0001 ====================================
0002 Concurrency Managed Workqueue (cmwq)
0003 ====================================
0004
0005 :Date: September, 2010
0006 :Author: Tejun Heo <tj@kernel.org>
0007 :Author: Florian Mickler <florian@mickler.org>
0008
0009
0010 Introduction
0011 ============
0012
0013 There are many cases where an asynchronous process execution context
0014 is needed and the workqueue (wq) API is the most commonly used
0015 mechanism for such cases.
0016
0017 When such an asynchronous execution context is needed, a work item
0018 describing which function to execute is put on a queue. An
0019 independent thread serves as the asynchronous execution context. The
0020 queue is called workqueue and the thread is called worker.
0021
0022 While there are work items on the workqueue the worker executes the
0023 functions associated with the work items one after the other. When
0024 there is no work item left on the workqueue the worker becomes idle.
0025 When a new work item gets queued, the worker begins executing again.
0026
0027
0028 Why cmwq?
0029 =========
0030
0031 In the original wq implementation, a multi threaded (MT) wq had one
0032 worker thread per CPU and a single threaded (ST) wq had one worker
0033 thread system-wide. A single MT wq needed to keep around the same
0034 number of workers as the number of CPUs. The kernel grew a lot of MT
0035 wq users over the years and with the number of CPU cores continuously
0036 rising, some systems saturated the default 32k PID space just booting
0037 up.
0038
0039 Although MT wq wasted a lot of resource, the level of concurrency
0040 provided was unsatisfactory. The limitation was common to both ST and
0041 MT wq albeit less severe on MT. Each wq maintained its own separate
0042 worker pool. An MT wq could provide only one execution context per CPU
0043 while an ST wq one for the whole system. Work items had to compete for
0044 those very limited execution contexts leading to various problems
0045 including proneness to deadlocks around the single execution context.
0046
0047 The tension between the provided level of concurrency and resource
0048 usage also forced its users to make unnecessary tradeoffs like libata
0049 choosing to use ST wq for polling PIOs and accepting an unnecessary
0050 limitation that no two polling PIOs can progress at the same time. As
0051 MT wq don't provide much better concurrency, users which require
0052 higher level of concurrency, like async or fscache, had to implement
0053 their own thread pool.
0054
0055 Concurrency Managed Workqueue (cmwq) is a reimplementation of wq with
0056 focus on the following goals.
0057
0058 * Maintain compatibility with the original workqueue API.
0059
0060 * Use per-CPU unified worker pools shared by all wq to provide
0061 flexible level of concurrency on demand without wasting a lot of
0062 resource.
0063
0064 * Automatically regulate worker pool and level of concurrency so that
0065 the API users don't need to worry about such details.
0066
0067
0068 The Design
0069 ==========
0070
0071 In order to ease the asynchronous execution of functions a new
0072 abstraction, the work item, is introduced.
0073
0074 A work item is a simple struct that holds a pointer to the function
0075 that is to be executed asynchronously. Whenever a driver or subsystem
0076 wants a function to be executed asynchronously it has to set up a work
0077 item pointing to that function and queue that work item on a
0078 workqueue.
0079
0080 Special purpose threads, called worker threads, execute the functions
0081 off of the queue, one after the other. If no work is queued, the
0082 worker threads become idle. These worker threads are managed in so
0083 called worker-pools.
0084
0085 The cmwq design differentiates between the user-facing workqueues that
0086 subsystems and drivers queue work items on and the backend mechanism
0087 which manages worker-pools and processes the queued work items.
0088
0089 There are two worker-pools, one for normal work items and the other
0090 for high priority ones, for each possible CPU and some extra
0091 worker-pools to serve work items queued on unbound workqueues - the
0092 number of these backing pools is dynamic.
0093
0094 Subsystems and drivers can create and queue work items through special
0095 workqueue API functions as they see fit. They can influence some
0096 aspects of the way the work items are executed by setting flags on the
0097 workqueue they are putting the work item on. These flags include
0098 things like CPU locality, concurrency limits, priority and more. To
0099 get a detailed overview refer to the API description of
0100 ``alloc_workqueue()`` below.
0101
0102 When a work item is queued to a workqueue, the target worker-pool is
0103 determined according to the queue parameters and workqueue attributes
0104 and appended on the shared worklist of the worker-pool. For example,
0105 unless specifically overridden, a work item of a bound workqueue will
0106 be queued on the worklist of either normal or highpri worker-pool that
0107 is associated to the CPU the issuer is running on.
