[PATCH i-g-t] lib/intel_allocator_simple: Prevent deadlock due to log mutex contention

Zbigniew Kempczyński zbigniew.kempczynski at intel.com
Mon Mar 17 10:01:08 UTC 2025


On Mon, Mar 17, 2025 at 11:28:50AM +0200, Mika Kuoppala wrote:

<cut>

> Here is the proper callstack to be the last one:
> 
> #0  __libc_msgrcv (msgflg=0, msgtyp=<optimized out>, msgsz=64, msgp=0x7fff266abf50, msqid=11) at ../sysdeps/unix/sysv/linux/msgrcv.c:26
> #1  __libc_msgrcv (msqid=11, msgp=msgp at entry=0x7fff266abf50, msgsz=msgsz at entry=64, msgtyp=41811, msgflg=msgflg at entry=0) at ../sysdeps/unix/sysv/linux/msgrcv.c:22
> #2  0x00007f7195c7cbe5 in msgqueue_recv_resp (channel=<optimized out>, response=0x7fff266ac090) at ../lib/intel_allocator_msgchannel.c:162
> #3  0x00007f7195c7ac94 in recv_resp (response=0x7fff266ac090, tid=<optimized out>, msgchan=0x7f7195d5b380 <msgqueue_channel>) at ../lib/intel_allocator.c:209
> #4  send_req_recv_resp (response=0x7fff266ac090, request=0x7fff266ac0b0, msgchan=0x7f7195d5b380 <msgqueue_channel>) at ../lib/intel_allocator.c:458
> #5  handle_request (req=req at entry=0x7fff266ac0b0, resp=resp at entry=0x7fff266ac090) at ../lib/intel_allocator.c:729
> #6  0x00007f7195c7bce3 in intel_allocator_close (allocator_handle=263) at ../lib/intel_allocator.c:1088
> #7  0x00007f7195c82cfe in intel_bb_destroy (ibb=ibb at entry=0x556bef15c4d0) at ../lib/intel_batchbuffer.c:1319
> #8  0x0000556bbde692b7 in run_online_client (c=c at entry=0x556bef15b480) at ../tests/intel/xe_eudebug_online.c:1147
> #9  0x00007f7195ceb8e9 in xe_eudebug_client_create (master_fd=master_fd at entry=3, work=work at entry=0x556bbde68de0 <run_online_client>, flags=flags at entry=16777216, data=data at entry=0x7f7195c00000)
>     at ../lib/xe/xe_eudebug.c:1421
> #10 0x00007f7195cec0ad in xe_eudebug_session_create (fd=fd at entry=3, work=work at entry=0x556bbde68de0 <run_online_client>, flags=flags at entry=16777216,
>     test_private=test_private at entry=0x7f7195c00000) at ../lib/xe/xe_eudebug.c:1590
> #11 0x0000556bbde6bfc1 in test_set_breakpoint_online_sigint_debugger (flags=16777216, hwe=0x556bef159ce8, fd=3) at ../tests/intel/xe_eudebug_online.c:1554
> #12 __igt_unique____real_main2500 () at ../tests/intel/xe_eudebug_online.c:2525
> #13 0x0000556bbde6704d in main (argc=<optimized out>, argv=<optimized
> #out>) at ../tests/intel/xe_eudebug_online.c:2500
> 
> But indeed, this does not yet explain why wouldn't the handle_request()
> manage to get the log mutex, manage to send response to the client and
> make it proceed from intel_allocator_close().
> 
> I try to repro if I could figure out why they are waiting on the same
> futex without progress.
> 
> Thanks for taking a look and sorry for confusion with the cutpaste.
> -Mika
> 

I'm going to check the msgqueue code, for me this looks suspicious as
we stuck on msgrcv. BTW it's weird we stuck on locking log_buffer_mutex
on the other thread.

Do you observe this issue as well if you compile IGT with 'debug'
instead of 'debugrelease' in meson.build?

