Loading...
1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * watchdog_dev.c
4 *
5 * (c) Copyright 2008-2011 Alan Cox <alan@lxorguk.ukuu.org.uk>,
6 * All Rights Reserved.
7 *
8 * (c) Copyright 2008-2011 Wim Van Sebroeck <wim@iguana.be>.
9 *
10 * (c) Copyright 2021 Hewlett Packard Enterprise Development LP.
11 *
12 * This source code is part of the generic code that can be used
13 * by all the watchdog timer drivers.
14 *
15 * This part of the generic code takes care of the following
16 * misc device: /dev/watchdog.
17 *
18 * Based on source code of the following authors:
19 * Matt Domsch <Matt_Domsch@dell.com>,
20 * Rob Radez <rob@osinvestor.com>,
21 * Rusty Lynch <rusty@linux.co.intel.com>
22 * Satyam Sharma <satyam@infradead.org>
23 * Randy Dunlap <randy.dunlap@oracle.com>
24 *
25 * Neither Alan Cox, CymruNet Ltd., Wim Van Sebroeck nor Iguana vzw.
26 * admit liability nor provide warranty for any of this software.
27 * This material is provided "AS-IS" and at no charge.
28 */
29
30#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
31
32#include <linux/cdev.h> /* For character device */
33#include <linux/errno.h> /* For the -ENODEV/... values */
34#include <linux/fs.h> /* For file operations */
35#include <linux/init.h> /* For __init/__exit/... */
36#include <linux/hrtimer.h> /* For hrtimers */
37#include <linux/kernel.h> /* For printk/panic/... */
38#include <linux/kthread.h> /* For kthread_work */
39#include <linux/miscdevice.h> /* For handling misc devices */
40#include <linux/module.h> /* For module stuff/... */
41#include <linux/mutex.h> /* For mutexes */
42#include <linux/slab.h> /* For memory functions */
43#include <linux/types.h> /* For standard types (like size_t) */
44#include <linux/watchdog.h> /* For watchdog specific items */
45#include <linux/uaccess.h> /* For copy_to_user/put_user/... */
46
47#include "watchdog_core.h"
48#include "watchdog_pretimeout.h"
49
50#include <trace/events/watchdog.h>
51
52/* the dev_t structure to store the dynamically allocated watchdog devices */
53static dev_t watchdog_devt;
54/* Reference to watchdog device behind /dev/watchdog */
55static struct watchdog_core_data *old_wd_data;
56
57static struct kthread_worker *watchdog_kworker;
58
59static bool handle_boot_enabled =
60 IS_ENABLED(CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED);
61
62static unsigned open_timeout = CONFIG_WATCHDOG_OPEN_TIMEOUT;
63
64static bool watchdog_past_open_deadline(struct watchdog_core_data *data)
65{
66 return ktime_after(ktime_get(), data->open_deadline);
67}
68
69static void watchdog_set_open_deadline(struct watchdog_core_data *data)
70{
71 data->open_deadline = open_timeout ?
72 ktime_get() + ktime_set(open_timeout, 0) : KTIME_MAX;
73}
74
75static inline bool watchdog_need_worker(struct watchdog_device *wdd)
76{
77 /* All variables in milli-seconds */
78 unsigned int hm = wdd->max_hw_heartbeat_ms;
79 unsigned int t = wdd->timeout * 1000;
80
81 /*
82 * A worker to generate heartbeat requests is needed if all of the
83 * following conditions are true.
84 * - Userspace activated the watchdog.
85 * - The driver provided a value for the maximum hardware timeout, and
86 * thus is aware that the framework supports generating heartbeat
87 * requests.
88 * - Userspace requests a longer timeout than the hardware can handle.
89 *
90 * Alternatively, if userspace has not opened the watchdog
91 * device, we take care of feeding the watchdog if it is
92 * running.
93 */
94 return (hm && watchdog_active(wdd) && t > hm) ||
95 (t && !watchdog_active(wdd) && watchdog_hw_running(wdd));
96}
97
98static ktime_t watchdog_next_keepalive(struct watchdog_device *wdd)
99{
100 struct watchdog_core_data *wd_data = wdd->wd_data;
101 unsigned int timeout_ms = wdd->timeout * 1000;
102 ktime_t keepalive_interval;
103 ktime_t last_heartbeat, latest_heartbeat;
104 ktime_t virt_timeout;
105 unsigned int hw_heartbeat_ms;
106
107 if (watchdog_active(wdd))
108 virt_timeout = ktime_add(wd_data->last_keepalive,
109 ms_to_ktime(timeout_ms));
110 else
111 virt_timeout = wd_data->open_deadline;
112
113 hw_heartbeat_ms = min_not_zero(timeout_ms, wdd->max_hw_heartbeat_ms);
114 keepalive_interval = ms_to_ktime(hw_heartbeat_ms / 2);
115
116 /*
117 * To ensure that the watchdog times out wdd->timeout seconds
118 * after the most recent ping from userspace, the last
119 * worker ping has to come in hw_heartbeat_ms before this timeout.
120 */
121 last_heartbeat = ktime_sub(virt_timeout, ms_to_ktime(hw_heartbeat_ms));
122 latest_heartbeat = ktime_sub(last_heartbeat, ktime_get());
123 if (ktime_before(latest_heartbeat, keepalive_interval))
124 return latest_heartbeat;
125 return keepalive_interval;
126}
127
128static inline void watchdog_update_worker(struct watchdog_device *wdd)
129{
130 struct watchdog_core_data *wd_data = wdd->wd_data;
131
132 if (watchdog_need_worker(wdd)) {
133 ktime_t t = watchdog_next_keepalive(wdd);
134
135 if (t > 0)
136 hrtimer_start(&wd_data->timer, t,
137 HRTIMER_MODE_REL_HARD);
138 } else {
139 hrtimer_cancel(&wd_data->timer);
140 }
141}
142
143static int __watchdog_ping(struct watchdog_device *wdd)
144{
145 struct watchdog_core_data *wd_data = wdd->wd_data;
146 ktime_t earliest_keepalive, now;
147 int err;
148
149 earliest_keepalive = ktime_add(wd_data->last_hw_keepalive,
150 ms_to_ktime(wdd->min_hw_heartbeat_ms));
151 now = ktime_get();
152
153 if (ktime_after(earliest_keepalive, now)) {
154 hrtimer_start(&wd_data->timer,
155 ktime_sub(earliest_keepalive, now),
156 HRTIMER_MODE_REL_HARD);
157 return 0;
158 }
159
160 wd_data->last_hw_keepalive = now;
161
162 if (wdd->ops->ping) {
163 err = wdd->ops->ping(wdd); /* ping the watchdog */
164 trace_watchdog_ping(wdd, err);
165 } else {
166 err = wdd->ops->start(wdd); /* restart watchdog */
167 trace_watchdog_start(wdd, err);
168 }
169
170 if (err == 0)
171 watchdog_hrtimer_pretimeout_start(wdd);
172
173 watchdog_update_worker(wdd);
174
175 return err;
176}
177
178/*
179 * watchdog_ping - ping the watchdog
180 * @wdd: The watchdog device to ping
181 *
182 * If the watchdog has no own ping operation then it needs to be
183 * restarted via the start operation. This wrapper function does
184 * exactly that.
185 * We only ping when the watchdog device is running.
186 * The caller must hold wd_data->lock.
187 *
188 * Return: 0 on success, error otherwise.
189 */
190static int watchdog_ping(struct watchdog_device *wdd)
191{
192 struct watchdog_core_data *wd_data = wdd->wd_data;
193
194 if (!watchdog_active(wdd) && !watchdog_hw_running(wdd))
195 return 0;
196
197 set_bit(_WDOG_KEEPALIVE, &wd_data->status);
198
199 wd_data->last_keepalive = ktime_get();
200 return __watchdog_ping(wdd);
201}
202
203static bool watchdog_worker_should_ping(struct watchdog_core_data *wd_data)
204{
205 struct watchdog_device *wdd = wd_data->wdd;
206
207 if (!wdd)
208 return false;
209
210 if (watchdog_active(wdd))
211 return true;
212
213 return watchdog_hw_running(wdd) && !watchdog_past_open_deadline(wd_data);
214}
215
216static void watchdog_ping_work(struct kthread_work *work)
217{
218 struct watchdog_core_data *wd_data;
219
220 wd_data = container_of(work, struct watchdog_core_data, work);
221
222 mutex_lock(&wd_data->lock);
223 if (watchdog_worker_should_ping(wd_data))
224 __watchdog_ping(wd_data->wdd);
225 mutex_unlock(&wd_data->lock);
226}
227
228static enum hrtimer_restart watchdog_timer_expired(struct hrtimer *timer)
229{
230 struct watchdog_core_data *wd_data;
231
232 wd_data = container_of(timer, struct watchdog_core_data, timer);
233
234 kthread_queue_work(watchdog_kworker, &wd_data->work);
235 return HRTIMER_NORESTART;
236}
237
238/*
239 * watchdog_start - wrapper to start the watchdog
240 * @wdd: The watchdog device to start
241 *
242 * Start the watchdog if it is not active and mark it active.
243 * The caller must hold wd_data->lock.
244 *
245 * Return: 0 on success or a negative errno code for failure.
246 */
247static int watchdog_start(struct watchdog_device *wdd)
248{
249 struct watchdog_core_data *wd_data = wdd->wd_data;
250 ktime_t started_at;
251 int err;
252
253 if (watchdog_active(wdd))
254 return 0;
255
256 set_bit(_WDOG_KEEPALIVE, &wd_data->status);
257
258 started_at = ktime_get();
259 if (watchdog_hw_running(wdd) && wdd->ops->ping) {
260 err = __watchdog_ping(wdd);
261 if (err == 0) {
262 set_bit(WDOG_ACTIVE, &wdd->status);
263 watchdog_hrtimer_pretimeout_start(wdd);
264 }
265 } else {
266 err = wdd->ops->start(wdd);
267 trace_watchdog_start(wdd, err);
268 if (err == 0) {
269 set_bit(WDOG_ACTIVE, &wdd->status);
270 wd_data->last_keepalive = started_at;
271 wd_data->last_hw_keepalive = started_at;
272 watchdog_update_worker(wdd);
273 watchdog_hrtimer_pretimeout_start(wdd);
274 }
275 }
276
277 return err;
278}
279
280/*
281 * watchdog_stop - wrapper to stop the watchdog
282 * @wdd: The watchdog device to stop
283 *
284 * Stop the watchdog if it is still active and unmark it active.
285 * If the 'nowayout' feature was set, the watchdog cannot be stopped.
286 * The caller must hold wd_data->lock.
287 *
288 * Return: 0 on success or a negative errno code for failure.
