out)
A
Andi Kleen 已提交
1133 1134 1135
			continue;
		__set_bit(i, toclear);
		if (severity == MCE_NO_SEVERITY) {
1136 1137 1138 1139 1140
			/*
			 * Machine check event was not enabled. Clear, but
			 * ignore.
			 */
			continue;
L
Linus Torvalds 已提交
1141 1142
		}

1143
		mce_read_aux(&m, i);
L
Linus Torvalds 已提交
1144

1145 1146 1147 1148 1149
		/*
		 * Action optional error. Queue address for later processing.
		 * When the ring overflows we just ignore the AO error.
		 * RED-PEN add some logging mechanism when
		 * usable_address or mce_add_ring fails.
1150
		 * RED-PEN don't ignore overflow for mca_cfg.tolerant == 0
1151 1152 1153 1154
		 */
		if (severity == MCE_AO_SEVERITY && mce_usable_address(&m))
			mce_ring_add(m.addr >> PAGE_SHIFT);

1155
		mce_log(&m);
L
Linus Torvalds 已提交
1156

1157 1158 1159
		if (severity > worst) {
			*final = m;
			worst = severity;
L
Linus Torvalds 已提交
1160 1161 1162
		}
	}

1163 1164 1165
	/* mce_clear_state will clear *final, save locally for use later */
	m = *final;

1166 1167 1168
	if (!no_way_out)
		mce_clear_state(toclear);

I
Ingo Molnar 已提交
1169
	/*
1170 1171
	 * Do most of the synchronization with other CPUs.
	 * When there's any problem use only local no_way_out state.
I
Ingo Molnar 已提交
1172
	 */
A
Ashok Raj 已提交
1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184
	if (!lmce) {
		if (mce_end(order) < 0)
			no_way_out = worst >= MCE_PANIC_SEVERITY;
	} else {
		/*
		 * Local MCE skipped calling mce_reign()
		 * If we found a fatal error, we need to panic here.
		 */
		 if (worst >= MCE_PANIC_SEVERITY && mca_cfg.tolerant < 3)
			mce_panic("Machine check from unknown source",
				NULL, NULL);
	}
1185 1186

	/*
1187 1188 1189 1190
	 * At insane "tolerant" levels we take no action. Otherwise
	 * we only die if we have no other choice. For less serious
	 * issues we try to recover, or limit damage to the current
	 * process.
1191
	 */
1192
	if (cfg->tolerant < 3) {
1193 1194 1195
		if (no_way_out)
			mce_panic("Fatal machine check on current CPU", &m, msg);
		if (worst == MCE_AR_SEVERITY) {
1196 1197 1198
			recover_paddr = m.addr;
			if (!(m.mcgstatus & MCG_STATUS_RIPV))
				flags |= MF_MUST_KILL;
1199 1200 1201 1202
		} else if (kill_it) {
			force_sig(SIGBUS, current);
		}
	}
1203

1204 1205
	if (worst > 0)
		mce_report_event(regs);
1206
	mce_wrmsrl(MSR_IA32_MCG_STATUS, 0);
1207
out:
1208
	sync_core();
1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228

	if (recover_paddr == ~0ull)
		goto done;

	pr_err("Uncorrected hardware memory error in user-access at %llx",
		 recover_paddr);
	/*
	 * We must call memory_failure() here even if the current process is
	 * doomed. We still need to mark the page as poisoned and alert any
	 * other users of the page.
	 */
	ist_begin_non_atomic(regs);
	local_irq_enable();
	if (memory_failure(recover_paddr >> PAGE_SHIFT, MCE_VECTOR, flags) < 0) {
		pr_err("Memory error not recovered");
		force_sig(SIGBUS, current);
	}
	local_irq_disable();
	ist_end_non_atomic();
done:
1229
	ist_exit(regs);
L
Linus Torvalds 已提交
1230
}
1231
EXPORT_SYMBOL_GPL(do_machine_check);
L
Linus Torvalds 已提交
1232

1233 1234
#ifndef CONFIG_MEMORY_FAILURE
int memory_failure(unsigned long pfn, int vector, int flags)
1235
{
1236 1237
	/* mce_severity() should not hand us an ACTION_REQUIRED error */
	BUG_ON(flags & MF_ACTION_REQUIRED);
1238 1239 1240
	pr_err("Uncorrected memory error in page 0x%lx ignored\n"
	       "Rebuild kernel with CONFIG_MEMORY_FAILURE=y for smarter handling\n",
	       pfn);
1241 1242

	return 0;
1243
}
1244
#endif
1245

1246 1247 1248 1249 1250
/*
 * Action optional processing happens here (picking up
 * from the list of faulting pages that do_machine_check()
 * placed into the "ring").
 */
1251 1252
static void mce_process_work(struct work_struct *dummy)
{
1253 1254 1255 1256
	unsigned long pfn;

	while (mce_ring_get(&pfn))
		memory_failure(pfn, MCE_VECTOR, 0);
1257 1258
}

1259 1260 1261
#ifdef CONFIG_X86_MCE_INTEL
/***
 * mce_log_therm_throt_event - Logs the thermal throttling event to mcelog
S
Simon Arlott 已提交
1262
 * @cpu: The CPU on which the event occurred.
1263 1264 1265 1266 1267 1268 1269 1270 1271 1272
 * @status: Event status information
 *
 * This function should be called by the thermal interrupt after the
 * event has been processed and the decision was made to log the event
 * further.
 *
 * The status parameter will be saved to the 'status' field of 'struct mce'
 * and historically has been the register value of the
 * MSR_IA32_THERMAL_STATUS (Intel) msr.
 */
1273
void mce_log_therm_throt_event(__u64 status)
1274 1275 1276
{
	struct mce m;

1277
	mce_setup(&m);
1278 1279 1280 1281 1282 1283
	m.bank = MCE_THERMAL_BANK;
	m.status = status;
	mce_log(&m);
}
#endif /* CONFIG_X86_MCE_INTEL */

L
Linus Torvalds 已提交
1284
/*
1285 1286 1287
 * Periodic polling timer for "silent" machine check errors.  If the
 * poller finds an MCE, poll 2x faster.  When the poller finds no more
 * errors, poll 2x slower (up to check_interval seconds).
L
Linus Torvalds 已提交
1288
 */
1289
static unsigned long check_interval = INITIAL_CHECK_INTERVAL;
I
Ingo Molnar 已提交
1290

T
Thomas Gleixner 已提交
1291
static DEFINE_PER_CPU(unsigned long, mce_next_interval); /* in jiffies */
1292
static DEFINE_PER_CPU(struct timer_list, mce_timer);
L
Linus Torvalds 已提交
1293

C
Chen Gong 已提交
1294 1295 1296 1297 1298
static unsigned long mce_adjust_timer_default(unsigned long interval)
{
	return interval;
}

1299
static unsigned long (*mce_adjust_timer)(unsigned long interval) = mce_adjust_timer_default;
C
Chen Gong 已提交
1300

1301
static void __restart_timer(struct timer_list *t, unsigned long interval)
1302
{
1303 1304
	unsigned long when = jiffies + interval;
	unsigned long flags;
1305