--
Zbigniew

> 
> >
> > --
> > Zbigniew
> >
> >> 
> >> Here are the stacks for the deadlock:
> >> 
> >> 0  futex_wait (private=0, expected=2, futex_word=0x7f7195d5ff80 <log_buffer_mutex>) at ../sysdeps/nptl/futex-internal.h:146
> >> 1  __GI___lll_lock_wait (futex=futex at entry=0x7f7195d5ff80 <log_buffer_mutex>, private=0) at ./nptl/lowlevellock.c:49
> >> 2  0x00007f7195898002 in lll_mutex_lock_optimized (mutex=0x7f7195d5ff80 <log_buffer_mutex>) at ./nptl/pthread_mutex_lock.c:48
> >> 3  ___pthread_mutex_lock (mutex=mutex at entry=0x7f7195d5ff80 <log_buffer_mutex>) at ./nptl/pthread_mutex_lock.c:93
> >> 4  0x00007f7195cc0867 in _igt_log_buffer_append (
> >>    line=0x7f718800be70 "(xe_eudebug_online:40711) [thread:40713] intel_allocator_simple-DEBUG: <ial: 0x7f7188009e20, fd: 5> objects: 0, reserved_areas: 1\n") at ../lib/igt_core.c:461
> >> 5  igt_vlog (domain=0x7f7195cfca78 "intel_allocator_simple", level=IGT_LOG_DEBUG, format=<optimized out>, args=args at entry=0x7f71931fe8d0) at ../lib/igt_core.c:3215
> >> 6  0x00007f7195cc0b23 in igt_log (domain=domain at entry=0x7f7195cfca78 "intel_allocator_simple", level=level at entry=IGT_LOG_DEBUG,
> >>    format=format at entry=0x7f7195cfc4b0 "<ial: %p, fd: %d> objects: %ld, reserved_areas: %ld\n") at ../lib/igt_core.c:3137
> >> 7  0x00007f7195c7d851 in intel_allocator_simple_is_empty (ial=<optimized out>) at ../lib/intel_allocator_simple.c:613
> >> 8  0x00007f7195c7aa99 in __allocator_put (al=0x556bef180950) at ../lib/intel_allocator.c:312
> >> 9  allocator_close (ahnd=263) at ../lib/intel_allocator.c:430
> >> 10 0x00007f7195c7add1 in handle_request (req=req at entry=0x7f71931feaf0, resp=resp at entry=0x7f71931fead0) at ../lib/intel_allocator.c:561
> >> 11 0x00007f7195c7b567 in allocator_thread_loop (data=<optimized out>) at ../lib/intel_allocator.c:766
> >> 12 0x00007f7195894ac3 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
> >> 13 0x00007f7195926850 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
> >> 
> >> 0  futex_wait (private=0, expected=2, futex_word=0x7f7195d5ff80 <log_buffer_mutex>) at ../sysdeps/nptl/futex-internal.h:146
> >> 1  __GI___lll_lock_wait (futex=futex at entry=0x7f7195d5ff80 <log_buffer_mutex>, private=0) at ./nptl/lowlevellock.c:49
> >> 2  0x00007f7195898002 in lll_mutex_lock_optimized (mutex=0x7f7195d5ff80 <log_buffer_mutex>) at ./nptl/pthread_mutex_lock.c:48
> >> 3  ___pthread_mutex_lock (mutex=mutex at entry=0x7f7195d5ff80 <log_buffer_mutex>) at ./nptl/pthread_mutex_lock.c:93
> >> 4  0x00007f7195cc0867 in _igt_log_buffer_append (line=0x556bef182920 "(xe_eudebug_online:40711) xe/xe_eudebug-CRITICAL: Test assertion failure function __wait_token, file ../lib/xe/xe_eudebug.c:303:\n")
> >>    at ../lib/igt_core.c:461
> >> 5  igt_vlog (domain=0x7f7195d27b7f "xe/xe_eudebug", level=IGT_LOG_CRITICAL, format=<optimized out>, args=args at entry=0x7fff266ac070) at ../lib/igt_core.c:3215
> >> 6  0x00007f7195cc0b23 in igt_log (domain=domain at entry=0x7f7195d27b7f "xe/xe_eudebug", level=level at entry=IGT_LOG_CRITICAL,
> >>    format=format at entry=0x7f7195d19e60 "Test assertion failure function %s, file %s:%i:\n") at ../lib/igt_core.c:3137
> >> 7  0x00007f7195cc2bd1 in __igt_fail_assert (domain=domain at entry=0x7f7195d27b7f "xe/xe_eudebug", file=file at entry=0x7f7195d27b68 "../lib/xe/xe_eudebug.c", line=line at entry=303,
> >>    func=func at entry=0x7f7195d278b8 <__func__.29> "__wait_token", assertion=assertion at entry=0x7f7195d1b044 "ret > 0", f=f at entry=0x7f7195d27fd8 "Pipe read timeout waiting for token '%s:(%ld)'\n")