289 */
290static int watchdog_stop(struct watchdog_device *wdd)
291{
292 int err = 0;
293
294 if (!watchdog_active(wdd))
295 return 0;
296
297 if (test_bit(WDOG_NO_WAY_OUT, &wdd->status)) {
298 pr_info("watchdog%d: nowayout prevents watchdog being stopped!\n",
299 wdd->id);
300 return -EBUSY;
301 }
302
303 if (wdd->ops->stop) {
304 clear_bit(WDOG_HW_RUNNING, &wdd->status);
305 err = wdd->ops->stop(wdd);
306 trace_watchdog_stop(wdd, err);
307 } else {
308 set_bit(WDOG_HW_RUNNING, &wdd->status);
309 }
310
311 if (err == 0) {
312 clear_bit(WDOG_ACTIVE, &wdd->status);
313 watchdog_update_worker(wdd);
314 watchdog_hrtimer_pretimeout_stop(wdd);
315 }
316
317 return err;
318}
319
320/*
321 * watchdog_get_status - wrapper to get the watchdog status
322 * @wdd: The watchdog device to get the status from
323 *
324 * Get the watchdog's status flags.
325 * The caller must hold wd_data->lock.
326 *
327 * Return: watchdog's status flags.
328 */
329static unsigned int watchdog_get_status(struct watchdog_device *wdd)
330{
331 struct watchdog_core_data *wd_data = wdd->wd_data;
332 unsigned int status;
333
334 if (wdd->ops->status)
335 status = wdd->ops->status(wdd);
336 else
337 status = wdd->bootstatus & (WDIOF_CARDRESET |
338 WDIOF_OVERHEAT |
339 WDIOF_FANFAULT |
340 WDIOF_EXTERN1 |
341 WDIOF_EXTERN2 |
342 WDIOF_POWERUNDER |
343 WDIOF_POWEROVER);
344
345 if (test_bit(_WDOG_ALLOW_RELEASE, &wd_data->status))
346 status |= WDIOF_MAGICCLOSE;
347
348 if (test_and_clear_bit(_WDOG_KEEPALIVE, &wd_data->status))
349 status |= WDIOF_KEEPALIVEPING;
350
351 if (IS_ENABLED(CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT))
352 status |= WDIOF_PRETIMEOUT;
353
354 return status;
355}
356
357/*
358 * watchdog_set_timeout - set the watchdog timer timeout
359 * @wdd: The watchdog device to set the timeout for
360 * @timeout: Timeout to set in seconds
361 *
362 * The caller must hold wd_data->lock.
363 *
364 * Return: 0 if successful, error otherwise.
365 */
366static int watchdog_set_timeout(struct watchdog_device *wdd,
367 unsigned int timeout)
368{
369 int err = 0;
370
371 if (!(wdd->info->options & WDIOF_SETTIMEOUT))
372 return -EOPNOTSUPP;
373
374 if (watchdog_timeout_invalid(wdd, timeout))
375 return -EINVAL;
376
377 if (wdd->ops->set_timeout) {
378 err = wdd->ops->set_timeout(wdd, timeout);
379 trace_watchdog_set_timeout(wdd, timeout, err);
380 } else {
381 wdd->timeout = timeout;
382 /* Disable pretimeout if it doesn't fit the new timeout */
383 if (wdd->pretimeout >= wdd->timeout)
384 wdd->pretimeout = 0;
385 }
386
387 watchdog_update_worker(wdd);
388
389 return err;
390}
391
392/*
393 * watchdog_set_pretimeout - set the watchdog timer pretimeout
394 * @wdd: The watchdog device to set the timeout for
395 * @timeout: pretimeout to set in seconds
396 *
397 * Return: 0 if successful, error otherwise.
398 */
399static int watchdog_set_pretimeout(struct watchdog_device *wdd,
400 unsigned int timeout)
401{
402 int err = 0;
403
404 if (!watchdog_have_pretimeout(wdd))
405 return -EOPNOTSUPP;
406
407 if (watchdog_pretimeout_invalid(wdd, timeout))
408 return -EINVAL;
409
410 if (wdd->ops->set_pretimeout && (wdd->info->options & WDIOF_PRETIMEOUT))
411 err = wdd->ops->set_pretimeout(wdd, timeout);
412 else
413 wdd->pretimeout = timeout;
414
415 return err;
416}
417
418/*
419 * watchdog_get_timeleft - wrapper to get the time left before a reboot
420 * @wdd: The watchdog device to get the remaining time from
421 * @timeleft: The time that's left
422 *
423 * Get the time before a watchdog will reboot (if not pinged).
424 * The caller must hold wd_data->lock.
425 *
426 * Return: 0 if successful, error otherwise.
427 */
428static int watchdog_get_timeleft(struct watchdog_device *wdd,
429 unsigned int *timeleft)
430{
431 *timeleft = 0;
432
433 if (!wdd->ops->get_timeleft)
434 return -EOPNOTSUPP;
435
436 *timeleft = wdd->ops->get_timeleft(wdd);
437
438 return 0;
439}
440
441#ifdef CONFIG_WATCHDOG_SYSFS
442static ssize_t nowayout_show(struct device *dev, struct device_attribute *attr,
443 char *buf)
444{
445 struct watchdog_device *wdd = dev_get_drvdata(dev);
446
447 return sysfs_emit(buf, "%d\n", !!test_bit(WDOG_NO_WAY_OUT,
448 &wdd->status));
449}
450
451static ssize_t nowayout_store(struct device *dev, struct device_attribute *attr,
452 const char *buf, size_t len)
453{
454 struct watchdog_device *wdd = dev_get_drvdata(dev);
455 unsigned int value;
456 int ret;
457
458 ret = kstrtouint(buf, 0, &value);
459 if (ret)
460 return ret;
461 if (value > 1)
462 return -EINVAL;
463 /* nowayout cannot be disabled once set */
464 if (test_bit(WDOG_NO_WAY_OUT, &wdd->status) && !value)
465 return -EPERM;
466 watchdog_set_nowayout(wdd, value);
467 return len;
468}
469static DEVICE_ATTR_RW(nowayout);
470
471static ssize_t status_show(struct device *dev, struct device_attribute *attr,
472 char *buf)
473{
474 struct watchdog_device *wdd = dev_get_drvdata(dev);
475 struct watchdog_core_data *wd_data = wdd->wd_data;
476 unsigned int status;
477
478 mutex_lock(&wd_data->lock);
479 status = watchdog_get_status(wdd);
480 mutex_unlock(&wd_data->lock);
481
482 return sysfs_emit(buf, "0x%x\n", status);
483}
484static DEVICE_ATTR_RO(status);
485
486static ssize_t bootstatus_show(struct device *dev,
487 struct device_attribute *attr, char *buf)
488{
489 struct watchdog_device *wdd = dev_get_drvdata(dev);
490
491 return sysfs_emit(buf, "%u\n", wdd->bootstatus);
492}
493static DEVICE_ATTR_RO(bootstatus);
494
495static ssize_t timeleft_show(struct device *dev, struct device_attribute *attr,
496 char *buf)
497{
498 struct watchdog_device *wdd = dev_get_drvdata(dev);
499 struct watchdog_core_data *wd_data = wdd->wd_data;
500 ssize_t status;
501 unsigned int val;
502
503 mutex_lock(&wd_data->lock);
504 status = watchdog_get_timeleft(wdd, &val);
505 mutex_unlock(&wd_data->lock);
506 if (!status)
507 status = sysfs_emit(buf, "%u\n", val);
508
509 return status;
510}
511static DEVICE_ATTR_RO(timeleft);
512
513static ssize_t timeout_show(struct device *dev, struct device_attribute *attr,
514 char *buf)
515{
516 struct watchdog_device *wdd = dev_get_drvdata(dev);
517
518 return sysfs_emit(buf, "%u\n", wdd->timeout);
519}
520static DEVICE_ATTR_RO(timeout);
521
522static ssize_t min_timeout_show(struct device *dev,
523 struct device_attribute *attr, char *buf)
524{
525 struct watchdog_device *wdd = dev_get_drvdata(dev);
526
527 return sysfs_emit(buf, "%u\n", wdd->min_timeout);
528}
529static DEVICE_ATTR_RO(min_timeout);
530
531static ssize_t max_timeout_show(struct device *dev,
532 struct device_attribute *attr, char *buf)
533{
534 struct watchdog_device *wdd = dev_get_drvdata(dev);
535
536 return sysfs_emit(buf, "%u\n", wdd->max_timeout);
537}
538static DEVICE_ATTR_RO(max_timeout);
539
540static ssize_t pretimeout_show(struct device *dev,
541 struct device_attribute *attr, char *buf)
542{
543 struct watchdog_device *wdd = dev_get_drvdata(dev);
544
545 return sysfs_emit(buf, "%u\n", wdd->pretimeout);
546}
547static DEVICE_ATTR_RO(pretimeout);
548
549static ssize_t identity_show(struct device *dev, struct device_attribute *attr,
550 char *buf)
551{
552 struct watchdog_device *wdd = dev_get_drvdata(dev);
553
554 return sysfs_emit(buf, "%s\n", wdd->info->identity);
555}
556static DEVICE_ATTR_RO(identity);
557
558static ssize_t state_show(struct device *dev, struct device_attribute *attr,
559 char *buf)
560{
561 struct watchdog_device *wdd = dev_get_drvdata(dev);
562
563 if (watchdog_active(wdd))
564 return sysfs_emit(buf, "active\n");
565
566 return sysfs_emit(buf, "inactive\n");
567}
568static DEVICE_ATTR_RO(state);
569
570static ssize_t pretimeout_available_governors_show(struct device *dev,
571 struct device_attribute *attr, char *buf)
572{
573 return watchdog_pretimeout_available_governors_get(buf);
574}
575static DEVICE_ATTR_RO(pretimeout_available_governors);
576
577static ssize_t pretimeout_governor_show(struct device *dev,
578 struct device_attribute *attr,
579 char *buf)
580{
581 struct watchdog_device *wdd = dev_get_drvdata(dev);
582
583 return watchdog_pretimeout_governor_get(wdd, buf);
584}
585
586static ssize_t pretimeout_governor_store(struct device *dev,
587 struct device_attribute *attr,
588 const char *buf, size_t count)
589{
590 struct watchdog_device *wdd = dev_get_drvdata(dev);
591 int ret = watchdog_pretimeout_governor_set(wdd, buf);
592
593 if (!ret)
594 ret = count;
595
596 return ret;
597}
598static DEVICE_ATTR_RW(pretimeout_governor);
599
600static umode_t wdt_is_visible(struct kobject *kobj, struct attribute *attr,
601 int n)
602{
603 struct device *dev = kobj_to_dev(kobj);
604 struct watchdog_device *wdd = dev_get_drvdata(dev);
605 umode_t mode = attr->mode;
606
607 if (attr == &dev_attr_timeleft.attr && !wdd->ops->get_timeleft)
608 mode = 0;
609 else if (attr == &dev_attr_pretimeout.attr && !watchdog_have_pretimeout(wdd))
610 mode = 0;
611 else if ((attr == &dev_attr_pretimeout_governor.attr ||
612 attr == &dev_attr_pretimeout_available_governors.attr) &&
613 (!watchdog_have_pretimeout(wdd) || !IS_ENABLED(CONFIG_WATCHDOG_PRETIMEOUT_GOV)))
614 mode = 0;
615
616 return mode;
617}
618static struct attribute *wdt_attrs[] = {
619 &dev_attr_state.attr,
620 &dev_attr_identity.attr,
621 &dev_attr_timeout.attr,
622 &dev_attr_min_timeout.attr,
623 &dev_attr_max_timeout.attr,
624 &dev_attr_pretimeout.attr,
625 &dev_attr_timeleft.attr,
626 &dev_attr_bootstatus.attr,
627 &dev_attr_status.attr,
628 &dev_attr_nowayout.attr,
629 &dev_attr_pretimeout_governor.attr,
630 &dev_attr_pretimeout_available_governors.attr,
631 NULL,
632};
633
634static const struct attribute_group wdt_group = {
635 .attrs = wdt_attrs,
636 .is_visible = wdt_is_visible,
637};
638__ATTRIBUTE_GROUPS(wdt);
639#else
640#define wdt_groups NULL
641#endif
642
643/*
644 * watchdog_ioctl_op - call the watchdog drivers ioctl op if defined
645 * @wdd: The watchdog device to do the ioctl on
646 * @cmd: Watchdog command
647 * @arg: Argument pointer
648 *
649 * The caller must hold wd_data->lock.