1306
	local_irq_save(flags);
1307

1308 1309 1310 1311 1312 1313 1314 1315 1316
	if (timer_pending(t)) {
		if (time_before(when, t->expires))
			mod_timer_pinned(t, when);
	} else {
		t->expires = round_jiffies(when);
		add_timer_on(t, smp_processor_id());
	}

	local_irq_restore(flags);
1317 1318
}

T
Thomas Gleixner 已提交
1319
static void mce_timer_fn(unsigned long data)
L
Linus Torvalds 已提交
1320
{
1321
	struct timer_list *t = this_cpu_ptr(&mce_timer);
1322
	int cpu = smp_processor_id();
T
Thomas Gleixner 已提交
1323
	unsigned long iv;
1324

1325 1326 1327
	WARN_ON(cpu != data);

	iv = __this_cpu_read(mce_next_interval);
1328

1329
	if (mce_available(this_cpu_ptr(&cpu_info))) {
1330 1331 1332 1333 1334 1335
		machine_check_poll(MCP_TIMESTAMP, this_cpu_ptr(&mce_poll_banks));

		if (mce_intel_cmci_poll()) {
			iv = mce_adjust_timer(iv);
			goto done;
		}
I
Ingo Molnar 已提交
1336
	}
L
Linus Torvalds 已提交
1337 1338

	/*
1339 1340
	 * Alert userspace if needed. If we logged an MCE, reduce the polling
	 * interval, otherwise increase the polling interval.
L
Linus Torvalds 已提交
1341
	 */
1342
	if (mce_notify_irq())
1343
		iv = max(iv / 2, (unsigned long) HZ/100);
1344
	else
T
Thomas Gleixner 已提交
1345
		iv = min(iv * 2, round_jiffies_relative(check_interval * HZ));
1346 1347

done:
T
Thomas Gleixner 已提交
1348
	__this_cpu_write(mce_next_interval, iv);
1349
	__restart_timer(t, iv);
C
Chen Gong 已提交
1350
}
1351

C
Chen Gong 已提交
1352 1353 1354 1355 1356
/*
 * Ensure that the timer is firing in @interval from now.
 */
void mce_timer_kick(unsigned long interval)
{
1357
	struct timer_list *t = this_cpu_ptr(&mce_timer);
C
Chen Gong 已提交
1358 1359
	unsigned long iv = __this_cpu_read(mce_next_interval);

1360 1361
	__restart_timer(t, interval);

C
Chen Gong 已提交
1362 1363
	if (interval < iv)
		__this_cpu_write(mce_next_interval, interval);
1364 1365
}

1366 1367 1368 1369 1370 1371 1372 1373 1374
/* Must not be called in IRQ context where del_timer_sync() can deadlock */
static void mce_timer_delete_all(void)
{
	int cpu;

	for_each_online_cpu(cpu)
		del_timer_sync(&per_cpu(mce_timer, cpu));
}

1375 1376
static void mce_do_trigger(struct work_struct *work)
{
1377
	call_usermodehelper(mce_helper, mce_helper_argv, NULL, UMH_NO_WAIT);
1378 1379 1380 1381
}

static DECLARE_WORK(mce_trigger_work, mce_do_trigger);

1382
/*
1383 1384 1385
 * Notify the user(s) about new machine check events.
 * Can be called from interrupt context, but not from machine check/NMI
 * context.
1386
 */
1387
int mce_notify_irq(void)
1388
{
1389 1390 1391
	/* Not more than two messages every minute */
	static DEFINE_RATELIMIT_STATE(ratelimit, 60*HZ, 2);

1392
	if (test_and_clear_bit(0, &mce_need_notify)) {
1393 1394
		/* wake processes polling /dev/mcelog */
		wake_up_interruptible(&mce_chrdev_wait);
1395

1396
		if (mce_helper[0])
1397
			schedule_work(&mce_trigger_work);
1398

1399
		if (__ratelimit(&ratelimit))
H
Huang Ying 已提交
1400
			pr_info(HW_ERR "Machine check events logged\n");
1401 1402

		return 1;
L
Linus Torvalds 已提交
1403
	}
1404 1405
	return 0;
}
1406
EXPORT_SYMBOL_GPL(mce_notify_irq);
1407

1408
static int __mcheck_cpu_mce_banks_init(void)
1409 1410
{
	int i;
1411
	u8 num_banks = mca_cfg.banks;
1412

1413
	mce_banks = kzalloc(num_banks * sizeof(struct mce_bank), GFP_KERNEL);
1414 1415
	if (!mce_banks)
		return -ENOMEM;
1416 1417

	for (i = 0; i < num_banks; i++) {
1418
		struct mce_bank *b = &mce_banks[i];
1419

1420 1421 1422 1423 1424 1425
		b->ctl = -1ULL;
		b->init = 1;
	}
	return 0;
}

1426
/*
L
Linus Torvalds 已提交
1427 1428
 * Initialize Machine Checks for a CPU.
 */
1429
static int __mcheck_cpu_cap_init(void)
L
Linus Torvalds 已提交
1430
{
1431
	unsigned b;
I
Ingo Molnar 已提交
1432
	u64 cap;
L
Linus Torvalds 已提交
1433 1434

	rdmsrl(MSR_IA32_MCG_CAP, cap);
1435 1436

	b = cap & MCG_BANKCNT_MASK;
1437
	if (!mca_cfg.banks)
1438
		pr_info("CPU supports %d MCE banks\n", b);
1439

1440
	if (b > MAX_NR_BANKS) {
1441
		pr_warn("Using only %u machine check banks out of %u\n",
1442 1443 1444 1445 1446
			MAX_NR_BANKS, b);
		b = MAX_NR_BANKS;
	}

	/* Don't support asymmetric configurations today */
1447 1448 1449
	WARN_ON(mca_cfg.banks != 0 && b != mca_cfg.banks);
	mca_cfg.banks = b;

1450
	if (!mce_banks) {
H
Hidetoshi Seto 已提交
1451
		int err = __mcheck_cpu_mce_banks_init();
1452

1453 1454
		if (err)
			return err;
L
Linus Torvalds 已提交
1455
	}
1456

1457
	/* Use accurate RIP reporting if available. */
1458
	if ((cap & MCG_EXT_P) && MCG_EXT_CNT(cap) >= 9)
1459
		mca_cfg.rip_msr = MSR_IA32_MCG_EIP;
L
Linus Torvalds 已提交
1460

A
Andi Kleen 已提交
1461
	if (cap & MCG_SER_P)
1462
		mca_cfg.ser = true;
A
Andi Kleen 已提交
1463

1464 1465 1466
	return 0;
}

1467
static void __mcheck_cpu_init_generic(void)
1468
{
1469
	enum mcp_flags m_fl = 0;
I
Ingo Molnar 已提交
1470
	mce_banks_t all_banks;
1471 1472 1473
	u64 cap;
	int i;

1474 1475 1476
	if (!mca_cfg.bootlog)
		m_fl = MCP_DONTLOG;

1477 1478 1479
	/*
	 * Log the machine checks left over from the previous reset.
	 */
1480
	bitmap_fill(all_banks, MAX_NR_BANKS);
1481
	machine_check_poll(MCP_UC | m_fl, &all_banks);
L
Linus Torvalds 已提交
1482

A
Andy Lutomirski 已提交
1483
	cr4_set_bits(X86_CR4_MCE);
L
Linus Torvalds 已提交
1484

1485
	rdmsrl(MSR_IA32_MCG_CAP, cap);
L
Linus Torvalds 已提交
1486 1487 1488
	if (cap & MCG_CTL_P)
		wrmsr(MSR_IA32_MCG_CTL, 0xffffffff, 0xffffffff);