> >>    at ../lib/igt_core.c:2254
> >> 8  0x00007f7195ce9944 in __wait_token (pipe=pipe at entry=0x556bef15b4b4, token=token at entry=3, timeout_ms=60000) at ../lib/xe/xe_eudebug.c:303
> >> 9  0x00007f7195cebcf1 in wait_from_client (token=3, c=<optimized out>) at ../lib/xe/xe_eudebug.c:324
> >> 10 xe_eudebug_client_wait_done (c=0x556bef15b480) at ../lib/xe/xe_eudebug.c:1523
> >> 11 xe_eudebug_client_wait_done (c=0x556bef15b480) at ../lib/xe/xe_eudebug.c:1519
> >> 12 0x0000556bbde6bf19 in test_set_breakpoint_online_sigint_debugger (flags=16777216, hwe=0x556bef159ce8, fd=3) at ../tests/intel/xe_eudebug_online.c:1591
> >> 13 __igt_unique____real_main2500 () at ../tests/intel/xe_eudebug_online.c:2525
> >> 14 0x0000556bbde6704d in main (argc=<optimized out>, argv=<optimized out>) at ../tests/intel/xe_eudebug_online.c:2500
> >> 
> >> 0  futex_wait (private=0, expected=2, futex_word=0x7f7195d5ff80 <log_buffer_mutex>) at ../sysdeps/nptl/futex-internal.h:146
> >> 1  __GI___lll_lock_wait (futex=futex at entry=0x7f7195d5ff80 <log_buffer_mutex>, private=0) at ./nptl/lowlevellock.c:49
> >> 2  0x00007f7195898002 in lll_mutex_lock_optimized (mutex=0x7f7195d5ff80 <log_buffer_mutex>) at ./nptl/pthread_mutex_lock.c:48
> >> 3  ___pthread_mutex_lock (mutex=mutex at entry=0x7f7195d5ff80 <log_buffer_mutex>) at ./nptl/pthread_mutex_lock.c:93
> >> 4  0x00007f7195cc0867 in _igt_log_buffer_append (line=0x556bef182920 "(xe_eudebug_online:40711) xe/xe_eudebug-CRITICAL: Test assertion failure function __wait_token, file ../lib/xe/xe_eudebug.c:303:\n")
> >>    at ../lib/igt_core.c:461
> >> 5  igt_vlog (domain=0x7f7195d27b7f "xe/xe_eudebug", level=IGT_LOG_CRITICAL, format=<optimized out>, args=args at entry=0x7fff266ac070) at ../lib/igt_core.c:3215
> >> 6  0x00007f7195cc0b23 in igt_log (domain=domain at entry=0x7f7195d27b7f "xe/xe_eudebug", level=level at entry=IGT_LOG_CRITICAL,
> >>    format=format at entry=0x7f7195d19e60 "Test assertion failure function %s, file %s:%i:\n") at ../lib/igt_core.c:3137
> >> 7  0x00007f7195cc2bd1 in __igt_fail_assert (domain=domain at entry=0x7f7195d27b7f "xe/xe_eudebug", file=file at entry=0x7f7195d27b68 "../lib/xe/xe_eudebug.c", line=line at entry=303,
> >>    func=func at entry=0x7f7195d278b8 <__func__.29> "__wait_token", assertion=assertion at entry=0x7f7195d1b044 "ret > 0", f=f at entry=0x7f7195d27fd8 "Pipe read timeout waiting for token '%s:(%ld)'\n")
> >>    at ../lib/igt_core.c:2254
> >> 8  0x00007f7195ce9944 in __wait_token (pipe=pipe at entry=0x556bef15b4b4, token=token at entry=3, timeout_ms=60000) at ../lib/xe/xe_eudebug.c:303
> >> 9  0x00007f7195cebcf1 in wait_from_client (token=3, c=<optimized out>) at ../lib/xe/xe_eudebug.c:324
> >> 10 xe_eudebug_client_wait_done (c=0x556bef15b480) at ../lib/xe/xe_eudebug.c:1523
> >> 11 xe_eudebug_client_wait_done (c=0x556bef15b480) at ../lib/xe/xe_eudebug.c:1519
> >> 12 0x0000556bbde6bf19 in test_set_breakpoint_online_sigint_debugger (flags=16777216, hwe=0x556bef159ce8, fd=3) at ../tests/intel/xe_eudebug_online.c:1591
> >> 13 __igt_unique____real_main2500 () at ../tests/intel/xe_eudebug_online.c:2525
> >> 14 0x0000556bbde6704d in main (argc=<optimized out>, argv=<optimized out>) at ../tests/intel/xe_eudebug_online.c:2500
> >> 
> >> Cc: Zbigniew Kempczyński <zbigniew.kempczynski at intel.com>
> >> Cc: Dominik Karol Piątkowski <dominik.karol.piatkowski at intel.com>
> >> Signed-off-by: Mika Kuoppala <mika.kuoppala at linux.intel.com>
> >> ---
