mce.c 39.9 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * Machine check handler.
I
Ingo Molnar 已提交
3
 *
L
Linus Torvalds 已提交
4
 * K8 parts Copyright 2002,2003 Andi Kleen, SuSE Labs.
5 6
 * Rest from unknown author(s).
 * 2004 Andi Kleen. Rewrote most of it.
7 8
 * Copyright 2008 Intel Corporation
 * Author: Andi Kleen
L
Linus Torvalds 已提交
9
 */
I
Ingo Molnar 已提交
10 11 12
#include <linux/thread_info.h>
#include <linux/capability.h>
#include <linux/miscdevice.h>
13
#include <linux/interrupt.h>
I
Ingo Molnar 已提交
14 15 16 17
#include <linux/ratelimit.h>
#include <linux/kallsyms.h>
#include <linux/rcupdate.h>
#include <linux/kobject.h>
18
#include <linux/uaccess.h>
I
Ingo Molnar 已提交
19 20 21
#include <linux/kdebug.h>
#include <linux/kernel.h>
#include <linux/percpu.h>
L
Linus Torvalds 已提交
22 23
#include <linux/string.h>
#include <linux/sysdev.h>
24
#include <linux/delay.h>
25
#include <linux/ctype.h>
I
Ingo Molnar 已提交
26
#include <linux/sched.h>
27
#include <linux/sysfs.h>
I
Ingo Molnar 已提交
28 29 30 31
#include <linux/types.h>
#include <linux/init.h>
#include <linux/kmod.h>
#include <linux/poll.h>
32
#include <linux/nmi.h>
I
Ingo Molnar 已提交
33
#include <linux/cpu.h>
34
#include <linux/smp.h>
I
Ingo Molnar 已提交
35 36
#include <linux/fs.h>

37
#include <asm/processor.h>
38 39
#include <asm/hw_irq.h>
#include <asm/apic.h>
40
#include <asm/idle.h>
41
#include <asm/ipi.h>
I
Ingo Molnar 已提交
42 43
#include <asm/mce.h>
#include <asm/msr.h>
L
Linus Torvalds 已提交
44

45
#include "mce-internal.h"
46 47
#include "mce.h"

48 49 50 51 52 53 54 55 56 57
/* Handle unconfigured int18 (should never happen) */
static void unexpected_machine_check(struct pt_regs *regs, long error_code)
{
	printk(KERN_ERR "CPU#%d: Unexpected int18 (Machine Check).\n",
	       smp_processor_id());
}

/* Call the installed machine check handler for this CPU setup. */
void (*machine_check_vector)(struct pt_regs *, long error_code) =
						unexpected_machine_check;
58 59 60

int				mce_disabled;

61
#ifdef CONFIG_X86_NEW_MCE
62

I
Ingo Molnar 已提交
63
#define MISC_MCELOG_MINOR	227
64

65 66
#define SPINUNIT 100	/* 100ns */

67 68
atomic_t mce_entry;

69 70
DEFINE_PER_CPU(unsigned, mce_exception_count);

71 72 73 74 75 76 77
/*
 * Tolerant levels:
 *   0: always panic on uncorrected errors, log corrected errors
 *   1: panic or SIGBUS on uncorrected errors, log corrected errors
 *   2: SIGBUS or log uncorrected errors (if possible), log corrected errors
 *   3: never panic or SIGBUS, log all errors (for testing only)
 */
I
Ingo Molnar 已提交
78 79 80 81 82 83
static int			tolerant = 1;
static int			banks;
static u64			*bank;
static unsigned long		notify_user;
static int			rip_msr;
static int			mce_bootlog = -1;
84
static int			monarch_timeout = -1;
85

I
Ingo Molnar 已提交
86 87
static char			trigger[128];
static char			*trigger_argv[2] = { trigger, NULL };
L
Linus Torvalds 已提交
88

89 90
static unsigned long		dont_init_banks;

91
static DECLARE_WAIT_QUEUE_HEAD(mce_wait);
92 93 94
static DEFINE_PER_CPU(struct mce, mces_seen);
static int			cpu_missing;

95

96 97 98 99 100
/* MCA banks polled by the period polling timer for corrected events */
DEFINE_PER_CPU(mce_banks_t, mce_poll_banks) = {
	[0 ... BITS_TO_LONGS(MAX_NR_BANKS)-1] = ~0UL
};

101 102 103 104 105
static inline int skip_bank_init(int i)
{
	return i < BITS_PER_LONG && test_bit(i, &dont_init_banks);
}

106 107 108 109
/* Do initial initialization of a struct mce */
void mce_setup(struct mce *m)
{
	memset(m, 0, sizeof(struct mce));
110
	m->cpu = m->extcpu = smp_processor_id();
111
	rdtscll(m->tsc);
112 113 114 115 116 117 118 119 120
	/* We hope get_seconds stays lockless */
	m->time = get_seconds();
	m->cpuvendor = boot_cpu_data.x86_vendor;
	m->cpuid = cpuid_eax(1);
#ifdef CONFIG_SMP
	m->socketid = cpu_data(m->extcpu).phys_proc_id;
#endif
	m->apicid = cpu_data(m->extcpu).initial_apicid;
	rdmsrl(MSR_IA32_MCG_CAP, m->mcgcap);
121 122
}

123 124 125
DEFINE_PER_CPU(struct mce, injectm);
EXPORT_PER_CPU_SYMBOL_GPL(injectm);

L
Linus Torvalds 已提交
126 127 128 129 130 131
/*
 * Lockless MCE logging infrastructure.
 * This avoids deadlocks on printk locks without having to break locks. Also
 * separate MCEs from kernel messages to avoid bogus bug reports.
 */

132
static struct mce_log mcelog = {
133 134 135
	.signature	= MCE_LOG_SIGNATURE,
	.len		= MCE_LOG_LEN,
	.recordlen	= sizeof(struct mce),
136
};
L
Linus Torvalds 已提交
137 138 139 140

void mce_log(struct mce *mce)
{
	unsigned next, entry;
I
Ingo Molnar 已提交
141

L
Linus Torvalds 已提交
142
	mce->finished = 0;
M
Mike Waychison 已提交
143
	wmb();
L
Linus Torvalds 已提交
144 145
	for (;;) {
		entry = rcu_dereference(mcelog.next);
146
		for (;;) {
I
Ingo Molnar 已提交
147 148 149 150 151
			/*
			 * When the buffer fills up discard new entries.
			 * Assume that the earlier errors are the more
			 * interesting ones:
			 */
152
			if (entry >= MCE_LOG_LEN) {
153 154
				set_bit(MCE_OVERFLOW,
					(unsigned long *)&mcelog.flags);
155 156
				return;
			}
I
Ingo Molnar 已提交
157
			/* Old left over entry. Skip: */
158 159 160 161
			if (mcelog.entry[entry].finished) {
				entry++;
				continue;
			}
M
Mike Waychison 已提交
162
			break;
L
Linus Torvalds 已提交
163 164 165 166 167 168 169
		}
		smp_rmb();
		next = entry + 1;
		if (cmpxchg(&mcelog.next, entry, next) == entry)
			break;
	}
	memcpy(mcelog.entry + entry, mce, sizeof(struct mce));
M
Mike Waychison 已提交
170
	wmb();
L
Linus Torvalds 已提交
171
	mcelog.entry[entry].finished = 1;
M
Mike Waychison 已提交
172
	wmb();
L
Linus Torvalds 已提交
173

174
	mce->finished = 1;
175
	set_bit(0, &notify_user);
L
Linus Torvalds 已提交
176 177 178 179 180
}

static void print_mce(struct mce *m)
{
	printk(KERN_EMERG "\n"
181
	       KERN_EMERG "HARDWARE ERROR\n"
L
Linus Torvalds 已提交
182 183
	       KERN_EMERG
	       "CPU %d: Machine Check Exception: %16Lx Bank %d: %016Lx\n",
184
	       m->extcpu, m->mcgstatus, m->bank, m->status);
185
	if (m->ip) {
186
		printk(KERN_EMERG "RIP%s %02x:<%016Lx> ",
L
Linus Torvalds 已提交
187
		       !(m->mcgstatus & MCG_STATUS_EIPV) ? " !INEXACT!" : "",
188
		       m->cs, m->ip);
L
Linus Torvalds 已提交
189
		if (m->cs == __KERNEL_CS)
190
			print_symbol("{%s}", m->ip);
L
Linus Torvalds 已提交
191 192
		printk("\n");
	}
193
	printk(KERN_EMERG "TSC %llx ", m->tsc);
L
Linus Torvalds 已提交
194
	if (m->addr)
195
		printk("ADDR %llx ", m->addr);
L
Linus Torvalds 已提交
196
	if (m->misc)
197
		printk("MISC %llx ", m->misc);
L
Linus Torvalds 已提交
198
	printk("\n");
199 200 201
	printk(KERN_EMERG "PROCESSOR %u:%x TIME %llu SOCKET %u APIC %x\n",
			m->cpuvendor, m->cpuid, m->time, m->socketid,
			m->apicid);
202
	printk(KERN_EMERG "This is not a software problem!\n");
203 204
	printk(KERN_EMERG "Run through mcelog --ascii to decode "
	       "and contact your hardware vendor\n");
L
Linus Torvalds 已提交
205 206
}