1489
	for (i = 0; i < mca_cfg.banks; i++) {
1490
		struct mce_bank *b = &mce_banks[i];
1491

1492
		if (!b->init)
1493
			continue;
1494 1495
		wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
		wrmsrl(MSR_IA32_MCx_STATUS(i), 0);
1496
	}
L
Linus Torvalds 已提交
1497 1498
}

1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526
/*
 * During IFU recovery Sandy Bridge -EP4S processors set the RIPV and
 * EIPV bits in MCG_STATUS to zero on the affected logical processor (SDM
 * Vol 3B Table 15-20). But this confuses both the code that determines
 * whether the machine check occurred in kernel or user mode, and also
 * the severity assessment code. Pretend that EIPV was set, and take the
 * ip/cs values from the pt_regs that mce_gather_info() ignored earlier.
 */
static void quirk_sandybridge_ifu(int bank, struct mce *m, struct pt_regs *regs)
{
	if (bank != 0)
		return;
	if ((m->mcgstatus & (MCG_STATUS_EIPV|MCG_STATUS_RIPV)) != 0)
		return;
	if ((m->status & (MCI_STATUS_OVER|MCI_STATUS_UC|
		          MCI_STATUS_EN|MCI_STATUS_MISCV|MCI_STATUS_ADDRV|
			  MCI_STATUS_PCC|MCI_STATUS_S|MCI_STATUS_AR|
			  MCACOD)) !=
			 (MCI_STATUS_UC|MCI_STATUS_EN|
			  MCI_STATUS_MISCV|MCI_STATUS_ADDRV|MCI_STATUS_S|
			  MCI_STATUS_AR|MCACOD_INSTR))
		return;

	m->mcgstatus |= MCG_STATUS_EIPV;
	m->ip = regs->ip;
	m->cs = regs->cs;
}

L
Linus Torvalds 已提交
1527
/* Add per CPU specific workarounds here */
1528
static int __mcheck_cpu_apply_quirks(struct cpuinfo_x86 *c)
1529
{
1530 1531
	struct mca_config *cfg = &mca_cfg;

1532
	if (c->x86_vendor == X86_VENDOR_UNKNOWN) {
1533
		pr_info("unknown CPU type - not enabling MCE support\n");
1534 1535 1536
		return -EOPNOTSUPP;
	}

L
Linus Torvalds 已提交
1537
	/* This should be disabled by the BIOS, but isn't always */
1538
	if (c->x86_vendor == X86_VENDOR_AMD) {
1539
		if (c->x86 == 15 && cfg->banks > 4) {
I
Ingo Molnar 已提交
1540 1541 1542 1543 1544
			/*
			 * disable GART TBL walk error reporting, which
			 * trips off incorrectly with the IOMMU & 3ware
			 * & Cerberus:
			 */
1545
			clear_bit(10, (unsigned long *)&mce_banks[4].ctl);
I
Ingo Molnar 已提交
1546
		}
1547
		if (c->x86 <= 17 && cfg->bootlog < 0) {
I
Ingo Molnar 已提交
1548 1549 1550 1551
			/*
			 * Lots of broken BIOS around that don't clear them
			 * by default and leave crap in there. Don't log:
			 */
1552
			cfg->bootlog = 0;
I
Ingo Molnar 已提交
1553
		}
1554 1555 1556 1557
		/*
		 * Various K7s with broken bank 0 around. Always disable
		 * by default.
		 */
1558
		if (c->x86 == 6 && cfg->banks > 0)
1559
			mce_banks[0].ctl = 0;
1560

1561 1562 1563 1564 1565 1566 1567
		/*
		 * overflow_recov is supported for F15h Models 00h-0fh
		 * even though we don't have a CPUID bit for it.
		 */
		if (c->x86 == 0x15 && c->x86_model <= 0xf)
			mce_flags.overflow_recov = 1;

1568 1569 1570 1571 1572 1573 1574 1575 1576 1577
		/*
		 * Turn off MC4_MISC thresholding banks on those models since
		 * they're not supported there.
		 */
		if (c->x86 == 0x15 &&
		    (c->x86_model >= 0x10 && c->x86_model <= 0x1f)) {
			int i;
			u64 hwcr;
			bool need_toggle;
			u32 msrs[] = {
1578 1579
				0x00000413, /* MC4_MISC0 */
				0xc0000408, /* MC4_MISC1 */
1580
			};
1581

1582
			rdmsrl(MSR_K7_HWCR, hwcr);
1583

1584 1585
			/* McStatusWrEn has to be set */
			need_toggle = !(hwcr & BIT(18));
1586

1587 1588
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr | BIT(18));
1589

1590 1591 1592
			/* Clear CntP bit safely */
			for (i = 0; i < ARRAY_SIZE(msrs); i++)
				msr_clear_bit(msrs[i], 62);
1593

1594 1595 1596 1597
			/* restore old settings */
			if (need_toggle)
				wrmsrl(MSR_K7_HWCR, hwcr);
		}
L
Linus Torvalds 已提交
1598
	}
1599

1600 1601 1602 1603 1604 1605 1606 1607 1608 1609
	if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * SDM documents that on family 6 bank 0 should not be written
		 * because it aliases to another special BIOS controlled
		 * register.
		 * But it's not aliased anymore on model 0x1a+
		 * Don't ignore bank 0 completely because there could be a
		 * valid event later, merely don't write CTL0.
		 */

1610
		if (c->x86 == 6 && c->x86_model < 0x1A && cfg->banks > 0)
1611
			mce_banks[0].init = 0;
1612 1613 1614 1615 1616 1617

		/*
		 * All newer Intel systems support MCE broadcasting. Enable
		 * synchronization with a one second timeout.
		 */
		if ((c->x86 > 6 || (c->x86 == 6 && c->x86_model >= 0xe)) &&
1618 1619
			cfg->monarch_timeout < 0)
			cfg->monarch_timeout = USEC_PER_SEC;
1620

1621 1622 1623 1624
		/*
		 * There are also broken BIOSes on some Pentium M and
		 * earlier systems:
		 */
1625 1626
		if (c->x86 == 6 && c->x86_model <= 13 && cfg->bootlog < 0)
			cfg->bootlog = 0;
1627 1628 1629

		if (c->x86 == 6 && c->x86_model == 45)
			quirk_no_way_out = quirk_sandybridge_ifu;
1630
	}
1631 1632 1633
	if (cfg->monarch_timeout < 0)
		cfg->monarch_timeout = 0;
	if (cfg->bootlog != 0)
1634
		cfg->panic_timeout = 30;
1635 1636

	return 0;
1637
}
L
Linus Torvalds 已提交
1638

1639
static int __mcheck_cpu_ancient_init(struct cpuinfo_x86 *c)
1640 1641
{
	if (c->x86 != 5)
1642 1643
		return 0;

