> + if (sbp->sb_fdblocks < mp->m_alloc_set_aside) {
> + xfs_alert(mp, "Corruption detected. Please run xfs_repair.");
> + error = -EFSCORRUPTED;
> + goto out_log_dealloc;
> + }
> +
> /*
> * Get and sanity-check the root inode.
> * Save the pointer to it in the mount structure.
> diff --git a/fs/xfs/xfs_super.c b/fs/xfs/xfs_super.c
> index 2094386..9dcf772 100644
> --- a/fs/xfs/xfs_super.c
> +++ b/fs/xfs/xfs_super.c
> @@ -755,7 +755,8 @@ xfs_fs_statfs(
> statp->f_blocks = sbp->sb_dblocks - lsize;
> spin_unlock(&mp->m_sb_lock);
>
> - statp->f_bfree = fdblocks - mp->m_alloc_set_aside;
> + /* make sure statp->f_bfree does not underflow */
> + statp->f_bfree = max_t(int64_t, fdblocks - mp->m_alloc_set_aside, 0);
How can this happen with the above hunk applies? And even if we'd
need to do the sanity chck it shold be two separate patches.