207 208 209 210 211 212 213 214 215 216 217 218 219 220 221
#define PANIC_TIMEOUT 5 /* 5 seconds */

static atomic_t mce_paniced;

/* Panic in progress. Enable interrupts and wait for final IPI */
static void wait_for_panic(void)
{
	long timeout = PANIC_TIMEOUT*USEC_PER_SEC;
	preempt_disable();
	local_irq_enable();
	while (timeout-- > 0)
		udelay(1);
	panic("Panicing machine check CPU died");
}

222
static void mce_panic(char *msg, struct mce *final, char *exp)
223
{
L
Linus Torvalds 已提交
224
	int i;
225

226 227 228 229 230 231 232
	/*
	 * Make sure only one CPU runs in machine check panic
	 */
	if (atomic_add_return(1, &mce_paniced) > 1)
		wait_for_panic();
	barrier();

233 234
	bust_spinlocks(1);
	console_verbose();
235
	/* First print corrected ones that are still unlogged */
L
Linus Torvalds 已提交
236
	for (i = 0; i < MCE_LOG_LEN; i++) {
237 238 239 240 241 242 243 244 245
		struct mce *m = &mcelog.entry[i];
		if ((m->status & MCI_STATUS_VAL) &&
			!(m->status & MCI_STATUS_UC))
			print_mce(m);
	}
	/* Now print uncorrected but with the final one last */
	for (i = 0; i < MCE_LOG_LEN; i++) {
		struct mce *m = &mcelog.entry[i];
		if (!(m->status & MCI_STATUS_VAL))
L
Linus Torvalds 已提交
246
			continue;
247 248
		if (!final || memcmp(m, final, sizeof(struct mce)))
			print_mce(m);
L
Linus Torvalds 已提交
249
	}
250 251
	if (final)
		print_mce(final);
252 253
	if (cpu_missing)
		printk(KERN_EMERG "Some CPUs didn't answer in synchronization\n");
254 255
	if (exp)
		printk(KERN_EMERG "Machine check: %s\n", exp);
256
	panic(msg);
257
}
L
Linus Torvalds 已提交
258

259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276
/* Support code for software error injection */

static int msr_to_offset(u32 msr)
{
	unsigned bank = __get_cpu_var(injectm.bank);
	if (msr == rip_msr)
		return offsetof(struct mce, ip);
	if (msr == MSR_IA32_MC0_STATUS + bank*4)
		return offsetof(struct mce, status);
	if (msr == MSR_IA32_MC0_ADDR + bank*4)
		return offsetof(struct mce, addr);
	if (msr == MSR_IA32_MC0_MISC + bank*4)
		return offsetof(struct mce, misc);
	if (msr == MSR_IA32_MCG_STATUS)
		return offsetof(struct mce, mcgstatus);
	return -1;
}

277 278 279 280
/* MSR access wrappers used for error injection */
static u64 mce_rdmsrl(u32 msr)
{
	u64 v;
281 282 283 284 285 286
	if (__get_cpu_var(injectm).finished) {
		int offset = msr_to_offset(msr);
		if (offset < 0)
			return 0;
		return *(u64 *)((char *)&__get_cpu_var(injectm) + offset);
	}
287 288 289 290 291 292
	rdmsrl(msr, v);
	return v;
}

static void mce_wrmsrl(u32 msr, u64 v)
{
293 294 295 296 297 298
	if (__get_cpu_var(injectm).finished) {
		int offset = msr_to_offset(msr);
		if (offset >= 0)
			*(u64 *)((char *)&__get_cpu_var(injectm) + offset) = v;
		return;
	}
299 300 301
	wrmsrl(msr, v);
}

A
Andi Kleen 已提交
302
int mce_available(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
303
{
304
	if (mce_disabled)
305
		return 0;
306
	return cpu_has(c, X86_FEATURE_MCE) && cpu_has(c, X86_FEATURE_MCA);
L
Linus Torvalds 已提交
307 308
}

H
Huang Ying 已提交
309 310 311 312
/*
 * Get the address of the instruction at the time of the machine check
 * error.
 */
313 314
static inline void mce_get_rip(struct mce *m, struct pt_regs *regs)
{
H
Huang Ying 已提交
315 316

	if (regs && (m->mcgstatus & (MCG_STATUS_RIPV|MCG_STATUS_EIPV))) {
317
		m->ip = regs->ip;
318 319
		m->cs = regs->cs;
	} else {
320
		m->ip = 0;
321 322
		m->cs = 0;
	}
H
Huang Ying 已提交
323
	if (rip_msr)
324
		m->ip = mce_rdmsrl(rip_msr);
325 326
}

327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374
#ifdef CONFIG_X86_LOCAL_APIC 
/*
 * Called after interrupts have been reenabled again
 * when a MCE happened during an interrupts off region
 * in the kernel.
 */
asmlinkage void smp_mce_self_interrupt(struct pt_regs *regs)
{
	ack_APIC_irq();
	exit_idle();
	irq_enter();
	mce_notify_user();
	irq_exit();
}
#endif

static void mce_report_event(struct pt_regs *regs)
{
	if (regs->flags & (X86_VM_MASK|X86_EFLAGS_IF)) {
		mce_notify_user();
		return;
	}

#ifdef CONFIG_X86_LOCAL_APIC
	/*
	 * Without APIC do not notify. The event will be picked
	 * up eventually.
	 */
	if (!cpu_has_apic)
		return;

	/*
	 * When interrupts are disabled we cannot use
	 * kernel services safely. Trigger an self interrupt
	 * through the APIC to instead do the notification
	 * after interrupts are reenabled again.
	 */
	apic->send_IPI_self(MCE_SELF_VECTOR);

	/*
	 * Wait for idle afterwards again so that we don't leave the
	 * APIC in a non idle state because the normal APIC writes
	 * cannot exclude us.
	 */
	apic_wait_icr_idle();
#endif
}

375 376
DEFINE_PER_CPU(unsigned, mce_poll_count);

377
/*
378 379 380 381 382
 * Poll for corrected events or events that happened before reset.
 * Those are just logged through /dev/mcelog.
 *
 * This is executed in standard interrupt context.
 */
383
void machine_check_poll(enum mcp_flags flags, mce_banks_t *b)
384 385 386 387
{
	struct mce m;
	int i;

388 389
	__get_cpu_var(mce_poll_count)++;

390 391
	mce_setup(&m);

392
	m.mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
393
	for (i = 0; i < banks; i++) {
394
		if (!bank[i] || !test_bit(i, *b))
395 396 397 398 399 400 401 402
			continue;

		m.misc = 0;
		m.addr = 0;
		m.bank = i;
		m.tsc = 0;

		barrier();
403
		m.status = mce_rdmsrl(MSR_IA32_MC0_STATUS + i*4);
404 405 406 407 408 409 410 411 412 413 414 415 416 417
		if (!(m.status & MCI_STATUS_VAL))
			continue;

		/*
		 * Uncorrected events are handled by the exception handler
		 * when it is enabled. But when the exception is disabled log
		 * everything.
		 *
		 * TBD do the same check for MCI_STATUS_EN here?
		 */
		if ((m.status & MCI_STATUS_UC) && !(flags & MCP_UC))
			continue;

		if (m.status & MCI_STATUS_MISCV)
418
			m.misc = mce_rdmsrl(MSR_IA32_MC0_MISC + i*4);
419
		if (m.status & MCI_STATUS_ADDRV)
420
			m.addr = mce_rdmsrl(MSR_IA32_MC0_ADDR + i*4);
421 422 423 424 425 426 427

		if (!(flags & MCP_TIMESTAMP))
			m.tsc = 0;
		/*
		 * Don't get the IP here because it's unlikely to
		 * have anything to do with the actual error location.
		 */
A
Andi Kleen 已提交
428 429 430 431
		if (!(flags & MCP_DONTLOG)) {
			mce_log(&m);
			add_taint(TAINT_MACHINE_CHECK);
		}
432 433 434 435

