VFS: Busy inodes after unmount (use-after-free)

Status: auto-obsoleted due to no activity on 2023/06/25 23:02
Reported-by: syzbot+ded3c39db7eda48031d9@syzkaller.appspotmail.com
First crash: 1265d, last: 1265d
Cause bisection: introduced by (bisect log) :
commit 3e45af8a72c01c7e00c26e9df6089f7412ab3ec2
Author: Tadeusz Struk <tadeusz.struk@linaro.org>
Date: Wed Mar 9 01:20:15 2022 +0000

  ANDROID: incremental-fs: limit mount stack depth

Crash: VFS: Busy inodes after unmount (use-after-free) (log)
Repro: C syz .config
  
Fix bisection the fix commit could be any of (bisect log):
  416c4356f372 Merge 5.10.161 into android12-5.10-lts
  90eb02302b5e Revert "HID: core: Provide new max_buffer_size attribute to over-ride the default"
   
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 VFS: Busy inodes after unmount (use-after-free) 2 syz, C 4 1210d 1265d 0/2 auto-obsoleted due to no activity on 2023/08/20 15:35
upstream VFS: Busy inodes after unmount (use-after-free) (2) btrfs 2 syz, C error 277 348d 460d 29/29 fixed on 2025/09/04 16:57
linux-6.1 VFS: Busy inodes after unmount (use-after-free) origin:lts-only 2 syz, C inconclusive 4412 1h19m 1245d 0/3 upstream: reported C repro on 2023/03/18 09:53
android-5-15 VFS: Busy inodes after unmount (use-after-free) origin:downstream 2 syz, C error done 2 1163d 1265d 0/2 auto-obsoleted due to no activity on 2023/09/15 20:27
linux-6.6 VFS: Busy inodes after unmount (use-after-free) origin:upstream missing-backport 2 syz, C inconclusive 1013 2d14h 380d 0/2 upstream: reported C repro on 2025/07/29 23:52
upstream VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 288d 317d 29/29 fixed on 2025/11/18 08:45
upstream VFS: Busy inodes after unmount (use-after-free) (4) prio:high jfs 2 syz, C error 57 13h04m 232d 0/29 upstream: reported C repro on 2025/12/25 14:06
upstream VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 465d 1297d 28/29 fixed on 2025/05/06 15:33
linux-5.15 VFS: Busy inodes after unmount (use-after-free) missing-backport origin:lts-only 2 syz, C done 3410 5h35m 1244d 0/3 upstream: reported C repro on 2023/03/19 11:46

Sample crash report:
VFS: Busy inodes after unmount of ramfs. Self-destruct in 5 seconds.  Have a nice day...

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/25 23:02 android12-5.10-lts 416c4356f372 ee50e71c .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 VFS: Busy inodes after unmount (use-after-free)
* Struck through repros no longer work on HEAD.