syzbot
WARNING in ovl_d_real (4)
Status:
upstream: reported on 2026/06/23 15:08
Reported-by: syzbot+b71de94c8c52558967f8@syzkaller.appspotmail.com
First crash: 31d, last: 9h58m
Sample crash report:
ovl_d_real(/bus, NULL:0): real dentry (ffff88805cc4a2f0/130) not found
WARNING: CPU: 1 PID: 5364 at fs/overlayfs/super.c:115 ovl_d_real+0x212/0x490 fs/overlayfs/super.c:112
Modules linked in:
CPU: 1 PID: 5364 Comm: syz.6.284 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:ovl_d_real+0x212/0x490 fs/overlayfs/super.c:112
Code: 36 45 31 ff 31 c0 48 c7 c7 80 44 60 8a 48 c7 c6 30 1c d7 8b 48 89 da 4c 89 e1 4d 89 f0 4d 89 f9 50 e8 12 cd f3 06 48 83 c4 08 <0f> 0b 48 89 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 a4 b7 fe 49
RSP: 0018:ffffc9000317f5e8 EFLAGS: 00010286
RAX: 04a99c9d1441ee00 RBX: ffff88806094b780 RCX: 0000000000080000
RDX: ffffc9001542e000 RSI: 00000000000153c6 RDI: 00000000000153c7
RBP: dffffc0000000000 R08: ffff8880b912795b R09: 1ffff11017224f2b
R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffffff8a6044e0
R13: ffff88801ffc7790 R14: 0000000000000000 R15: ffff88805cc4a2f0
FS: 00007f5255ffb6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb8b44df7b0 CR3: 000000006110a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
d_real include/linux/dcache.h:587 [inline]
d_real_inode include/linux/dcache.h:602 [inline]
process_measurement+0x18b5/0x1c20 security/integrity/ima/ima_main.c:283
ima_file_check+0xc7/0x110 security/integrity/ima/ima_main.c:533
do_open fs/namei.c:3618 [inline]
path_openat+0x27cf/0x2fb0 fs/namei.c:3750
do_filp_open+0x1df/0x400 fs/namei.c:3777
do_sys_openat2+0x14b/0x500 fs/open.c:1255
do_sys_open fs/open.c:1271 [inline]
__do_sys_open fs/open.c:1279 [inline]
__se_sys_open fs/open.c:1275 [inline]
__x64_sys_open+0x11b/0x140 fs/open.c:1275
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f5257de4e99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5255ffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007f525806d180 RCX: 00007f5257de4e99
RDX: 00000000000000a0 RSI: 0000000000008000 RDI: 0000200000000000
RBP: 00007f5257e7aeaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f525806d218 R14: 00007f525806d180 R15: 00007ffe1ffd5708
</TASK>
* Struck through repros no longer work on HEAD.