0108
0109 For any worker pool implementation, managing the concurrency level
0110 (how many execution contexts are active) is an important issue. cmwq
0111 tries to keep the concurrency at a minimal but sufficient level.
0112 Minimal to save resources and sufficient in that the system is used at
0113 its full capacity.
0114
0115 Each worker-pool bound to an actual CPU implements concurrency
0116 management by hooking into the scheduler. The worker-pool is notified
0117 whenever an active worker wakes up or sleeps and keeps track of the
0118 number of the currently runnable workers. Generally, work items are
0119 not expected to hog a CPU and consume many cycles. That means
0120 maintaining just enough concurrency to prevent work processing from
0121 stalling should be optimal. As long as there are one or more runnable
0122 workers on the CPU, the worker-pool doesn't start execution of a new
0123 work, but, when the last running worker goes to sleep, it immediately
0124 schedules a new worker so that the CPU doesn't sit idle while there
0125 are pending work items. This allows using a minimal number of workers
0126 without losing execution bandwidth.
0127
0128 Keeping idle workers around doesn't cost other than the memory space
0129 for kthreads, so cmwq holds onto idle ones for a while before killing
0130 them.
0131
0132 For unbound workqueues, the number of backing pools is dynamic.
0133 Unbound workqueue can be assigned custom attributes using
0134 ``apply_workqueue_attrs()`` and workqueue will automatically create
0135 backing worker pools matching the attributes. The responsibility of
0136 regulating concurrency level is on the users. There is also a flag to
0137 mark a bound wq to ignore the concurrency management. Please refer to
0138 the API section for details.
0139
0140 Forward progress guarantee relies on that workers can be created when
0141 more execution contexts are necessary, which in turn is guaranteed
0142 through the use of rescue workers. All work items which might be used
0143 on code paths that handle memory reclaim are required to be queued on
0144 wq's that have a rescue-worker reserved for execution under memory
0145 pressure. Else it is possible that the worker-pool deadlocks waiting
0146 for execution contexts to free up.
0147
0148
0149 Application Programming Interface (API)
0150 =======================================
0151
0152 ``alloc_workqueue()`` allocates a wq. The original
0153 ``create_*workqueue()`` functions are deprecated and scheduled for
0154 removal. ``alloc_workqueue()`` takes three arguments - ``@name``,
0155 ``@flags`` and ``@max_active``. ``@name`` is the name of the wq and
0156 also used as the name of the rescuer thread if there is one.
0157
0158 A wq no longer manages execution resources but serves as a domain for
0159 forward progress guarantee, flush and work item attributes. ``@flags``
0160 and ``@max_active`` control how work items are assigned execution
0161 resources, scheduled and executed.
0162
0163
0164 ``flags``
0165 ---------
0166
0167 ``WQ_UNBOUND``
0168 Work items queued to an unbound wq are served by the special
0169 worker-pools which host workers which are not bound to any
0170 specific CPU. This makes the wq behave as a simple execution
0171 context provider without concurrency management. The unbound
0172 worker-pools try to start execution of work items as soon as
0173 possible. Unbound wq sacrifices locality but is useful for
0174 the following cases.
0175
0176 * Wide fluctuation in the concurrency level requirement is
0177 expected and using bound wq may end up creating large number
0178 of mostly unused workers across different CPUs as the issuer
0179 hops through different CPUs.
0180
0181 * Long running CPU intensive workloads which can be better
0182 managed by the system scheduler.
0183
0184 ``WQ_FREEZABLE``
0185 A freezable wq participates in the freeze phase of the system
0186 suspend operations. Work items on the wq are drained and no
0187 new work item starts execution until thawed.
0188
0189 ``WQ_MEM_RECLAIM``
0190 All wq which might be used in the memory reclaim paths **MUST**
0191 have this flag set. The wq is guaranteed to have at least one
0192 execution context regardless of memory pressure.
0193
0194 ``WQ_HIGHPRI``
0195 Work items of a highpri wq are queued to the highpri
0196 worker-pool of the target cpu. Highpri worker-pools are
0197 served by worker threads with elevated nice level.