1644 1645
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
1646
		intel_p5_mcheck_init(c);
1647
		return 1;
1648 1649 1650
		break;
	case X86_VENDOR_CENTAUR:
		winchip_mcheck_init(c);
1651
		return 1;
1652 1653
		break;
	}
1654 1655

	return 0;
1656 1657
}

1658
static void __mcheck_cpu_init_vendor(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1659 1660 1661 1662
{
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		mce_intel_feature_init(c);
1663
		mce_adjust_timer = cmci_intel_adjust_timer;
L
Linus Torvalds 已提交
1664
		break;
1665 1666 1667 1668

	case X86_VENDOR_AMD: {
		u32 ebx = cpuid_ebx(0x80000007);

1669
		mce_amd_feature_init(c);
1670 1671
		mce_flags.overflow_recov = !!(ebx & BIT(0));
		mce_flags.succor	 = !!(ebx & BIT(1));
1672
		break;
1673 1674
		}

L
Linus Torvalds 已提交
1675 1676 1677 1678 1679
	default:
		break;
	}
}

T
Thomas Gleixner 已提交
1680
static void mce_start_timer(unsigned int cpu, struct timer_list *t)
1681
{
1682
	unsigned long iv = check_interval * HZ;
1683

1684
	if (mca_cfg.ignore_ce || !iv)
1685 1686
		return;

1687 1688
	per_cpu(mce_next_interval, cpu) = iv;

T
Thomas Gleixner 已提交
1689
	t->expires = round_jiffies(jiffies + iv);
1690
	add_timer_on(t, cpu);
1691 1692
}

T
Thomas Gleixner 已提交
1693 1694
static void __mcheck_cpu_init_timer(void)
{
1695
	struct timer_list *t = this_cpu_ptr(&mce_timer);
T
Thomas Gleixner 已提交
1696 1697 1698 1699 1700 1701
	unsigned int cpu = smp_processor_id();

	setup_timer(t, mce_timer_fn, cpu);
	mce_start_timer(cpu, t);
}

A
Andi Kleen 已提交
1702 1703 1704
/* Handle unconfigured int18 (should never happen) */
static void unexpected_machine_check(struct pt_regs *regs, long error_code)
{
1705
	pr_err("CPU#%d: Unexpected int18 (Machine Check)\n",
A
Andi Kleen 已提交
1706 1707 1708 1709 1710 1711 1712
	       smp_processor_id());
}

/* Call the installed machine check handler for this CPU setup. */
void (*machine_check_vector)(struct pt_regs *, long error_code) =
						unexpected_machine_check;

1713
/*
L
Linus Torvalds 已提交
1714
 * Called for each booted CPU to set up machine checks.
I
Ingo Molnar 已提交
1715
 * Must be called with preempt off:
L
Linus Torvalds 已提交
1716
 */
1717
void mcheck_cpu_init(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1718
{
1719
	if (mca_cfg.disabled)
1720 1721
		return;

1722 1723
	if (__mcheck_cpu_ancient_init(c))
		return;
1724

1725
	if (!mce_available(c))
L
Linus Torvalds 已提交
1726 1727
		return;

1728
	if (__mcheck_cpu_cap_init() < 0 || __mcheck_cpu_apply_quirks(c) < 0) {
1729
		mca_cfg.disabled = true;
1730 1731 1732
		return;
	}

1733 1734
	machine_check_vector = do_machine_check;

1735 1736 1737
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_vendor(c);
	__mcheck_cpu_init_timer();
1738 1739
	INIT_WORK(this_cpu_ptr(&mce_work), mce_process_work);
	init_irq_work(this_cpu_ptr(&mce_irq_work), &mce_irq_work_cb);
L
Linus Torvalds 已提交
1740 1741 1742
}

/*
1743
 * mce_chrdev: Character device /dev/mcelog to read and clear the MCE log.
L
Linus Torvalds 已提交
1744 1745
 */

1746 1747 1748
static DEFINE_SPINLOCK(mce_chrdev_state_lock);
static int mce_chrdev_open_count;	/* #times opened */
static int mce_chrdev_open_exclu;	/* already open exclusive? */
T
Tim Hockin 已提交
1749

1750
static int mce_chrdev_open(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1751
{
1752
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1753

1754 1755 1756
	if (mce_chrdev_open_exclu ||
	    (mce_chrdev_open_count && (file->f_flags & O_EXCL))) {
		spin_unlock(&mce_chrdev_state_lock);
I
Ingo Molnar 已提交
1757

T
Tim Hockin 已提交
1758 1759 1760 1761
		return -EBUSY;
	}

	if (file->f_flags & O_EXCL)
1762 1763
		mce_chrdev_open_exclu = 1;
	mce_chrdev_open_count++;
T
Tim Hockin 已提交
1764

1765
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1766

1767
	return nonseekable_open(inode, file);
T
Tim Hockin 已提交
1768 1769
}

1770
static int mce_chrdev_release(struct inode *inode, struct file *file)
T
Tim Hockin 已提交
1771
{
1772
	spin_lock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1773

1774 1775
	mce_chrdev_open_count--;
	mce_chrdev_open_exclu = 0;
T
Tim Hockin 已提交
1776

1777
	spin_unlock(&mce_chrdev_state_lock);
T
Tim Hockin 已提交
1778 1779 1780 1781

	return 0;
}

1782 1783
static void collect_tscs(void *data)
{
L
Linus Torvalds 已提交
1784
	unsigned long *cpu_tsc = (unsigned long *)data;
1785

1786
	cpu_tsc[smp_processor_id()] = rdtsc();
1787
}
L
Linus Torvalds 已提交
1788

1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804
static int mce_apei_read_done;

/* Collect MCE record of previous boot in persistent storage via APEI ERST. */
static int __mce_read_apei(char __user **ubuf, size_t usize)
{
	int rc;
	u64 record_id;
	struct mce m;

	if (usize < sizeof(struct mce))
		return -EINVAL;

	rc = apei_read_mce(&m, &record_id);
	/* Error or no more MCE record */
	if (rc <= 0) {
		mce_apei_read_done = 1;
1805 1806 1807 1808 1809 1810
		/*
		 * When ERST is disabled, mce_chrdev_read() should return
		 * "no record" instead of "no device."
		 */
		if (rc == -ENODEV)
			return 0;
1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831
		return rc;
	}
	rc = -EFAULT;
	if (copy_to_user(*ubuf, &m, sizeof(struct mce)))
		return rc;
	/*
	 * In fact, we should have cleared the record after that has
	 * been flushed to the disk or sent to network in
	 * /sbin/mcelog, but we have no interface to support that now,
	 * so just clear it to avoid duplication.
	 */
	rc = apei_clear_mce(record_id);
	if (rc) {
		mce_apei_read_done = 1;
		return rc;
	}
	*ubuf += sizeof(struct mce);

	return 0;
}

1832 1833
static ssize_t mce_chrdev_read(struct file *filp, char __user *ubuf,
				size_t usize, loff_t *off)
L
Linus Torvalds 已提交
1834
{
I
Ingo Molnar 已提交
1835
	char __user *buf = ubuf;
1836
	unsigned long *cpu_tsc;
1837
	unsigned prev, next;
L
Linus Torvalds 已提交
1838 1839
	int i, err;

1840
	cpu_tsc = kmalloc(nr_cpu_ids * sizeof(long), GFP_KERNEL);
1841 1842 1843
	if (!cpu_tsc)
		return -ENOMEM;

1844
	mutex_lock(&mce_chrdev_read_mutex);
1845 1846 1847 1848 1849 1850 1851

	if (!mce_apei_read_done) {
		err = __mce_read_apei(&buf, usize);
		if (err || buf != ubuf)
			goto out;
	}

