arch/arm/include/asm/mmu_context.h | 6 +++++- arch/riscv/include/asm/sync_core.h | 2 +- arch/s390/include/asm/mmu_context.h | 6 +++++- arch/sparc/include/asm/mmu_context_64.h | 6 +++++- arch/x86/include/asm/mmu_context.h | 22 +++++++++++++++++++++- arch/x86/include/asm/sync_core.h | 2 +- arch/x86/mm/tlb.c | 21 --------------------- include/linux/perf_event.h | 2 +- include/linux/sched/mm.h | 10 +++++----- include/linux/tick.h | 4 ++-- include/linux/vtime.h | 8 ++++---- kernel/sched/core.c | 20 +++++++++++++------- 12 files changed, 63 insertions(+), 46 deletions(-)
The purpose of this series of patches is to optimize the performance of context switching. It does not change the code logic, but only modifies the inline attributes of some functions. The original reason for writing this patch is that, when debugging a schedule performance problem, I discovered that the finish_task_switch function was not inlined, even in the O2 level optimization. This may affect performance for the following reasons: 1. It is in the context switching code, and is called frequently. 2. Because of the modern CPU mitigations for vulnerabilities, inside switch_mm, the instruction pipeline and cache may be cleared, and the branch and cache miss may increase. finish_task_switch is right after that, so this may cause greater performance degradation. 3. The __schedule function has __sched attribute, which makes it be placed in the ".sched.text" section, while finish_task_switch does not, which causes their distance to be very far in binary, aggravating the above performance degradation. I also noticed that on x86, enter_lazy_tlb func is not inlined. It's very short, and since the cpu_tlbstate and cpu_tlbstate_shared variables are global, it can be completely inline. In fact, the implementation of this function on other architectures is inline. This series of patches mainly does the following things: 1. Change enter_lazy_tlb to inline on x86. 2. Let the finish_task_switch function be called inline during context switching. 3. Set the subfunctions called by finish_task_switch to be inline: When finish_task_switch is changed to an inline func, the number of calls to the subfunctions(which called by finish_task_switch) in this translation unit increases due to the inline expansion of the finish_task_switch function. For example, the finish_lock_switch function originally had only one calling point in core.o (in finish_task_switch func), but because the finish_task_switch was inlined, the calling points become two. Due to compiler optimization strategies, these subfunctions may transition from inline functions to non inline functions, which can actually lead to performance degradation. So I modify some subfunctions of finish_task_stwitch to be always inline to prevent degradation. These functions are either very short or are only called once in the entire kernel, so they do not have a big impact on the size. This series of patches does not find any impact on the size of the bzImage image (using Os to build). Xie Yuanbin (3): arch/arm/include/asm/mmu_context.h | 6 +++++- arch/riscv/include/asm/sync_core.h | 2 +- arch/s390/include/asm/mmu_context.h | 6 +++++- arch/sparc/include/asm/mmu_context_64.h | 6 +++++- arch/x86/include/asm/mmu_context.h | 22 +++++++++++++++++++++- arch/x86/include/asm/sync_core.h | 2 +- arch/x86/mm/tlb.c | 21 --------------------- include/linux/perf_event.h | 2 +- include/linux/sched/mm.h | 10 +++++----- include/linux/tick.h | 4 ++-- include/linux/vtime.h | 8 ++++---- kernel/sched/core.c | 20 +++++++++++++------- 12 files changed, 63 insertions(+), 46 deletions(-) -- 2.51.0
I conducted a more detailed performance test on this series of patches.
https://lore.kernel.org/lkml/20251024182628.68921-1-qq570070308@gmail.com/t/#u
The data is as follows:
1. Time spent on calling finish_task_switch (unit: rdtsc):
| compiler && appended cmdline | without patches | with patches |
| clang + NA | 14.11 - 14.16 | 12.73 - 12.74 |
| clang + "spectre_v2_user=on" | 30.04 - 30.18 | 17.64 - 17.73 |
| gcc + NA | 16.73 - 16.83 | 15.35 - 15.44 |
| gcc + "spectre_v2_user=on" | 40.91 - 40.96 | 30.61 - 30.66 |
Note: I use x86 for testing here. Different architectures have different
cmdlines for configuring mitigations. For example, on arm64, spectre v2
mitigation is enabled by default, and it should be disabled by adding
"nospectre_v2" to the cmdline.
2. bzImage size:
| compiler | without patches | with patches |
| clang | 13173760 | 13173760 |
| gcc | 12166144 | 12166144 |
No size changes were found on bzImage.