0198
0199 Note that normal and highpri worker-pools don't interact with
0200 each other. Each maintains its separate pool of workers and
0201 implements concurrency management among its workers.
0202
0203 ``WQ_CPU_INTENSIVE``
0204 Work items of a CPU intensive wq do not contribute to the
0205 concurrency level. In other words, runnable CPU intensive
0206 work items will not prevent other work items in the same
0207 worker-pool from starting execution. This is useful for bound
0208 work items which are expected to hog CPU cycles so that their
0209 execution is regulated by the system scheduler.
0210
0211 Although CPU intensive work items don't contribute to the
0212 concurrency level, start of their executions is still
0213 regulated by the concurrency management and runnable
0214 non-CPU-intensive work items can delay execution of CPU
0215 intensive work items.
0216
0217 This flag is meaningless for unbound wq.
0218
0219
0220 ``max_active``
0221 --------------
0222
0223 ``@max_active`` determines the maximum number of execution contexts
0224 per CPU which can be assigned to the work items of a wq. For example,
0225 with ``@max_active`` of 16, at most 16 work items of the wq can be
0226 executing at the same time per CPU.
0227
0228 Currently, for a bound wq, the maximum limit for ``@max_active`` is
0229 512 and the default value used when 0 is specified is 256. For an
0230 unbound wq, the limit is higher of 512 and 4 *
0231 ``num_possible_cpus()``. These values are chosen sufficiently high
0232 such that they are not the limiting factor while providing protection
0233 in runaway cases.
0234
0235 The number of active work items of a wq is usually regulated by the
0236 users of the wq, more specifically, by how many work items the users
0237 may queue at the same time. Unless there is a specific need for
0238 throttling the number of active work items, specifying '0' is
0239 recommended.
0240
0241 Some users depend on the strict execution ordering of ST wq. The
0242 combination of ``@max_active`` of 1 and ``WQ_UNBOUND`` used to
0243 achieve this behavior. Work items on such wq were always queued to the
0244 unbound worker-pools and only one work item could be active at any given
0245 time thus achieving the same ordering property as ST wq.
0246
0247 In the current implementation the above configuration only guarantees
0248 ST behavior within a given NUMA node. Instead ``alloc_ordered_queue()`` should
0249 be used to achieve system-wide ST behavior.
0250
0251
0252 Example Execution Scenarios
0253 ===========================
0254
0255 The following example execution scenarios try to illustrate how cmwq
0256 behave under different configurations.
0257
0258 Work items w0, w1, w2 are queued to a bound wq q0 on the same CPU.
0259 w0 burns CPU for 5ms then sleeps for 10ms then burns CPU for 5ms
0260 again before finishing. w1 and w2 burn CPU for 5ms then sleep for
0261 10ms.
0262
0263 Ignoring all other tasks, works and processing overhead, and assuming
0264 simple FIFO scheduling, the following is one highly simplified version
0265 of possible sequences of events with the original wq. ::
0266
0267 TIME IN MSECS EVENT
0268 0 w0 starts and burns CPU
0269 5 w0 sleeps
0270 15 w0 wakes up and burns CPU
0271 20 w0 finishes
0272 20 w1 starts and burns CPU
0273 25 w1 sleeps
0274 35 w1 wakes up and finishes
0275 35 w2 starts and burns CPU
0276 40 w2 sleeps
0277 50 w2 wakes up and finishes
0278
0279 And with cmwq with ``@max_active`` >= 3, ::
0280
0281 TIME IN MSECS EVENT
0282 0 w0 starts and burns CPU
0283 5 w0 sleeps
0284 5 w1 starts and burns CPU
0285 10 w1 sleeps
0286 10 w2 starts and burns CPU
0287 15 w2 sleeps
0288 15 w0 wakes up and burns CPU
0289 20 w0 finishes
0290 20 w1 wakes up and finishes
0291 25 w2 wakes up and finishes
0292
0293 If ``@max_active`` == 2, ::
0294
0295 TIME IN MSECS EVENT
0296 0 w0 starts and burns CPU
0297 5 w0 sleeps
0298 5 w1 starts and burns CPU
0299 10 w1 sleeps
0300 15 w0 wakes up and burns CPU
0301 20 w0 finishes
0302 20 w1 wakes up and finishes
0303 20 w2 starts and burns CPU
0304 25 w2 sleeps
0305 35 w2 wakes up and finishes
0306
0307 Now, let's assume w1 and w2 are queued to a different wq q1 which has
0308 ``WQ_CPU_INTENSIVE`` set, ::
0309
0310 TIME IN MSECS EVENT
0311 0 w0 starts and burns CPU
0312 5 w0 sleeps
0313 5 w1 and w2 start and burn CPU
0314 10 w1 sleeps
0315 15 w2 sleeps
0316 15 w0 wakes up and burns CPU
0317 20 w0 finishes
0318 20 w1 wakes up and finishes
0319 25 w2 wakes up and finishes
0320
0321
0322 Guidelines
0323 ==========
0324
0325 * Do not forget to use ``WQ_MEM_RECLAIM`` if a wq may process work
0326 items which are used during memory reclaim. Each wq with
0327 ``WQ_MEM_RECLAIM`` set has an execution context reserved for it. If
0328 there is dependency among multiple work items used during memory
0329 reclaim, they should be queued to separate wq each with
0330 ``WQ_MEM_RECLAIM``.
