ext2: avoid drop_nlink() during unlink of zero-nlink inode in ext2_unlink()

ext2_unlink() calls inode_dec_link_count() unconditionally, which
invokes drop_nlink(). If the inode was loaded from a corrupted disk
image with i_links_count == 0, drop_nlink()
triggers WARN_ON(inode->i_nlink == 0)

Follow the ext4 pattern from __ext4_unlink(): check i_nlink before
decrementing. If already zero, skip the decrement.

Signed-off-by: Ziyi Guo <n7l8m4@u.northwestern.edu>
Link: https://patch.msgid.link/20260211022052.973114-1-n7l8m4@u.northwestern.edu
Signed-off-by: Jan Kara <jack@suse.cz>
This commit is contained in:
Ziyi Guo 2026-02-11 02:20:52 +00:00 committed by Jan Kara
parent ad0e9663f0
commit 19134a1331

View File

@ -291,7 +291,10 @@ static int ext2_unlink(struct inode *dir, struct dentry *dentry)
goto out;
inode_set_ctime_to_ts(inode, inode_get_ctime(dir));
inode_dec_link_count(inode);
if (inode->i_nlink)
inode_dec_link_count(inode);
err = 0;
out:
return err;