CPU hotplug in the Kernel¶

Date: December, 2016
Author: Sebastian Andrzej Siewior <bigeasy@linutronix.de>, Rusty Russell <rusty@rustcorp.com.au>, Srivatsa Vaddagiri <vatsa@in.ibm.com>, Ashok Raj <ashok.raj@intel.com>, Joel Schopp <jschopp@austin.ibm.com>

Introduction¶

Modern advances in system architectures have introduced advanced error reporting and correction capabilities in processors. There are couple OEMS that support NUMA hardware which are hot pluggable as well, where physical node insertion and removal require support for CPU hotplug.

Such advances require CPUs available to a kernel to be removed either for provisioning reasons, or for RAS purposes to keep an offending CPU off system execution path. Hence the need for CPU hotplug support in the Linux kernel.

A more novel use of CPU-hotplug support is its use today in suspend resume support for SMP. Dual-core and HT support makes even a laptop run SMP kernels which didn't support these methods.

Command Line Switches¶

maxcpus=n

Restrict boot time CPUs to n. Say if you have fourV CPUs, using maxcpus=2 will only boot two. You can choose to bring the other CPUs later online.

nr_cpus=n

Restrict the total amount CPUs the kernel will support. If the number supplied here is lower than the number of physically available CPUs than those CPUs can not be brought online later.

additional_cpus=n

Use this to limit hotpluggable CPUs. This option sets cpu_possible_mask = cpu_present_mask + additional_cpus

This option is limited to the IA64 architecture.

possible_cpus=n

This option sets possible_cpus bits in cpu_possible_mask.

This option is limited to the X86 and S390 architecture.

cede_offline={"off","on"}

Use this option to disable/enable putting offlined processors to an extended H_CEDE state on supported pseries platforms. If nothing is specified, cede_offline is set to "on".

This option is limited to the PowerPC architecture.

cpu0_hotplug

Allow to shutdown CPU0.

This option is limited to the X86 architecture.

CPU maps¶

cpu_possible_mask: Bitmap of possible CPUs that can ever be available in the system. This is used to allocate some boot time memory for per_cpu variables that aren't designed to grow/shrink as CPUs are made available or removed. Once set during boot time discovery phase, the map is static, i.e no bits are added or removed anytime. Trimming it accurately for your system needs upfront can save some boot time memory.
cpu_online_mask: Bitmap of all CPUs currently online. Its set in __cpu_up() after a CPU is available for kernel scheduling and ready to receive interrupts from devices. Its cleared when a CPU is brought down using __cpu_disable(), before which all OS services including interrupts are migrated to another target CPU.
cpu_present_mask: Bitmap of CPUs currently present in the system. Not all of them may be online. When physical hotplug is processed by the relevant subsystem (e.g ACPI) can change and new bit either be added or removed from the map depending on the event is hot-add/hot-remove. There are currently no locking rules as of now. Typical usage is to init topology during boot, at which time hotplug is disabled.

You really don't need to manipulate any of the system CPU maps. They should be read-only for most use. When setting up per-cpu resources almost always use cpu_possible_mask or for_each_possible_cpu() to iterate. To macro for_each_cpu() can be used to iterate over a custom CPU mask.

Never use anything other than cpumask_t to represent bitmap of CPUs.

Using CPU hotplug¶

The kernel option CONFIG_HOTPLUG_CPU needs to be enabled. It is currently available on multiple architectures including ARM, MIPS, PowerPC and X86. The configuration is done via the sysfs interface:

$ ls -lh /sys/devices/system/cpu
total 0
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu0
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu1
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu2
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu3
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu4
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu5
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu6
drwxr-xr-x  9 root root    0 Dec 21 16:33 cpu7
drwxr-xr-x  2 root root    0 Dec 21 16:33 hotplug
-r--r--r--  1 root root 4.0K Dec 21 16:33 offline
-r--r--r--  1 root root 4.0K Dec 21 16:33 online
-r--r--r--  1 root root 4.0K Dec 21 16:33 possible
-r--r--r--  1 root root 4.0K Dec 21 16:33 present