		/*
		 * Clear state for this bank.
		 */
436
		mce_wrmsrl(MSR_IA32_MC0_STATUS+4*i, 0);
437 438 439 440 441 442
	}

	/*
	 * Don't clear MCG_STATUS here because it's only defined for
	 * exceptions.
	 */
443 444

	sync_core();
445
}
446
EXPORT_SYMBOL_GPL(machine_check_poll);
447

448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463
/*
 * Do a quick check if any of the events requires a panic.
 * This decides if we keep the events around or clear them.
 */
static int mce_no_way_out(struct mce *m, char **msg)
{
	int i;

	for (i = 0; i < banks; i++) {
		m->status = mce_rdmsrl(MSR_IA32_MC0_STATUS + i*4);
		if (mce_severity(m, tolerant, msg) >= MCE_PANIC_SEVERITY)
			return 1;
	}
	return 0;
}

464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557
/*
 * Variable to establish order between CPUs while scanning.
 * Each CPU spins initially until executing is equal its number.
 */
static atomic_t mce_executing;

/*
 * Defines order of CPUs on entry. First CPU becomes Monarch.
 */
static atomic_t mce_callin;

/*
 * Check if a timeout waiting for other CPUs happened.
 */
static int mce_timed_out(u64 *t)
{
	/*
	 * The others already did panic for some reason.
	 * Bail out like in a timeout.
	 * rmb() to tell the compiler that system_state
	 * might have been modified by someone else.
	 */
	rmb();
	if (atomic_read(&mce_paniced))
		wait_for_panic();
	if (!monarch_timeout)
		goto out;
	if ((s64)*t < SPINUNIT) {
		/* CHECKME: Make panic default for 1 too? */
		if (tolerant < 1)
			mce_panic("Timeout synchronizing machine check over CPUs",
				  NULL, NULL);
		cpu_missing = 1;
		return 1;
	}
	*t -= SPINUNIT;
out:
	touch_nmi_watchdog();
	return 0;
}

/*
 * The Monarch's reign.  The Monarch is the CPU who entered
 * the machine check handler first. It waits for the others to
 * raise the exception too and then grades them. When any
 * error is fatal panic. Only then let the others continue.
 *
 * The other CPUs entering the MCE handler will be controlled by the
 * Monarch. They are called Subjects.
 *
 * This way we prevent any potential data corruption in a unrecoverable case
 * and also makes sure always all CPU's errors are examined.
 *
 * Also this detects the case of an machine check event coming from outer
 * space (not detected by any CPUs) In this case some external agent wants
 * us to shut down, so panic too.
 *
 * The other CPUs might still decide to panic if the handler happens
 * in a unrecoverable place, but in this case the system is in a semi-stable
 * state and won't corrupt anything by itself. It's ok to let the others
 * continue for a bit first.
 *
 * All the spin loops have timeouts; when a timeout happens a CPU
 * typically elects itself to be Monarch.
 */
static void mce_reign(void)
{
	int cpu;
	struct mce *m = NULL;
	int global_worst = 0;
	char *msg = NULL;
	char *nmsg = NULL;

	/*
	 * This CPU is the Monarch and the other CPUs have run
	 * through their handlers.
	 * Grade the severity of the errors of all the CPUs.
	 */
	for_each_possible_cpu(cpu) {
		int severity = mce_severity(&per_cpu(mces_seen, cpu), tolerant,
					    &nmsg);
		if (severity > global_worst) {
			msg = nmsg;
			global_worst = severity;
			m = &per_cpu(mces_seen, cpu);
		}
	}

	/*
	 * Cannot recover? Panic here then.
	 * This dumps all the mces in the log buffer and stops the
	 * other CPUs.
	 */
	if (m && global_worst >= MCE_PANIC_SEVERITY && tolerant < 3)
558
		mce_panic("Fatal Machine check", m, msg);
559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721

	/*
	 * For UC somewhere we let the CPU who detects it handle it.
	 * Also must let continue the others, otherwise the handling
	 * CPU could deadlock on a lock.
	 */

	/*
	 * No machine check event found. Must be some external
	 * source or one CPU is hung. Panic.
	 */
	if (!m && tolerant < 3)
		mce_panic("Machine check from unknown source", NULL, NULL);

	/*
	 * Now clear all the mces_seen so that they don't reappear on
	 * the next mce.
	 */
	for_each_possible_cpu(cpu)
		memset(&per_cpu(mces_seen, cpu), 0, sizeof(struct mce));
}

static atomic_t global_nwo;

/*
 * Start of Monarch synchronization. This waits until all CPUs have
 * entered the exception handler and then determines if any of them
 * saw a fatal event that requires panic. Then it executes them
 * in the entry order.
 * TBD double check parallel CPU hotunplug
 */
static int mce_start(int no_way_out, int *order)
{
	int nwo;
	int cpus = num_online_cpus();
	u64 timeout = (u64)monarch_timeout * NSEC_PER_USEC;

	if (!timeout) {
		*order = -1;
		return no_way_out;
	}

	atomic_add(no_way_out, &global_nwo);

	/*
	 * Wait for everyone.
	 */
	while (atomic_read(&mce_callin) != cpus) {
		if (mce_timed_out(&timeout)) {
			atomic_set(&global_nwo, 0);
			*order = -1;
			return no_way_out;
		}
		ndelay(SPINUNIT);
	}

	/*
	 * Cache the global no_way_out state.
	 */
	nwo = atomic_read(&global_nwo);

	/*
	 * Monarch starts executing now, the others wait.
	 */
	if (*order == 1) {
		atomic_set(&mce_executing, 1);
		return nwo;
	}

	/*
	 * Now start the scanning loop one by one
	 * in the original callin order.
	 * This way when there are any shared banks it will
	 * be only seen by one CPU before cleared, avoiding duplicates.
	 */
	while (atomic_read(&mce_executing) < *order) {
		if (mce_timed_out(&timeout)) {
			atomic_set(&global_nwo, 0);
			*order = -1;
			return no_way_out;
		}
		ndelay(SPINUNIT);
	}
	return nwo;
}

/*
 * Synchronize between CPUs after main scanning loop.
 * This invokes the bulk of the Monarch processing.
 */
static int mce_end(int order)
{
	int ret = -1;
	u64 timeout = (u64)monarch_timeout * NSEC_PER_USEC;

	if (!timeout)
		goto reset;
	if (order < 0)
		goto reset;

	/*
	 * Allow others to run.
	 */
	atomic_inc(&mce_executing);

	if (order == 1) {
		/* CHECKME: Can this race with a parallel hotplug? */
		int cpus = num_online_cpus();

		/*
		 * Monarch: Wait for everyone to go through their scanning
		 * loops.
		 */
		while (atomic_read(&mce_executing) <= cpus) {
			if (mce_timed_out(&timeout))
				goto reset;
			ndelay(SPINUNIT);
		}

		mce_reign();
		barrier();
		ret = 0;
	} else {
		/*
		 * Subject: Wait for Monarch to finish.
		 */
		while (atomic_read(&mce_executing) != 0) {
			if (mce_timed_out(&timeout))
				goto reset;
			ndelay(SPINUNIT);
		}

		/*
		 * Don't reset anything. That's done by the Monarch.
		 */
		return 0;
	}

	/*
	 * Reset all global state.
	 */
reset:
	atomic_set(&global_nwo, 0);
	atomic_set(&mce_callin, 0);
	barrier();

	/*
	 * Let others run again.
	 */
	atomic_set(&mce_executing, 0);
	return ret;
}

static void mce_clear_state(unsigned long *toclear)
{
	int i;

	for (i = 0; i < banks; i++) {
		if (test_bit(i, toclear))
			mce_wrmsrl(MSR_IA32_MC0_STATUS+4*i, 0);
	}
}

722 723 724 725 726 727 728
/*
 * The actual machine check handler. This only handles real
 * exceptions when something got corrupted coming in through int 18.
 *
 * This is executed in NMI context not subject to normal locking rules. This
 * implies that most kernel services cannot be safely used. Don't even
 * think about putting a printk in there!
729 730 731 732
 *
 * On Intel systems this is entered on all CPUs in parallel through
 * MCE broadcast. However some CPUs might be broken beyond repair,
 * so be always careful when synchronizing with others.
L
Linus Torvalds 已提交
733
 */
I
Ingo Molnar 已提交
734
void do_machine_check(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
735
{
736
	struct mce m, *final;
L
Linus Torvalds 已提交
737
	int i;
738 739 740 741 742 743 744 745
	int worst = 0;
	int severity;
	/*
	 * Establish sequential order between the CPUs entering the machine
	 * check handler.
	 */
	int order;

