diff options
| author | Yun Zhou <yun.zhou@windriver.com> | 2026-07-03 14:55:48 +0800 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2026-07-03 15:12:09 +0200 |
| commit | 83887ad02f30c1814bed5da3ca999f7b0f3f337c (patch) | |
| tree | 56293392ca040fc9471dac00abbcb8cc83156dd3 /drivers/phy/axiado/git@git.tavy.me:linux.git | |
| parent | 041a0885f7195195117cdef0d6706f1bcdd63566 (diff) | |
block: reject block device inodes with i_rdev == 0 in lookup_bdev()
lookup_bdev() blindly returns inode->i_rdev without validating it.
When a FUSE filesystem exposes a root inode with S_IFBLK mode but
i_rdev == 0 (via rootmode=060000), any subsequent mount attempt using
that path as a block device source propagates dev_t 0 into the
superblock machinery. After commit 9ee5f161a4db ("fs: maintain a
global device-to-superblock table") this triggers a WARNING in
super_dev_register().
Reject i_rdev == 0 early with -ENODEV since no real block device
driver registers major 0.
Reported-by: syzbot+72fe3ea5814121fbc76e@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=72fe3ea5814121fbc76e
Signed-off-by: Yun Zhou <yun.zhou@windriver.com>
Link: https://patch.msgid.link/20260703065548.1135125-1-yun.zhou@windriver.com
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
Diffstat (limited to 'drivers/phy/axiado/git@git.tavy.me:linux.git')
0 files changed, 0 insertions, 0 deletions
