ftrace { tracer = function_graph; options = event-fork, sym-addr, stacktrace; buffer_size = 1M; alloc_snapshot; trace_clock = global; events = "task:task_newtask", "initcall:*"; event.sched.sched_process_exec { filter = "pid < 128"; } instance.bar { event.kprobes { myevent { probes = "vfs_read $arg2 $arg3"; } myevent2 { probes = "vfs_write $arg2 +0($arg2):ustring $arg3"; } myevent3 { probes = "initrd_load"; } enable } } instance.foo { tracer = function; tracing_on = false; }; } kernel { ftrace_dump_on_oops = "orig_cpu" traceoff_on_warning }