746 747 748 749 750 751 752 753 754 755
	/*
	 * If no_way_out gets set, there is no safe way to recover from this
	 * MCE.  If tolerant is cranked up, we'll try anyway.
	 */
	int no_way_out = 0;
	/*
	 * If kill_it gets set, there might be a way to recover from this
	 * error.
	 */
	int kill_it = 0;
756
	DECLARE_BITMAP(toclear, MAX_NR_BANKS);
757
	char *msg = "Unknown";
L
Linus Torvalds 已提交
758

759 760
	atomic_inc(&mce_entry);

761 762
	__get_cpu_var(mce_exception_count)++;

763
	if (notify_die(DIE_NMI, "machine check", regs, error_code,
764
			   18, SIGKILL) == NOTIFY_STOP)
765
		goto out;
766
	if (!banks)
767
		goto out;
L
Linus Torvalds 已提交
768

769
	order = atomic_add_return(1, &mce_callin);
770 771
	mce_setup(&m);

772
	m.mcgstatus = mce_rdmsrl(MSR_IA32_MCG_STATUS);
773
	no_way_out = mce_no_way_out(&m, &msg);
774

775 776 777
	final = &__get_cpu_var(mces_seen);
	*final = m;

L
Linus Torvalds 已提交
778 779
	barrier();

780 781 782 783 784 785
	/*
	 * Go through all the banks in exclusion of the other CPUs.
	 * This way we don't report duplicated events on shared banks
	 * because the first one to see it will clear it.
	 */
	no_way_out = mce_start(no_way_out, &order);
L
Linus Torvalds 已提交
786
	for (i = 0; i < banks; i++) {
787
		__clear_bit(i, toclear);
788
		if (!bank[i])
L
Linus Torvalds 已提交
789
			continue;
790 791

		m.misc = 0;
L
Linus Torvalds 已提交
792 793 794
		m.addr = 0;
		m.bank = i;

795
		m.status = mce_rdmsrl(MSR_IA32_MC0_STATUS + i*4);
L
Linus Torvalds 已提交
796 797 798
		if ((m.status & MCI_STATUS_VAL) == 0)
			continue;

799 800
		/*
		 * Non uncorrected errors are handled by machine_check_poll
801
		 * Leave them alone, unless this panics.
802
		 */
803
		if ((m.status & MCI_STATUS_UC) == 0 && !no_way_out)
804 805 806 807 808 809 810 811 812
			continue;

		/*
		 * Set taint even when machine check was not enabled.
		 */
		add_taint(TAINT_MACHINE_CHECK);

		__set_bit(i, toclear);

L
Linus Torvalds 已提交
813
		if (m.status & MCI_STATUS_EN) {
814 815 816 817 818
			/*
			 * If this error was uncorrectable and there was
			 * an overflow, we're in trouble.  If no overflow,
			 * we might get away with just killing a task.
			 */
819
			if (m.status & MCI_STATUS_UC)
820
				kill_it = 1;
821 822 823 824 825 826
		} else {
			/*
			 * Machine check event was not enabled. Clear, but
			 * ignore.
			 */
			continue;
L
Linus Torvalds 已提交
827 828 829
		}

		if (m.status & MCI_STATUS_MISCV)
830
			m.misc = mce_rdmsrl(MSR_IA32_MC0_MISC + i*4);
L
Linus Torvalds 已提交
831
		if (m.status & MCI_STATUS_ADDRV)
832
			m.addr = mce_rdmsrl(MSR_IA32_MC0_ADDR + i*4);
L
Linus Torvalds 已提交
833

834
		mce_get_rip(&m, regs);
835
		mce_log(&m);
L
Linus Torvalds 已提交
836

837 838 839 840
		severity = mce_severity(&m, tolerant, NULL);
		if (severity > worst) {
			*final = m;
			worst = severity;
L
Linus Torvalds 已提交
841 842 843
		}
	}

844 845 846
	if (!no_way_out)
		mce_clear_state(toclear);

I
Ingo Molnar 已提交
847
	/*
848 849
	 * Do most of the synchronization with other CPUs.
	 * When there's any problem use only local no_way_out state.
I
Ingo Molnar 已提交
850
	 */
851 852
	if (mce_end(order) < 0)
		no_way_out = worst >= MCE_PANIC_SEVERITY;
853 854 855

	/*
	 * If we have decided that we just CAN'T continue, and the user
I
Ingo Molnar 已提交
856
	 * has not set tolerant to an insane level, give up and die.
857 858 859
	 *
	 * This is mainly used in the case when the system doesn't
	 * support MCE broadcasting or it has been disabled.
860 861
	 */
	if (no_way_out && tolerant < 3)
862
		mce_panic("Fatal machine check on current CPU", final, msg);
863 864 865 866 867 868 869 870

	/*
	 * If the error seems to be unrecoverable, something should be
	 * done.  Try to kill as little as possible.  If we can kill just
	 * one task, do that.  If the user has set the tolerance very
	 * high, don't try to do anything at all.
	 */
	if (kill_it && tolerant < 3) {
L
Linus Torvalds 已提交
871 872
		int user_space = 0;

873 874 875 876 877
		/*
		 * If the EIPV bit is set, it means the saved IP is the
		 * instruction which caused the MCE.
		 */
		if (m.mcgstatus & MCG_STATUS_EIPV)
878
			user_space = final->ip && (final->cs & 3);
879 880 881 882 883

		/*
		 * If we know that the error was in user space, send a
		 * SIGBUS.  Otherwise, panic if tolerance is low.
		 *
884
		 * force_sig() takes an awful lot of locks and has a slight
885 886 887
		 * risk of deadlocking.
		 */
		if (user_space) {
888
			force_sig(SIGBUS, current);
889
		} else if (panic_on_oops || tolerant < 2) {
890
			mce_panic("Uncorrected machine check", final, msg);
891
		}
L
Linus Torvalds 已提交
892 893
	}

894 895 896
	/* notify userspace ASAP */
	set_thread_flag(TIF_MCE_NOTIFY);

897 898
	if (worst > 0)
		mce_report_event(regs);
899
	mce_wrmsrl(MSR_IA32_MCG_STATUS, 0);
900
out:
901
	atomic_dec(&mce_entry);
902
	sync_core();
L
Linus Torvalds 已提交
903
}
904
EXPORT_SYMBOL_GPL(do_machine_check);
L
Linus Torvalds 已提交
905

906 907 908
#ifdef CONFIG_X86_MCE_INTEL
/***
 * mce_log_therm_throt_event - Logs the thermal throttling event to mcelog
S
Simon Arlott 已提交
909
 * @cpu: The CPU on which the event occurred.
910 911 912 913 914 915 916 917 918 919
 * @status: Event status information
 *
 * This function should be called by the thermal interrupt after the
 * event has been processed and the decision was made to log the event
 * further.
 *
 * The status parameter will be saved to the 'status' field of 'struct mce'
 * and historically has been the register value of the
 * MSR_IA32_THERMAL_STATUS (Intel) msr.
 */
920
void mce_log_therm_throt_event(__u64 status)
921 922 923
{
	struct mce m;

924
	mce_setup(&m);
925 926 927 928 929 930
	m.bank = MCE_THERMAL_BANK;
	m.status = status;
	mce_log(&m);
}
#endif /* CONFIG_X86_MCE_INTEL */

L
Linus Torvalds 已提交
931
/*
932 933 934
 * Periodic polling timer for "silent" machine check errors.  If the
 * poller finds an MCE, poll 2x faster.  When the poller finds no more
 * errors, poll 2x slower (up to check_interval seconds).
L
Linus Torvalds 已提交
935 936
 */
static int check_interval = 5 * 60; /* 5 minutes */
I
Ingo Molnar 已提交
937

938
static DEFINE_PER_CPU(int, next_interval); /* in jiffies */
939
static DEFINE_PER_CPU(struct timer_list, mce_timer);
L
Linus Torvalds 已提交
940

941
static void mcheck_timer(unsigned long data)
L
Linus Torvalds 已提交
942
{
943
	struct timer_list *t = &per_cpu(mce_timer, data);
944
	int *n;
945 946 947

	WARN_ON(smp_processor_id() != data);

