VFS: Busy inodes after unmount (use-after-free)

Status: auto-obsoleted due to no activity on 2023/09/15 20:27
Bug presence: origin:downstream
[Documentation on labels]
Reported-by: syzbot+c437f56eb02121c8b076@syzkaller.appspotmail.com
First crash: 1243d, last: 1141d
Cause bisection: failed (error log, bisect log)
  
Fix bisection: fixed by (bisect log) :
commit 2a6853c0ea03029ba56af757ca008c3e49d29b91
Author: Paolo Abeni <pabeni@redhat.com>
Date: Tue Feb 7 13:04:15 2023 +0000

  mptcp: fix locking for in-kernel listener creation

  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2023/05/06 android13-5.15-lts (ToT) 19c0ed55a470 C [report] VFS: Busy inodes after unmount (use-after-free)
2023/05/06 lts (merge base) d86dfc4d95cd C Didn't crash
2023/05/06 upstream (ToT) 2e1e1337881b C Didn't crash
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 VFS: Busy inodes after unmount (use-after-free) 2 C 4 1188d 1243d 0/2 auto-obsoleted due to no activity on 2023/08/20 15:35
upstream VFS: Busy inodes after unmount (use-after-free) (2) btrfs 2 C error 277 326d 438d 29/29 fixed on 2025/09/04 16:57
linux-6.1 VFS: Busy inodes after unmount (use-after-free) origin:lts-only 2 C inconclusive 3798 2h36m 1223d 0/3 upstream: reported C repro on 2023/03/18 09:53
android-5-10 VFS: Busy inodes after unmount (use-after-free) 2 C done inconclusive 1 1243d 1243d 0/2 auto-obsoleted due to no activity on 2023/06/25 23:02
linux-6.6 VFS: Busy inodes after unmount (use-after-free) origin:upstream missing-backport 2 C inconclusive 997 1h48m 358d 0/2 upstream: reported C repro on 2025/07/29 23:52
upstream VFS: Busy inodes after unmount (use-after-free) (3) fs 2 C error 85 266d 295d 29/29 fixed on 2025/11/18 08:45
upstream VFS: Busy inodes after unmount (use-after-free) (4) prio:high jfs 2 C error 49 2d11h 210d 0/29 upstream: reported C repro on 2025/12/25 14:06
upstream VFS: Busy inodes after unmount (use-after-free) fs 2 C error 55684 443d 1275d 28/29 fixed on 2025/05/06 15:33
linux-5.15 VFS: Busy inodes after unmount (use-after-free) missing-backport origin:lts-only 2 C done 3281 2d10h 1222d 0/3 upstream: reported C repro on 2023/03/19 11:46
▶ ▼ Fix bisection attempts (4)
Created Duration User Patch Repo Result
2023/07/15 01:51 4h08m bisect fix android13-5.15-lts OK (1) job log
2023/06/07 20:10 16m bisect fix android13-5.15-lts OK (0) job log log
2023/04/27 01:37 22m bisect fix android13-5.15-lts OK (0) job log log
2023/03/28 01:15 19m bisect fix android13-5.15-lts OK (0) job log log

Sample crash report:
VFS: Busy inodes after unmount of ramfs. Self-destruct in 5 seconds.  Have a nice day...

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/26 00:09 android13-5.15-lts 5448b2fda85f ee50e71c .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-15 VFS: Busy inodes after unmount (use-after-free)
2023/05/08 14:33 android13-5.15-lts 19c0ed55a470 90c93c40 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 VFS: Busy inodes after unmount (use-after-free)
* Struck through repros no longer work on HEAD.