On Fri, Feb 14, 2025 at 02:47:56AM +0000, Al Viro wrote: [snip] > Am I missing something subtle here? Can elen be non-positive at that point? Another fun question: for dentries with name of form _<something>_<inumber> we end up looking at fscrypt_has_encryption_key() not for the parent, but for inode with inumber encoded in dentry name. Fair enough, but... what happens if we run into such dentry in ceph_mdsc_build_path()? There the call of ceph_encode_encrypted_fname() is under if (fscrypt_has_encryption_key(d_inode(parent))) Do we need the keys for both?