I
Ingo Molnar 已提交
948
	if (mce_available(&current_cpu_data)) {
949 950
		machine_check_poll(MCP_TIMESTAMP,
				&__get_cpu_var(mce_poll_banks));
I
Ingo Molnar 已提交
951
	}
L
Linus Torvalds 已提交
952 953

	/*
954 955
	 * Alert userspace if needed.  If we logged an MCE, reduce the
	 * polling interval, otherwise increase the polling interval.
L
Linus Torvalds 已提交
956
	 */
957
	n = &__get_cpu_var(next_interval);
958
	if (mce_notify_user())
959
		*n = max(*n/2, HZ/100);
960
	else
961
		*n = min(*n*2, (int)round_jiffies_relative(check_interval*HZ));
962

963
	t->expires = jiffies + *n;
964
	add_timer(t);
965 966
}

967 968 969 970 971 972 973
static void mce_do_trigger(struct work_struct *work)
{
	call_usermodehelper(trigger, trigger_argv, NULL, UMH_NO_WAIT);
}

static DECLARE_WORK(mce_trigger_work, mce_do_trigger);

974
/*
975 976 977
 * Notify the user(s) about new machine check events.
 * Can be called from interrupt context, but not from machine check/NMI
 * context.
978 979 980
 */
int mce_notify_user(void)
{
981 982 983
	/* Not more than two messages every minute */
	static DEFINE_RATELIMIT_STATE(ratelimit, 60*HZ, 2);

984
	clear_thread_flag(TIF_MCE_NOTIFY);
I
Ingo Molnar 已提交
985

986 987
	if (test_and_clear_bit(0, &notify_user)) {
		wake_up_interruptible(&mce_wait);
988 989 990 991 992 993 994 995

		/*
		 * There is no risk of missing notifications because
		 * work_pending is always cleared before the function is
		 * executed.
		 */
		if (trigger[0] && !work_pending(&mce_trigger_work))
			schedule_work(&mce_trigger_work);
996

997
		if (__ratelimit(&ratelimit))
998
			printk(KERN_INFO "Machine check events logged\n");
999 1000

		return 1;
L
Linus Torvalds 已提交
1001
	}
1002 1003
	return 0;
}
1004
EXPORT_SYMBOL_GPL(mce_notify_user);
1005

1006
/*
L
Linus Torvalds 已提交
1007 1008
 * Initialize Machine Checks for a CPU.
 */
1009
static int mce_cap_init(void)
L
Linus Torvalds 已提交
1010
{
1011
	unsigned b;
I
Ingo Molnar 已提交
1012
	u64 cap;
L
Linus Torvalds 已提交
1013 1014

	rdmsrl(MSR_IA32_MCG_CAP, cap);
1015 1016

	b = cap & MCG_BANKCNT_MASK;
1017 1018
	printk(KERN_INFO "mce: CPU supports %d MCE banks\n", b);

1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033
	if (b > MAX_NR_BANKS) {
		printk(KERN_WARNING
		       "MCE: Using only %u machine check banks out of %u\n",
			MAX_NR_BANKS, b);
		b = MAX_NR_BANKS;
	}

	/* Don't support asymmetric configurations today */
	WARN_ON(banks != 0 && b != banks);
	banks = b;
	if (!bank) {
		bank = kmalloc(banks * sizeof(u64), GFP_KERNEL);
		if (!bank)
			return -ENOMEM;
		memset(bank, 0xff, banks * sizeof(u64));
L
Linus Torvalds 已提交
1034
	}
1035

1036
	/* Use accurate RIP reporting if available. */
1037
	if ((cap & MCG_EXT_P) && MCG_EXT_CNT(cap) >= 9)
1038
		rip_msr = MSR_IA32_MCG_EIP;
L
Linus Torvalds 已提交
1039

1040 1041 1042
	return 0;
}

1043
static void mce_init(void)
1044
{
I
Ingo Molnar 已提交
1045
	mce_banks_t all_banks;
1046 1047 1048
	u64 cap;
	int i;

1049 1050 1051
	/*
	 * Log the machine checks left over from the previous reset.
	 */
1052
	bitmap_fill(all_banks, MAX_NR_BANKS);
A
Andi Kleen 已提交
1053
	machine_check_poll(MCP_UC|(!mce_bootlog ? MCP_DONTLOG : 0), &all_banks);
L
Linus Torvalds 已提交
1054 1055 1056

	set_in_cr4(X86_CR4_MCE);

1057
	rdmsrl(MSR_IA32_MCG_CAP, cap);
L
Linus Torvalds 已提交
1058 1059 1060 1061
	if (cap & MCG_CTL_P)
		wrmsr(MSR_IA32_MCG_CTL, 0xffffffff, 0xffffffff);

	for (i = 0; i < banks; i++) {
1062 1063
		if (skip_bank_init(i))
			continue;
1064
		wrmsrl(MSR_IA32_MC0_CTL+4*i, bank[i]);
L
Linus Torvalds 已提交
1065
		wrmsrl(MSR_IA32_MC0_STATUS+4*i, 0);
1066
	}
L
Linus Torvalds 已提交
1067 1068 1069
}

/* Add per CPU specific workarounds here */
1070
static void mce_cpu_quirks(struct cpuinfo_x86 *c)
1071
{
L
Linus Torvalds 已提交
1072
	/* This should be disabled by the BIOS, but isn't always */
1073
	if (c->x86_vendor == X86_VENDOR_AMD) {
I
Ingo Molnar 已提交
1074 1075 1076 1077 1078 1079
		if (c->x86 == 15 && banks > 4) {
			/*
			 * disable GART TBL walk error reporting, which
			 * trips off incorrectly with the IOMMU & 3ware
			 * & Cerberus:
			 */
1080
			clear_bit(10, (unsigned long *)&bank[4]);
I
Ingo Molnar 已提交
1081 1082 1083 1084 1085 1086
		}
		if (c->x86 <= 17 && mce_bootlog < 0) {
			/*
			 * Lots of broken BIOS around that don't clear them
			 * by default and leave crap in there. Don't log:
			 */
1087
			mce_bootlog = 0;
I
Ingo Molnar 已提交
1088
		}
1089 1090 1091 1092 1093 1094
		/*
		 * Various K7s with broken bank 0 around. Always disable
		 * by default.
		 */
		 if (c->x86 == 6)
			bank[0] = 0;
L
Linus Torvalds 已提交
1095
	}
1096

1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108
	if (c->x86_vendor == X86_VENDOR_INTEL) {
		/*
		 * SDM documents that on family 6 bank 0 should not be written
		 * because it aliases to another special BIOS controlled
		 * register.
		 * But it's not aliased anymore on model 0x1a+
		 * Don't ignore bank 0 completely because there could be a
		 * valid event later, merely don't write CTL0.
		 */

		if (c->x86 == 6 && c->x86_model < 0x1A)
			__set_bit(0, &dont_init_banks);
1109 1110 1111 1112 1113 1114 1115 1116

		/*
		 * All newer Intel systems support MCE broadcasting. Enable
		 * synchronization with a one second timeout.
		 */
		if ((c->x86 > 6 || (c->x86 == 6 && c->x86_model >= 0xe)) &&
			monarch_timeout < 0)
			monarch_timeout = USEC_PER_SEC;
1117
	}
1118 1119
	if (monarch_timeout < 0)
		monarch_timeout = 0;
1120
}
L
Linus Torvalds 已提交
1121

1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136
static void __cpuinit mce_ancient_init(struct cpuinfo_x86 *c)
{
	if (c->x86 != 5)
		return;
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		if (mce_p5_enabled())
			intel_p5_mcheck_init(c);
		break;
	case X86_VENDOR_CENTAUR:
		winchip_mcheck_init(c);
		break;
	}
}

1137
static void mce_cpu_features(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1138 1139 1140 1141 1142
{
	switch (c->x86_vendor) {
	case X86_VENDOR_INTEL:
		mce_intel_feature_init(c);
		break;
1143 1144 1145
	case X86_VENDOR_AMD:
		mce_amd_feature_init(c);
		break;
L
Linus Torvalds 已提交
1146 1147 1148 1149 1150
	default:
		break;
	}
}

1151 1152 1153
static void mce_init_timer(void)
{
	struct timer_list *t = &__get_cpu_var(mce_timer);
1154
	int *n = &__get_cpu_var(next_interval);
1155

1156 1157
	*n = check_interval * HZ;
	if (!*n)
1158 1159
		return;
	setup_timer(t, mcheck_timer, smp_processor_id());
1160
	t->expires = round_jiffies(jiffies + *n);
1161 1162 1163
	add_timer(t);
}

