Bug 202757

Created attachment 281489 [details]
05.c

Comment on attachment 281489 [details]
05.c

>#include <sys/types.h>
>#include <sys/mount.h>
>#include <sys/mman.h>
>#include <sys/stat.h>
>#include <sys/xattr.h>
>#include <sys/syscall.h>
>
>#include <dirent.h>
>#include <errno.h>
>#include <error.h>
>#include <fcntl.h>
>#include <stdio.h>
>#include <stdlib.h>
>#include <string.h>
>#include <unistd.h>
>#define SYS_newlstat   107
>#define SYS_newstat    106
>
>int main(int argc, char *argv[])
>{
>       unsigned char v0[8192] = { 0, };
>       unsigned char v1[8192] = { 0, };
>       char v2[] = ".";
>       char v3[] = "foo";
>       char v4[] = "foo/bar";
>       char v5[] = "foo/bar/baz";
>       char v6[] = "foo/bar/xattr";
>       char v7[] = "foo/bar/acl";
>       char v8[] = "foo/bar/fifo";
>       char v9[] = "foo/bar/hln";
>       char v10[] = "foo/bar/sln";
>       char v11[] = "foo/bar/stress";
>       char v12[] = "foo/bar/stress/f1";
>       char v13[] = "foo/bar/stress/f2";
>       char v14[] = "foo/bar/stress/f3";
>       char v15[] = "foo/bar/stress/f4";
>       char v16[] = "foo/bar/stress/f5";
>       char v17[] = "foo/bar/stress/f7";
>       long v18;
>       long v19;
>       char v20[] = "foo/bar/stress/Uzwe3ELy";
>       unsigned char v21[104];
>       memcpy(v21,
>"BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB",
>104);
>       //memcpy(v21,
>"6\xb94\x01m\xac\xc3,\x8a5W\x96\xa8\xa9\xc9\xd6&l\xa0\x9e\xd4\x88\x80\xa2\x93\xd18\x90FyC\xfc\xb3\xf6\xfd!\xa3AN\xadv\xa5E\x9e\xce\x0fvt\xfa\x17\x13O
>\x94\xf2\xb3\xe5\xaa\xc3\xac$\x07\xa9\xd7\xfd'y"hG\xcf^\xec\x94\xfd\xbb$t\xaf\x9e\x0b\xc2\xee+\xd6\xe1^\xbd\x0c#j0\xa9\x93\x88(\xba\x02\xc9\xa2I\x99\x01\xb5",
>104);
>       char v22[] = "user.sslab";
>       long v23;
>       char v24[] = "foo/bar/stress/fFq9CDvy";
>       char v25[] = "foo/bar/stress/fFq9CDvy/7pGHviqv";
>       v18 = syscall(SYS_open, (long)v16, 2, 0);
>       syscall(SYS_read, (long)v18, (long)v0, 7932);
>       syscall(SYS_fsync, (long)v18);
>       syscall(SYS_access, (long)v12, 4);
>       syscall(SYS_pwrite64, (long)v18, (long)v1, 345, 7244);
>       v19 = syscall(SYS_open, (long)v4, 65536, 0);
>       syscall(SYS_symlink, (long)v16, (long)v20);
>       syscall(SYS_setxattr, (long)v4, (long)v22, (long)v21, 104, 1);
>       syscall(SYS_read, (long)v18, (long)v0, 7146);
>       syscall(SYS_fsync, (long)v18);
>       syscall(SYS_newlstat, (long)v5, (long)v1);
>       syscall(SYS_fsync, (long)v19);
>       syscall(SYS_pwrite64, (long)v18, (long)v1, 5644, 3191);
>       syscall(SYS_fsync, (long)v18);
>       syscall(SYS_ftruncate, (long)v18, 181);
>       syscall(SYS_ftruncate, (long)v18, 1027);
>       syscall(SYS_getdents64, (long)v19, (long)v1, 4879);
>       syscall(SYS_readlink, (long)v2, (long)v1, 8192);
>       v23 = syscall(SYS_open, (long)v20, 2, 0);
>       syscall(SYS_lseek, (long)v18, 2088, 4);
>       syscall(SYS_fsync, (long)v23);
>       syscall(SYS_rmdir, (long)v3);
>       syscall(SYS_fsync, (long)v23);
>       syscall(SYS_ftruncate, (long)v18, 6161);
>       syscall(SYS_read, (long)v23, (long)v0, 7779);
>       syscall(SYS_mkdir, (long)v24, 511);
>       syscall(SYS_lseek, (long)v18, 3594, 0);
>       syscall(SYS_unlink, (long)v8);
>       syscall(SYS_symlink, (long)v11, (long)v25);
>       syscall(SYS_fsync, (long)v18);
>
>       close(v18);
>       close(v19);
>       close(v23);
>       return 0;
>}
>/* Active fds: v18 v19 v23 */
>/* Files
>Path: .
>Type: dir
>Xattrs: 
>Path: foo/bar/hln
>Type: file
>Xattrs: 
>Path: foo/bar
>Type: dir
>Xattrs: 
>name: user.sslab\x00
>Path: foo/bar/stress/f3
>Type: file
>Xattrs: 
>Path: foo/bar/baz
>Type: file
>Xattrs: 
>Path: foo/bar/stress/f7
>Type: file
>Xattrs: 
>Path: foo/bar/stress/f5
>Type: file
>Xattrs: 
>Path: foo/bar/stress/f2
>Type: file
>Xattrs: 
>Path: foo/bar/stress/Uzwe3ELy
>Type: symlink
>Xattrs: 
>Path: foo/bar/stress
>Type: dir
>Xattrs: 
>Path: foo/bar/acl
>Type: file
>Xattrs: 
>Path: foo/bar/stress/f4
>Type: file
>Xattrs: 
>Path: foo/bar/xattr
>Type: file
>Xattrs: 
>Path: foo/bar/stress/f1
>Type: file
>Xattrs: 
>Path: foo/bar/sln
>Type: symlink
>Xattrs: 
>Path: foo/bar/stress/fFq9CDvy
>Type: dir
>Xattrs: 
>Path: foo/bar/stress/fFq9CDvy/7pGHviqv
>Type: symlink
>Xattrs: 
>*/

Thanks for the report. Fixed by 448de471cd4cab0ced "btrfs: Check the first key and level for cached extent buffer", now in 5.2-rc.