WARNING in tracepoint_probe_unregister

Status: upstream: reported on 2026/08/09 19:09
Reported-by: syzbot+229e728ebb8d6bd9e216@syzkaller.appspotmail.com
First crash: 64d, last: 44d
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-6-12 WARNING in tracepoint_probe_unregister -1 syz, C 8 15d 69d 0/1 premoderation: reported C repro on 2026/08/04 06:27
upstream WARNING in tracepoint_probe_unregister block trace -1 syz, C 115 3137d 3263d 4/29 fixed on 2018/03/12 10:10
upstream WARNING in tracepoint_probe_unregister (2) trace -1 120 3080d 3135d 5/29 fixed on 2018/05/16 09:57
upstream WARNING in tracepoint_probe_unregister (3) prio:low trace -1 syz, C 325 10d 664d 0/29 upstream: reported C repro on 2024/12/17 21:14

Sample crash report:
device syzkaller1 entered promiscuous mode
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5268 at kernel/tracepoint.c:406 func_remove kernel/tracepoint.c:-1 [inline]
WARNING: CPU: 0 PID: 5268 at kernel/tracepoint.c:406 tracepoint_remove_func kernel/tracepoint.c:405 [inline]
WARNING: CPU: 0 PID: 5268 at kernel/tracepoint.c:406 tracepoint_probe_unregister+0x194/0x7c4 kernel/tracepoint.c:553
Modules linked in:
CPU: 0 PID: 5268 Comm: syz.1.180 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : tracepoint_remove_func kernel/tracepoint.c:-1 [inline]
pc : tracepoint_probe_unregister+0x194/0x7c4 kernel/tracepoint.c:553
lr : func_remove kernel/tracepoint.c:240 [inline]
lr : tracepoint_remove_func kernel/tracepoint.c:405 [inline]
lr : tracepoint_probe_unregister+0x190/0x7c4 kernel/tracepoint.c:553
sp : ffff800021437980
x29: ffff8000214379b0 x28: 1ffff00002fae09c x27: dfff800000000000
x26: ffff800017d704e0 x25: ffff800021437a80 x24: ffff800017d704a0
x23: ffff800008515068 x22: 1fffe00018038049 x21: ffff0000c01c0248
x20: ffff0000c01c0200 x19: fffffffffffffffe x18: 0000000000000000
x17: 0000000000000000 x16: ffff8000082dbd50 x15: ffff8000089b6558
x14: 0000000000000001 x13: 1ffff00004286ee4 x12: 0000000000080000
x11: 000000000000068e x10: ffff800021bba000 x9 : ffff8000084ca578
x8 : 000000000000068f x7 : ffff8000084ca42c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d44c8
x2 : ffff0000cfd89c00 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 func_remove kernel/tracepoint.c:-1 [inline]
 tracepoint_remove_func kernel/tracepoint.c:405 [inline]
 tracepoint_probe_unregister+0x194/0x7c4 kernel/tracepoint.c:553
 unregister_trace_sched_wakeup_new include/trace/events/sched.h:185 [inline]
 tracing_sched_unregister kernel/trace/trace_sched_switch.c:87 [inline]
 tracing_stop_sched_switch kernel/trace/trace_sched_switch.c:128 [inline]
 tracing_stop_cmdline_record+0xa4/0xd4 kernel/trace/trace_sched_switch.c:139
 __ftrace_event_enable_disable+0x488/0x8cc kernel/trace/trace_events.c:779
 ftrace_event_enable_disable kernel/trace/trace_events.c:866 [inline]
 event_enable_write+0x1c4/0x240 kernel/trace/trace_events.c:1572
 vfs_write+0x2a8/0x7c8 fs/read_write.c:582
 ksys_write+0x12c/0x228 fs/read_write.c:637
 __do_sys_write fs/read_write.c:649 [inline]
 __se_sys_write fs/read_write.c:646 [inline]
 __arm64_sys_write+0x7c/0x90 fs/read_write.c:646
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 2690
hardirqs last  enabled at (2689): [<ffff80000836149c>] call_rcu+0x5d8/0x958 kernel/rcu/tree.c:2884
hardirqs last disabled at (2690): [<ffff800011b9acd4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (2674): [<ffff800008031254>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (2672): [<ffff800008031220>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/29 22:47 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in tracepoint_probe_unregister
2026/08/09 19:09 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in tracepoint_probe_unregister
* Struck through repros no longer work on HEAD.