1164
/*
L
Linus Torvalds 已提交
1165
 * Called for each booted CPU to set up machine checks.
I
Ingo Molnar 已提交
1166
 * Must be called with preempt off:
L
Linus Torvalds 已提交
1167
 */
1168
void __cpuinit mcheck_init(struct cpuinfo_x86 *c)
L
Linus Torvalds 已提交
1169
{
1170 1171 1172 1173 1174
	if (mce_disabled)
		return;

	mce_ancient_init(c);

1175
	if (!mce_available(c))
L
Linus Torvalds 已提交
1176 1177
		return;

1178
	if (mce_cap_init() < 0) {
1179
		mce_disabled = 1;
1180 1181 1182 1183
		return;
	}
	mce_cpu_quirks(c);

1184 1185
	machine_check_vector = do_machine_check;

1186
	mce_init();
L
Linus Torvalds 已提交
1187
	mce_cpu_features(c);
1188
	mce_init_timer();
L
Linus Torvalds 已提交
1189 1190 1191 1192 1193 1194
}

/*
 * Character device to read and clear the MCE log.
 */

T
Tim Hockin 已提交
1195
static DEFINE_SPINLOCK(mce_state_lock);
I
Ingo Molnar 已提交
1196 1197
static int		open_count;		/* #times opened */
static int		open_exclu;		/* already open exclusive? */
T
Tim Hockin 已提交
1198 1199 1200 1201 1202 1203 1204

static int mce_open(struct inode *inode, struct file *file)
{
	spin_lock(&mce_state_lock);

	if (open_exclu || (open_count && (file->f_flags & O_EXCL))) {
		spin_unlock(&mce_state_lock);
I
Ingo Molnar 已提交
1205

T
Tim Hockin 已提交
1206 1207 1208 1209 1210 1211 1212 1213 1214
		return -EBUSY;
	}

	if (file->f_flags & O_EXCL)
		open_exclu = 1;
	open_count++;

	spin_unlock(&mce_state_lock);

1215
	return nonseekable_open(inode, file);
T
Tim Hockin 已提交
1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229
}

static int mce_release(struct inode *inode, struct file *file)
{
	spin_lock(&mce_state_lock);

	open_count--;
	open_exclu = 0;

	spin_unlock(&mce_state_lock);

	return 0;
}

1230 1231
static void collect_tscs(void *data)
{
L
Linus Torvalds 已提交
1232
	unsigned long *cpu_tsc = (unsigned long *)data;
1233

L
Linus Torvalds 已提交
1234
	rdtscll(cpu_tsc[smp_processor_id()]);
1235
}
L
Linus Torvalds 已提交
1236

I
Ingo Molnar 已提交
1237 1238
static DEFINE_MUTEX(mce_read_mutex);

1239 1240
static ssize_t mce_read(struct file *filp, char __user *ubuf, size_t usize,
			loff_t *off)
L
Linus Torvalds 已提交
1241
{
I
Ingo Molnar 已提交
1242
	char __user *buf = ubuf;
1243
	unsigned long *cpu_tsc;
1244
	unsigned prev, next;
L
Linus Torvalds 已提交
1245 1246
	int i, err;

1247
	cpu_tsc = kmalloc(nr_cpu_ids * sizeof(long), GFP_KERNEL);
1248 1249 1250
	if (!cpu_tsc)
		return -ENOMEM;

1251
	mutex_lock(&mce_read_mutex);
L
Linus Torvalds 已提交
1252 1253 1254
	next = rcu_dereference(mcelog.next);

	/* Only supports full reads right now */
1255
	if (*off != 0 || usize < MCE_LOG_LEN*sizeof(struct mce)) {
1256
		mutex_unlock(&mce_read_mutex);
1257
		kfree(cpu_tsc);
I
Ingo Molnar 已提交
1258

L
Linus Torvalds 已提交
1259 1260 1261 1262
		return -EINVAL;
	}

	err = 0;
1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274
	prev = 0;
	do {
		for (i = prev; i < next; i++) {
			unsigned long start = jiffies;

			while (!mcelog.entry[i].finished) {
				if (time_after_eq(jiffies, start + 2)) {
					memset(mcelog.entry + i, 0,
					       sizeof(struct mce));
					goto timeout;
				}
				cpu_relax();
1275
			}
1276 1277 1278 1279 1280 1281
			smp_rmb();
			err |= copy_to_user(buf, mcelog.entry + i,
					    sizeof(struct mce));
			buf += sizeof(struct mce);
timeout:
			;
1282
		}
L
Linus Torvalds 已提交
1283

1284 1285 1286 1287 1288
		memset(mcelog.entry + prev, 0,
		       (next - prev) * sizeof(struct mce));
		prev = next;
		next = cmpxchg(&mcelog.next, prev, 0);
	} while (next != prev);
L
Linus Torvalds 已提交
1289

1290
	synchronize_sched();
L
Linus Torvalds 已提交
1291

1292 1293 1294 1295
	/*
	 * Collect entries that were still getting written before the
	 * synchronize.
	 */
1296
	on_each_cpu(collect_tscs, cpu_tsc, 1);
I
Ingo Molnar 已提交
1297

1298 1299 1300 1301 1302
	for (i = next; i < MCE_LOG_LEN; i++) {
		if (mcelog.entry[i].finished &&
		    mcelog.entry[i].tsc < cpu_tsc[mcelog.entry[i].cpu]) {
			err |= copy_to_user(buf, mcelog.entry+i,
					    sizeof(struct mce));
L
Linus Torvalds 已提交
1303 1304 1305 1306
			smp_rmb();
			buf += sizeof(struct mce);
			memset(&mcelog.entry[i], 0, sizeof(struct mce));
		}
1307
	}
1308
	mutex_unlock(&mce_read_mutex);
1309
	kfree(cpu_tsc);
I
Ingo Molnar 已提交
1310

1311
	return err ? -EFAULT : buf - ubuf;
L
Linus Torvalds 已提交
1312 1313
}

1314 1315 1316 1317 1318 1319 1320 1321
static unsigned int mce_poll(struct file *file, poll_table *wait)
{
	poll_wait(file, &mce_wait, wait);
	if (rcu_dereference(mcelog.next))
		return POLLIN | POLLRDNORM;
	return 0;
}

1322
static long mce_ioctl(struct file *f, unsigned int cmd, unsigned long arg)
L
Linus Torvalds 已提交
1323 1324
{
	int __user *p = (int __user *)arg;
1325

L
Linus Torvalds 已提交
1326
	if (!capable(CAP_SYS_ADMIN))
1327
		return -EPERM;
I
Ingo Molnar 已提交
1328

L
Linus Torvalds 已提交
1329
	switch (cmd) {
1330
	case MCE_GET_RECORD_LEN:
L
Linus Torvalds 已提交
1331 1332
		return put_user(sizeof(struct mce), p);
	case MCE_GET_LOG_LEN:
1333
		return put_user(MCE_LOG_LEN, p);
L
Linus Torvalds 已提交
1334 1335
	case MCE_GETCLEAR_FLAGS: {
		unsigned flags;
1336 1337

		do {
L
Linus Torvalds 已提交
1338
			flags = mcelog.flags;
1339
		} while (cmpxchg(&mcelog.flags, flags, 0) != flags);
I
Ingo Molnar 已提交
1340

1341
		return put_user(flags, p);
L
Linus Torvalds 已提交
1342 1343
	}
	default:
1344 1345
		return -ENOTTY;
	}
L
Linus Torvalds 已提交
1346 1347
}

1348
/* Modified in mce-inject.c, so not static or const */
1349
struct file_operations mce_chrdev_ops = {
I
Ingo Molnar 已提交
1350 1351 1352 1353 1354
	.open			= mce_open,
	.release		= mce_release,
	.read			= mce_read,
	.poll			= mce_poll,
	.unlocked_ioctl		= mce_ioctl,
L
Linus Torvalds 已提交
1355
};
1356
EXPORT_SYMBOL_GPL(mce_chrdev_ops);
L
Linus Torvalds 已提交
1357 1358 1359 1360 1361 1362 1363

static struct miscdevice mce_log_device = {
	MISC_MCELOG_MINOR,
	"mcelog",
	&mce_chrdev_ops,
};