> >>  lib/intel_allocator_simple.c | 88 ++++++++++++++++++++----------------
> >>  1 file changed, 48 insertions(+), 40 deletions(-)
> >> 
> >> diff --git a/lib/intel_allocator_simple.c b/lib/intel_allocator_simple.c
> >> index 25b92db11..a73b16854 100644
> >> --- a/lib/intel_allocator_simple.c
> >> +++ b/lib/intel_allocator_simple.c
> >> @@ -11,6 +11,14 @@
> >>  #include "intel_bufops.h"
> >>  #include "igt_map.h"
> >>  
> >> +/* Enabling these you risk deadlock with igt_vlog mutex */
> >> +#ifdef ALLOCDBG
> >> +#define alloc_info igt_info
> >> +#define alloc_debug igt_debug
> >> +#else
> >> +#define alloc_info(...) {}
> >> +#define alloc_debug(...) {}
> >> +#endif
> >>  
> >>  /* Avoid compilation warning */
> >>  struct intel_allocator *
> >> @@ -505,7 +513,7 @@ static bool intel_allocator_simple_reserve(struct intel_allocator *ial,
> >>  		return true;
> >>  	}
> >>  
> >> -	igt_debug("Failed to reserve %llx + %llx\n", (long long)start, (long long)size);
> >> +	alloc_debug("Failed to reserve %llx + %llx\n", (long long)start, (long long)size);
> >>  	return false;
> >>  }
> >>  
> >> @@ -534,19 +542,19 @@ static bool intel_allocator_simple_unreserve(struct intel_allocator *ial,
> >>  	entry = igt_map_search_entry(ials->reserved, &start);
> >>  
> >>  	if (!entry || !entry->data) {
> >> -		igt_debug("Only reserved blocks can be unreserved\n");
> >> +		alloc_debug("Only reserved blocks can be unreserved\n");
> >>  		return false;
> >>  	}
> >>  	rec = entry->data;
> >>  
> >>  	if (rec->size != size) {
> >> -		igt_debug("Only the whole block unreservation allowed\n");
> >> +		alloc_debug("Only the whole block unreservation allowed\n");
> >>  		return false;
> >>  	}
> >>  
> >>  	if (rec->handle != handle) {
> >> -		igt_debug("Handle %u doesn't match reservation handle: %u\n",
> >> -			 rec->handle, handle);
> >> +		alloc_debug("Handle %u doesn't match reservation handle: %u\n",
> >> +			    rec->handle, handle);
> >>  		return false;
> >>  	}
> >>  
> >> @@ -610,10 +618,10 @@ static bool intel_allocator_simple_is_empty(struct intel_allocator *ial)
> >>  {
> >>  	struct intel_allocator_simple *ials = ial->priv;
> >>  
> >> -	igt_debug("<ial: %p, fd: %d> objects: %" PRId64
> >> -		  ", reserved_areas: %" PRId64 "\n",
> >> -		  ial, ial->fd,
> >> -		  ials->allocated_objects, ials->reserved_areas);
> >> +	alloc_debug("<ial: %p, fd: %d> objects: %" PRId64
> >> +		    ", reserved_areas: %" PRId64 "\n",
> >> +		    ial, ial->fd,
> >> +		    ials->allocated_objects, ials->reserved_areas);
> >>  
> >>  	return !ials->allocated_objects && !ials->reserved_areas;
> >>  }
> >> @@ -632,51 +640,51 @@ static void intel_allocator_simple_print(struct intel_allocator *ial, bool full)
> >>  	igt_assert(ials);
> >>  	heap = &ials->heap;
> >>  
> >> -	igt_info("intel_allocator_simple <ial: %p, fd: %d> on "
> >> -		 "[0x%"PRIx64" : 0x%"PRIx64"]:\n", ial, ial->fd,
> >> -		 ials->start, ials->end);
> >> +	alloc_info("intel_allocator_simple <ial: %p, fd: %d> on "
> >> +		   "[0x%"PRIx64" : 0x%"PRIx64"]:\n", ial, ial->fd,
> >> +		   ials->start, ials->end);
> >>  
> >>  	if (full) {
> >> -		igt_info("holes:\n");
> >> +		alloc_info("holes:\n");
> >>  		simple_vma_foreach_hole(hole, heap) {
> >> -			igt_info("offset = %"PRIu64" (0x%"PRIx64", "
> >> -				 "size = %"PRIu64" (0x%"PRIx64")\n",
> >> -				 hole->offset, hole->offset, hole->size,
> >> -				 hole->size);
> >> +			alloc_info("offset = %"PRIu64" (0x%"PRIx64", "
> >> +				   "size = %"PRIu64" (0x%"PRIx64")\n",