650 *
651 * Return: 0 if successful, error otherwise.
652 */
653static int watchdog_ioctl_op(struct watchdog_device *wdd, unsigned int cmd,
654 unsigned long arg)
655{
656 if (!wdd->ops->ioctl)
657 return -ENOIOCTLCMD;
658
659 return wdd->ops->ioctl(wdd, cmd, arg);
660}
661
662/*
663 * watchdog_write - writes to the watchdog
664 * @file: File from VFS
665 * @data: User address of data
666 * @len: Length of data
667 * @ppos: Pointer to the file offset
668 *
669 * A write to a watchdog device is defined as a keepalive ping.
670 * Writing the magic 'V' sequence allows the next close to turn
671 * off the watchdog (if 'nowayout' is not set).
672 *
673 * Return: @len if successful, error otherwise.
674 */
675static ssize_t watchdog_write(struct file *file, const char __user *data,
676 size_t len, loff_t *ppos)
677{
678 struct watchdog_core_data *wd_data = file->private_data;
679 struct watchdog_device *wdd;
680 int err;
681 size_t i;
682 char c;
683
684 if (len == 0)
685 return 0;
686
687 /*
688 * Note: just in case someone wrote the magic character
689 * five months ago...
690 */
691 clear_bit(_WDOG_ALLOW_RELEASE, &wd_data->status);
692
693 /* scan to see whether or not we got the magic character */
694 for (i = 0; i != len; i++) {
695 if (get_user(c, data + i))
696 return -EFAULT;
697 if (c == 'V')
698 set_bit(_WDOG_ALLOW_RELEASE, &wd_data->status);
699 }
700
701 /* someone wrote to us, so we send the watchdog a keepalive ping */
702
703 err = -ENODEV;
704 mutex_lock(&wd_data->lock);
705 wdd = wd_data->wdd;
706 if (wdd)
707 err = watchdog_ping(wdd);
708 mutex_unlock(&wd_data->lock);
709
710 if (err < 0)
711 return err;
712
713 return len;
714}
715
716/*
717 * watchdog_ioctl - handle the different ioctl's for the watchdog device
718 * @file: File handle to the device
719 * @cmd: Watchdog command
720 * @arg: Argument pointer
721 *
722 * The watchdog API defines a common set of functions for all watchdogs
723 * according to their available features.
724 *
725 * Return: 0 if successful, error otherwise.
726 */
727
728static long watchdog_ioctl(struct file *file, unsigned int cmd,
729 unsigned long arg)
730{
731 struct watchdog_core_data *wd_data = file->private_data;
732 void __user *argp = (void __user *)arg;
733 struct watchdog_device *wdd;
734 int __user *p = argp;
735 unsigned int val;
736 int err;
737
738 mutex_lock(&wd_data->lock);
739
740 wdd = wd_data->wdd;
741 if (!wdd) {
742 err = -ENODEV;
743 goto out_ioctl;
744 }
745
746 err = watchdog_ioctl_op(wdd, cmd, arg);
747 if (err != -ENOIOCTLCMD)
748 goto out_ioctl;
749
750 switch (cmd) {
751 case WDIOC_GETSUPPORT:
752 err = copy_to_user(argp, wdd->info,
753 sizeof(struct watchdog_info)) ? -EFAULT : 0;
754 break;
755 case WDIOC_GETSTATUS:
756 val = watchdog_get_status(wdd);
757 err = put_user(val, p);
758 break;
759 case WDIOC_GETBOOTSTATUS:
760 err = put_user(wdd->bootstatus, p);
761 break;
762 case WDIOC_SETOPTIONS:
763 if (get_user(val, p)) {
764 err = -EFAULT;
765 break;
766 }
767 if (val & WDIOS_DISABLECARD) {
768 err = watchdog_stop(wdd);
769 if (err < 0)
770 break;
771 }
772 if (val & WDIOS_ENABLECARD)
773 err = watchdog_start(wdd);
774 break;
775 case WDIOC_KEEPALIVE:
776 if (!(wdd->info->options & WDIOF_KEEPALIVEPING)) {
777 err = -EOPNOTSUPP;
778 break;
779 }
780 err = watchdog_ping(wdd);
781 break;
782 case WDIOC_SETTIMEOUT:
783 if (get_user(val, p)) {
784 err = -EFAULT;
785 break;
786 }
787 err = watchdog_set_timeout(wdd, val);
788 if (err < 0)
789 break;
790 /* If the watchdog is active then we send a keepalive ping
791 * to make sure that the watchdog keep's running (and if
792 * possible that it takes the new timeout) */
793 err = watchdog_ping(wdd);
794 if (err < 0)
795 break;
796 fallthrough;
797 case WDIOC_GETTIMEOUT:
798 /* timeout == 0 means that we don't know the timeout */
799 if (wdd->timeout == 0) {
800 err = -EOPNOTSUPP;
801 break;
802 }
803 err = put_user(wdd->timeout, p);
804 break;
805 case WDIOC_GETTIMELEFT:
806 err = watchdog_get_timeleft(wdd, &val);
807 if (err < 0)
808 break;
809 err = put_user(val, p);
810 break;
811 case WDIOC_SETPRETIMEOUT:
812 if (get_user(val, p)) {
813 err = -EFAULT;
814 break;
815 }
816 err = watchdog_set_pretimeout(wdd, val);
817 break;
818 case WDIOC_GETPRETIMEOUT:
819 err = put_user(wdd->pretimeout, p);
820 break;
821 default:
822 err = -ENOTTY;
823 break;
824 }
825
826out_ioctl:
827 mutex_unlock(&wd_data->lock);
828 return err;
829}
830
831/*
832 * watchdog_open - open the /dev/watchdog* devices
833 * @inode: Inode of device
834 * @file: File handle to device
835 *
836 * When the /dev/watchdog* device gets opened, we start the watchdog.
837 * Watch out: the /dev/watchdog device is single open, so we make sure
838 * it can only be opened once.
839 *
840 * Return: 0 if successful, error otherwise.
841 */
842static int watchdog_open(struct inode *inode, struct file *file)
843{
844 struct watchdog_core_data *wd_data;
845 struct watchdog_device *wdd;
846 bool hw_running;
847 int err;
848
849 /* Get the corresponding watchdog device */
850 if (imajor(inode) == MISC_MAJOR)
851 wd_data = old_wd_data;
852 else
853 wd_data = container_of(inode->i_cdev, struct watchdog_core_data,
854 cdev);
855
856 /* the watchdog is single open! */
857 if (test_and_set_bit(_WDOG_DEV_OPEN, &wd_data->status))
858 return -EBUSY;
859
860 wdd = wd_data->wdd;
861
862 /*
863 * If the /dev/watchdog device is open, we don't want the module
864 * to be unloaded.
865 */
866 hw_running = watchdog_hw_running(wdd);
867 if (!hw_running && !try_module_get(wdd->ops->owner)) {
868 err = -EBUSY;
869 goto out_clear;
870 }
871
872 err = watchdog_start(wdd);
873 if (err < 0)
874 goto out_mod;
875
876 file->private_data = wd_data;
877
878 if (!hw_running)
879 get_device(&wd_data->dev);
880
881 /*
882 * open_timeout only applies for the first open from
883 * userspace. Set open_deadline to infinity so that the kernel
884 * will take care of an always-running hardware watchdog in
885 * case the device gets magic-closed or WDIOS_DISABLECARD is
886 * applied.
887 */
888 wd_data->open_deadline = KTIME_MAX;
889
890 /* dev/watchdog is a virtual (and thus non-seekable) filesystem */
891 return stream_open(inode, file);
892
893out_mod:
894 module_put(wd_data->wdd->ops->owner);
895out_clear:
896 clear_bit(_WDOG_DEV_OPEN, &wd_data->status);
897 return err;
898}
899
900static void watchdog_core_data_release(struct device *dev)
901{
902 struct watchdog_core_data *wd_data;
903
904 wd_data = container_of(dev, struct watchdog_core_data, dev);
905
906 kfree(wd_data);
907}
908
909/*
910 * watchdog_release - release the watchdog device
911 * @inode: Inode of device
912 * @file: File handle to device
913 *
914 * This is the code for when /dev/watchdog gets closed. We will only
915 * stop the watchdog when we have received the magic char (and nowayout
916 * was not set), else the watchdog will keep running.
917 *
918 * Always returns 0.
919 */
920static int watchdog_release(struct inode *inode, struct file *file)
921{
922 struct watchdog_core_data *wd_data = file->private_data;
923 struct watchdog_device *wdd;
924 int err = -EBUSY;
925 bool running;
926
927 mutex_lock(&wd_data->lock);
928
929 wdd = wd_data->wdd;
930 if (!wdd)
931 goto done;
932
933 /*
934 * We only stop the watchdog if we received the magic character
935 * or if WDIOF_MAGICCLOSE is not set. If nowayout was set then
936 * watchdog_stop will fail.
937 */
938 if (!watchdog_active(wdd))
939 err = 0;
940 else if (test_and_clear_bit(_WDOG_ALLOW_RELEASE, &wd_data->status) ||
941 !(wdd->info->options & WDIOF_MAGICCLOSE))
942 err = watchdog_stop(wdd);
943
944 /* If the watchdog was not stopped, send a keepalive ping */
945 if (err < 0) {
946 pr_crit("watchdog%d: watchdog did not stop!\n", wdd->id);
947 watchdog_ping(wdd);
948 }
949
950 watchdog_update_worker(wdd);
951
952 /* make sure that /dev/watchdog can be re-opened */
953 clear_bit(_WDOG_DEV_OPEN, &wd_data->status);
954
955done:
956 running = wdd && watchdog_hw_running(wdd);
957 mutex_unlock(&wd_data->lock);
958 /*
959 * Allow the owner module to be unloaded again unless the watchdog
960 * is still running. If the watchdog is still running, it can not
961 * be stopped, and its driver must not be unloaded.