1852
	next = rcu_dereference_check_mce(mcelog.next);
L
Linus Torvalds 已提交
1853 1854

	/* Only supports full reads right now */
1855 1856 1857
	err = -EINVAL;
	if (*off != 0 || usize < MCE_LOG_LEN*sizeof(struct mce))
		goto out;
L
Linus Torvalds 已提交
1858 1859

	err = 0;
1860 1861 1862 1863
	prev = 0;
	do {
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;
H
Hidetoshi Seto 已提交
1864
			struct mce *m = &mcelog.entry[i];
1865

H
Hidetoshi Seto 已提交
1866
			while (!m->finished) {
1867
				if (time_after_eq(jiffies, start + 2)) {
H
Hidetoshi Seto 已提交
1868
					memset(m, 0, sizeof(*m));
1869 1870 1871
					goto timeout;
				}
				cpu_relax();
1872
			}
1873
			smp_rmb();
H
Hidetoshi Seto 已提交
1874 1875
			err |= copy_to_user(buf, m, sizeof(*m));
			buf += sizeof(*m);
1876 1877
timeout:
			;
1878
		}
L
Linus Torvalds 已提交
1879

1880 1881 1882 1883 1884
		memset(mcelog.entry + prev, 0,
		       (next - prev) * sizeof(struct mce));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
L
Linus Torvalds 已提交
1885

1886
	synchronize_sched();
L
Linus Torvalds 已提交
1887

1888 1889 1890 1891
	/*
	 * Collect entries that were still getting written before the
	 * synchronize.
	 */
1892
	on_each_cpu(collect_tscs, cpu_tsc, 1);
I
Ingo Molnar 已提交
1893

1894
	for (i = next; i < MCE_LOG_LEN; i++) {
H
Hidetoshi Seto 已提交
1895 1896 1897 1898
		struct mce *m = &mcelog.entry[i];

		if (m->finished && m->tsc < cpu_tsc[m->cpu]) {
			err |= copy_to_user(buf, m, sizeof(*m));
L
Linus Torvalds 已提交
1899
			smp_rmb();
H
Hidetoshi Seto 已提交
1900 1901
			buf += sizeof(*m);
			memset(m, 0, sizeof(*m));
L
Linus Torvalds 已提交
1902
		}
1903
	}
1904 1905 1906 1907 1908

	if (err)
		err = -EFAULT;

out:
1909
	mutex_unlock(&mce_chrdev_read_mutex);
1910
	kfree(cpu_tsc);
I
Ingo Molnar 已提交
1911

1912
	return err ? err : buf - ubuf;
L
Linus Torvalds 已提交
1913 1914
}

1915
static unsigned int mce_chrdev_poll(struct file *file, poll_table *wait)
1916
{
1917
	poll_wait(file, &mce_chrdev_wait, wait);
1918
	if (READ_ONCE(mcelog.next))
1919
		return POLLIN | POLLRDNORM;
1920 1921
	if (!mce_apei_read_done && apei_check_mce())
		return POLLIN | POLLRDNORM;
1922 1923 1924
	return 0;
}

1925 1926
static long mce_chrdev_ioctl(struct file *f, unsigned int cmd,
				unsigned long arg)
L
Linus Torvalds 已提交
1927 1928
{
	int __user *p = (int __user *)arg;
1929

L
Linus Torvalds 已提交
1930
	if (!capable(CAP_SYS_ADMIN))
1931
		return -EPERM;
I
Ingo Molnar 已提交
1932

L
Linus Torvalds 已提交
1933
	switch (cmd) {
1934
	case MCE_GET_RECORD_LEN:
L
Linus Torvalds 已提交
1935 1936
		return put_user(sizeof(struct mce), p);
	case MCE_GET_LOG_LEN:
1937
		return put_user(MCE_LOG_LEN, p);
L
Linus Torvalds 已提交
1938 1939
	case MCE_GETCLEAR_FLAGS: {
		unsigned flags;
1940 1941

		do {
L
Linus Torvalds 已提交
1942
			flags = mcelog.flags;
1943
		} while (cmpxchg(&mcelog.flags, flags, 0) != flags);
I
Ingo Molnar 已提交
1944

1945
		return put_user(flags, p);
L
Linus Torvalds 已提交
1946 1947
	}
	default:
1948 1949
		return -ENOTTY;
	}
L
Linus Torvalds 已提交
1950 1951
}

1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962
static ssize_t (*mce_write)(struct file *filp, const char __user *ubuf,
			    size_t usize, loff_t *off);

void register_mce_write_callback(ssize_t (*fn)(struct file *filp,
			     const char __user *ubuf,
			     size_t usize, loff_t *off))
{
	mce_write = fn;
}
EXPORT_SYMBOL_GPL(register_mce_write_callback);

1963 1964
static ssize_t mce_chrdev_write(struct file *filp, const char __user *ubuf,
				size_t usize, loff_t *off)
1965 1966 1967 1968 1969 1970 1971 1972
{
	if (mce_write)
		return mce_write(filp, ubuf, usize, off);
	else
		return -EINVAL;
}

static const struct file_operations mce_chrdev_ops = {
1973 1974 1975
	.open			= mce_chrdev_open,
	.release		= mce_chrdev_release,
	.read			= mce_chrdev_read,
1976
	.write			= mce_chrdev_write,
1977 1978 1979
	.poll			= mce_chrdev_poll,
	.unlocked_ioctl		= mce_chrdev_ioctl,
	.llseek			= no_llseek,
L
Linus Torvalds 已提交
1980 1981
};

1982
static struct miscdevice mce_chrdev_device = {
L
Linus Torvalds 已提交
1983 1984 1985 1986 1987
	MISC_MCELOG_MINOR,
	"mcelog",
	&mce_chrdev_ops,
};

1988 1989 1990
static void __mce_disable_bank(void *arg)
{
	int bank = *((int *)arg);
1991
	__clear_bit(bank, this_cpu_ptr(mce_poll_banks));
1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006
	cmci_disable_bank(bank);
}

void mce_disable_bank(int bank)
{
	if (bank >= mca_cfg.banks) {
		pr_warn(FW_BUG
			"Ignoring request to disable invalid MCA bank %d.\n",
			bank);
		return;
	}
	set_bit(bank, mce_banks_ce_disabled);
	on_each_cpu(__mce_disable_bank, &bank, 1);
}

H
Hidetoshi Seto 已提交
2007
/*
2008 2009
 * mce=off Disables machine check
 * mce=no_cmci Disables CMCI
2010
 * mce=no_lmce Disables LMCE
2011 2012
 * mce=dont_log_ce Clears corrected events silently, no log created for CEs.
 * mce=ignore_ce Disables polling and CMCI, corrected events are not cleared.
2013 2014 2015
 * mce=TOLERANCELEVEL[,monarchtimeout] (number, see above)
 *	monarchtimeout is how long to wait for other CPUs on machine
 *	check, or 0 to not wait
H
Hidetoshi Seto 已提交
2016 2017
 * mce=bootlog Log MCEs from before booting. Disabled by default on AMD.
 * mce=nobootlog Don't log MCEs from before booting.
2018
 * mce=bios_cmci_threshold Don't program the CMCI threshold
H
Hidetoshi Seto 已提交
2019
 */
L
Linus Torvalds 已提交
2020 2021
static int __init mcheck_enable(char *str)
{
2022 2023
	struct mca_config *cfg = &mca_cfg;