> >> +				   hole->offset, hole->offset, hole->size,
> >> +				   hole->size);
> >>  			total_free += hole->size;
> >>  		}
> >>  		igt_assert(total_free <= ials->total_size);
> >> -		igt_info("total_free: %" PRIx64
> >> -			 ", total_size: %" PRIx64
> >> -			 ", allocated_size: %" PRIx64
> >> -			 ", reserved_size: %" PRIx64 "\n",
> >> -			 total_free, ials->total_size, ials->allocated_size,
> >> -			 ials->reserved_size);
> >> +		alloc_info("total_free: %" PRIx64
> >> +			   ", total_size: %" PRIx64
> >> +			   ", allocated_size: %" PRIx64
> >> +			   ", reserved_size: %" PRIx64 "\n",
> >> +			   total_free, ials->total_size, ials->allocated_size,
> >> +			   ials->reserved_size);
> >>  		igt_assert(total_free ==
> >>  			   ials->total_size - ials->allocated_size - ials->reserved_size);
> >>  
> >> -		igt_info("objects:\n");
> >> +		alloc_info("objects:\n");
> >>  		igt_map_foreach(ials->objects, pos) {
> >>  			struct intel_allocator_record *rec = pos->data;
> >>  
> >> -			igt_info("handle = %d, offset = %"PRIu64" "
> >> -				"(0x%"PRIx64", size = %"PRIu64" (0x%"PRIx64")\n",
> >> -				 rec->handle, rec->offset, rec->offset,
> >> -				 rec->size, rec->size);
> >> +			alloc_info("handle = %d, offset = %"PRIu64" "
> >> +				   "(0x%"PRIx64", size = %"PRIu64" (0x%"PRIx64")\n",
> >> +				   rec->handle, rec->offset, rec->offset,
> >> +				   rec->size, rec->size);
> >>  			allocated_objects++;
> >>  			allocated_size += rec->size;
> >>  		}
> >>  		igt_assert(ials->allocated_size == allocated_size);
> >>  		igt_assert(ials->allocated_objects == allocated_objects);
> >>  
> >> -		igt_info("reserved areas:\n");
> >> +		alloc_info("reserved areas:\n");
> >>  		igt_map_foreach(ials->reserved, pos) {
> >>  			struct intel_allocator_record *rec = pos->data;
> >>  
> >> -			igt_info("offset = %"PRIu64" (0x%"PRIx64", "
> >> -				 "size = %"PRIu64" (0x%"PRIx64")\n",
> >> -				 rec->offset, rec->offset,
> >> -				 rec->size, rec->size);
> >> +			alloc_info("offset = %"PRIu64" (0x%"PRIx64", "
> >> +				   "size = %"PRIu64" (0x%"PRIx64")\n",
> >> +				   rec->offset, rec->offset,
> >> +				   rec->size, rec->size);
> >>  			reserved_areas++;
> >>  			reserved_size += rec->size;
> >>  		}
> >> @@ -687,12 +695,12 @@ static void intel_allocator_simple_print(struct intel_allocator *ial, bool full)
> >>  			total_free += hole->size;
> >>  	}
> >>  
> >> -	igt_info("free space: %"PRIu64"B (0x%"PRIx64") (%.2f%% full)\n"
> >> -		 "allocated objects: %"PRIu64", reserved areas: %"PRIu64"\n",
> >> -		 total_free, total_free,
> >> -		 ((double) (ials->total_size - total_free) /
> >> -		  (double) ials->total_size) * 100,
> >> -		 ials->allocated_objects, ials->reserved_areas);
> >> +	alloc_info("free space: %"PRIu64"B (0x%"PRIx64") (%.2f%% full)\n"
> >> +		   "allocated objects: %"PRIu64", reserved areas: %"PRIu64"\n",
> >> +		   total_free, total_free,
> >> +		   ((double) (ials->total_size - total_free) /
> >> +		    (double) ials->total_size) * 100,
> >> +		   ials->allocated_objects, ials->reserved_areas);
> >>  }
> >>  
> >>  struct intel_allocator *
> >> @@ -702,7 +710,7 @@ intel_allocator_simple_create(int fd, uint64_t start, uint64_t end,
> >>  	struct intel_allocator *ial;
> >>  	struct intel_allocator_simple *ials;
> >>  
> >> -	igt_debug("Using simple allocator\n");
> >> +	alloc_debug("Using simple allocator\n");
> >>  
> >>  	ial = calloc(1, sizeof(*ial));
> >>  	igt_assert(ial);
> >> -- 
> >> 2.43.0
> >> 


More information about the igt-dev mailing list