syzbot

 sign-in | mailing list | source | docs
🐞 Open [919]
🐞 Fixed [143]
🐞 Invalid [1134]
⬇ Missing Backports [73]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

VFS: Busy inodes after unmount (use-after-free)

Status: upstream: reported C repro on 2023/03/18 09:53
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+8f448a401cc209730b34@syzkaller.appspotmail.com
First crash: 1179d, last: 7h25m
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/09/15 linux-6.1.y (ToT) 09045dae0d90 C [report] VFS: Busy inodes after unmount (use-after-free)
2023/09/15 upstream (ToT) 9fdfb15a3dbf C Didn't crash
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 VFS: Busy inodes after unmount (use-after-free) 2 C 4 1144d 1200d 0/2 auto-obsoleted due to no activity on 2023/08/20 15:35
upstream VFS: Busy inodes after unmount (use-after-free) (2) btrfs 2 C error 277 283d 395d 29/29 fixed on 2025/09/04 16:57
android-5-15 VFS: Busy inodes after unmount (use-after-free) origin:downstream 2 C error done 2 1098d 1200d 0/2 auto-obsoleted due to no activity on 2023/09/15 20:27
android-5-10 VFS: Busy inodes after unmount (use-after-free) 2 C done inconclusive 1 1200d 1200d 0/2 auto-obsoleted due to no activity on 2023/06/25 23:02
linux-6.6 VFS: Busy inodes after unmount (use-after-free) origin:upstream missing-backport 2 C inconclusive 575 6h32m 315d 0/2 upstream: reported C repro on 2025/07/29 23:52
upstream VFS: Busy inodes after unmount (use-after-free) (3) fs 2 C error 85 222d 252d 29/29 fixed on 2025/11/18 08:45
upstream VFS: Busy inodes after unmount (use-after-free) (4) jfs prio:high 2 C error 28 16d 166d 0/29 upstream: reported C repro on 2025/12/25 14:06
upstream VFS: Busy inodes after unmount (use-after-free) fs 2 C error 55684 400d 1231d 28/29 fixed on 2025/05/06 15:33
linux-5.15 VFS: Busy inodes after unmount (use-after-free) missing-backport origin:lts-only 2 C error 3044 6h59m 1178d 0/3 upstream: reported C repro on 2023/03/19 11:46
▶ ▼ Fix bisection attempts (1)
Created Duration User Patch Repo Result
2023/10/08 00:57 7h55m fix candidate upstream OK (3) job log