H
Hidetoshi Seto 已提交
1364 1365
/*
 * mce=off disables machine check
1366 1367 1368
 * mce=TOLERANCELEVEL[,monarchtimeout] (number, see above)
 *	monarchtimeout is how long to wait for other CPUs on machine
 *	check, or 0 to not wait
H
Hidetoshi Seto 已提交
1369 1370 1371
 * mce=bootlog Log MCEs from before booting. Disabled by default on AMD.
 * mce=nobootlog Don't log MCEs from before booting.
 */
L
Linus Torvalds 已提交
1372 1373
static int __init mcheck_enable(char *str)
{
1374 1375 1376 1377
	if (*str == 0)
		enable_p5_mce();
	if (*str == '=')
		str++;
L
Linus Torvalds 已提交
1378
	if (!strcmp(str, "off"))
1379
		mce_disabled = 1;
H
Hidetoshi Seto 已提交
1380 1381
	else if (!strcmp(str, "bootlog") || !strcmp(str, "nobootlog"))
		mce_bootlog = (str[0] == 'b');
1382
	else if (isdigit(str[0])) {
1383
		get_option(&str, &tolerant);
1384 1385 1386 1387 1388
		if (*str == ',') {
			++str;
			get_option(&str, &monarch_timeout);
		}
	} else {
1389
		printk(KERN_INFO "mce argument %s ignored. Please use /sys\n",
H
Hidetoshi Seto 已提交
1390 1391 1392
		       str);
		return 0;
	}
1393
	return 1;
L
Linus Torvalds 已提交
1394
}
1395
__setup("mce", mcheck_enable);
L
Linus Torvalds 已提交
1396

1397
/*
L
Linus Torvalds 已提交
1398
 * Sysfs support
1399
 */
L
Linus Torvalds 已提交
1400

1401 1402 1403 1404 1405 1406 1407 1408
/*
 * Disable machine checks on suspend and shutdown. We can't really handle
 * them later.
 */
static int mce_disable(void)
{
	int i;

1409 1410 1411 1412
	for (i = 0; i < banks; i++) {
		if (!skip_bank_init(i))
			wrmsrl(MSR_IA32_MC0_CTL + i*4, 0);
	}
1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425
	return 0;
}

static int mce_suspend(struct sys_device *dev, pm_message_t state)
{
	return mce_disable();
}

static int mce_shutdown(struct sys_device *dev)
{
	return mce_disable();
}

I
Ingo Molnar 已提交
1426 1427 1428 1429 1430
/*
 * On resume clear all MCE state. Don't want to see leftovers from the BIOS.
 * Only one CPU is active at this time, the others get re-added later using
 * CPU hotplug:
 */
L
Linus Torvalds 已提交
1431 1432
static int mce_resume(struct sys_device *dev)
{
1433
	mce_init();
1434
	mce_cpu_features(&current_cpu_data);
I
Ingo Molnar 已提交
1435

L
Linus Torvalds 已提交
1436 1437 1438
	return 0;
}

1439 1440 1441 1442
static void mce_cpu_restart(void *data)
{
	del_timer_sync(&__get_cpu_var(mce_timer));
	if (mce_available(&current_cpu_data))
1443
		mce_init();
1444 1445 1446
	mce_init_timer();
}

L
Linus Torvalds 已提交
1447
/* Reinit MCEs after user configuration changes */
1448 1449
static void mce_restart(void)
{
1450
	on_each_cpu(mce_cpu_restart, NULL, 1);
L
Linus Torvalds 已提交
1451 1452 1453
}

static struct sysdev_class mce_sysclass = {
I
Ingo Molnar 已提交
1454 1455 1456 1457
	.suspend	= mce_suspend,
	.shutdown	= mce_shutdown,
	.resume		= mce_resume,
	.name		= "machinecheck",
L
Linus Torvalds 已提交
1458 1459
};

I
Ingo Molnar 已提交
1460
DEFINE_PER_CPU(struct sys_device, mce_dev);
I
Ingo Molnar 已提交
1461 1462 1463

__cpuinitdata
void (*threshold_cpu_callback)(unsigned long action, unsigned int cpu);
L
Linus Torvalds 已提交
1464

1465 1466 1467 1468 1469 1470
static struct sysdev_attribute *bank_attrs;

static ssize_t show_bank(struct sys_device *s, struct sysdev_attribute *attr,
			 char *buf)
{
	u64 b = bank[attr - bank_attrs];
I
Ingo Molnar 已提交
1471

1472
	return sprintf(buf, "%llx\n", b);
1473 1474 1475
}

static ssize_t set_bank(struct sys_device *s, struct sysdev_attribute *attr,
H
Hidetoshi Seto 已提交
1476
			const char *buf, size_t size)
1477
{
H
Hidetoshi Seto 已提交
1478
	u64 new;
I
Ingo Molnar 已提交
1479

H
Hidetoshi Seto 已提交
1480
	if (strict_strtoull(buf, 0, &new) < 0)
1481
		return -EINVAL;
I
Ingo Molnar 已提交
1482

1483 1484
	bank[attr - bank_attrs] = new;
	mce_restart();
I
Ingo Molnar 已提交
1485

H
Hidetoshi Seto 已提交
1486
	return size;
1487
}
1488

I
Ingo Molnar 已提交
1489 1490
static ssize_t
show_trigger(struct sys_device *s, struct sysdev_attribute *attr, char *buf)
1491 1492 1493 1494 1495 1496
{
	strcpy(buf, trigger);
	strcat(buf, "\n");
	return strlen(trigger) + 1;
}

1497
static ssize_t set_trigger(struct sys_device *s, struct sysdev_attribute *attr,
I
Ingo Molnar 已提交
1498
				const char *buf, size_t siz)
1499 1500 1501
{
	char *p;
	int len;
I
Ingo Molnar 已提交
1502

1503 1504 1505 1506
	strncpy(trigger, buf, sizeof(trigger));
	trigger[sizeof(trigger)-1] = 0;
	len = strlen(trigger);
	p = strchr(trigger, '\n');
I
Ingo Molnar 已提交
1507 1508 1509 1510

	if (*p)
		*p = 0;

1511 1512 1513
	return len;
}

1514 1515 1516 1517 1518 1519 1520 1521 1522
static ssize_t store_int_with_restart(struct sys_device *s,
				      struct sysdev_attribute *attr,
				      const char *buf, size_t size)
{
	ssize_t ret = sysdev_store_int(s, attr, buf, size);
	mce_restart();
	return ret;
}

1523
static SYSDEV_ATTR(trigger, 0644, show_trigger, set_trigger);
1524
static SYSDEV_INT_ATTR(tolerant, 0644, tolerant);
1525
static SYSDEV_INT_ATTR(monarch_timeout, 0644, monarch_timeout);
I
Ingo Molnar 已提交
1526

1527 1528 1529 1530 1531
static struct sysdev_ext_attribute attr_check_interval = {
	_SYSDEV_ATTR(check_interval, 0644, sysdev_show_int,
		     store_int_with_restart),
	&check_interval
};
I
Ingo Molnar 已提交
1532

I
Ingo Molnar 已提交
1533
static struct sysdev_attribute *mce_attrs[] = {
1534
	&attr_tolerant.attr, &attr_check_interval.attr, &attr_trigger,
1535
	&attr_monarch_timeout.attr,
1536 1537
	NULL
};
L
Linus Torvalds 已提交
1538

I
Ingo Molnar 已提交
1539
static cpumask_var_t mce_dev_initialized;
1540

I
Ingo Molnar 已提交
1541
/* Per cpu sysdev init. All of the cpus still share the same ctrl bank: */
1542
static __cpuinit int mce_create_device(unsigned int cpu)
L
Linus Torvalds 已提交
1543 1544
{
	int err;
1545
	int i;
1546

A
Andreas Herrmann 已提交
1547
	if (!mce_available(&boot_cpu_data))
1548 1549
		return -EIO;

I
Ingo Molnar 已提交
1550 1551 1552
	memset(&per_cpu(mce_dev, cpu).kobj, 0, sizeof(struct kobject));
	per_cpu(mce_dev, cpu).id	= cpu;
	per_cpu(mce_dev, cpu).cls	= &mce_sysclass;
1553

I
Ingo Molnar 已提交
1554
	err = sysdev_register(&per_cpu(mce_dev, cpu));
1555 1556 1557
	if (err)
		return err;

I
Ingo Molnar 已提交
1558 1559
	for (i = 0; mce_attrs[i]; i++) {
		err = sysdev_create_file(&per_cpu(mce_dev, cpu), mce_attrs[i]);
1560 1561 1562
		if (err)
			goto error;
	}
1563
	for (i = 0; i < banks; i++) {
I
Ingo Molnar 已提交
1564
		err = sysdev_create_file(&per_cpu(mce_dev, cpu),
1565 1566 1567 1568
					&bank_attrs[i]);
		if (err)
			goto error2;
	}
I
Ingo Molnar 已提交
1569
	cpumask_set_cpu(cpu, mce_dev_initialized);
1570