962 */
963 if (!running) {
964 module_put(wd_data->cdev.owner);
965 put_device(&wd_data->dev);
966 }
967 return 0;
968}
969
970static const struct file_operations watchdog_fops = {
971 .owner = THIS_MODULE,
972 .write = watchdog_write,
973 .unlocked_ioctl = watchdog_ioctl,
974 .compat_ioctl = compat_ptr_ioctl,
975 .open = watchdog_open,
976 .release = watchdog_release,
977};
978
979static struct miscdevice watchdog_miscdev = {
980 .minor = WATCHDOG_MINOR,
981 .name = "watchdog",
982 .fops = &watchdog_fops,
983};
984
985static struct class watchdog_class = {
986 .name = "watchdog",
987 .owner = THIS_MODULE,
988 .dev_groups = wdt_groups,
989};
990
991/*
992 * watchdog_cdev_register - register watchdog character device
993 * @wdd: Watchdog device
994 *
995 * Register a watchdog character device including handling the legacy
996 * /dev/watchdog node. /dev/watchdog is actually a miscdevice and
997 * thus we set it up like that.
998 *
999 * Return: 0 if successful, error otherwise.
1000 */
1001static int watchdog_cdev_register(struct watchdog_device *wdd)
1002{
1003 struct watchdog_core_data *wd_data;
1004 int err;
1005
1006 wd_data = kzalloc(sizeof(struct watchdog_core_data), GFP_KERNEL);
1007 if (!wd_data)
1008 return -ENOMEM;
1009 mutex_init(&wd_data->lock);
1010
1011 wd_data->wdd = wdd;
1012 wdd->wd_data = wd_data;
1013
1014 if (IS_ERR_OR_NULL(watchdog_kworker)) {
1015 kfree(wd_data);
1016 return -ENODEV;
1017 }
1018
1019 device_initialize(&wd_data->dev);
1020 wd_data->dev.devt = MKDEV(MAJOR(watchdog_devt), wdd->id);
1021 wd_data->dev.class = &watchdog_class;
1022 wd_data->dev.parent = wdd->parent;
1023 wd_data->dev.groups = wdd->groups;
1024 wd_data->dev.release = watchdog_core_data_release;
1025 dev_set_drvdata(&wd_data->dev, wdd);
1026 err = dev_set_name(&wd_data->dev, "watchdog%d", wdd->id);
1027 if (err) {
1028 put_device(&wd_data->dev);
1029 return err;
1030 }
1031
1032 kthread_init_work(&wd_data->work, watchdog_ping_work);
1033 hrtimer_init(&wd_data->timer, CLOCK_MONOTONIC, HRTIMER_MODE_REL_HARD);
1034 wd_data->timer.function = watchdog_timer_expired;
1035 watchdog_hrtimer_pretimeout_init(wdd);
1036
1037 if (wdd->id == 0) {
1038 old_wd_data = wd_data;
1039 watchdog_miscdev.parent = wdd->parent;
1040 err = misc_register(&watchdog_miscdev);
1041 if (err != 0) {
1042 pr_err("%s: cannot register miscdev on minor=%d (err=%d).\n",
1043 wdd->info->identity, WATCHDOG_MINOR, err);
1044 if (err == -EBUSY)
1045 pr_err("%s: a legacy watchdog module is probably present.\n",
1046 wdd->info->identity);
1047 old_wd_data = NULL;
1048 put_device(&wd_data->dev);
1049 return err;
1050 }
1051 }
1052
1053 /* Fill in the data structures */
1054 cdev_init(&wd_data->cdev, &watchdog_fops);
1055
1056 /* Add the device */
1057 err = cdev_device_add(&wd_data->cdev, &wd_data->dev);
1058 if (err) {
1059 pr_err("watchdog%d unable to add device %d:%d\n",
1060 wdd->id, MAJOR(watchdog_devt), wdd->id);
1061 if (wdd->id == 0) {
1062 misc_deregister(&watchdog_miscdev);
1063 old_wd_data = NULL;
1064 put_device(&wd_data->dev);
1065 }
1066 return err;
1067 }
1068
1069 wd_data->cdev.owner = wdd->ops->owner;
1070
1071 /* Record time of most recent heartbeat as 'just before now'. */
1072 wd_data->last_hw_keepalive = ktime_sub(ktime_get(), 1);
1073 watchdog_set_open_deadline(wd_data);
1074
1075 /*
1076 * If the watchdog is running, prevent its driver from being unloaded,
1077 * and schedule an immediate ping.
1078 */
1079 if (watchdog_hw_running(wdd)) {
1080 __module_get(wdd->ops->owner);
1081 get_device(&wd_data->dev);
1082 if (handle_boot_enabled)
1083 hrtimer_start(&wd_data->timer, 0,
1084 HRTIMER_MODE_REL_HARD);
1085 else
1086 pr_info("watchdog%d running and kernel based pre-userspace handler disabled\n",
1087 wdd->id);
1088 }
1089
1090 return 0;
1091}
1092
1093/*
1094 * watchdog_cdev_unregister - unregister watchdog character device
1095 * @wdd: Watchdog device
1096 *
1097 * Unregister watchdog character device and if needed the legacy
1098 * /dev/watchdog device.
1099 */
1100static void watchdog_cdev_unregister(struct watchdog_device *wdd)
1101{
1102 struct watchdog_core_data *wd_data = wdd->wd_data;
1103
1104 cdev_device_del(&wd_data->cdev, &wd_data->dev);
1105 if (wdd->id == 0) {
1106 misc_deregister(&watchdog_miscdev);
1107 old_wd_data = NULL;
1108 }
1109
1110 if (watchdog_active(wdd) &&
1111 test_bit(WDOG_STOP_ON_UNREGISTER, &wdd->status)) {
1112 watchdog_stop(wdd);
1113 }
1114
1115 watchdog_hrtimer_pretimeout_stop(wdd);
1116
1117 mutex_lock(&wd_data->lock);
1118 wd_data->wdd = NULL;
1119 wdd->wd_data = NULL;
1120 mutex_unlock(&wd_data->lock);
1121
1122 hrtimer_cancel(&wd_data->timer);
1123 kthread_cancel_work_sync(&wd_data->work);
1124
1125 put_device(&wd_data->dev);
1126}
1127
1128/**
1129 * watchdog_dev_register - register a watchdog device
1130 * @wdd: Watchdog device
1131 *
1132 * Register a watchdog device including handling the legacy
1133 * /dev/watchdog node. /dev/watchdog is actually a miscdevice and
1134 * thus we set it up like that.
1135 *
1136 * Return: 0 if successful, error otherwise.
1137 */
1138int watchdog_dev_register(struct watchdog_device *wdd)
1139{
1140 int ret;
1141
1142 ret = watchdog_cdev_register(wdd);
1143 if (ret)
1144 return ret;
1145
1146 ret = watchdog_register_pretimeout(wdd);
1147 if (ret)
1148 watchdog_cdev_unregister(wdd);
1149
1150 return ret;
1151}
1152
1153/**
1154 * watchdog_dev_unregister - unregister a watchdog device
1155 * @wdd: watchdog device
1156 *
1157 * Unregister watchdog device and if needed the legacy
1158 * /dev/watchdog device.
1159 */
1160void watchdog_dev_unregister(struct watchdog_device *wdd)
1161{
1162 watchdog_unregister_pretimeout(wdd);
1163 watchdog_cdev_unregister(wdd);
1164}
1165
1166/**
1167 * watchdog_set_last_hw_keepalive - set last HW keepalive time for watchdog
1168 * @wdd: Watchdog device
1169 * @last_ping_ms: Time since last HW heartbeat
1170 *
1171 * Adjusts the last known HW keepalive time for a watchdog timer.
1172 * This is needed if the watchdog is already running when the probe
1173 * function is called, and it can't be pinged immediately. This
1174 * function must be called immediately after watchdog registration,
1175 * and min_hw_heartbeat_ms must be set for this to be useful.
1176 *
1177 * Return: 0 if successful, error otherwise.
1178 */
1179int watchdog_set_last_hw_keepalive(struct watchdog_device *wdd,
1180 unsigned int last_ping_ms)
1181{
1182 struct watchdog_core_data *wd_data;
1183 ktime_t now;
1184
1185 if (!wdd)
1186 return -EINVAL;
1187
1188 wd_data = wdd->wd_data;
1189
1190 now = ktime_get();
1191
1192 wd_data->last_hw_keepalive = ktime_sub(now, ms_to_ktime(last_ping_ms));
1193
1194 if (watchdog_hw_running(wdd) && handle_boot_enabled)
1195 return __watchdog_ping(wdd);
1196
1197 return 0;
1198}
1199EXPORT_SYMBOL_GPL(watchdog_set_last_hw_keepalive);
1200
1201/**
1202 * watchdog_dev_init - init dev part of watchdog core
1203 *
1204 * Allocate a range of chardev nodes to use for watchdog devices.
1205 *
1206 * Return: 0 if successful, error otherwise.
1207 */
1208int __init watchdog_dev_init(void)
1209{
1210 int err;
1211
1212 watchdog_kworker = kthread_create_worker(0, "watchdogd");
1213 if (IS_ERR(watchdog_kworker)) {
1214 pr_err("Failed to create watchdog kworker\n");
1215 return PTR_ERR(watchdog_kworker);
1216 }
1217 sched_set_fifo(watchdog_kworker->task);
1218
1219 err = class_register(&watchdog_class);
1220 if (err < 0) {
1221 pr_err("couldn't register class\n");
1222 goto err_register;
1223 }
1224
1225 err = alloc_chrdev_region(&watchdog_devt, 0, MAX_DOGS, "watchdog");
1226 if (err < 0) {
1227 pr_err("watchdog: unable to allocate char dev region\n");
1228 goto err_alloc;
1229 }
1230
1231 return 0;
1232
1233err_alloc:
1234 class_unregister(&watchdog_class);
1235err_register:
1236 kthread_destroy_worker(watchdog_kworker);
1237 return err;
1238}
1239
1240/**
1241 * watchdog_dev_exit - exit dev part of watchdog core
1242 *
1243 * Release the range of chardev nodes used for watchdog devices.
1244 */
1245void __exit watchdog_dev_exit(void)
1246{
1247 unregister_chrdev_region(watchdog_devt, MAX_DOGS);
1248 class_unregister(&watchdog_class);
1249 kthread_destroy_worker(watchdog_kworker);
1250}
1251
1252int watchdog_dev_suspend(struct watchdog_device *wdd)
1253{
1254 struct watchdog_core_data *wd_data = wdd->wd_data;
1255 int ret = 0;
1256
1257 if (!wdd->wd_data)
1258 return -ENODEV;
1259
1260 /* ping for the last time before suspend */
1261 mutex_lock(&wd_data->lock);
1262 if (watchdog_worker_should_ping(wd_data))
1263 ret = __watchdog_ping(wd_data->wdd);
1264 mutex_unlock(&wd_data->lock);
1265
1266 if (ret)
1267 return ret;
1268
1269 /*
1270 * make sure that watchdog worker will not kick in when the wdog is
1271 * suspended
1272 */
1273 hrtimer_cancel(&wd_data->timer);
1274 kthread_cancel_work_sync(&wd_data->work);
1275
1276 return 0;
1277}
1278
1279int watchdog_dev_resume(struct watchdog_device *wdd)
1280{
1281 struct watchdog_core_data *wd_data = wdd->wd_data;
1282 int ret = 0;
1283
1284 if (!wdd->wd_data)
1285 return -ENODEV;
1286
1287 /*
1288 * __watchdog_ping will also retrigger hrtimer and therefore restore the
1289 * ping worker if needed.
