Re: [PATCH 2/5] btrfs: tree-checker: reject inline refs not matching the extent type
From: Siddharth Mishra
Date: Wed Nov 04 2026 - 19:34:44 EST
On Wed, Nov 04, 2026 at 11:24:15AM -0800, Boris Burkov wrote:
> > item 9 key (30478336 METADATA_ITEM 0) itemoff 3636 itemsize 33
> > refs 1 gen 13 flags TREE_BLOCK
> > tree block skinny level 0
> > (172 0x5) extent owner root 5
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >
>
> I assume this was crafted manually, not via btrfs operations with
> squotas enabled, right?
Right, it is a corrupted image found by fuzzing. I did not find a way
to get an owner ref on a tree block with normal operations, the kernel
only adds owner refs to data extents.
Thanks for the review.