1571
	return 0;
1572
error2:
I
Ingo Molnar 已提交
1573 1574
	while (--i >= 0)
		sysdev_remove_file(&per_cpu(mce_dev, cpu), &bank_attrs[i]);
1575
error:
I
Ingo Molnar 已提交
1576 1577 1578 1579
	while (--i >= 0)
		sysdev_remove_file(&per_cpu(mce_dev, cpu), mce_attrs[i]);

	sysdev_unregister(&per_cpu(mce_dev, cpu));
1580

1581 1582 1583
	return err;
}

1584
static __cpuinit void mce_remove_device(unsigned int cpu)
1585
{
1586 1587
	int i;

I
Ingo Molnar 已提交
1588
	if (!cpumask_test_cpu(cpu, mce_dev_initialized))
1589 1590
		return;

I
Ingo Molnar 已提交
1591 1592 1593
	for (i = 0; mce_attrs[i]; i++)
		sysdev_remove_file(&per_cpu(mce_dev, cpu), mce_attrs[i]);

1594
	for (i = 0; i < banks; i++)
I
Ingo Molnar 已提交
1595 1596 1597 1598
		sysdev_remove_file(&per_cpu(mce_dev, cpu), &bank_attrs[i]);

	sysdev_unregister(&per_cpu(mce_dev, cpu));
	cpumask_clear_cpu(cpu, mce_dev_initialized);
1599 1600
}

1601
/* Make sure there are no machine checks on offlined CPUs. */
1602
static void mce_disable_cpu(void *h)
1603
{
A
Andi Kleen 已提交
1604
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
1605
	int i;
1606 1607 1608

	if (!mce_available(&current_cpu_data))
		return;
A
Andi Kleen 已提交
1609 1610
	if (!(action & CPU_TASKS_FROZEN))
		cmci_clear();
1611 1612 1613 1614
	for (i = 0; i < banks; i++) {
		if (!skip_bank_init(i))
			wrmsrl(MSR_IA32_MC0_CTL + i*4, 0);
	}
1615 1616
}

1617
static void mce_reenable_cpu(void *h)
1618
{
A
Andi Kleen 已提交
1619
	unsigned long action = *(unsigned long *)h;
I
Ingo Molnar 已提交
1620
	int i;
1621 1622 1623

	if (!mce_available(&current_cpu_data))
		return;
I
Ingo Molnar 已提交
1624

A
Andi Kleen 已提交
1625 1626
	if (!(action & CPU_TASKS_FROZEN))
		cmci_reenable();
1627 1628 1629 1630
	for (i = 0; i < banks; i++) {
		if (!skip_bank_init(i))
			wrmsrl(MSR_IA32_MC0_CTL + i*4, bank[i]);
	}
1631 1632
}

1633
/* Get notified when a cpu comes on/off. Be hotplug friendly. */
I
Ingo Molnar 已提交
1634 1635
static int __cpuinit
mce_cpu_callback(struct notifier_block *nfb, unsigned long action, void *hcpu)
1636 1637
{
	unsigned int cpu = (unsigned long)hcpu;
1638
	struct timer_list *t = &per_cpu(mce_timer, cpu);
1639 1640

	switch (action) {
1641 1642 1643
	case CPU_ONLINE:
	case CPU_ONLINE_FROZEN:
		mce_create_device(cpu);
1644 1645
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
1646 1647
		break;
	case CPU_DEAD:
1648
	case CPU_DEAD_FROZEN:
1649 1650
		if (threshold_cpu_callback)
			threshold_cpu_callback(action, cpu);
1651 1652
		mce_remove_device(cpu);
		break;
1653 1654 1655
	case CPU_DOWN_PREPARE:
	case CPU_DOWN_PREPARE_FROZEN:
		del_timer_sync(t);
A
Andi Kleen 已提交
1656
		smp_call_function_single(cpu, mce_disable_cpu, &action, 1);
1657 1658 1659
		break;
	case CPU_DOWN_FAILED:
	case CPU_DOWN_FAILED_FROZEN:
1660 1661
		t->expires = round_jiffies(jiffies +
						__get_cpu_var(next_interval));
1662
		add_timer_on(t, cpu);
A
Andi Kleen 已提交
1663 1664 1665 1666 1667
		smp_call_function_single(cpu, mce_reenable_cpu, &action, 1);
		break;
	case CPU_POST_DEAD:
		/* intentionally ignoring frozen here */
		cmci_rediscover(cpu);
1668
		break;
1669
	}
1670
	return NOTIFY_OK;
1671 1672
}

1673
static struct notifier_block mce_cpu_notifier __cpuinitdata = {
1674 1675 1676
	.notifier_call = mce_cpu_callback,
};

1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687
static __init int mce_init_banks(void)
{
	int i;

	bank_attrs = kzalloc(sizeof(struct sysdev_attribute) * banks,
				GFP_KERNEL);
	if (!bank_attrs)
		return -ENOMEM;

	for (i = 0; i < banks; i++) {
		struct sysdev_attribute *a = &bank_attrs[i];
I
Ingo Molnar 已提交
1688 1689

		a->attr.name	= kasprintf(GFP_KERNEL, "bank%d", i);
1690 1691
		if (!a->attr.name)
			goto nomem;
I
Ingo Molnar 已提交
1692 1693 1694 1695

		a->attr.mode	= 0644;
		a->show		= show_bank;
		a->store	= set_bank;
1696 1697 1698 1699 1700 1701 1702 1703
	}
	return 0;

nomem:
	while (--i >= 0)
		kfree(bank_attrs[i].attr.name);
	kfree(bank_attrs);
	bank_attrs = NULL;
I
Ingo Molnar 已提交
1704

1705 1706 1707
	return -ENOMEM;
}

1708 1709 1710 1711 1712
static __init int mce_init_device(void)
{
	int err;
	int i = 0;

L
Linus Torvalds 已提交
1713 1714
	if (!mce_available(&boot_cpu_data))
		return -EIO;
1715

I
Ingo Molnar 已提交
1716
	alloc_cpumask_var(&mce_dev_initialized, GFP_KERNEL);
1717

1718 1719 1720 1721
	err = mce_init_banks();
	if (err)
		return err;

L
Linus Torvalds 已提交
1722
	err = sysdev_class_register(&mce_sysclass);
1723 1724
	if (err)
		return err;
1725 1726

	for_each_online_cpu(i) {
1727 1728 1729
		err = mce_create_device(i);
		if (err)
			return err;
1730 1731
	}

1732
	register_hotcpu_notifier(&mce_cpu_notifier);
L
Linus Torvalds 已提交
1733
	misc_register(&mce_log_device);
I
Ingo Molnar 已提交
1734

L
Linus Torvalds 已提交
1735 1736
	return err;
}
1737

L
Linus Torvalds 已提交
1738
device_initcall(mce_init_device);
I
Ingo Molnar 已提交
1739

1740
#else /* CONFIG_X86_OLD_MCE: */
I
Ingo Molnar 已提交
1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772

int nr_mce_banks;
EXPORT_SYMBOL_GPL(nr_mce_banks);	/* non-fatal.o */

/* This has to be run for each processor */
void mcheck_init(struct cpuinfo_x86 *c)
{
	if (mce_disabled == 1)
		return;

	switch (c->x86_vendor) {
	case X86_VENDOR_AMD:
		amd_mcheck_init(c);
		break;

	case X86_VENDOR_INTEL:
		if (c->x86 == 5)
			intel_p5_mcheck_init(c);
		if (c->x86 == 6)
			intel_p6_mcheck_init(c);
		if (c->x86 == 15)
			intel_p4_mcheck_init(c);
		break;

	case X86_VENDOR_CENTAUR:
		if (c->x86 == 5)
			winchip_mcheck_init(c);
		break;

	default:
		break;
	}
1773
	printk(KERN_INFO "mce: CPU supports %d MCE banks\n", nr_mce_banks);
I
Ingo Molnar 已提交
1774 1775 1776 1777 1778 1779 1780 1781 1782 1783
}

static int __init mcheck_enable(char *str)
{
	mce_disabled = -1;
	return 1;
}

__setup("mce", mcheck_enable);

1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794
#endif /* CONFIG_X86_OLD_MCE */

/*
 * Old style boot options parsing. Only for compatibility.
 */
static int __init mcheck_disable(char *str)
{
	mce_disabled = 1;
	return 1;
}
__setup("nomce", mcheck_disable);