program: r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [], {0x20, 0x2}, {0x20, 0x2}}, 0x24, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000000c0)=0x401) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)={[{@errors_continue}, {@nocow_enabled}, {@fix_errors={'fix_errors', 0x3d, 'yes'}}, {@fsck}, {@direct_io}, {@btree_node_prefetch}], [{@smackfshat}]}, 0xff, 0x5db9, &(0x7f0000011900)="$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") [ 82.707123][ T4533] Bluetooth: hci0: command tx timeout [ 84.321997][ T5106] loop0: detected capacity change from 0 to 32768 [ 84.471753][ T5106] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,fsck,fix_errors=yes,nojournal_transaction_names [ 84.485084][ T5106] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 84.494431][ T5106] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 84.494431][ T5106] running recovery passes: check_allocations [ 84.520650][ T5106] bcachefs (loop0): flagging btree extents lost data [ 84.537661][ T5106] error reading btree root extents l=0: btree_node_read_error, fixing [ 84.540460][ T5106] bcachefs (loop0): will run btree node scan [ 84.555919][ T5106] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 84.555933][ T5106] gen 0 oldest_gen 0 data_type journal [ 84.555937][ T5106] journal_seq 1 [ 84.555941][ T5106] need_discard 1 [ 84.555944][ T5106] need_inc_gen 1 [ 84.555948][ T5106] dirty_sectors 256 [ 84.555951][ T5106] stripe_sectors 0 [ 84.555954][ T5106] cached_sectors 0 [ 84.555958][ T5106] stripe 67108864 [ 84.555961][ T5106] stripe_redundancy 0 [ 84.555964][ T5106] io_time[READ] 1 [ 84.555968][ T5106] io_time[WRITE] 1 [ 84.555971][ T5106] fragmentation 0 [ 84.555974][ T5106] bp_start 8 [ 84.555978][ T5106] [ 84.555981][ T5106] invalid data type (got 2 should be 7): delete?, fixing [ 84.614738][ T5106] bcachefs (loop0): scan_for_btree_nodes... [ 84.626122][ T5106] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 84.626146][ T5106] xattrs l=0 seq=1 journal_seq=4 cookie=1477538288e6fe55 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 84.626155][ T5106] lru l=0 seq=1 journal_seq=4 cookie=d19419031ca39bdb POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 84.626162][ T5106] deleted_inodes l=0 seq=1 journal_seq=0 cookie=a34c10fbe2d33ffa POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 84.626169][ T5106] [ 84.663305][ T5106] done [ 84.676610][ T5106] bcachefs (loop0): check_topology... [ 84.676648][ T5106] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 84.684809][ T5106] no nodes found for btree extents, continuing [ 84.687404][ T5106] done [ 84.688620][ T5106] bcachefs (loop0): accounting_read... done [ 84.691145][ T5106] bcachefs (loop0): alloc_read... done [ 84.703514][ T5106] bcachefs (loop0): stripes_read... done [ 84.706610][ T5106] bcachefs (loop0): snapshots_read... done [ 84.709435][ T5106] bcachefs (loop0): check_allocations... [ 84.726798][ T5106] btree ptr not marked in member info btree allocated bitmap [ 84.726822][ T5106] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 84.752207][ T5106] btree ptr not marked in member info btree allocated bitmap [ 84.752225][ T5106] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 84.755988][ T4533] Bluetooth: hci0: command tx timeout [ 84.794104][ T5106] btree ptr not marked in member info btree allocated bitmap [ 84.794121][ T5106] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 84.813738][ T5106] btree ptr not