The files offline, online, possible, present represent the CPU masks. Each CPU folder contains an online file which controls the logical on (1) and off (0) state. To logically shutdown CPU4:

$ echo 0 > /sys/devices/system/cpu/cpu4/online
 smpboot: CPU 4 is now offline

Once the CPU is shutdown, it will be removed from /proc/interrupts, /proc/cpuinfo and should also not be shown visible by the top command. To bring CPU4 back online:

$ echo 1 > /sys/devices/system/cpu/cpu4/online
smpboot: Booting Node 0 Processor 4 APIC 0x1

The CPU is usable again. This should work on all CPUs. CPU0 is often special and excluded from CPU hotplug. On X86 the kernel option CONFIG_BOOTPARAM_HOTPLUG_CPU0 has to be enabled in order to be able to shutdown CPU0. Alternatively the kernel command option cpu0_hotplug can be used. Some known dependencies of CPU0:

Resume from hibernate/suspend. Hibernate/suspend will fail if CPU0 is offline.
PIC interrupts. CPU0 can't be removed if a PIC interrupt is detected.

Please let Fenghua Yu <fenghua.yu@intel.com> know if you find any dependencies on CPU0.

The CPU hotplug coordination¶

The offline case¶

Once a CPU has been logically shutdown the teardown callbacks of registered hotplug states will be invoked, starting with CPUHP_ONLINE and terminating at state CPUHP_OFFLINE. This includes:

If tasks are frozen due to a suspend operation then cpuhp_tasks_frozen will be set to true.
All processes are migrated away from this outgoing CPU to new CPUs. The new CPU is chosen from each process' current cpuset, which may be a subset of all online CPUs.
All interrupts targeted to this CPU are migrated to a new CPU
timers are also migrated to a new CPU
Once all services are migrated, kernel calls an arch specific routine __cpu_disable() to perform arch specific cleanup.

Using the hotplug API¶

It is possible to receive notifications once a CPU is offline or onlined. This might be important to certain drivers which need to perform some kind of setup or clean up functions based on the number of available CPUs:

#include <linux/cpuhotplug.h>

ret = cpuhp_setup_state(CPUHP_AP_ONLINE_DYN, "X/Y:online",
                        Y_online, Y_prepare_down);

X is the subsystem and Y the particular driver. The Y_online callback will be invoked during registration on all online CPUs. If an error occurs during the online callback the Y_prepare_down callback will be invoked on all CPUs on which the online callback was previously invoked. After registration completed, the Y_online callback will be invoked once a CPU is brought online and Y_prepare_down will be invoked when a CPU is shutdown. All resources which were previously allocated in Y_online should be released in Y_prepare_down. The return value ret is negative if an error occurred during the registration process. Otherwise a positive value is returned which contains the allocated hotplug for dynamically allocated states (CPUHP_AP_ONLINE_DYN). It will return zero for predefined states.

The callback can be remove by invoking cpuhp_remove_state(). In case of a dynamically allocated state (CPUHP_AP_ONLINE_DYN) use the returned state. During the removal of a hotplug state the teardown callback will be invoked.

Multiple instances¶

If a driver has multiple instances and each instance needs to perform the callback independently then it is likely that a ''multi-state'' should be used. First a multi-state state needs to be registered:

ret = cpuhp_setup_state_multi(CPUHP_AP_ONLINE_DYN, "X/Y:online,
                              Y_online, Y_prepare_down);
Y_hp_online = ret;

The cpuhp_setup_state_multi() behaves similar to cpuhp_setup_state() except it prepares the callbacks for a multi state and does not invoke the callbacks. This is a one time setup. Once a new instance is allocated, you need to register this new instance:

ret = cpuhp_state_add_instance(Y_hp_online, &d->node);

This function will add this instance to your previously allocated Y_hp_online state and invoke the previously registered callback (Y_online) on all online CPUs. The node element is a struct hlist_node member of your per-instance data structure.