2024
	if (*str == 0) {
2025
		enable_p5_mce();
2026 2027
		return 1;
	}
2028 2029
	if (*str == '=')
		str++;
L
Linus Torvalds 已提交
2030
	if (!strcmp(str, "off"))
2031
		cfg->disabled = true;
2032
	else if (!strcmp(str, "no_cmci"))
2033
		cfg->cmci_disabled = true;
2034 2035
	else if (!strcmp(str, "no_lmce"))
		cfg->lmce_disabled = true;
2036
	else if (!strcmp(str, "dont_log_ce"))
2037
		cfg->dont_log_ce = true;
2038
	else if (!strcmp(str, "ignore_ce"))
2039
		cfg->ignore_ce = true;
H
Hidetoshi Seto 已提交
2040
	else if (!strcmp(str, "bootlog") || !strcmp(str, "nobootlog"))
2041
		cfg->bootlog = (str[0] == 'b');
2042
	else if (!strcmp(str, "bios_cmci_threshold"))
2043
		cfg->bios_cmci_threshold = true;
2044
	else if (isdigit(str[0])) {
2045
		if (get_option(&str, &cfg->tolerant) == 2)
2046
			get_option(&str, &(cfg->monarch_timeout));
2047
	} else {
2048
		pr_info("mce argument %s ignored. Please use /sys\n", str);
H
Hidetoshi Seto 已提交
2049 2050
		return 0;
	}
2051
	return 1;
L
Linus Torvalds 已提交
2052
}
2053
__setup("mce", mcheck_enable);
L
Linus Torvalds 已提交
2054

2055
int __init mcheck_init(void)
2056
{
2057
	mcheck_intel_therm_init();
2058
	mcheck_vendor_init_severity();
2059

2060 2061 2062
	return 0;
}

2063
/*
2064
 * mce_syscore: PM support
2065
 */
L
Linus Torvalds 已提交
2066

2067 2068 2069 2070
/*
 * Disable machine checks on suspend and shutdown. We can't really handle
 * them later.
 */
2071
static int mce_disable_error_reporting(void)
2072 2073 2074
{
	int i;

2075
	for (i = 0; i < mca_cfg.banks; i++) {
2076
		struct mce_bank *b = &mce_banks[i];
2077

2078
		if (b->init)
2079
			wrmsrl(MSR_IA32_MCx_CTL(i), 0);
2080
	}
2081 2082 2083
	return 0;
}

2084
static int mce_syscore_suspend(void)
2085
{
2086
	return mce_disable_error_reporting();
2087 2088
}

2089
static void mce_syscore_shutdown(void)
2090
{
2091
	mce_disable_error_reporting();
2092 2093
}

I
Ingo Molnar 已提交
2094 2095 2096 2097 2098
/*
 * On resume clear all MCE state. Don't want to see leftovers from the BIOS.
 * Only one CPU is active at this time, the others get re-added later using
 * CPU hotplug:
 */
2099
static void mce_syscore_resume(void)
L
Linus Torvalds 已提交
2100
{
2101
	__mcheck_cpu_init_generic();
2102
	__mcheck_cpu_init_vendor(raw_cpu_ptr(&cpu_info));
L
Linus Torvalds 已提交
2103 2104
}

2105
static struct syscore_ops mce_syscore_ops = {
2106 2107 2108
	.suspend	= mce_syscore_suspend,
	.shutdown	= mce_syscore_shutdown,
	.resume		= mce_syscore_resume,
2109 2110
};

2111
/*
2112
 * mce_device: Sysfs support
2113 2114
 */

2115 2116
static void mce_cpu_restart(void *data)
{
2117
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2118
		return;
2119 2120
	__mcheck_cpu_init_generic();
	__mcheck_cpu_init_timer();
2121 2122
}

L
Linus Torvalds 已提交
2123
/* Reinit MCEs after user configuration changes */
2124 2125
static void mce_restart(void)
{
2126
	mce_timer_delete_all();
2127
	on_each_cpu(mce_cpu_restart, NULL, 1);
L
Linus Torvalds 已提交
2128 2129
}

2130
/* Toggle features for corrected errors */
2131
static void mce_disable_cmci(void *data)
2132
{
2133
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2134 2135 2136 2137 2138 2139
		return;
	cmci_clear();
}

static void mce_enable_ce(void *all)
{
2140
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2141 2142 2143 2144
		return;
	cmci_reenable();
	cmci_recheck();
	if (all)
2145
		__mcheck_cpu_init_timer();
2146 2147
}

2148
static struct bus_type mce_subsys = {
I
Ingo Molnar 已提交
2149
	.name		= "machinecheck",
2150
	.dev_name	= "machinecheck",
L
Linus Torvalds 已提交
2151 2152
};

2153
DEFINE_PER_CPU(struct device *, mce_device);
I
Ingo Molnar 已提交
2154 2155

void (*threshold_cpu_callback)(unsigned long action, unsigned int cpu);
L
Linus Torvalds 已提交
2156

2157
static inline struct mce_bank *attr_to_bank(struct device_attribute *attr)
2158 2159 2160
{
	return container_of(attr, struct mce_bank, attr);
}
2161

2162
static ssize_t show_bank(struct device *s, struct device_attribute *attr,
2163 2164
			 char *buf)
{
2165
	return sprintf(buf, "%llx\n", attr_to_bank(attr)->ctl);
2166 2167
}

2168
static ssize_t set_bank(struct device *s, struct device_attribute *attr,
H
Hidetoshi Seto 已提交
2169
			const char *buf, size_t size)
2170
{
H
Hidetoshi Seto 已提交
2171
	u64 new;
I
Ingo Molnar 已提交
2172

2173
	if (kstrtou64(buf, 0, &new) < 0)
2174
		return -EINVAL;
I
Ingo Molnar 已提交
2175

2176
	attr_to_bank(attr)->ctl = new;
2177
	mce_restart();
I
Ingo Molnar 已提交
2178

H
Hidetoshi Seto 已提交
2179
	return size;
2180
}
2181

I
Ingo Molnar 已提交
2182
static ssize_t
2183
show_trigger(struct device *s, struct device_attribute *attr, char *buf)
2184
{
2185
	strcpy(buf, mce_helper);
2186
	strcat(buf, "\n");
2187
	return strlen(mce_helper) + 1;
2188 2189
}

2190
static ssize_t set_trigger(struct device *s, struct device_attribute *attr,
I
Ingo Molnar 已提交
2191
				const char *buf, size_t siz)
2192 2193
{
	char *p;
I
Ingo Molnar 已提交
2194

2195 2196 2197
	strncpy(mce_helper, buf, sizeof(mce_helper));
	mce_helper[sizeof(mce_helper)-1] = 0;
	p = strchr(mce_helper, '\n');
I
Ingo Molnar 已提交
2198

2199
	if (p)
I
Ingo Molnar 已提交
2200 2201
		*p = 0;

2202
	return strlen(mce_helper) + !!p;
2203 2204
}

2205 2206
static ssize_t set_ignore_ce(struct device *s,
			     struct device_attribute *attr,
2207 2208 2209 2210
			     const char *buf, size_t size)
{
	u64 new;