marked in member info btree allocated bitmap [ 84.813753][ T5106] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 84.840581][ T5106] btree ptr not marked in member info btree allocated bitmap [ 84.840599][ T5106] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 84.867014][ T5106] btree ptr not marked in member info btree allocated bitmap [ 84.867034][ T5106] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 84.888951][ T5106] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 84.891964][ T5106] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 84.908704][ T5106] bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 84.912315][ T5106] bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 84.928038][ T5106] bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing [ 84.931234][ T5106] bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 8, should be 0, fixing [ 84.944820][ T5106] bucket 0:34 gen 0 data type need_discard has wrong fragmentation_lru: got 67108864, should be 0, fixing [ 84.954046][ T5106] bucket 0:36 gen 0 has wrong data_type: got user, should be need_discard, fixing [ 84.958095][ T5106] bucket 0:36 gen 0 data type need_discard has wrong dirty_sectors: got 8, should be 0, fixing [ 84.972416][ T5106] bucket 0:36 gen 0 data type need_discard has wrong fragmentation_lru: got 67108864, should be 0, fixing [ 84.985558][ T5106] done [ 84.988617][ T5106] bcachefs (loop0): going read-write [ 85.003039][ T5106] bcachefs (loop0): journal_replay... done [ 85.044730][ T5106] bcachefs (loop0): check_alloc_info... [ 85.047081][ T5106] incorrect key in need_discard btree (got deleted should be set) [ 85.047095][ T5106] u64s 13 type alloc_v4 0:27:0 len 0 ver 0: [ 85.047102][ T5106] gen 0 oldest_gen 0 data_type need_discard [ 85.047109][ T5106] journal_seq 4 [ 85.047115][ T5106] need_discard 1 [ 85.047120][ T5106] need_inc_gen 1 [ 85.047126][ T5106] dirty_sectors 0 [ 85.047133][ T5106] stripe_sectors 0 [ 85.047139][ T5106] cached_sectors 0 [ 85.047145][ T5106] stripe 0 [ 85.047150][ T5106] stripe_redundancy 0 [ 85.047157][ T5106] io_time[READ] 1 [ 85.047163][ T5106] io_time[WRITE] 256 [ 85.047169][ T5106] fragmentation 0 [ 85.047175][ T5106] bp_start 8 [ 85.047181][ T5106] , fixing [ 85.120626][ T5106] incorrect key in need_discard btree (got deleted should be set) [ 85.120641][ T5106] u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 85.120648][ T5106] gen 0 oldest_gen 0 data_type need_discard [ 85.120654][ T5106] journal_seq 4 [ 85.120660][ T5106] need_discard 1 [ 85.120666][ T5106] need_inc_gen 1 [ 85.120676][ T5106] dirty_sectors 0 [ 85.120683][ T5106] stripe_sectors 0 [ 85.120689][ T5106] cached_sectors 0 [ 85.120695][ T5106] stripe 0 [ 85.120706][ T5106] stripe_redundancy 0 [ 85.120712][ T5106] io_time[READ] 1 [ 85.120718][ T5106] io_time[WRITE] 512 [ 85.120723][ T5106] fragmentation 0 [ 85.120727][ T5106] bp_start 8 [ 85.120730][ T5106] , fixing [ 85.179670][ T5106] incorrect key in need_discard btree (got deleted should be set) [ 85.179684][ T5106] u64s 13 type alloc_v4 0:36:0 len 0 ver 0: [ 85.179691][ T5106] gen 0 oldest_gen 0 data_type need_discard [ 85.179698][ T5106] journal_seq 4 [ 85.179704][ T5106] need_discard 1 [ 85.179711][ T5106] need_inc_gen 1 [ 85.179717][ T5106] dirty_sectors 0 [ 85.179723][ T5106] stripe_sectors 0 [ 85.179728][ T5106] cached_sectors 0 [ 85.179734][ T5106] stripe 0 [ 85.179741][ T5106] stripe_redundancy 0 [ 85.179747][ T5106] io_time[READ] 