On removal of the instance: ::: cpuhp_state_remove_instance(Y_hp_online, &d->node)

should be invoked which will invoke the teardown callback on all online CPUs.

Manual setup¶

Usually it is handy to invoke setup and teardown callbacks on registration or removal of a state because usually the operation needs to performed once a CPU goes online (offline) and during initial setup (shutdown) of the driver. However each registration and removal function is also available with a _nocalls suffix which does not invoke the provided callbacks if the invocation of the callbacks is not desired. During the manual setup (or teardown) the functions get_online_cpus() and put_online_cpus() should be used to inhibit CPU hotplug operations.

The ordering of the events¶

The hotplug states are defined in include/linux/cpuhotplug.h:

The states CPUHP_OFFLINE … CPUHP_AP_OFFLINE are invoked before the CPU is up.
The states CPUHP_AP_OFFLINE … CPUHP_AP_ONLINE are invoked just the after the CPU has been brought up. The interrupts are off and the scheduler is not yet active on this CPU. Starting with CPUHP_AP_OFFLINE the callbacks are invoked on the target CPU.
The states between CPUHP_AP_ONLINE_DYN and CPUHP_AP_ONLINE_DYN_END are reserved for the dynamic allocation.
The states are invoked in the reverse order on CPU shutdown starting with CPUHP_ONLINE and stopping at CPUHP_OFFLINE. Here the callbacks are invoked on the CPU that will be shutdown until CPUHP_AP_OFFLINE.

A dynamically allocated state via CPUHP_AP_ONLINE_DYN is often enough. However if an earlier invocation during the bring up or shutdown is required then an explicit state should be acquired. An explicit state might also be required if the hotplug event requires specific ordering in respect to another hotplug event.

Testing of hotplug states¶

One way to verify whether a custom state is working as expected or not is to shutdown a CPU and then put it online again. It is also possible to put the CPU to certain state (for instance CPUHP_AP_ONLINE) and then go back to CPUHP_ONLINE. This would simulate an error one state after CPUHP_AP_ONLINE which would lead to rollback to the online state.

All registered states are enumerated in /sys/devices/system/cpu/hotplug/states:

$ tail /sys/devices/system/cpu/hotplug/states
mm/vmscan:online
mm/vmstat:online
lib/percpu_cnt:online
acpi/cpu-drv:online
base/cacheinfo:online
virtio/net:online
x86/mce:online
printk:online
sched:active
online

To rollback CPU4 to lib/percpu_cnt:online and back online just issue:

$ cat /sys/devices/system/cpu/cpu4/hotplug/state
169
$ echo 140 > /sys/devices/system/cpu/cpu4/hotplug/target
$ cat /sys/devices/system/cpu/cpu4/hotplug/state
140

It is important to note that the teardown callbac of state 140 have been invoked. And now get back online:

$ echo 169 > /sys/devices/system/cpu/cpu4/hotplug/target
$ cat /sys/devices/system/cpu/cpu4/hotplug/state
169

With trace events enabled, the individual steps are visible, too:

#  TASK-PID   CPU#    TIMESTAMP  FUNCTION
#     | |       |        |         |
    bash-394  [001]  22.976: cpuhp_enter: cpu: 0004 target: 140 step: 169 (cpuhp_kick_ap_work)
 cpuhp/4-31   [004]  22.977: cpuhp_enter: cpu: 0004 target: 140 step: 168 (sched_cpu_deactivate)
 cpuhp/4-31   [004]  22.990: cpuhp_exit:  cpu: 0004  state: 168 step: 168 ret: 0
 cpuhp/4-31   [004]  22.991: cpuhp_enter: cpu: 0004 target: 140 step: 144 (mce_cpu_pre_down)
 cpuhp/4-31   [004]  22.992: cpuhp_exit:  cpu: 0004  state: 144 step: 144 ret: 0
 cpuhp/4-31   [004]  22.993: cpuhp_multi_enter: cpu: 0004 target: 140 step: 143 (virtnet_cpu_down_prep)
 cpuhp/4-31   [004]  22.994: cpuhp_exit:  cpu: 0004  state: 143 step: 143 ret: 0
 cpuhp/4-31   [004]  22.995: cpuhp_enter: cpu: 0004 target: 140 step: 142 (cacheinfo_cpu_pre_down)
 cpuhp/4-31   [004]  22.996: cpuhp_exit:  cpu: 0004  state: 142 step: 142 ret: 0
    bash-394  [001]  22.997: cpuhp_exit:  cpu: 0004  state: 140 step: 169 ret: 0
    bash-394  [005]  95.540: cpuhp_enter: cpu: 0004 target: 169 step: 140 (cpuhp_kick_ap_work)
 cpuhp/4-31   [004]  95.541: cpuhp_enter: cpu: 0004 target: 169 step: 141 (acpi_soft_cpu_online)
 cpuhp/4-31   [004]  95.542: cpuhp_exit:  cpu: 0004  state: 141 step: 141 ret: 0
 cpuhp/4-31   [004]  95.543: cpuhp_enter: cpu: 0004 target: 169 step: 142 (cacheinfo_cpu_online)
 cpuhp/4-31   [004]  95.544: cpuhp_exit:  cpu: 0004  state: 142 step: 142 ret: 0
 cpuhp/4-31   [004]  95.545: cpuhp_multi_enter: cpu: 0004 target: 169 step: 143 (virtnet_cpu_online)
 cpuhp/4-31   [004]  95.546: cpuhp_exit:  cpu: 0004  state: 143 step: 143 ret: 0
 cpuhp/4-31   [004]  95.547: cpuhp_enter: cpu: 0004 target: 169 step: 144 (mce_cpu_online)
 cpuhp/4-31   [004]  95.548: cpuhp_exit:  cpu: 0004  state: 144 step: 144 ret: 0
 cpuhp/4-31   [004]  95.549: cpuhp_enter: cpu: 0004 target: 169 step: 145 (console_cpu_notify)
 cpuhp/4-31   [004]  95.550: cpuhp_exit:  cpu: 0004  state: 145 step: 145 ret: 0
 cpuhp/4-31   [004]  95.551: cpuhp_enter: cpu: 0004 target: 169 step: 168 (sched_cpu_activate)
 cpuhp/4-31   [004]  95.552: cpuhp_exit:  cpu: 0004  state: 168 step: 168 ret: 0
    bash-394  [005]  95.553: cpuhp_exit:  cpu: 0004  state: 169 step: 140 ret: 0

As it an be seen, CPU4 went down until timestamp 22.996 and then back up until 95.552. All invoked callbacks including their return codes are visible in the trace.

Architecture's requirements¶

The following functions and configurations are required:

CONFIG_HOTPLUG_CPU: This entry needs to be enabled in Kconfig
__cpu_up(): Arch interface to bring up a CPU
__cpu_disable(): Arch interface to shutdown a CPU, no more interrupts can be handled by the kernel after the routine returns. This includes the shutdown of the timer.
__cpu_die(): This actually supposed to ensure death of the CPU. Actually look at some example code in other arch that implement CPU hotplug. The processor is taken down from the idle() loop for that specific architecture. __cpu_die() typically waits for some per_cpu state to be set, to ensure the processor dead routine is called to be sure positively.

User Space Notification¶

After CPU successfully onlined or offline udev events are sent. A udev rule like:

SUBSYSTEM=="cpu", DRIVERS=="processor", DEVPATH=="/devices/system/cpu/*", RUN+="the_hotplug_receiver.sh"

will receive all events. A script like:

#!/bin/sh

if [ "${ACTION}" = "offline" ]
then
    echo "CPU ${DEVPATH##*/} offline"

elif [ "${ACTION}" = "online" ]
then
    echo "CPU ${DEVPATH##*/} online"

fi

can process the event further.