1290 */
1291 mutex_lock(&wd_data->lock);
1292 if (watchdog_worker_should_ping(wd_data))
1293 ret = __watchdog_ping(wd_data->wdd);
1294 mutex_unlock(&wd_data->lock);
1295
1296 return ret;
1297}
1298
1299module_param(handle_boot_enabled, bool, 0444);
1300MODULE_PARM_DESC(handle_boot_enabled,
1301 "Watchdog core auto-updates boot enabled watchdogs before userspace takes over (default="
1302 __MODULE_STRING(IS_ENABLED(CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED)) ")");
1303
1304module_param(open_timeout, uint, 0644);
1305MODULE_PARM_DESC(open_timeout,
1306 "Maximum time (in seconds, 0 means infinity) for userspace to take over a running watchdog (default="
1307 __MODULE_STRING(CONFIG_WATCHDOG_OPEN_TIMEOUT) ")");
1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * watchdog_dev.c
4 *
5 * (c) Copyright 2008-2011 Alan Cox <alan@lxorguk.ukuu.org.uk>,
6 * All Rights Reserved.
7 *
8 * (c) Copyright 2008-2011 Wim Van Sebroeck <wim@iguana.be>.
9 *
10 *
11 * This source code is part of the generic code that can be used
12 * by all the watchdog timer drivers.
13 *
14 * This part of the generic code takes care of the following
15 * misc device: /dev/watchdog.
16 *
17 * Based on source code of the following authors:
18 * Matt Domsch <Matt_Domsch@dell.com>,
19 * Rob Radez <rob@osinvestor.com>,
20 * Rusty Lynch <rusty@linux.co.intel.com>
21 * Satyam Sharma <satyam@infradead.org>
22 * Randy Dunlap <randy.dunlap@oracle.com>
23 *
24 * Neither Alan Cox, CymruNet Ltd., Wim Van Sebroeck nor Iguana vzw.
25 * admit liability nor provide warranty for any of this software.
26 * This material is provided "AS-IS" and at no charge.
27 */
28
29#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
30
31#include <linux/cdev.h> /* For character device */
32#include <linux/errno.h> /* For the -ENODEV/... values */
33#include <linux/fs.h> /* For file operations */
34#include <linux/init.h> /* For __init/__exit/... */
35#include <linux/hrtimer.h> /* For hrtimers */
36#include <linux/kernel.h> /* For printk/panic/... */
37#include <linux/kthread.h> /* For kthread_work */
38#include <linux/miscdevice.h> /* For handling misc devices */
39#include <linux/module.h> /* For module stuff/... */
40#include <linux/mutex.h> /* For mutexes */
41#include <linux/slab.h> /* For memory functions */
42#include <linux/types.h> /* For standard types (like size_t) */
43#include <linux/watchdog.h> /* For watchdog specific items */
44#include <linux/uaccess.h> /* For copy_to_user/put_user/... */
45
46#include <uapi/linux/sched/types.h> /* For struct sched_param */
47
48#include "watchdog_core.h"
49#include "watchdog_pretimeout.h"
50
51/*
52 * struct watchdog_core_data - watchdog core internal data
53 * @dev: The watchdog's internal device
54 * @cdev: The watchdog's Character device.
55 * @wdd: Pointer to watchdog device.
56 * @lock: Lock for watchdog core.
57 * @status: Watchdog core internal status bits.
58 */
59struct watchdog_core_data {
60 struct device dev;
61 struct cdev cdev;
62 struct watchdog_device *wdd;
63 struct mutex lock;
64 ktime_t last_keepalive;
65 ktime_t last_hw_keepalive;
66 ktime_t open_deadline;
67 struct hrtimer timer;
68 struct kthread_work work;
69 unsigned long status; /* Internal status bits */
70#define _WDOG_DEV_OPEN 0 /* Opened ? */
71#define _WDOG_ALLOW_RELEASE 1 /* Did we receive the magic char ? */
72#define _WDOG_KEEPALIVE 2 /* Did we receive a keepalive ? */
73};
74
75/* the dev_t structure to store the dynamically allocated watchdog devices */
76static dev_t watchdog_devt;
77/* Reference to watchdog device behind /dev/watchdog */
78static struct watchdog_core_data *old_wd_data;
79
80static struct kthread_worker *watchdog_kworker;
81
82static bool handle_boot_enabled =
83 IS_ENABLED(CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED);
84
85static unsigned open_timeout = CONFIG_WATCHDOG_OPEN_TIMEOUT;
86
87static bool watchdog_past_open_deadline(struct watchdog_core_data *data)
88{
89 return ktime_after(ktime_get(), data->open_deadline);
90}
91
92static void watchdog_set_open_deadline(struct watchdog_core_data *data)
93{
94 data->open_deadline = open_timeout ?
95 ktime_get() + ktime_set(open_timeout, 0) : KTIME_MAX;
96}
97
98static inline bool watchdog_need_worker(struct watchdog_device *wdd)
99{
100 /* All variables in milli-seconds */
101 unsigned int hm = wdd->max_hw_heartbeat_ms;
102 unsigned int t = wdd->timeout * 1000;
103
104 /*
105 * A worker to generate heartbeat requests is needed if all of the
106 * following conditions are true.
107 * - Userspace activated the watchdog.
108 * - The driver provided a value for the maximum hardware timeout, and
109 * thus is aware that the framework supports generating heartbeat
110 * requests.
111 * - Userspace requests a longer timeout than the hardware can handle.
112 *
113 * Alternatively, if userspace has not opened the watchdog
114 * device, we take care of feeding the watchdog if it is
115 * running.
116 */
117 return (hm && watchdog_active(wdd) && t > hm) ||
118 (t && !watchdog_active(wdd) && watchdog_hw_running(wdd));
119}
120
121static ktime_t watchdog_next_keepalive(struct watchdog_device *wdd)
122{
123 struct watchdog_core_data *wd_data = wdd->wd_data;
124 unsigned int timeout_ms = wdd->timeout * 1000;
125 ktime_t keepalive_interval;
126 ktime_t last_heartbeat, latest_heartbeat;
127 ktime_t virt_timeout;
128 unsigned int hw_heartbeat_ms;
129
130 if (watchdog_active(wdd))
131 virt_timeout = ktime_add(wd_data->last_keepalive,
132 ms_to_ktime(timeout_ms));
133 else
134 virt_timeout = wd_data->open_deadline;
135
136 hw_heartbeat_ms = min_not_zero(timeout_ms, wdd->max_hw_heartbeat_ms);
137 keepalive_interval = ms_to_ktime(hw_heartbeat_ms / 2);
138
139 /*
140 * To ensure that the watchdog times out wdd->timeout seconds
141 * after the most recent ping from userspace, the last
142 * worker ping has to come in hw_heartbeat_ms before this timeout.
143 */
144 last_heartbeat = ktime_sub(virt_timeout, ms_to_ktime(hw_heartbeat_ms));
145 latest_heartbeat = ktime_sub(last_heartbeat, ktime_get());
146 if (ktime_before(latest_heartbeat, keepalive_interval))
147 return latest_heartbeat;
148 return keepalive_interval;
149}
150
151static inline void watchdog_update_worker(struct watchdog_device *wdd)
152{
153 struct watchdog_core_data *wd_data = wdd->wd_data;
154
155 if (watchdog_need_worker(wdd)) {
156 ktime_t t = watchdog_next_keepalive(wdd);
157
158 if (t > 0)
159 hrtimer_start(&wd_data->timer, t,
160 HRTIMER_MODE_REL_HARD);
161 } else {
162 hrtimer_cancel(&wd_data->timer);
163 }
164}
165
166static int __watchdog_ping(struct watchdog_device *wdd)
167{
168 struct watchdog_core_data *wd_data = wdd->wd_data;
169 ktime_t earliest_keepalive, now;
170 int err;
171
172 earliest_keepalive = ktime_add(wd_data->last_hw_keepalive,
173 ms_to_ktime(wdd->min_hw_heartbeat_ms));
174 now = ktime_get();
175
176 if (ktime_after(earliest_keepalive, now)) {
177 hrtimer_start(&wd_data->timer,
178 ktime_sub(earliest_keepalive, now),
179 HRTIMER_MODE_REL_HARD);
180 return 0;
181 }
182
183 wd_data->last_hw_keepalive = now;
184
185 if (wdd->ops->ping)
186 err = wdd->ops->ping(wdd); /* ping the watchdog */
187 else
188 err = wdd->ops->start(wdd); /* restart watchdog */
189
190 watchdog_update_worker(wdd);
191
192 return err;
193}
194
195/*
196 * watchdog_ping: ping the watchdog.
197 * @wdd: the watchdog device to ping
198 *
199 * The caller must hold wd_data->lock.
200 *
201 * If the watchdog has no own ping operation then it needs to be
202 * restarted via the start operation. This wrapper function does
203 * exactly that.
204 * We only ping when the watchdog device is running.
205 */
206
207static int watchdog_ping(struct watchdog_device *wdd)
208{
209 struct watchdog_core_data *wd_data = wdd->wd_data;
210
211 if (!watchdog_active(wdd) && !watchdog_hw_running(wdd))
212 return 0;
213
214 set_bit(_WDOG_KEEPALIVE, &wd_data->status);
215
216 wd_data->last_keepalive = ktime_get();
217 return __watchdog_ping(wdd);
218}
219
220static bool watchdog_worker_should_ping(struct watchdog_core_data *wd_data)
221{
222 struct watchdog_device *wdd = wd_data->wdd;
223
224 if (!wdd)
225 return false;
226
227 if (watchdog_active(wdd))
228 return true;
229
230 return watchdog_hw_running(wdd) && !watchdog_past_open_deadline(wd_data);
231}
232
233static void watchdog_ping_work(struct kthread_work *work)
234{
235 struct watchdog_core_data *wd_data;
236
237 wd_data = container_of(work, struct watchdog_core_data, work);
238
239 mutex_lock(&wd_data->lock);
240 if (watchdog_worker_should_ping(wd_data))
241 __watchdog_ping(wd_data->wdd);
242 mutex_unlock(&wd_data->lock);
243}
244
245static enum hrtimer_restart watchdog_timer_expired(struct hrtimer *timer)
246{
247 struct watchdog_core_data *wd_data;
248
249 wd_data = container_of(timer, struct watchdog_core_data, timer);
250
251 kthread_queue_work(watchdog_kworker, &wd_data->work);
252 return HRTIMER_NORESTART;
253}
254
255/*
256 * watchdog_start: wrapper to start the watchdog.