1 [ 85.179753][ T5106] io_time[WRITE] 512 [ 85.179759][ T5106] fragmentation 0 [ 85.179766][ T5106] bp_start 8 [ 85.179772][ T5106] , fixing [ 85.245005][ T5106] done [ 85.251033][ T5106] bcachefs (loop0): check_lrus... [ 85.257117][ T5106] incorrect lru entry: lru fragmentation time 67108864 [ 85.257133][ T5106] u64s 5 type set 18446462598799949824:34:0 len 0 ver 0 [ 85.257141][ T5106] for u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 85.257148][ T5106] gen 0 oldest_gen 0 data_type need_discard [ 85.257153][ T5106] journal_seq 4 [ 85.257156][ T5106] need_discard 1 [ 85.257160][ T5106] need_inc_gen 1 [ 85.257164][ T5106] dirty_sectors 0 [ 85.257168][ T5106] stripe_sectors 0 [ 85.257172][ T5106] cached_sectors 0 [ 85.257175][ T5106] stripe 0 [ 85.257179][ T5106] stripe_redundancy 0 [ 85.257183][ T5106] io_time[READ] 1 [ 85.257187][ T5106] io_time[WRITE] 512 [ 85.257190][ T5106] fragmentation 0 [ 85.257194][ T5106] bp_start 8 [ 85.257198][ T5106] , fixing [ 85.335387][ T5106] incorrect lru entry: lru fragmentation time 67108864 [ 85.335402][ T5106] u64s 5 type set 18446462598799949824:36:0 len 0 ver 0 [ 85.335409][ T5106] for u64s 13 type alloc_v4 0:36:0 len 0 ver 0: [ 85.335415][ T5106] gen 0 oldest_gen 0 data_type need_discard [ 85.335422][ T5106] journal_seq 4 [ 85.335428][ T5106] need_discard 1 [ 85.335435][ T5106] need_inc_gen 1 [ 85.335441][ T5106] dirty_sectors 0 [ 85.335447][ T5106] stripe_sectors 0 [ 85.335453][ T5106] cached_sectors 0 [ 85.335460][ T5106] stripe 0 [ 85.335466][ T5106] stripe_redundancy 0 [ 85.335472][ T5106] io_time[READ] 1 [ 85.335475][ T5106] io_time[WRITE] 512 [ 85.335479][ T5106] fragmentation 0 [ 85.335483][ T5106] bp_start 8 [ 85.335487][ T5106] , fixing [ 85.403879][ T5106] done [ 85.407571][ T5106] bcachefs (loop0): check_btree_backpointers... done [ 85.410687][ T5106] bcachefs (loop0): check_backpointers_to_extents... [ 85.411064][ T5106] backpointer for missing btree node [ 85.411072][ T5106] u64s 9 type backpointer 0:7077888:0 len 0 ver 0: bucket=0:27:0 btree=extents l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 85.435201][ T5106] backpointer for missing extent [ 85.435215][ T5106] u64s 9 type backpointer 0:8912896:0 len 0 ver 0: bucket=0:34:0 btree=extents l=0 offset=0:0 len=8 pos=536870913:8:U32_MAX, fixing [ 85.457643][ T5106] backpointer for missing extent [ 85.457657][ T5106] u64s 9 type backpointer 0:9437184:0 len 0 ver 0: bucket=0:36:0 btree=extents l=0 offset=0:0 len=8 pos=4098:24:U32_MAX, fixing [ 85.465589][ T5106] done [ 85.474417][ T5106] bcachefs (loop0): check_extents_to_backpointers... [ 85.474892][ T5106] missing backpointer for btree=inodes l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 85.474905][ T5106] got: u64s 5 type deleted 0:9961472:0 len 0 ver 0 [ 85.474913][ T5106] want: u64s 9 type backpointer 0:9961472:0 len 0 ver 0: bucket=0:38:0 btree=inodes l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 85.513980][ T5106] missing backpointer for btree=dirents l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 85.513999][ T5106] got: u64s 5 type deleted 0:10747904:0 len 0 ver 0 [ 85.514007][ T5106] want: u64s 9 type backpointer 0:10747904:0 len 0 ver 0: bucket=0:41:0 btree=dirents l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 85.544658][ T5106] missing backpointer for btree=alloc l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 85.544670][ T5106] got: u64s 5 type deleted 0:6815744:0 len 0 ver 