0331
0332 * Unless strict ordering is required, there is no need to use ST wq.
0333
0334 * Unless there is a specific need, using 0 for @max_active is
0335 recommended. In most use cases, concurrency level usually stays
0336 well under the default limit.
0337
0338 * A wq serves as a domain for forward progress guarantee
0339 (``WQ_MEM_RECLAIM``, flush and work item attributes. Work items
0340 which are not involved in memory reclaim and don't need to be
0341 flushed as a part of a group of work items, and don't require any
0342 special attribute, can use one of the system wq. There is no
0343 difference in execution characteristics between using a dedicated wq
0344 and a system wq.
0345
0346 * Unless work items are expected to consume a huge amount of CPU
0347 cycles, using a bound wq is usually beneficial due to the increased
0348 level of locality in wq operations and work item execution.
0349
0350
0351 Debugging
0352 =========
0353
0354 Because the work functions are executed by generic worker threads
0355 there are a few tricks needed to shed some light on misbehaving
0356 workqueue users.
0357
0358 Worker threads show up in the process list as: ::
0359
0360 root 5671 0.0 0.0 0 0 ? S 12:07 0:00 [kworker/0:1]
0361 root 5672 0.0 0.0 0 0 ? S 12:07 0:00 [kworker/1:2]
0362 root 5673 0.0 0.0 0 0 ? S 12:12 0:00 [kworker/0:0]
0363 root 5674 0.0 0.0 0 0 ? S 12:13 0:00 [kworker/1:0]
0364
0365 If kworkers are going crazy (using too much cpu), there are two types
0366 of possible problems:
0367
0368 1. Something being scheduled in rapid succession
0369 2. A single work item that consumes lots of cpu cycles
0370
0371 The first one can be tracked using tracing: ::
0372
0373 $ echo workqueue:workqueue_queue_work > /sys/kernel/debug/tracing/set_event
0374 $ cat /sys/kernel/debug/tracing/trace_pipe > out.txt
0375 (wait a few secs)
0376 ^C
0377
0378 If something is busy looping on work queueing, it would be dominating
0379 the output and the offender can be determined with the work item
0380 function.
0381
0382 For the second type of problems it should be possible to just check
0383 the stack trace of the offending worker thread. ::
0384
0385 $ cat /proc/THE_OFFENDING_KWORKER/stack
0386
0387 The work item's function should be trivially visible in the stack
0388 trace.
0389
0390 Non-reentrance Conditions
0391 =========================
0392
0393 Workqueue guarantees that a work item cannot be re-entrant if the following
0394 conditions hold after a work item gets queued:
0395
0396 1. The work function hasn't been changed.
0397 2. No one queues the work item to another workqueue.
0398 3. The work item hasn't been reinitiated.
0399
0400 In other words, if the above conditions hold, the work item is guaranteed to be
0401 executed by at most one worker system-wide at any given time.
0402
0403 Note that requeuing the work item (to the same queue) in the self function
0404 doesn't break these conditions, so it's safe to do. Otherwise, caution is
0405 required when breaking the conditions inside a work function.
0406
0407
0408 Kernel Inline Documentations Reference
0409 ======================================
0410
0411 .. kernel-doc:: include/linux/workqueue.h
0412
0413 .. kernel-doc:: kernel/workqueue.c