VFS: Busy inodes after unmount (use-after-free)

Status: upstream: reported C repro on 2023/03/19 11:46
Bug presence: origin:lts-only
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+d5fb8af502fef70f9aa1@syzkaller.appspotmail.com
First crash: 1265d, last: 2h09m
Fix commit to backport (bisect log) :
tree: upstream
commit d0118d7d20bbf9a76f75840bc3b0da0f4d092da9
Author: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Date: Mon Jun 30 10:21:31 2025 +0000

  ocfs2: update d_splice_alias() return code checking

  
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2026/05/08 linux-5.15.y (ToT) ef251c45f1cd C [report] VFS: Busy inodes after unmount (use-after-free)
2026/05/08 upstream (ToT) 917719c412c4 C Didn't crash
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 VFS: Busy inodes after unmount (use-after-free) 2 syz, C 4 1231d 1287d 0/2 auto-obsoleted due to no activity on 2023/08/20 15:35
upstream VFS: Busy inodes after unmount (use-after-free) (2) btrfs 2 syz, C error 277 369d 481d 29/29 fixed on 2025/09/04 16:57
linux-6.1 VFS: Busy inodes after unmount (use-after-free) origin:lts-only 2 syz, C inconclusive 5329 2h40m 1266d 0/3 upstream: reported C repro on 2023/03/18 09:53
android-5-15 VFS: Busy inodes after unmount (use-after-free) origin:downstream 2 syz, C error done 2 1185d 1287d 0/2 auto-obsoleted due to no activity on 2023/09/15 20:27
android-5-10 VFS: Busy inodes after unmount (use-after-free) 2 syz, C done inconclusive 1 1287d 1287d 0/2 auto-obsoleted due to no activity on 2023/06/25 23:02
linux-6.6 VFS: Busy inodes after unmount (use-after-free) origin:upstream missing-backport 2 syz, C inconclusive 1129 3h30m 402d 0/2 upstream: reported C repro on 2025/07/29 23:52
upstream VFS: Busy inodes after unmount (use-after-free) (3) fs 2 syz, C error 85 309d 339d 29/29 fixed on 2025/11/18 08:45
upstream VFS: Busy inodes after unmount (use-after-free) (4) prio:high jfs 2 syz, C error 1490 7m 253d 0/29 upstream: reported C repro on 2025/12/25 14:06
upstream VFS: Busy inodes after unmount (use-after-free) fs 2 syz, C error 55684 487d 1318d 28/29 fixed on 2025/05/06 15:33
▶ ▼ Last patch testing requests (5)
Created Duration User Patch Repo Result
2026/03/05 11:43 1h56m retest repro linux-5.15.y report log
2026/03/05 11:43 1h49m retest repro linux-5.15.y report log
2025/11/11 12:42 13m retest repro linux-5.15.y report log
2025/11/11 12:42 16m retest repro linux-5.15.y report log
2025/11/11 12:05 16m retest repro linux-5.15.y no crash log
▶ ▼ Fix bisection attempts (6)
Created Duration User Patch Repo Result
2026/06/14 00:34 7h27m fix candidate upstream OK (1) job log
2026/03/27 01:12 13m fix candidate upstream error job log
2026/02/24 16:15 1m fix candidate upstream error job log
2026/01/24 05:05 1m fix candidate upstream error job log
2024/02/02 08:13 7h06m fix candidate upstream OK (1) job log
2024/01/24 11:12 0m bisect fix linux-5.15.y error job log

Sample crash report:
ocfs2: Unmounting device (7,0) on (node local)
VFS: Busy inodes after unmount of loop0. Self-destruct in 5 seconds.  Have a nice day...

Crashes (3728):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/03 08:26 linux-5.15.y ef251c45f1cd a0d91488 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2025/06/23 05:23 linux-5.15.y 1c700860e8bc d6cdfb8a .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2025/02/25 15:57 linux-5.15.y c16c81c81336 d34966d1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2026/09/05 02:47 linux-5.15.y 0996e0926f6b 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/05 01:46 linux-5.15.y 0996e0926f6b 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/04 13:43 linux-5.15.y 0996e0926f6b f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/04 13:41 linux-5.15.y 0996e0926f6b f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/04 12:21 linux-5.15.y 0996e0926f6b f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/04 00:40 linux-5.15.y 0996e0926f6b 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/03 23:32 linux-5.15.y 0996e0926f6b 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/03 09:32 linux-5.15.y 0996e0926f6b 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/03 06:39 linux-5.15.y 0996e0926f6b 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/02 19:28 linux-5.15.y 0996e0926f6b 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/02 18:07 linux-5.15.y 0996e0926f6b 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/01 15:13 linux-5.15.y 28c35638ec51 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/01 14:06 linux-5.15.y 28c35638ec51 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/01 14:05 linux-5.15.y 28c35638ec51 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/01 09:37 linux-5.15.y 28c35638ec51 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/09/01 08:30 linux-5.15.y 28c35638ec51 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 22:46 linux-5.15.y 28c35638ec51 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 21:44 linux-5.15.y 28c35638ec51 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 18:52 linux-5.15.y 28c35638ec51 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 14:47 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 13:17 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 09:09 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 06:41 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 04:55 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 03:31 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/31 00:47 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/30 21:24 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/30 14:17 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/30 12:27 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/30 10:20 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/30 08:55 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/30 03:08 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/29 21:07 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/29 20:58 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/29 20:02 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/29 18:50 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/29 01:06 linux-5.15.y 28c35638ec51 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/28 11:46 linux-5.15.y 28c35638ec51 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/28 10:47 linux-5.15.y 28c35638ec51 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/28 04:50 linux-5.15.y 4a1eaf96ee5c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/27 19:06 linux-5.15.y 4a1eaf96ee5c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/27 17:15 linux-5.15.y 4a1eaf96ee5c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/27 15:53 linux-5.15.y 4a1eaf96ee5c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2026/08/27 12:15 linux-5.15.y 945fa863f02c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2025/10/12 13:12 linux-5.15.y 29e53a5b1c4f ff1712fe .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2023/08/13 16:37 linux-5.15.y 24c4de4069cb 39990d51 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2023/06/27 09:43 linux-5.15.y f67653019430 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2023/03/19 22:42 linux-5.15.y 8020ae3c051d 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
2025/07/27 22:11 linux-5.15.y c79648372d02 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/12 10:41 linux-5.15.y 3c17fc483905 75bb1b32 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/08/03 15:20 linux-5.15.y 7e89efd3ae1c 1786a2a8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2023/07/30 04:16 linux-5.15.y 09996673e313 92476829 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2023/03/19 11:46 linux-5.15.y 8020ae3c051d 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan VFS: Busy inodes after unmount (use-after-free)
* Struck through repros no longer work on HEAD.