Test info:
1. kernel source:
latest linux-next branch:
commit id 72fb0170ef1f45addf726319c52a0562b6913707
2. test machine:
cpu: intel i5-8300h@4Ghz
mem: DDR4 2666MHz
Bare-metal boot, non-virtualized environment
3. compiler:
gcc: gcc version 15.2.0 (Debian 15.2.0-7)
clang: Debian clang version 22.0.0 (++20250731080150+be449d6b6587-1~exp1+b1)
4. config:
base on default x86_64_defconfig, and setting:
CONFIG_PREEMPT=y
CONFIG_PREEMPT_DYNAMIC=n
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
CONFIG_HZ=100
CONFIG_DEBUG_ENTRY=n
CONFIG_X86_DEBUG_FPU=n
CONFIG_EXPERT=y
CONFIG_MODIFY_LDT_SYSCALL=n
CONFIG_CGROUPS=n
CONFIG_BUG=n
CONFIG_BLK_DEV_NVME=y
5. test method:
Use rdtsc (cntvct_el0 can be use on arm64/arm) to obtain timestamps
before and after finish_task_switch calling point, and created multiple
processes to trigger context switches, then calculated the average
duration of the finish_task_switch call.
Note that using multiple processes rather than threads is recommended for
testing, because this will trigger switch_mm (where spectre v2 mitigations
may be performed) during context switching.
I put my test code here:
kernel(just for testing, not a commit):
```
diff --git a/arch/x86/entry/syscalls/syscall_64.tbl b/arch/x86/entry/syscalls/syscall_64.tbl
index ced2a1dee..9e72a4a1a 100644
--- a/arch/x86/entry/syscalls/syscall_64.tbl
+++ b/arch/x86/entry/syscalls/syscall_64.tbl
@@ -394,6 +394,7 @@
467 common open_tree_attr sys_open_tree_attr
468 common file_getattr sys_file_getattr
469 common file_setattr sys_file_setattr
+470 common mysyscall sys_mysyscall
#
# Due to a historical design error, certain syscalls are numbered differently
diff --git a/kernel/sched/core.c b/kernel/sched/core.c
index 1842285ea..bcbfea69d 100644
--- a/kernel/sched/core.c
+++ b/kernel/sched/core.c
@@ -5191,6 +5191,40 @@ asmlinkage __visible void schedule_tail(struct task_struct *prev)
calculate_sigpending();
}
+static DEFINE_PER_CPU(uint64_t, mytime);
+static DEFINE_PER_CPU(uint64_t, total_time);
+static DEFINE_PER_CPU(uint64_t, last_total_time);
+static DEFINE_PER_CPU(uint64_t, total_count);
+
+static __always_inline uint64_t myrdtsc(void)
+{
+ register uint64_t rax __asm__("rax");
+ register uint64_t rdx __asm__("rdx");
+
+ __asm__ __volatile__ ("rdtsc" : "=a"(rax), "=d"(rdx));
+ return rax | (rdx << 32);
+}
+
+static __always_inline void start_time(void)
+{
+ raw_cpu_write(mytime, myrdtsc());
+}
+
+static __always_inline void end_time(void)
+{
+ const uint64_t end_time = myrdtsc();
+ const uint64_t cost_time = end_time - raw_cpu_read(mytime);
+
+ raw_cpu_add(total_time, cost_time);
+ if (raw_cpu_inc_return(total_count) % (1 << 20) == 0) {
+ const uint64_t t = raw_cpu_read(total_time);
+ const uint64_t lt = raw_cpu_read(last_total_time);
+
+ pr_emerg("cpu %d total_time %llu, last_total_time %llu, cha : %llu\n", raw_smp_processor_id(), t, lt, t - lt);
+ raw_cpu_write(last_total_time, t);
+ }
+}
+
/*
* context_switch - switch to the new MM and the new thread's register state.
