syzbot

 sign-in | mailing list | source | docs
🐞 Open [677]
🐞 Fixed [94]
🐞 Invalid [514]
⬇ Missing Backports [36]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

VFS: Busy inodes after unmount (use-after-free)

Status: upstream: reported C repro on 2023/03/18 09:53
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+8f448a401cc209730b34@syzkaller.appspotmail.com
First crash: 614d, last: 2h51m
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/09/15 linux-6.1.y (ToT) 09045dae0d90 C [report] VFS: Busy inodes after unmount (use-after-free)
2023/09/15 upstream (ToT) 9fdfb15a3dbf C Didn't crash
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 VFS: Busy inodes after unmount (use-after-free) C 4 579d 634d 0/2 auto-obsoleted due to no activity on 2023/08/20 15:35
android-5-15 VFS: Busy inodes after unmount (use-after-free) origin:downstream C error done 2 532d 634d 0/2 auto-obsoleted due to no activity on 2023/09/15 20:27
android-5-10 VFS: Busy inodes after unmount (use-after-free) C done inconclusive 1 634d 634d 0/2 auto-obsoleted due to no activity on 2023/06/25 23:02
upstream VFS: Busy inodes after unmount (use-after-free) ocfs2 C error 28910 12m 666d 0/28 upstream: reported C repro on 2023/01/25 10:43
linux-5.15 VFS: Busy inodes after unmount (use-after-free) origin:upstream missing-backport C unreliable 1551 13h33m 613d 0/3 upstream: reported C repro on 2023/03/19 11:46
▶ ▼ Fix bisection attempts (1)
Created Duration User Patch Repo Result
2023/10/08 00:57 7h55m fix candidate upstream OK (3) job log

Sample crash report:
VFS: Busy inodes after unmount of loop0 (btrfs)
------------[ cut here ]------------
kernel BUG at fs/super.c:505!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3566 Comm: syz-executor286 Not tainted 6.1.53-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
RIP: 0010:generic_shutdown_super+0x339/0x340 fs/super.c:503
Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 db f0 ff 48 8b 13 48 c7 c7 e0 1e f9 8a 4c 89 fe e8 10 24 94 08 <0f> 0b 0f 1f 44 00 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00
RSP: 0018:ffffc90003b2fcf0 EFLAGS: 00010246
RAX: 000000000000002f RBX: ffffffff8d6392a0 RCX: 380291e29f5d9f00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 1ffff1100f7228fb R08: ffffffff816dbf1c R09: fffff52000765f55
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: dffffc0000000000 R14: ffffffff8b2cdad8 R15: ffff88807b9146a8
FS:  0000555556c773c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2d3b5d47d8 CR3: 0000000027669000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 kill_anon_super+0x37/0x60 fs/super.c:1117
 btrfs_kill_super+0x3d/0x50 fs/btrfs/super.c:2445
 deactivate_locked_super+0xa0/0x110 fs/super.c:332
 cleanup_mnt+0x490/0x520 fs/namespace.c:1186
 task_work_run+0x246/0x300 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xd9/0x100 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:297
 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2d3b581f37
Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffddccb4888 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00000000000556ee RCX: 00007f2d3b581f37
RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffddccb4940
RBP: 00007ffddccb4940 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffddccb5a00
R13: 0000555556c78700 R14: 431bde82d7b634db R15: 00007ffddccb59a4
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:generic_shutdown_super+0x339/0x340 fs/super.c:503
Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 db f0 ff 48 8b 13 48 c7 c7 e0 1e f9 8a 4c 89 fe e8 10 24 94 08 <0f> 0b 0f 1f 44 00 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00
RSP: 0018:ffffc90003b2fcf0 EFLAGS: 00010246
RAX: 000000000000002f RBX: ffffffff8d6392a0 RCX: 380291e29f5d9f00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 1ffff1100f7228fb R08: ffffffff816dbf1c R09: fffff52000765f55
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: dffffc0000000000 R14: ffffffff8b2cdad8 R15: ffff88807b9146a8
FS:  0000555556c773c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3bc73ef6c0 CR3: 0000000027669000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (789):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/14 20:40 linux-6.1.y 09045dae0d90 0b6a67ac .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/02 04:44 linux-6.1.y 7c15117f9468 f00eed24 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/02 04:10 linux-6.1.y 7c15117f9468 f00eed24 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2023/07/09 21:29 linux-6.1.y 61fd484b2cf6 668cb1fa .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/21 03:07 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/20 23:41 linux-6.1.y b67dc5c9ade9 4fca1650 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/20 14:09 linux-6.1.y b67dc5c9ade9 4fca1650 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/19 17:16 linux-6.1.y b67dc5c9ade9 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/17 16:57 linux-6.1.y b67dc5c9ade9 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/17 16:57 linux-6.1.y b67dc5c9ade9 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/17 13:47 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/17 07:04 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/15 19:22 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/15 06:26 linux-6.1.y 59d7b1a7104a f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/14 23:54 linux-6.1.y 59d7b1a7104a a8c99394 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/14 00:40 linux-6.1.y d7039b844a1c bb3f8425 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/13 10:53 linux-6.1.y d7039b844a1c 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/12 21:32 linux-6.1.y d7039b844a1c 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/12 01:10 linux-6.1.y d7039b844a1c 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
2024/11/21 13:54 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/21 01:24 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/21 01:24 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/20 12:55 linux-6.1.y b67dc5c9ade9 4fca1650 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/20 00:36 linux-6.1.y b67dc5c9ade9 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/19 17:10 linux-6.1.y b67dc5c9ade9 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/19 07:13 linux-6.1.y b67dc5c9ade9 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/18 23:57 linux-6.1.y b67dc5c9ade9 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/18 23:53 linux-6.1.y b67dc5c9ade9 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/18 10:39 linux-6.1.y b67dc5c9ade9 e7bb5d6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/18 08:39 linux-6.1.y b67dc5c9ade9 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/18 06:01 linux-6.1.y b67dc5c9ade9 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/18 04:42 linux-6.1.y b67dc5c9ade9 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/17 15:56 linux-6.1.y b67dc5c9ade9 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/17 08:08 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/17 05:10 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/17 00:42 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/16 23:29 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/16 13:07 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/16 10:05 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/16 10:05 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/16 07:52 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/15 18:21 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/15 18:21 linux-6.1.y 59d7b1a7104a cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/15 05:25 linux-6.1.y 59d7b1a7104a f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/14 14:21 linux-6.1.y 59d7b1a7104a a8c99394 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/14 07:11 linux-6.1.y d7039b844a1c a8c99394 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/13 11:39 linux-6.1.y d7039b844a1c bb3f8425 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/12 20:02 linux-6.1.y d7039b844a1c 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2024/11/12 00:46 linux-6.1.y d7039b844a1c 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 VFS: Busy inodes after unmount (use-after-free)
2023/03/18 09:53 linux-6.1.y 7eaef76fbc46 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan VFS: Busy inodes after unmount (use-after-free)
* Struck through repros no longer work on HEAD.