257 * @wdd: the watchdog device to start
258 *
259 * The caller must hold wd_data->lock.
260 *
261 * Start the watchdog if it is not active and mark it active.
262 * This function returns zero on success or a negative errno code for
263 * failure.
264 */
265
266static int watchdog_start(struct watchdog_device *wdd)
267{
268 struct watchdog_core_data *wd_data = wdd->wd_data;
269 ktime_t started_at;
270 int err;
271
272 if (watchdog_active(wdd))
273 return 0;
274
275 set_bit(_WDOG_KEEPALIVE, &wd_data->status);
276
277 started_at = ktime_get();
278 if (watchdog_hw_running(wdd) && wdd->ops->ping) {
279 err = __watchdog_ping(wdd);
280 if (err == 0)
281 set_bit(WDOG_ACTIVE, &wdd->status);
282 } else {
283 err = wdd->ops->start(wdd);
284 if (err == 0) {
285 set_bit(WDOG_ACTIVE, &wdd->status);
286 wd_data->last_keepalive = started_at;
287 wd_data->last_hw_keepalive = started_at;
288 watchdog_update_worker(wdd);
289 }
290 }
291
292 return err;
293}
294
295/*
296 * watchdog_stop: wrapper to stop the watchdog.
297 * @wdd: the watchdog device to stop
298 *
299 * The caller must hold wd_data->lock.
300 *
301 * Stop the watchdog if it is still active and unmark it active.
302 * This function returns zero on success or a negative errno code for
303 * failure.
304 * If the 'nowayout' feature was set, the watchdog cannot be stopped.
305 */
306
307static int watchdog_stop(struct watchdog_device *wdd)
308{
309 int err = 0;
310
311 if (!watchdog_active(wdd))
312 return 0;
313
314 if (test_bit(WDOG_NO_WAY_OUT, &wdd->status)) {
315 pr_info("watchdog%d: nowayout prevents watchdog being stopped!\n",
316 wdd->id);
317 return -EBUSY;
318 }
319
320 if (wdd->ops->stop) {
321 clear_bit(WDOG_HW_RUNNING, &wdd->status);
322 err = wdd->ops->stop(wdd);
323 } else {
324 set_bit(WDOG_HW_RUNNING, &wdd->status);
325 }
326
327 if (err == 0) {
328 clear_bit(WDOG_ACTIVE, &wdd->status);
329 watchdog_update_worker(wdd);
330 }
331
332 return err;
333}
334
335/*
336 * watchdog_get_status: wrapper to get the watchdog status
337 * @wdd: the watchdog device to get the status from
338 *
339 * The caller must hold wd_data->lock.
340 *
341 * Get the watchdog's status flags.
342 */
343
344static unsigned int watchdog_get_status(struct watchdog_device *wdd)
345{
346 struct watchdog_core_data *wd_data = wdd->wd_data;
347 unsigned int status;
348
349 if (wdd->ops->status)
350 status = wdd->ops->status(wdd);
351 else
352 status = wdd->bootstatus & (WDIOF_CARDRESET |
353 WDIOF_OVERHEAT |
354 WDIOF_FANFAULT |
355 WDIOF_EXTERN1 |
356 WDIOF_EXTERN2 |
357 WDIOF_POWERUNDER |
358 WDIOF_POWEROVER);
359
360 if (test_bit(_WDOG_ALLOW_RELEASE, &wd_data->status))
361 status |= WDIOF_MAGICCLOSE;
362
363 if (test_and_clear_bit(_WDOG_KEEPALIVE, &wd_data->status))
364 status |= WDIOF_KEEPALIVEPING;
365
366 return status;
367}
368
369/*
370 * watchdog_set_timeout: set the watchdog timer timeout
371 * @wdd: the watchdog device to set the timeout for
372 * @timeout: timeout to set in seconds
373 *
374 * The caller must hold wd_data->lock.
375 */
376
377static int watchdog_set_timeout(struct watchdog_device *wdd,
378 unsigned int timeout)
379{
380 int err = 0;
381
382 if (!(wdd->info->options & WDIOF_SETTIMEOUT))
383 return -EOPNOTSUPP;
384
385 if (watchdog_timeout_invalid(wdd, timeout))
386 return -EINVAL;
387
388 if (wdd->ops->set_timeout) {
389 err = wdd->ops->set_timeout(wdd, timeout);
390 } else {
391 wdd->timeout = timeout;
392 /* Disable pretimeout if it doesn't fit the new timeout */
393 if (wdd->pretimeout >= wdd->timeout)
394 wdd->pretimeout = 0;
395 }
396
397 watchdog_update_worker(wdd);
398
399 return err;
400}
401
402/*
403 * watchdog_set_pretimeout: set the watchdog timer pretimeout
404 * @wdd: the watchdog device to set the timeout for
405 * @timeout: pretimeout to set in seconds
406 */
407
408static int watchdog_set_pretimeout(struct watchdog_device *wdd,
409 unsigned int timeout)
410{
411 int err = 0;
412
413 if (!(wdd->info->options & WDIOF_PRETIMEOUT))
414 return -EOPNOTSUPP;
415
416 if (watchdog_pretimeout_invalid(wdd, timeout))
417 return -EINVAL;
418
419 if (wdd->ops->set_pretimeout)
420 err = wdd->ops->set_pretimeout(wdd, timeout);
421 else
422 wdd->pretimeout = timeout;
423
424 return err;
425}
426
427/*
428 * watchdog_get_timeleft: wrapper to get the time left before a reboot
429 * @wdd: the watchdog device to get the remaining time from
430 * @timeleft: the time that's left
431 *
432 * The caller must hold wd_data->lock.
433 *
434 * Get the time before a watchdog will reboot (if not pinged).
435 */
436
437static int watchdog_get_timeleft(struct watchdog_device *wdd,
438 unsigned int *timeleft)
439{
440 *timeleft = 0;
441
442 if (!wdd->ops->get_timeleft)
443 return -EOPNOTSUPP;
444
445 *timeleft = wdd->ops->get_timeleft(wdd);
446
447 return 0;
448}
449
450#ifdef CONFIG_WATCHDOG_SYSFS
451static ssize_t nowayout_show(struct device *dev, struct device_attribute *attr,
452 char *buf)
453{
454 struct watchdog_device *wdd = dev_get_drvdata(dev);
455
456 return sprintf(buf, "%d\n", !!test_bit(WDOG_NO_WAY_OUT, &wdd->status));
457}
458
459static ssize_t nowayout_store(struct device *dev, struct device_attribute *attr,
460 const char *buf, size_t len)
461{
462 struct watchdog_device *wdd = dev_get_drvdata(dev);
463 unsigned int value;
464 int ret;
465
466 ret = kstrtouint(buf, 0, &value);
467 if (ret)
468 return ret;
469 if (value > 1)
470 return -EINVAL;
471 /* nowayout cannot be disabled once set */
472 if (test_bit(WDOG_NO_WAY_OUT, &wdd->status) && !value)
473 return -EPERM;
474 watchdog_set_nowayout(wdd, value);
475 return len;
476}
477static DEVICE_ATTR_RW(nowayout);
478
479static ssize_t status_show(struct device *dev, struct device_attribute *attr,
480 char *buf)
481{
482 struct watchdog_device *wdd = dev_get_drvdata(dev);
483 struct watchdog_core_data *wd_data = wdd->wd_data;
484 unsigned int status;
485
486 mutex_lock(&wd_data->lock);
487 status = watchdog_get_status(wdd);
488 mutex_unlock(&wd_data->lock);
489
490 return sprintf(buf, "0x%x\n", status);
491}
492static DEVICE_ATTR_RO(status);
493
494static ssize_t bootstatus_show(struct device *dev,
495 struct device_attribute *attr, char *buf)
496{
497 struct watchdog_device *wdd = dev_get_drvdata(dev);
498
499 return sprintf(buf, "%u\n", wdd->bootstatus);
500}
501static DEVICE_ATTR_RO(bootstatus);
502
503static ssize_t timeleft_show(struct device *dev, struct device_attribute *attr,
504 char *buf)
505{
506 struct watchdog_device *wdd = dev_get_drvdata(dev);
507 struct watchdog_core_data *wd_data = wdd->wd_data;
508 ssize_t status;
509 unsigned int val;
510
511 mutex_lock(&wd_data->lock);
512 status = watchdog_get_timeleft(wdd, &val);
513 mutex_unlock(&wd_data->lock);
514 if (!status)
515 status = sprintf(buf, "%u\n", val);
516
517 return status;
518}
519static DEVICE_ATTR_RO(timeleft);
520
521static ssize_t timeout_show(struct device *dev, struct device_attribute *attr,
522 char *buf)
523{
524 struct watchdog_device *wdd = dev_get_drvdata(dev);
525
526 return sprintf(buf, "%u\n", wdd->timeout);
527}
528static DEVICE_ATTR_RO(timeout);
529
530static ssize_t pretimeout_show(struct device *dev,
531 struct device_attribute *attr, char *buf)
532{
533 struct watchdog_device *wdd = dev_get_drvdata(dev);
534
535 return sprintf(buf, "%u\n", wdd->pretimeout);
536}
537static DEVICE_ATTR_RO(pretimeout);
538
539static ssize_t identity_show(struct device *dev, struct device_attribute *attr,
540 char *buf)
541{
542 struct watchdog_device *wdd = dev_get_drvdata(dev);
543
544 return sprintf(buf, "%s\n", wdd->info->identity);
545}
546static DEVICE_ATTR_RO(identity);
547
548static ssize_t state_show(struct device *dev, struct device_attribute *attr,
549 char *buf)
550{
551 struct watchdog_device *wdd = dev_get_drvdata(dev);
552
553 if (watchdog_active(wdd))
554 return sprintf(buf, "active\n");
555
556 return sprintf(buf, "inactive\n");
557}
558static DEVICE_ATTR_RO(state);
559
560static ssize_t pretimeout_available_governors_show(struct device *dev,
561 struct device_attribute *attr, char *buf)
562{
563 return watchdog_pretimeout_available_governors_get(buf);
564}
565static DEVICE_ATTR_RO(pretimeout_available_governors);
566
567static ssize_t pretimeout_governor_show(struct device *dev,
568 struct device_attribute *attr,
569 char *buf)
570{
571 struct watchdog_device *wdd = dev_get_drvdata(dev);
572
573 return watchdog_pretimeout_governor_get(wdd, buf);
574}
575
576static ssize_t pretimeout_governor_store(struct device *dev,
577 struct device_attribute *attr,
578 const char *buf, size_t count)
579{
580 struct watchdog_device *wdd = dev_get_drvdata(dev);
581 int ret = watchdog_pretimeout_governor_set(wdd, buf);
582
583 if (!ret)
584 ret = count;
585
586 return ret;
587}
588static DEVICE_ATTR_RW(pretimeout_governor);
589
590static umode_t wdt_is_visible(struct kobject *kobj, struct attribute *attr,
591 int n)
592{
593 struct device *dev = kobj_to_dev(kobj);
594 struct watchdog_device *wdd = dev_get_drvdata(dev);
595 umode_t mode = attr->mode;
596
597 if (attr == &dev_attr_timeleft.attr && !wdd->ops->get_timeleft)
598 mode = 0;
599 else if (attr == &dev_attr_pretimeout.attr &&
600 !(wdd->info->options & WDIOF_PRETIMEOUT))
601 mode = 0;
602 else if ((attr == &dev_attr_pretimeout_governor.attr ||
603 attr == &dev_attr_pretimeout_available_governors.attr) &&
604 (!(wdd->info->options & WDIOF_PRETIMEOUT) ||
605 !IS_ENABLED(CONFIG_WATCHDOG_PRETIMEOUT_GOV)))
606 mode = 0;
607
608 return mode;
609}
610static struct attribute *wdt_attrs[] = {
611 &dev_attr_state.attr,
612 &dev_attr_identity.attr,
613 &dev_attr_timeout.attr,
614 &dev_attr_pretimeout.attr,
615 &dev_attr_timeleft.attr,
616 &dev_attr_bootstatus.attr,
617 &dev_attr_status.attr,
618 &dev_attr_nowayout.attr,
619 &dev_attr_pretimeout_governor.attr,
620 &dev_attr_pretimeout_available_governors.attr,
621 NULL,
622};
623
624static const struct attribute_group wdt_group = {
625 .attrs = wdt_attrs,
626 .is_visible = wdt_is_visible,
627};
628__ATTRIBUTE_GROUPS(wdt);
629#else
630#define wdt_groups NULL
631#endif
632
633/*
634 * watchdog_ioctl_op: call the watchdog drivers ioctl op if defined
635 * @wdd: the watchdog device to do the ioctl on
636 * @cmd: watchdog command
637 * @arg: argument pointer
638 *
639 * The caller must hold wd_data->lock.