*/
@@ -5254,7 +5288,10 @@ context_switch(struct rq *rq, struct task_struct *prev,
switch_to(prev, next, prev);
barrier();
- return finish_task_switch(prev);
+ start_time();
+ rq = finish_task_switch(prev);
+ end_time();
+ return rq;
}
/*
@@ -10854,3 +10891,19 @@ void sched_change_end(struct sched_change_ctx *ctx)
p->sched_class->prio_changed(rq, p, ctx->prio);
}
}
+
+
+static struct task_struct *my_task;
+
+SYSCALL_DEFINE0(mysyscall)
+{
+ preempt_disable();
+ while (1) {
+ if (my_task)
+ wake_up_process(my_task);
+ my_task = current;
+ set_current_state(TASK_UNINTERRUPTIBLE);
+ __schedule(0);
+ }
+ return 0;
+}
```
User program:
```c
int main()
{
cpu_set_t mask;
if (fork())
sleep(1);
CPU_ZERO(&mask);
CPU_SET(5, &mask); // Assume that cpu5 exists
assert(sched_setaffinity(0, sizeof(mask), &mask) == 0);
syscall(470);
// unreachable
return 0;
}
```
Usage:
1. set core5 as isolated cpu: add "isolcpus=5" to cmdline
2. run user programe
3. wait for kernel print
Everyone is welcome to test it.
Xie Yuanbin
On Sat, Oct 25, 2025 at 02:26:25AM +0800, Xie Yuanbin wrote: > The purpose of this series of patches is to optimize the performance of > context switching. It does not change the code logic, but only modifies > the inline attributes of some functions. > > The original reason for writing this patch is that, when debugging a > schedule performance problem, I discovered that the finish_task_switch > function was not inlined, even in the O2 level optimization. This may > affect performance for the following reasons: Not sure what compiler you're running, but it is on the one random compile I just checked. > 1. It is in the context switching code, and is called frequently. > 2. Because of the modern CPU mitigations for vulnerabilities, inside > switch_mm, the instruction pipeline and cache may be cleared, and the > branch and cache miss may increase. finish_task_switch is right after > that, so this may cause greater performance degradation. That patch really is one of the ugliest things I've seen in a while; and you have no performance numbers included or any other justification for any of this ugly. > 3. The __schedule function has __sched attribute, which makes it be > placed in the ".sched.text" section, while finish_task_switch does not, > which causes their distance to be very far in binary, aggravating the > above performance degradation. How? If it doesn't get inlined it will be a direct call, in which case the prefetcher should have no trouble.
On Sat, 25 Oct 2025 14:26:59 +0200, Peter Zijlstra wrote: > Not sure what compiler you're running, but it is on the one random > compile I just checked. I'm using gcc 15.2 and clang 22 now, Neither of them inlines finish_task_switch function, even at O2 optimization level. > you have no performance numbers included or any other justification for > any of this ugly. I apologize for this. I originally discovered this missed optimization when I was debugging a scheduling performance issue. I was using the company's equipment and could only observe macro business performance data, but not the specific scheduling time consuming data. Today I did some testing using my own devices, the testing logic is as follows: ``` - return finish_task_switch(prev); + start_time = rdtsc(); + barrier(); + rq = finish_task_switch(prev); + barrier(); + end_time = rdtsc; + return rq; ``` The test data is as follows: 1. mitigations Off, without patches: 13.5 - 13.7 2. mitigations Off, with patches: 13.5 - 13.7 3. mitigations On, without patches: 23.3 - 23.6 4. mitigations On, with patches: 16.6 - 16.8 Some config: PREEMPT=n DEBUG_PREEMPT=n NO_HZ_FULL=n NO_HZ_IDLE=y STACKPROTECTOR_STRONG=y On my device, these patches have very little effect when mitigations off, but the improvement was still very noticeable when the mitigation was on. I suspect this is because I'm using a recent Ryzen CPU with a very powerful instruction cache and branch prediction capabilities, so without considering the Spectre vulnerability, inlining is less effective. However, on embedded devices with small instruction caches, these patches should still be effective even with mitigations off. >> 3. The __schedule function has __sched attribute, which makes it be >> placed in the ".sched.text" section, while finish_task_switch does not, >> which causes their distance to be very far in binary, aggravating the >> above performance degradation. > > How? If it doesn't get inlined it will be a direct call, in which case > the prefetcher should have no trouble. Placing related functions and data close together in the binary is a common compiler optimization. For example, the cold and hot attributes will place codes in ".text.hot" and ".text.cold" sections. This reduces cache misses for instruction and data caches. The current code adds the __sched attribute to the __schedule function (placing it into ".text.sched" section), but not to finish_task_switch, causing them to be very far apart in the binary. If the __schedule function didn't have the __sched attribute, both would be in the .text section of the sched.o translation unit. Thus, the __sched attribute in the __schedule function actually causes a degradation, and inlining finish_task_switch can alleviate this problem. Xie Yuanbin
© 2016 - 2026 Red Hat, Inc.