Kernel Inline Documentations Reference¶

int cpuhp_setup_state(enum cpuhp_state state, const char * name, int (*startup) (unsigned int cpu, int (*teardown) (unsigned int cpu)¶: Setup hotplug state callbacks with calling the callbacks

Parameters

enum cpuhp_state state: The state for which the calls are installed
const char * name: Name of the callback (will be used in debug output)
int (*)(unsigned int cpu) startup: startup callback function
int (*)(unsigned int cpu) teardown: teardown callback function

Description

Installs the callback functions and invokes the startup callback on the present cpus which have already reached the state.

int cpuhp_setup_state_nocalls(enum cpuhp_state state, const char * name, int (*startup) (unsigned int cpu, int (*teardown) (unsigned int cpu)¶: Setup hotplug state callbacks without calling the callbacks

Parameters

enum cpuhp_state state: The state for which the calls are installed
const char * name: Name of the callback.
int (*)(unsigned int cpu) startup: startup callback function
int (*)(unsigned int cpu) teardown: teardown callback function

Description

Same as cpuhp_setup_state except that no calls are executed are invoked during installation of this callback. NOP if SMP=n or HOTPLUG_CPU=n.

int cpuhp_setup_state_multi(enum cpuhp_state state, const char * name, int (*startup) (unsigned int cpu, struct hlist_node *node, int (*teardown) (unsigned int cpu, struct hlist_node *node)¶: Add callbacks for multi state

Parameters

enum cpuhp_state state: The state for which the calls are installed
const char * name: Name of the callback.
int (*)(unsigned int cpu, struct hlist_node *node) startup: startup callback function
int (*)(unsigned int cpu, struct hlist_node *node) teardown: teardown callback function

Description

Sets the internal multi_instance flag and prepares a state to work as a multi instance callback. No callbacks are invoked at this point. The callbacks are invoked once an instance for this state are registered via cpuhp_state_add_instance or cpuhp_state_add_instance_nocalls.

int cpuhp_state_add_instance(enum cpuhp_state state, struct hlist_node * node)¶: Add an instance for a state and invoke startup callback.

Parameters

enum cpuhp_state state: The state for which the instance is installed
struct hlist_node * node: The node for this individual state.

Description

Installs the instance for the state and invokes the startup callback on the present cpus which have already reached the state. The state must have been earlier marked as multi-instance by cpuhp_setup_state_multi.

int cpuhp_state_add_instance_nocalls(enum cpuhp_state state, struct hlist_node * node)¶: Add an instance for a state without invoking the startup callback.

Parameters

enum cpuhp_state state: The state for which the instance is installed
struct hlist_node * node: The node for this individual state.

Description

Installs the instance for the state The state must have been earlier marked as multi-instance by cpuhp_setup_state_multi.

void cpuhp_remove_state(enum cpuhp_state state)¶: Remove hotplug state callbacks and invoke the teardown

Parameters

enum cpuhp_state state: The state for which the calls are removed

Description

Removes the callback functions and invokes the teardown callback on the present cpus which have already reached the state.

void cpuhp_remove_state_nocalls(enum cpuhp_state state)¶: Remove hotplug state callbacks without invoking teardown

Parameters

enum cpuhp_state state: The state for which the calls are removed

void cpuhp_remove_multi_state(enum cpuhp_state state)¶: Remove hotplug multi state callback

Parameters

enum cpuhp_state state: The state for which the calls are removed

Description

Removes the callback functions from a multi state. This is the reverse of cpuhp_setup_state_multi(). All instances should have been removed before invoking this function.

int cpuhp_state_remove_instance(enum cpuhp_state state, struct hlist_node * node)¶: Remove hotplug instance from state and invoke the teardown callback

Parameters

enum cpuhp_state state: The state from which the instance is removed
struct hlist_node * node: The node for this individual state.

Description

Removes the instance and invokes the teardown callback on the present cpus which have already reached the state.

int cpuhp_state_remove_instance_nocalls(enum cpuhp_state state, struct hlist_node * node)¶: Remove hotplug instance from state without invoking the reatdown callback

Parameters

enum cpuhp_state state: The state from which the instance is removed
struct hlist_node * node: The node for this individual state.

Description

Removes the instance without invoking the teardown callback.