Re: [PATCH v2 0/5] tracepoints: Add warnings for unused tracepoints and trace events
From: Steven Rostedt
Date: Fri Jun 13 2025 - 10:30:32 EST
On Thu, 12 Jun 2025 19:58:27 -0400
Steven Rostedt <rostedt@xxxxxxxxxxx> wrote:
> Every trace event can take up to 5K of memory in text and meta data regardless
> if they are used or not. Trace events should not be created if they are not
> used. Currently there's over a hundred events in the kernel that are defined
> but unused, either because their callers were removed without removing the
> trace event with it, or a config hides the trace event caller but not the
> trace event itself. And in some cases, trace events were simply added but were
> never called for whatever reason. The number of unused trace events continues
> to grow.
Now it's been a while since I looked at the actual sizes, so I decided
to see what they are again.
So I created a trace header with 10 events (attached file), that had this:
TRACE_EVENT(size_event_1,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
And I created 9 more by just renaming the event name (size_event_2, etc).
I also looked at how well DEFINE_EVENT() works (note a TRACE_EVENT()
macro is just a DECLARE_EVENT_CLASS() followed by a DEFINE_EVENT() with
the same name as the class, so I could use the first TRACE_EVENT as a
class and the first event).
DEFINE_EVENT(size_event_1, size_event_2,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
The module is simply:
echo '#include <linux/module.h>
#define CREATE_TRACE_POINTS
#include "size_events.h"
static __init int size_init(void)
{
return 0;
}
static __exit void size_exit(void)
{
}
module_init(size_init);
module_exit(size_exit);
MODULE_AUTHOR("Steven Rostedt");
MODULE_DESCRIPTION("Test the size of trace event");
MODULE_LICENSE("GPL");' > event-mod.c
The results are (renaming the module to what they did):
text data bss dec hex filename
629 1440 0 2069 815 no-events.ko
44837 15424 0 60261 eb65 trace-events.ko
11495 8064 0 19559 4c67 define-events.ko
With no events, the size is 2069.
With full trace events it jumped to 60261
With One DECLARE_EVENT_CLASS() and 9 DEFINE_EVENT(), it changed to 19559
That means each TRACE_EVENT() is approximately 5819 bytes.
(60261 - 2069) / 10
And each DEFINE_EVENT() is approximately 1296 bytes.
((19559 - 2069) - 5819) / 9
Now I do have a bit of debugging options enabled which could cause this
to bloat even more. But yeah, trace events do take up a bit of memory.
-- Steve
/* SPDX-License-Identifier: GPL-2.0 */
#undef TRACE_SYSTEM
#define TRACE_SYSTEM event-sizes
#undef TRACE_SYSTEM_VAR
#define TRACE_SYSTEM_VAR event_sizes
#if !defined(_SIZE_EVENT_H) || defined(TRACE_HEADER_MULTI_READ)
#define _SIZE_EVENT_H
#include <linux/tracepoint.h>
#ifndef SIZE_EVENT_DEFINED
#define SIZE_EVENT_DEFINED
struct size_event_struct {
unsigned long a;
unsigned long b;
};
#endif
#define DEFINE_EVENT_SIZES 1
#define DEFINE_FULL_EVENTS 0
#if DEFINE_EVENT_SIZES
TRACE_EVENT(size_event_1,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
#if DEFINE_FULL_EVENTS
TRACE_EVENT(size_event_2,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_3,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_4,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_5,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_6,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_7,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_8,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_9,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
TRACE_EVENT(size_event_10,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B),
TP_STRUCT__entry(
__field( unsigned long, Aa)
__field( unsigned long, Ab)
__field( unsigned long, Ba)
__field( unsigned long, Bb)
),
TP_fast_assign(
__entry->Aa = A->a;
__entry->Ab = A->b;
__entry->Ba = B->a;
__entry->Bb = B->b;
),
TP_printk("Aa=%ld Ab=%ld Ba=%ld Bb=%ld",
__entry->Aa, __entry->Ab, __entry->Ba, __entry->Bb)
);
#else /* !DEFINE_FULL_EVENTS */
DEFINE_EVENT(size_event_1, size_event_2,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_3,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_4,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_5,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_6,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_7,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_8,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_9,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
DEFINE_EVENT(size_event_1, size_event_10,
TP_PROTO(struct size_event_struct *A, struct size_event_struct *B),
TP_ARGS(A, B));
#endif /* !DEFINE_FULL_EVENTS */
#endif /* DEFINE_EVENT_SIZES */
#endif
/***** NOTICE! The #if protection ends here. *****/
#undef TRACE_INCLUDE_PATH
#undef TRACE_INCLUDE_FILE
#define TRACE_INCLUDE_PATH .
#define TRACE_INCLUDE_FILE size_events
#include <trace/define_trace.h>