0 [ 85.544675][ T5106] want: u64s 9 type backpointer 0:6815744:0 len 0 ver 0: bucket=0:26:0 btree=alloc l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 85.565282][ T5106] missing backpointer for btree=subvolumes l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 85.565299][ T5106] got: u64s 5 type deleted 0:9175040:0 len 0 ver 0 [ 85.565307][ T5106] want: u64s 9 type backpointer 0:9175040:0 len 0 ver 0: bucket=0:35:0 btree=subvolumes l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 85.605637][ T5106] missing backpointer for btree=snapshots l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 85.605668][ T5106] got: u64s 5 type deleted 0:8388608:0 len 0 ver 0 [ 85.605676][ T5106] want: u64s 9 type backpointer 0:8388608:0 len 0 ver 0: bucket=0:32:0 btree=snapshots l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 85.630574][ T5106] missing backpointer for btree=freespace l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 85.630591][ T5106] got: u64s 5 type deleted 0:7602176:0 len 0 ver 0 [ 85.630600][ T5106] want: u64s 9 type backpointer 0:7602176:0 len 0 ver 0: bucket=0:29:0 btree=freespace l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 85.652209][ T5106] done [ 85.664473][ T5106] bcachefs (loop0): check_alloc_to_lru_refs... done [ 85.667675][ T5106] bcachefs (loop0): check_snapshot_trees... done [ 85.670120][ T5106] bcachefs (loop0): check_snapshots... [ 85.670430][ T5106] snapshot points to missing/incorrect tree: [ 85.670441][ T5106] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 85.690804][ T5106] [ 85.691762][ T5106] ============================= [ 85.693873][ T5106] WARNING: suspicious RCU usage [ 85.695831][ T5106] 6.11.0-syzkaller-09015-g18ba6034468e #0 Not tainted [ 85.698631][ T5106] ----------------------------- [ 85.700539][ T5106] fs/bcachefs/snapshot.h:45 suspicious rcu_dereference_check() usage! [ 85.703834][ T5106] [ 85.703834][ T5106] other info that might help us debug this: [ 85.703834][ T5106] [ 85.707948][ T5106] [ 85.707948][ T5106] rcu_scheduler_active = 2, debug_locks = 1 [ 85.711145][ T5106] 3 locks held by syz.0.0/5106: [ 85.713165][ T5106] #0: ffff88804bc80278 (&c->state_lock){+.+.}-{3:3}, at: bch2_fs_start+0x45/0x5b0 [ 85.716874][ T5106] #1: ffff88804bc84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7de/0xd20 [ 85.720881][ T5106] #2: ffff888012fc0128 (bcachefs_btree){+.+.}-{0:0}, at: __bch2_trans_get+0x7de/0xd20 [ 85.723913][ T5106] [ 85.723913][ T5106] stack backtrace: [ 85.726001][ T5106] CPU: 0 UID: 0 PID: 5106 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 85.729583][ T5106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.733722][ T5106] Call Trace: [ 85.735145][ T5106] [ 85.736267][ T5106] dump_stack_lvl+0x241/0x360 [ 85.737716][ T5106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.739577][ T5106] ? __pfx__printk+0x10/0x10 [ 85.741541][ T5106] ? rcu_is_watching+0x15/0xb0 [ 85.743156][ T5106] ? kfree+0x4e/0x440 [ 85.744688][ T5106] lockdep_rcu_suspicious+0x226/0x340 [ 85.746588][ T5106] bch2_snapshot_tree_oldest_subvol+0x485/0x550 [ 85.748427][ T5106] bch2_check_snapshots+0x3f59/0x5320 [ 85.750014][ T5106] ? __pfx_bch2_check_snapshots+0x10/0x10 [ 85.752015][ T5106] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.754425][ T5106] ? __bch2_bkey_get_iter+0x100/0x280 [ 85.756541][ T5106] ? __console_unlock+0x12d/0x1f0 [ 85.758271][ T5106] ? __pfx___console_unlock+0x10/0x10 [ 85.760579][ T5106] ? this_cpu_in_panic+0x4f/0x80 [ 85.762706][ T5106] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 85.765448][ T5106] ? console_unlock+0x2fc/0x3b0 [ 85.767403][ T5106] ? __pfx_console_unlock+0x10/0x10 [ 85.769448][ T5106] ? __wake_up_klogd+0xd5/0x110 [ 85.771376][ T5106] ? __pfx_vprintk_emit+0x10/0x10 [ 85.773380][ T5106] ? rcu_is_watching+0x15/0xb0 [ 85.775278][ T5106] ? __bch2_print+0x17a/0x220 [ 85.777205][ T5106] ? bch2_check_snapshots+0x21e/0x5320 [ 85.779413][ T5106] ? bch2_fs_freespace_init+0x124/0x320 [ 85.781638][ T5106] bch2_run_recovery_pass+0xf0/0x1e0 [ 85.783796][ T5106] bch2_run_recovery_passes+0x387/0x870 [ 85.785981][ T5106] bch2_fs_recovery+0x24f9/0x38b0 [ 85.787929][ T5106] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 85.790105][ T5106] ? __pfx_lock_release+0x10/0x10 [ 85.792106][ T5106] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 85.794481][ T5106] ? __pfx_lock_release+0x10/0x10 [ 85.796560][ T5106] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 85.798612][ T5106] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 85.800451][ T5106] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 85.802533][ T5106] ? llist_reverse_order+0x72/0x90 [ 85.804476][ T5106] bch2_fs_start+0x356/0x5b0 [ 85.806263][ T5106] bch2_fs_get_tree+0xd68/0x1710 [ 85.808218][ T5106] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 85.810131][ T5106] ? generic_parse_monolithic+0x387/0x400 [ 85.811999][ T5106] ? apparmor_capable+0x13b/0x1b0 [ 85.813782][ T5106] vfs_get_tree+0x90/0x2b0 [ 85.815379][ T5106] do_new_mount+0x2be/0xb40 [ 85.817277][ T5106] ? __pfx_do_new_mount+0x10/0x10 [ 85.819668][ T5106] __se_sys_mount+0x2d6/0x3c0 [ 85.821444][ T5106] ? __pfx___se_sys_mount+0x10/0x10 [ 85.823175][ T5106] ? exc_page_fault+0x590/0x8c0 [ 85.824874][ T5106] ? __x64_sys_mount+0x20/0xc0 [ 85.826539][ T5106] do_syscall_64+0xf3/0x230 [ 85.827857][ T5106] ? clear_bhb_loop+0x35/0x90 [ 85.829218][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.830834][ T5106] RIP: 0033:0x7fb68d97f69a [ 85.832069][ T5106] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.837648][ T5106] RSP: 002b:00007fb68e6d5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.840303][ T5106] RAX: ffffffffffffffda RBX: 00007fb68e6d5ef0 RCX: 00007fb68d97f69a [ 85.842924][ T5106] RDX: 0000000020005d80 RSI: 0000000020000240 RDI: 00007fb68e6d5eb0 [ 85.845577][ T5106] RBP: 0000000020005d80 R08: 00007fb68e6d5ef0 R09: 0000000000000000 [ 85.847847][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000240 [ 85.850401][ T5106] R13: 00007fb68e6d5eb0 R14: 0000000000005db9 R15: 0000000020000040 [ 85.853396][ T5106] [ 86.055673][ T5106] done [ 86.064739][ T5106] bcachefs (loop0): bch2_fs_recovery(): error ERESTARTSYS [ 86.067716][ T5106] bcachefs (loop0): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 86.074219][ T5099] bcachefs (loop0): going read-only [ 86.076952][ T5099] bcachefs (loop0): finished waiting for writes to stop [ 86.080448][ T5099] bcachefs (loop0): flushing journal and stopping allocators, journal seq 26 [ 86.084982][ T5099] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 26 [ 86.089910][ T5099] bcachefs (loop0): unshutdown complete, journal seq 26 [ 86.093315][ T5099] bcachefs (loop0): done going read-only, filesystem not clean [ 86.104723][ T5106] bcachefs (loop0): shutting down [ 86.131769][ T5106] bcachefs (loop0): shutdown complete [ 86.681659][ T5106] bcachefs: bch2_fs_get_tree() error: ERESTARTSYS