640 */
641
642static int watchdog_ioctl_op(struct watchdog_device *wdd, unsigned int cmd,
643 unsigned long arg)
644{
645 if (!wdd->ops->ioctl)
646 return -ENOIOCTLCMD;
647
648 return wdd->ops->ioctl(wdd, cmd, arg);
649}
650
651/*
652 * watchdog_write: writes to the watchdog.
653 * @file: file from VFS
654 * @data: user address of data
655 * @len: length of data
656 * @ppos: pointer to the file offset
657 *
658 * A write to a watchdog device is defined as a keepalive ping.
659 * Writing the magic 'V' sequence allows the next close to turn
660 * off the watchdog (if 'nowayout' is not set).
661 */
662
663static ssize_t watchdog_write(struct file *file, const char __user *data,
664 size_t len, loff_t *ppos)
665{
666 struct watchdog_core_data *wd_data = file->private_data;
667 struct watchdog_device *wdd;
668 int err;
669 size_t i;
670 char c;
671
672 if (len == 0)
673 return 0;
674
675 /*
676 * Note: just in case someone wrote the magic character
677 * five months ago...
678 */
679 clear_bit(_WDOG_ALLOW_RELEASE, &wd_data->status);
680
681 /* scan to see whether or not we got the magic character */
682 for (i = 0; i != len; i++) {
683 if (get_user(c, data + i))
684 return -EFAULT;
685 if (c == 'V')
686 set_bit(_WDOG_ALLOW_RELEASE, &wd_data->status);
687 }
688
689 /* someone wrote to us, so we send the watchdog a keepalive ping */
690
691 err = -ENODEV;
692 mutex_lock(&wd_data->lock);
693 wdd = wd_data->wdd;
694 if (wdd)
695 err = watchdog_ping(wdd);
696 mutex_unlock(&wd_data->lock);
697
698 if (err < 0)
699 return err;
700
701 return len;
702}
703
704/*
705 * watchdog_ioctl: handle the different ioctl's for the watchdog device.
706 * @file: file handle to the device
707 * @cmd: watchdog command
708 * @arg: argument pointer
709 *
710 * The watchdog API defines a common set of functions for all watchdogs
711 * according to their available features.
712 */
713
714static long watchdog_ioctl(struct file *file, unsigned int cmd,
715 unsigned long arg)
716{
717 struct watchdog_core_data *wd_data = file->private_data;
718 void __user *argp = (void __user *)arg;
719 struct watchdog_device *wdd;
720 int __user *p = argp;
721 unsigned int val;
722 int err;
723
724 mutex_lock(&wd_data->lock);
725
726 wdd = wd_data->wdd;
727 if (!wdd) {
728 err = -ENODEV;
729 goto out_ioctl;
730 }
731
732 err = watchdog_ioctl_op(wdd, cmd, arg);
733 if (err != -ENOIOCTLCMD)
734 goto out_ioctl;
735
736 switch (cmd) {
737 case WDIOC_GETSUPPORT:
738 err = copy_to_user(argp, wdd->info,
739 sizeof(struct watchdog_info)) ? -EFAULT : 0;
740 break;
741 case WDIOC_GETSTATUS:
742 val = watchdog_get_status(wdd);
743 err = put_user(val, p);
744 break;
745 case WDIOC_GETBOOTSTATUS:
746 err = put_user(wdd->bootstatus, p);
747 break;
748 case WDIOC_SETOPTIONS:
749 if (get_user(val, p)) {
750 err = -EFAULT;
751 break;
752 }
753 if (val & WDIOS_DISABLECARD) {
754 err = watchdog_stop(wdd);
755 if (err < 0)
756 break;
757 }
758 if (val & WDIOS_ENABLECARD)
759 err = watchdog_start(wdd);
760 break;
761 case WDIOC_KEEPALIVE:
762 if (!(wdd->info->options & WDIOF_KEEPALIVEPING)) {
763 err = -EOPNOTSUPP;
764 break;
765 }
766 err = watchdog_ping(wdd);
767 break;
768 case WDIOC_SETTIMEOUT:
769 if (get_user(val, p)) {
770 err = -EFAULT;
771 break;
772 }
773 err = watchdog_set_timeout(wdd, val);
774 if (err < 0)
775 break;
776 /* If the watchdog is active then we send a keepalive ping
777 * to make sure that the watchdog keep's running (and if
778 * possible that it takes the new timeout) */
779 err = watchdog_ping(wdd);
780 if (err < 0)
781 break;
782 fallthrough;
783 case WDIOC_GETTIMEOUT:
784 /* timeout == 0 means that we don't know the timeout */
785 if (wdd->timeout == 0) {
786 err = -EOPNOTSUPP;
787 break;
788 }
789 err = put_user(wdd->timeout, p);
790 break;
791 case WDIOC_GETTIMELEFT:
792 err = watchdog_get_timeleft(wdd, &val);
793 if (err < 0)
794 break;
795 err = put_user(val, p);
796 break;
797 case WDIOC_SETPRETIMEOUT:
798 if (get_user(val, p)) {
799 err = -EFAULT;
800 break;
801 }
802 err = watchdog_set_pretimeout(wdd, val);
803 break;
804 case WDIOC_GETPRETIMEOUT:
805 err = put_user(wdd->pretimeout, p);
806 break;
807 default:
808 err = -ENOTTY;
809 break;
810 }
811
812out_ioctl:
813 mutex_unlock(&wd_data->lock);
814 return err;
815}
816
817/*
818 * watchdog_open: open the /dev/watchdog* devices.
819 * @inode: inode of device
820 * @file: file handle to device
821 *
822 * When the /dev/watchdog* device gets opened, we start the watchdog.
823 * Watch out: the /dev/watchdog device is single open, so we make sure
824 * it can only be opened once.
825 */
826
827static int watchdog_open(struct inode *inode, struct file *file)
828{
829 struct watchdog_core_data *wd_data;
830 struct watchdog_device *wdd;
831 bool hw_running;
832 int err;
833
834 /* Get the corresponding watchdog device */
835 if (imajor(inode) == MISC_MAJOR)
836 wd_data = old_wd_data;
837 else
838 wd_data = container_of(inode->i_cdev, struct watchdog_core_data,
839 cdev);
840
841 /* the watchdog is single open! */
842 if (test_and_set_bit(_WDOG_DEV_OPEN, &wd_data->status))
843 return -EBUSY;
844
845 wdd = wd_data->wdd;
846
847 /*
848 * If the /dev/watchdog device is open, we don't want the module
849 * to be unloaded.
850 */
851 hw_running = watchdog_hw_running(wdd);
852 if (!hw_running && !try_module_get(wdd->ops->owner)) {
853 err = -EBUSY;
854 goto out_clear;
855 }
856
857 err = watchdog_start(wdd);
858 if (err < 0)
859 goto out_mod;
860
861 file->private_data = wd_data;
862
863 if (!hw_running)
864 get_device(&wd_data->dev);
865
866 /*
867 * open_timeout only applies for the first open from
868 * userspace. Set open_deadline to infinity so that the kernel
869 * will take care of an always-running hardware watchdog in
870 * case the device gets magic-closed or WDIOS_DISABLECARD is
871 * applied.
872 */
873 wd_data->open_deadline = KTIME_MAX;
874
875 /* dev/watchdog is a virtual (and thus non-seekable) filesystem */
876 return stream_open(inode, file);
877
878out_mod:
879 module_put(wd_data->wdd->ops->owner);
880out_clear:
881 clear_bit(_WDOG_DEV_OPEN, &wd_data->status);
882 return err;
883}
884
885static void watchdog_core_data_release(struct device *dev)
886{
887 struct watchdog_core_data *wd_data;
888
889 wd_data = container_of(dev, struct watchdog_core_data, dev);
890
891 kfree(wd_data);
892}
893
894/*
895 * watchdog_release: release the watchdog device.
896 * @inode: inode of device
897 * @file: file handle to device
898 *
899 * This is the code for when /dev/watchdog gets closed. We will only
900 * stop the watchdog when we have received the magic char (and nowayout
901 * was not set), else the watchdog will keep running.
902 */
903
904static int watchdog_release(struct inode *inode, struct file *file)
905{
906 struct watchdog_core_data *wd_data = file->private_data;
907 struct watchdog_device *wdd;
908 int err = -EBUSY;
909 bool running;
910
911 mutex_lock(&wd_data->lock);
912
913 wdd = wd_data->wdd;
914 if (!wdd)
915 goto done;
916
917 /*
918 * We only stop the watchdog if we received the magic character
919 * or if WDIOF_MAGICCLOSE is not set. If nowayout was set then
920 * watchdog_stop will fail.