2211
	if (kstrtou64(buf, 0, &new) < 0)
2212 2213
		return -EINVAL;

2214
	if (mca_cfg.ignore_ce ^ !!new) {
2215 2216
		if (new) {
			/* disable ce features */
2217 2218
			mce_timer_delete_all();
			on_each_cpu(mce_disable_cmci, NULL, 1);
2219
			mca_cfg.ignore_ce = true;
2220 2221
		} else {
			/* enable ce features */
2222
			mca_cfg.ignore_ce = false;
2223 2224 2225 2226 2227 2228
			on_each_cpu(mce_enable_ce, (void *)1, 1);
		}
	}
	return size;
}

2229 2230
static ssize_t set_cmci_disabled(struct device *s,
				 struct device_attribute *attr,
2231 2232 2233 2234
				 const char *buf, size_t size)
{
	u64 new;

2235
	if (kstrtou64(buf, 0, &new) < 0)
2236 2237
		return -EINVAL;

2238
	if (mca_cfg.cmci_disabled ^ !!new) {
2239 2240
		if (new) {
			/* disable cmci */
2241
			on_each_cpu(mce_disable_cmci, NULL, 1);
2242
			mca_cfg.cmci_disabled = true;
2243 2244
		} else {
			/* enable cmci */
2245
			mca_cfg.cmci_disabled = false;
2246 2247 2248 2249 2250 2251
			on_each_cpu(mce_enable_ce, NULL, 1);
		}
	}
	return size;
}

2252 2253
static ssize_t store_int_with_restart(struct device *s,
				      struct device_attribute *attr,
2254 2255
				      const char *buf, size_t size)
{
2256
	ssize_t ret = device_store_int(s, attr, buf, size);
2257 2258 2259 2260
	mce_restart();
	return ret;
}

2261
static DEVICE_ATTR(trigger, 0644, show_trigger, set_trigger);
2262
static DEVICE_INT_ATTR(tolerant, 0644, mca_cfg.tolerant);
2263
static DEVICE_INT_ATTR(monarch_timeout, 0644, mca_cfg.monarch_timeout);
2264
static DEVICE_BOOL_ATTR(dont_log_ce, 0644, mca_cfg.dont_log_ce);
I
Ingo Molnar 已提交
2265

2266 2267
static struct dev_ext_attribute dev_attr_check_interval = {
	__ATTR(check_interval, 0644, device_show_int, store_int_with_restart),
2268 2269
	&check_interval
};
I
Ingo Molnar 已提交
2270

2271
static struct dev_ext_attribute dev_attr_ignore_ce = {
2272 2273
	__ATTR(ignore_ce, 0644, device_show_bool, set_ignore_ce),
	&mca_cfg.ignore_ce
2274 2275
};

2276
static struct dev_ext_attribute dev_attr_cmci_disabled = {
2277 2278
	__ATTR(cmci_disabled, 0644, device_show_bool, set_cmci_disabled),
	&mca_cfg.cmci_disabled
2279 2280
};

2281 2282 2283 2284 2285 2286 2287 2288
static struct device_attribute *mce_device_attrs[] = {
	&dev_attr_tolerant.attr,
	&dev_attr_check_interval.attr,
	&dev_attr_trigger,
	&dev_attr_monarch_timeout.attr,
	&dev_attr_dont_log_ce.attr,
	&dev_attr_ignore_ce.attr,
	&dev_attr_cmci_disabled.attr,
2289 2290
	NULL
};
L
Linus Torvalds 已提交
2291

2292
static cpumask_var_t mce_device_initialized;
2293

2294 2295 2296 2297 2298
static void mce_device_release(struct device *dev)
{
	kfree(dev);
}

2299
/* Per cpu device init. All of the cpus still share the same ctrl bank: */
2300
static int mce_device_create(unsigned int cpu)
L
Linus Torvalds 已提交
2301
{
2302
	struct device *dev;
L
Linus Torvalds 已提交
2303
	int err;
2304
	int i, j;
2305

A
Andreas Herrmann 已提交
2306
	if (!mce_available(&boot_cpu_data))
2307 2308
		return -EIO;

2309 2310 2311
	dev = kzalloc(sizeof *dev, GFP_KERNEL);
	if (!dev)
		return -ENOMEM;
2312 2313
	dev->id  = cpu;
	dev->bus = &mce_subsys;
2314
	dev->release = &mce_device_release;
2315

2316
	err = device_register(dev);
2317 2318
	if (err) {
		put_device(dev);
2319
		return err;
2320
	}
2321

2322 2323
	for (i = 0; mce_device_attrs[i]; i++) {
		err = device_create_file(dev, mce_device_attrs[i]);
2324 2325 2326
		if (err)
			goto error;
	}
2327
	for (j = 0; j < mca_cfg.banks; j++) {
2328
		err = device_create_file(dev, &mce_banks[j].attr);
2329 2330 2331
		if (err)
			goto error2;
	}
2332
	cpumask_set_cpu(cpu, mce_device_initialized);
2333
	per_cpu(mce_device, cpu) = dev;
2334

2335
	return 0;
2336
error2:
2337
	while (--j >= 0)
2338
		device_remove_file(dev, &mce_banks[j].attr);
2339
error:
I
Ingo Molnar 已提交
2340
	while (--i >= 0)
2341
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2342

2343
	device_unregister(dev);
2344

2345 2346 2347
	return err;
}

2348
static void mce_device_remove(unsigned int cpu)
2349
{
2350
	struct device *dev = per_cpu(mce_device, cpu);
2351 2352
	int i;

2353
	if (!cpumask_test_cpu(cpu, mce_device_initialized))
2354 2355
		return;

2356 2357
	for (i = 0; mce_device_attrs[i]; i++)
		device_remove_file(dev, mce_device_attrs[i]);
I
Ingo Molnar 已提交
2358

2359
	for (i = 0; i < mca_cfg.banks; i++)
2360
		device_remove_file(dev, &mce_banks[i].attr);
I
Ingo Molnar 已提交
2361

2362 2363
	device_unregister(dev);
	cpumask_clear_cpu(cpu, mce_device_initialized);
2364
	per_cpu(mce_device, cpu) = NULL;
2365 2366
}

2367
/* Make sure there are no machine checks on offlined CPUs. */
2368
static void mce_disable_cpu(void *h)
2369
{
A
Andi Kleen 已提交
2370
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
2371
	int i;
2372

2373
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2374
		return;
2375

A
Andi Kleen 已提交
2376 2377
	if (!(action & CPU_TASKS_FROZEN))
		cmci_clear();
2378
	for (i = 0; i < mca_cfg.banks; i++) {
2379
		struct mce_bank *b = &mce_banks[i];
2380

2381
		if (b->init)
2382
			wrmsrl(MSR_IA32_MCx_CTL(i), 0);
2383
	}
2384 2385
}

2386
static void mce_reenable_cpu(void *h)
2387
{
A
Andi Kleen 已提交
2388
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
2389
	int i;
2390

2391
	if (!mce_available(raw_cpu_ptr(&cpu_info)))
2392
		return;
I
Ingo Molnar 已提交
2393

A
Andi Kleen 已提交
2394 2395
	if (!(action & CPU_TASKS_FROZEN))
		cmci_reenable();
2396
	for (i = 0; i < mca_cfg.banks; i++) {
2397
		struct mce_bank *b = &mce_banks[i];
2398

