early_enable_events(9)

💖 early_enable_events(9) 💖

okay bestie, this is the Kernel API Manual page for early_enable_events, and it's literally about enabling events from the bootup buffer. let's get into it 💅

---

🌸 NAME 🌸

early_enable_events — enable events from the bootup buffer ✨

---

🦋 SYNOPSIS 🦋

void early_enable_events (struct trace_array *tr , char *buf , bool
       disable_first );

---

🎀 ARGUMENTS 🎀

• tr — the trace array to enable the events in 💖
• buf — the buffer containing the comma separated list of events ✨
• disable_first — if true, disable all events in buf before enabling them 👑

---

💅 DESCRIPTION 💅

so this function enables events from the bootup buffer. if disable_first is true, it will first disable all events in the buffer before enabling them. periodt 💖

now for syscall events, which rely on a global refcount to register the SYSCALL_WORK_SYSCALL_TRACEPOINT flag (especially for pid 1), we must ensure the refcount hits zero before re-enabling them. a simple “disable then enable” per-event is not enough if multiple syscalls are used, as the refcount will stay above zero. thus, we need a two-phase approach: disable all, then enable all 🔥

literally the whole point, bestie: two phases, no shortcuts 🫶

---

🌈 SEE ALSO 🌈

• Kernel file ./kernel/trace/trace_events.c
• trace_event_buffer_reserve(9)
• trace_set_clr_event(9)
• trace_array_set_clr_event(9)
• t_show_filters(9)
• t_show_triggers(9)
• ftrace_event_show_filters_open(9)
• ftrace_event_show_triggers_open(9)
• trace_get_event_file(9)
• trace_put_event_file(9)
• event_trace_add_tracer(9)

---

mwah 💋 — source: ./kernel/trace · version: early_enable_events(9) · date: October 2026