Sample crash report:
ocfs2: Unmounting device (7,0) on (node local)
VFS: Busy inodes after unmount of loop0 (ocfs2)
------------[ cut here ]------------
kernel BUG at fs/super.c:505!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4246 Comm: syz-executor178 Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:generic_shutdown_super+0x339/0x340 fs/super.c:503
Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 29 90 f0 ff 48 8b 13 48 c7 c7 60 60 19 8b 4c 89 fe e8 d7 36 be 08 <0f> 0b 0f 1f 44 00 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00
RSP: 0018:ffffc90003be7cf8 EFLAGS: 00010246
RAX: 000000000000002f RBX: ffffffff8d8101c0 RCX: d5a708bd91106a00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 1ffff1100f3dfcfb R08: ffffffff816e6d5c R09: fffff5200077cf41
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: dffffc0000000000 R14: ffffffff8b4c57d8 R15: ffff888079efe6a8
FS:  0000555567d1a380(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f348b777130 CR3: 000000007b82d000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 kill_block_super+0x7a/0xe0 fs/super.c:1470
 deactivate_locked_super+0xa0/0x110 fs/super.c:332
 cleanup_mnt+0x490/0x520 fs/namespace.c:1186
 task_work_run+0x246/0x300 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xde/0x100 kernel/entry/common.c:177
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f348b6fc447
Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffea1450ea8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f348b6fc447
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea1450f60
RBP: 00007ffea1450f60 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffea1451fc0
R13: 0000555567d1b6c0 R14: 0000000000000001 R15: 431bde82d7b634db
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:generic_shutdown_super+0x339/0x340 fs/super.c:503
Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 29 90 f0 ff 48 8b 13 48 c7 c7 60 60 19 8b 4c 89 fe e8 d7 36 be 08 <0f> 0b 0f 1f 44 00 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00
RSP: 0018:ffffc90003be7cf8 EFLAGS: 00010246
RAX: 000000000000002f RBX: ffffffff8d8101c0 RCX: d5a708bd91106a00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 1ffff1100f3dfcfb R08: ffffffff816e6d5c R09: fffff5200077cf41
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: dffffc0000000000 R14: ffffffff8b4c57d8 R15: ffff888079efe6a8
FS:  0000555567d1a380(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f348b777130 CR3: 000000007b82d000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3217):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/13 04:09 linux-6.1.y e4d90d63d385 530e80f8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/12/13 01:31 linux-6.1.y e4d90d63d385 530e80f8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/12/03 14:56 linux-6.1.y e4d90d63d385 578925bc .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2023/09/14 20:40 linux-6.1.y 09045dae0d90 0b6a67ac .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/04/26 20:25 linux-6.1.y 7c87defbd336 9c2d0995 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/01/16 15:53 linux-6.1.y bec0e10ee67e d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2025/10/08 12:20 linux-6.1.y 882efbdd9d34 7e2882b3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2025/06/26 04:53 linux-6.1.y 58485ff1a74f 26d77996 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/02 04:44 linux-6.1.y 7c15117f9468 f00eed24 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/02 04:10 linux-6.1.y 7c15117f9468 f00eed24 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2023/07/09 21:29 linux-6.1.y 61fd484b2cf6 668cb1fa .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2025/03/12 17:43 linux-6.1.y 6ae7ac5c4251 ee70e6db .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/10 00:55 linux-6.1.y 228da13e907e 34dab4be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/09 12:35 linux-6.1.y 228da13e907e c36c07f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/09 00:30 linux-6.1.y 228da13e907e 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/08 15:52 linux-6.1.y 228da13e907e 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/08 15:52 linux-6.1.y 228da13e907e 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/06 01:00 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/05 17:22 linux-6.1.y 228da13e907e 48b6c3fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/05 12:02 linux-6.1.y 228da13e907e 48b6c3fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/05 05:29 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/04 01:55 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/04 01:53 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/03 13:08 linux-6.1.y 228da13e907e 234057e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/03 00:58 linux-6.1.y 228da13e907e 3c0d2131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/03 00:58 linux-6.1.y 228da13e907e 3c0d2131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/02 12:34 linux-6.1.y 228da13e907e 62fe1528 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/01 21:51 linux-6.1.y 228da13e907e 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/01 21:51 linux-6.1.y 228da13e907e 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2026/06/09 09:39 linux-6.1.y 228da13e907e 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/09 03:07 linux-6.1.y 228da13e907e 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/09 01:30 linux-6.1.y 228da13e907e 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/08 16:55 linux-6.1.y 228da13e907e 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/08 11:07 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/08 09:07 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/08 07:04 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/08 04:57 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/08 01:25 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/08 00:18 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/07 17:43 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/07 14:47 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/07 07:53 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/06 23:39 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/06 21:09 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/06 03:53 linux-6.1.y 228da13e907e cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/05 13:16 linux-6.1.y 228da13e907e 48b6c3fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/05 08:54 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/05 07:12 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/05 01:10 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/04 21:34 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/04 20:14 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/04 03:10 linux-6.1.y 228da13e907e 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/03 14:39 linux-6.1.y 228da13e907e 234057e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/03 02:01 linux-6.1.y 228da13e907e 3c0d2131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/02 13:52 linux-6.1.y 228da13e907e 62fe1528 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/02 10:09 linux-6.1.y 228da13e907e 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/06/02 01:33 linux-6.1.y 228da13e907e 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2023/03/18 09:53 linux-6.1.y 7eaef76fbc46 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
* Struck through repros no longer work on HEAD.