2399
		if (b->init)
2400
			wrmsrl(MSR_IA32_MCx_CTL(i), b->ctl);
2401
	}
2402 2403
}

2404
/* Get notified when a cpu comes on/off. Be hotplug friendly. */
2405
static int
I
Ingo Molnar 已提交
2406
mce_cpu_callback(struct notifier_block *nfb, unsigned long action, void *hcpu)
2407 2408
{
	unsigned int cpu = (unsigned long)hcpu;
2409
	struct timer_list *t = &per_cpu(mce_timer, cpu);
2410

2411
	switch (action & ~CPU_TASKS_FROZEN) {
2412
	case CPU_ONLINE:
2413
		mce_device_create(cpu);
2414 2415
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2416 2417
		break;
	case CPU_DEAD:
2418 2419
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
2420
		mce_device_remove(cpu);
C
Chen Gong 已提交
2421
		mce_intel_hcpu_update(cpu);
B
Borislav Petkov 已提交
2422 2423 2424 2425

		/* intentionally ignoring frozen here */
		if (!(action & CPU_TASKS_FROZEN))
			cmci_rediscover();
2426
		break;
2427
	case CPU_DOWN_PREPARE:
A
Andi Kleen 已提交
2428
		smp_call_function_single(cpu, mce_disable_cpu, &action, 1);
C
Chen Gong 已提交
2429
		del_timer_sync(t);
2430 2431
		break;
	case CPU_DOWN_FAILED:
A
Andi Kleen 已提交
2432
		smp_call_function_single(cpu, mce_reenable_cpu, &action, 1);
T
Thomas Gleixner 已提交
2433
		mce_start_timer(cpu, t);
A
Andi Kleen 已提交
2434
		break;
2435 2436
	}

2437
	return NOTIFY_OK;
2438 2439
}

2440
static struct notifier_block mce_cpu_notifier = {
2441 2442 2443
	.notifier_call = mce_cpu_callback,
};

2444
static __init void mce_init_banks(void)
2445 2446 2447
{
	int i;

2448
	for (i = 0; i < mca_cfg.banks; i++) {
2449
		struct mce_bank *b = &mce_banks[i];
2450
		struct device_attribute *a = &b->attr;
I
Ingo Molnar 已提交
2451

2452
		sysfs_attr_init(&a->attr);
2453 2454
		a->attr.name	= b->attrname;
		snprintf(b->attrname, ATTR_LEN, "bank%d", i);
I
Ingo Molnar 已提交
2455 2456 2457 2458

		a->attr.mode	= 0644;
		a->show		= show_bank;
		a->store	= set_bank;
2459 2460 2461
	}
}

2462
static __init int mcheck_init_device(void)
2463 2464 2465 2466
{
	int err;
	int i = 0;

2467 2468 2469 2470
	if (!mce_available(&boot_cpu_data)) {
		err = -EIO;
		goto err_out;
	}
2471

2472 2473 2474 2475
	if (!zalloc_cpumask_var(&mce_device_initialized, GFP_KERNEL)) {
		err = -ENOMEM;
		goto err_out;
	}
2476

2477
	mce_init_banks();
2478

2479
	err = subsys_system_register(&mce_subsys, NULL);
2480
	if (err)
2481
		goto err_out_mem;
2482

2483
	cpu_notifier_register_begin();
2484
	for_each_online_cpu(i) {
2485
		err = mce_device_create(i);
2486
		if (err) {
2487 2488 2489 2490 2491 2492
			/*
			 * Register notifier anyway (and do not unreg it) so
			 * that we don't leave undeleted timers, see notifier
			 * callback above.
			 */
			__register_hotcpu_notifier(&mce_cpu_notifier);
2493
			cpu_notifier_register_done();
2494
			goto err_device_create;
2495
		}
2496 2497
	}

2498 2499
	__register_hotcpu_notifier(&mce_cpu_notifier);
	cpu_notifier_register_done();
2500

2501 2502
	register_syscore_ops(&mce_syscore_ops);

2503
	/* register character device /dev/mcelog */
2504 2505 2506 2507 2508 2509 2510 2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527
	err = misc_register(&mce_chrdev_device);
	if (err)
		goto err_register;

	return 0;

err_register:
	unregister_syscore_ops(&mce_syscore_ops);

err_device_create:
	/*
	 * We didn't keep track of which devices were created above, but
	 * even if we had, the set of online cpus might have changed.
	 * Play safe and remove for every possible cpu, since
	 * mce_device_remove() will do the right thing.
	 */
	for_each_possible_cpu(i)
		mce_device_remove(i);

err_out_mem:
	free_cpumask_var(mce_device_initialized);

err_out:
	pr_err("Unable to init device /dev/mcelog (rc: %d)\n", err);
I
Ingo Molnar 已提交
2528

L
Linus Torvalds 已提交
2529 2530
	return err;
}
2531
device_initcall_sync(mcheck_init_device);
I
Ingo Molnar 已提交
2532

2533 2534 2535 2536 2537
/*
 * Old style boot options parsing. Only for compatibility.
 */
static int __init mcheck_disable(char *str)
{
2538
	mca_cfg.disabled = true;
2539 2540 2541
	return 1;
}
__setup("nomce", mcheck_disable);
I
Ingo Molnar 已提交
2542

2543 2544
#ifdef CONFIG_DEBUG_FS
struct dentry *mce_get_debugfs_dir(void)
I
Ingo Molnar 已提交
2545
{
2546
	static struct dentry *dmce;
I
Ingo Molnar 已提交
2547

2548 2549
	if (!dmce)
		dmce = debugfs_create_dir("mce", NULL);
I
Ingo Molnar 已提交
2550

2551 2552
	return dmce;
}
I
Ingo Molnar 已提交
2553

2554 2555 2556
static void mce_reset(void)
{
	cpu_missing = 0;
2557
	atomic_set(&mce_fake_panicked, 0);
2558 2559 2560 2561
	atomic_set(&mce_executing, 0);
	atomic_set(&mce_callin, 0);
	atomic_set(&global_nwo, 0);
}
I
Ingo Molnar 已提交
2562

2563 2564 2565 2566
static int fake_panic_get(void *data, u64 *val)
{
	*val = fake_panic;
	return 0;
I
Ingo Molnar 已提交
2567 2568
}

2569
static int fake_panic_set(void *data, u64 val)
I
Ingo Molnar 已提交
2570
{
2571 2572 2573
	mce_reset();
	fake_panic = val;
	return 0;
I
Ingo Molnar 已提交
2574 2575
}

2576 2577
DEFINE_SIMPLE_ATTRIBUTE(fake_panic_fops, fake_panic_get,
			fake_panic_set, "%llu\n");
2578

2579
static int __init mcheck_debugfs_init(void)
2580
{
2581 2582 2583 2584 2585 2586 2587 2588 2589 2590 2591
	struct dentry *dmce, *ffake_panic;

	dmce = mce_get_debugfs_dir();
	if (!dmce)
		return -ENOMEM;
	ffake_panic = debugfs_create_file("fake_panic", 0444, dmce, NULL,
					  &fake_panic_fops);
	if (!ffake_panic)
		return -ENOMEM;

	return 0;
2592
}
2593
late_initcall(mcheck_debugfs_init);
2594
#endif