On Thu, Jan 21, 2021 at 10:41:37AM -0800, Darrick J. Wong wrote: > Do directories have the same problem? Yes, I just checked in a VM. While ecryptfs does call vfs_getattr(), it only uses the "blocks" value to supplement the data from an identical generic_fillattr() call to what ecryptfs_getattr_link() uses. The reported size still comes from i_size_read(). V/R, Jeffrey Mitchell