kernel BUG in sock

ID	Workflow	Result	Correct	Bug	Created	Started	Finished	Revision	Error
90b51441-7b51-4007-8c9e-860957901e5b	assessment-security	DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌	❓	kernel BUG in sock_release	2026/05/31 03:07	2026/05/31 03:07	2026/05/31 04:07	6b4a844333e83556da95d61d7f207e7ef5cd4bc6
60fd6fd6-b9af-4fa1-874c-6f76fe5e4a53	assessment-security		💥	kernel BUG in sock_release	2026/05/14 13:47	2026/05/14 13:47	2026/05/14 13:48	6ccb967e465e832a7bfd7a116ad00d52a0923a5d	failed to run ["git" "pull" "origin" "HEAD" "--depth=1" "--allow-unrelated-histories"]: exit status 128 From /app/workdir/repo/linux * branch HEAD -> FETCH_HEAD Updating files: ... truncated to first 200 bytes; open job for full error

Title	Replies (including bot)	Last reply
[syzbot] [fs?] kernel BUG in sock_release	0 (1)	2026/04/22 07:51

Title

Replies (including bot)

Last reply

[syzbot] [fs?] kernel BUG in sock_release

0 (1)

2026/04/22 07:51

VFS_BUG_ON_INODE(inode_state_read_once(inode) & (I_FREEING | I_CLEAR)): inode:ffff888059f79900 fs:sockfs mode:140777 opflags:0x8 flags:0x0 state:0x300 count:0 ------------[ cut here ]------------ kernel BUG at fs/inode.c:1980! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 3 UID: 0 PID: 17707 Comm: syz.6.3284 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:iput.part.0+0xa94/0xf50 fs/inode.c:1980 Code: 88 76 ff 48 c7 c6 60 9a c5 8b 48 89 df e8 74 68 ff ff 90 0f 0b e8 ac 88 76 ff 48 c7 c6 40 8f c5 8b 48 89 df e8 5d 68 ff ff 90 <0f> 0b e8 95 88 76 ff 48 c7 c6 00 9a c5 8b 48 89 df e8 46 68 ff ff RSP: 0018:ffffc90005107128 EFLAGS: 00010296 RAX: 0000000000000000 RBX: ffff888059f79900 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff81250760 RDI: fffff52000a20de7 RBP: 0000000000000300 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000000 R12: ffff888059f79860 R13: ffffffff90dc56e4 R14: ffff888059f799d0 R15: dffffc0000000000 FS: 00007f3057bab6c0(0000) GS:ffff8880d65db000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3056de9f00 CR3: 0000000058d5d000 CR4: 0000000000352ef0 Call Trace: <TASK> iput+0x35/0x40 fs/inode.c:1975 __sock_release net/socket.c:734 [inline] sock_release+0x169/0x1c0 net/socket.c:750 rxe_release_udp_tunnel drivers/infiniband/sw/rxe/rxe_net.c:294 [inline] rxe_sock_put+0xae/0x130 drivers/infiniband/sw/rxe/rxe_net.c:639 rxe_net_del+0x83/0x120 drivers/infiniband/sw/rxe/rxe_net.c:660 rxe_dellink+0x15/0x20 drivers/infiniband/sw/rxe/rxe.c:254 nldev_dellink+0x289/0x3c0 drivers/infiniband/core/nldev.c:1849 rdma_nl_rcv_msg+0x392/0x6f0 drivers/infiniband/core/netlink.c:195 rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 drivers/infiniband/core/netlink.c:239 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x9e1/0xb70 net/socket.c:2698 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2752 __sys_sendmsg+0x170/0x220 net/socket.c:2784 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3056d9c819 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3057bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f3057015fa0 RCX: 00007f3056d9c819 RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 RBP: 00007f3056e32c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3057016038 R14: 00007f3057015fa0 R15: 00007ffd5324c968 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:iput.part.0+0xa94/0xf50 fs/inode.c:1980 Code: 88 76 ff 48 c7 c6 60 9a c5 8b 48 89 df e8 74 68 ff ff 90 0f 0b e8 ac 88 76 ff 48 c7 c6 40 8f c5 8b 48 89 df e8 5d 68 ff ff 90 <0f> 0b e8 95 88 76 ff 48 c7 c6 00 9a c5 8b 48 89 df e8 46 68 ff ff RSP: 0018:ffffc90005107128 EFLAGS: 00010296 RAX: 0000000000000000 RBX: ffff888059f79900 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff81250760 RDI: fffff52000a20de7 RBP: 0000000000000300 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000000 R12: ffff888059f79860 R13: ffffffff90dc56e4 R14: ffff888059f799d0 R15: dffffc0000000000 FS: 00007f3057bab6c0(0000) GS:ffff8880d65db000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3056de9f00 CR3: 0000000058d5d000 CR4: 0000000000352ef0

Crashes (2):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2026/04/22 06:46	upstream	6596a02b2078	0b6ab7ec	.config	console log	report			info	[disk image (non-bootable)] [vmlinux] [kernel image]	ci-qemu-upstream	kernel BUG in sock_release
2026/05/13 01:28	upstream	c21b90f77687	a0949470	.config	console log	report			info	[disk image (non-bootable)] [vmlinux] [kernel image]	ci-qemu-upstream-386	kernel BUG in sock_release

Crashes (2):

Assets (help?)