921 */
922 if (!watchdog_active(wdd))
923 err = 0;
924 else if (test_and_clear_bit(_WDOG_ALLOW_RELEASE, &wd_data->status) ||
925 !(wdd->info->options & WDIOF_MAGICCLOSE))
926 err = watchdog_stop(wdd);
927
928 /* If the watchdog was not stopped, send a keepalive ping */
929 if (err < 0) {
930 pr_crit("watchdog%d: watchdog did not stop!\n", wdd->id);
931 watchdog_ping(wdd);
932 }
933
934 watchdog_update_worker(wdd);
935
936 /* make sure that /dev/watchdog can be re-opened */
937 clear_bit(_WDOG_DEV_OPEN, &wd_data->status);
938
939done:
940 running = wdd && watchdog_hw_running(wdd);
941 mutex_unlock(&wd_data->lock);
942 /*
943 * Allow the owner module to be unloaded again unless the watchdog
944 * is still running. If the watchdog is still running, it can not
945 * be stopped, and its driver must not be unloaded.
946 */
947 if (!running) {
948 module_put(wd_data->cdev.owner);
949 put_device(&wd_data->dev);
950 }
951 return 0;
952}
953
954static const struct file_operations watchdog_fops = {
955 .owner = THIS_MODULE,
956 .write = watchdog_write,
957 .unlocked_ioctl = watchdog_ioctl,
958 .compat_ioctl = compat_ptr_ioctl,
959 .open = watchdog_open,
960 .release = watchdog_release,
961};
962
963static struct miscdevice watchdog_miscdev = {
964 .minor = WATCHDOG_MINOR,
965 .name = "watchdog",
966 .fops = &watchdog_fops,
967};
968
969static struct class watchdog_class = {
970 .name = "watchdog",
971 .owner = THIS_MODULE,
972 .dev_groups = wdt_groups,
973};
974
975/*
976 * watchdog_cdev_register: register watchdog character device
977 * @wdd: watchdog device
978 *
979 * Register a watchdog character device including handling the legacy
980 * /dev/watchdog node. /dev/watchdog is actually a miscdevice and
981 * thus we set it up like that.
982 */
983
984static int watchdog_cdev_register(struct watchdog_device *wdd)
985{
986 struct watchdog_core_data *wd_data;
987 int err;
988
989 wd_data = kzalloc(sizeof(struct watchdog_core_data), GFP_KERNEL);
990 if (!wd_data)
991 return -ENOMEM;
992 mutex_init(&wd_data->lock);
993
994 wd_data->wdd = wdd;
995 wdd->wd_data = wd_data;
996
997 if (IS_ERR_OR_NULL(watchdog_kworker))
998 return -ENODEV;
999
1000 device_initialize(&wd_data->dev);
1001 wd_data->dev.devt = MKDEV(MAJOR(watchdog_devt), wdd->id);
1002 wd_data->dev.class = &watchdog_class;
1003 wd_data->dev.parent = wdd->parent;
1004 wd_data->dev.groups = wdd->groups;
1005 wd_data->dev.release = watchdog_core_data_release;
1006 dev_set_drvdata(&wd_data->dev, wdd);
1007 dev_set_name(&wd_data->dev, "watchdog%d", wdd->id);
1008
1009 kthread_init_work(&wd_data->work, watchdog_ping_work);
1010 hrtimer_init(&wd_data->timer, CLOCK_MONOTONIC, HRTIMER_MODE_REL_HARD);
1011 wd_data->timer.function = watchdog_timer_expired;
1012
1013 if (wdd->id == 0) {
1014 old_wd_data = wd_data;
1015 watchdog_miscdev.parent = wdd->parent;
1016 err = misc_register(&watchdog_miscdev);
1017 if (err != 0) {
1018 pr_err("%s: cannot register miscdev on minor=%d (err=%d).\n",
1019 wdd->info->identity, WATCHDOG_MINOR, err);
1020 if (err == -EBUSY)
1021 pr_err("%s: a legacy watchdog module is probably present.\n",
1022 wdd->info->identity);
1023 old_wd_data = NULL;
1024 kfree(wd_data);
1025 return err;
1026 }
1027 }
1028
1029 /* Fill in the data structures */
1030 cdev_init(&wd_data->cdev, &watchdog_fops);
1031
1032 /* Add the device */
1033 err = cdev_device_add(&wd_data->cdev, &wd_data->dev);
1034 if (err) {
1035 pr_err("watchdog%d unable to add device %d:%d\n",
1036 wdd->id, MAJOR(watchdog_devt), wdd->id);
1037 if (wdd->id == 0) {
1038 misc_deregister(&watchdog_miscdev);
1039 old_wd_data = NULL;
1040 put_device(&wd_data->dev);
1041 }
1042 return err;
1043 }
1044
1045 wd_data->cdev.owner = wdd->ops->owner;
1046
1047 /* Record time of most recent heartbeat as 'just before now'. */
1048 wd_data->last_hw_keepalive = ktime_sub(ktime_get(), 1);
1049 watchdog_set_open_deadline(wd_data);
1050
1051 /*
1052 * If the watchdog is running, prevent its driver from being unloaded,
1053 * and schedule an immediate ping.
1054 */
1055 if (watchdog_hw_running(wdd)) {
1056 __module_get(wdd->ops->owner);
1057 get_device(&wd_data->dev);
1058 if (handle_boot_enabled)
1059 hrtimer_start(&wd_data->timer, 0,
1060 HRTIMER_MODE_REL_HARD);
1061 else
1062 pr_info("watchdog%d running and kernel based pre-userspace handler disabled\n",
1063 wdd->id);
1064 }
1065
1066 return 0;
1067}
1068
1069/*
1070 * watchdog_cdev_unregister: unregister watchdog character device
1071 * @watchdog: watchdog device
1072 *
1073 * Unregister watchdog character device and if needed the legacy
1074 * /dev/watchdog device.
1075 */
1076
1077static void watchdog_cdev_unregister(struct watchdog_device *wdd)
1078{
1079 struct watchdog_core_data *wd_data = wdd->wd_data;
1080
1081 cdev_device_del(&wd_data->cdev, &wd_data->dev);
1082 if (wdd->id == 0) {
1083 misc_deregister(&watchdog_miscdev);
1084 old_wd_data = NULL;
1085 }
1086
1087 if (watchdog_active(wdd) &&
1088 test_bit(WDOG_STOP_ON_UNREGISTER, &wdd->status)) {
1089 watchdog_stop(wdd);
1090 }
1091
1092 mutex_lock(&wd_data->lock);
1093 wd_data->wdd = NULL;
1094 wdd->wd_data = NULL;
1095 mutex_unlock(&wd_data->lock);
1096
1097 hrtimer_cancel(&wd_data->timer);
1098 kthread_cancel_work_sync(&wd_data->work);
1099
1100 put_device(&wd_data->dev);
1101}
1102
1103/*
1104 * watchdog_dev_register: register a watchdog device
1105 * @wdd: watchdog device
1106 *
1107 * Register a watchdog device including handling the legacy
1108 * /dev/watchdog node. /dev/watchdog is actually a miscdevice and
1109 * thus we set it up like that.
1110 */
1111
1112int watchdog_dev_register(struct watchdog_device *wdd)
1113{
1114 int ret;
1115
1116 ret = watchdog_cdev_register(wdd);
1117 if (ret)
1118 return ret;
1119
1120 ret = watchdog_register_pretimeout(wdd);
1121 if (ret)
1122 watchdog_cdev_unregister(wdd);
1123
1124 return ret;
1125}
1126
1127/*
1128 * watchdog_dev_unregister: unregister a watchdog device
1129 * @watchdog: watchdog device
1130 *
1131 * Unregister watchdog device and if needed the legacy
1132 * /dev/watchdog device.
1133 */
1134
1135void watchdog_dev_unregister(struct watchdog_device *wdd)
1136{
1137 watchdog_unregister_pretimeout(wdd);
1138 watchdog_cdev_unregister(wdd);
1139}
1140
1141/*
1142 * watchdog_set_last_hw_keepalive: set last HW keepalive time for watchdog
1143 * @wdd: watchdog device
1144 * @last_ping_ms: time since last HW heartbeat
1145 *
1146 * Adjusts the last known HW keepalive time for a watchdog timer.
1147 * This is needed if the watchdog is already running when the probe
1148 * function is called, and it can't be pinged immediately. This
1149 * function must be called immediately after watchdog registration,
1150 * and min_hw_heartbeat_ms must be set for this to be useful.
1151 */
1152int watchdog_set_last_hw_keepalive(struct watchdog_device *wdd,
1153 unsigned int last_ping_ms)
1154{
1155 struct watchdog_core_data *wd_data;
1156 ktime_t now;
1157
1158 if (!wdd)
1159 return -EINVAL;
1160
1161 wd_data = wdd->wd_data;
1162
1163 now = ktime_get();
1164
1165 wd_data->last_hw_keepalive = ktime_sub(now, ms_to_ktime(last_ping_ms));
1166
1167 return __watchdog_ping(wdd);
1168}
1169EXPORT_SYMBOL_GPL(watchdog_set_last_hw_keepalive);
1170
1171/*
1172 * watchdog_dev_init: init dev part of watchdog core
1173 *
1174 * Allocate a range of chardev nodes to use for watchdog devices
1175 */
1176
1177int __init watchdog_dev_init(void)
1178{
1179 int err;
1180
1181 watchdog_kworker = kthread_create_worker(0, "watchdogd");
1182 if (IS_ERR(watchdog_kworker)) {
1183 pr_err("Failed to create watchdog kworker\n");
1184 return PTR_ERR(watchdog_kworker);
1185 }
1186 sched_set_fifo(watchdog_kworker->task);
1187
1188 err = class_register(&watchdog_class);
1189 if (err < 0) {
1190 pr_err("couldn't register class\n");
1191 goto err_register;
1192 }
1193
1194 err = alloc_chrdev_region(&watchdog_devt, 0, MAX_DOGS, "watchdog");
1195 if (err < 0) {
1196 pr_err("watchdog: unable to allocate char dev region\n");
1197 goto err_alloc;
1198 }
1199
1200 return 0;
1201
1202err_alloc:
1203 class_unregister(&watchdog_class);
1204err_register:
1205 kthread_destroy_worker(watchdog_kworker);
1206 return err;
1207}
1208
1209/*
1210 * watchdog_dev_exit: exit dev part of watchdog core
1211 *
1212 * Release the range of chardev nodes used for watchdog devices
1213 */
1214
1215void __exit watchdog_dev_exit(void)
1216{
1217 unregister_chrdev_region(watchdog_devt, MAX_DOGS);
1218 class_unregister(&watchdog_class);
1219 kthread_destroy_worker(watchdog_kworker);
1220}
1221
1222module_param(handle_boot_enabled, bool, 0444);
1223MODULE_PARM_DESC(handle_boot_enabled,
1224 "Watchdog core auto-updates boot enabled watchdogs before userspace takes over (default="
1225 __MODULE_STRING(IS_ENABLED(CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED)) ")");
1226
1227module_param(open_timeout, uint, 0644);
1228MODULE_PARM_DESC(open_timeout,
1229 "Maximum time (in seconds, 0 means infinity) for userspace to take over a running watchdog (default="
1230 __MODULE_STRING(CONFIG_WATCHDOG_OPEN_TIMEOUT) ")");