Topology repair: unreadable btree node at
  btree=xattrs level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 960 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, exiting
bcachefs (loop2): Unable to continue, halting
bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed
bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
bcachefs (loop2): shutting down
BUG: spinlock bad magic on CPU#0, syz.2.16/3356
BUG: unable to handle page fault for address: 0000000000280584
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 8000000105313067 P4D 8000000105313067 PUD 0 
Oops: Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 UID: 0 PID: 3356 Comm: syz.2.16 Not tainted 6.13.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:task_pid_nr include/linux/pid.h:232 [inline]
RIP: 0010:spin_dump kernel/locking/spinlock_debug.c:64 [inline]
RIP: 0010:spin_bug+0x6c/0xa0 kernel/locking/spinlock_debug.c:78
Code: c7 a7 c0 61 83 48 89 de e8 f1 52 e2 ff 41 8b 57 04 49 8d 46 01 48 83 f8 02 73 0f 41 b8 ff ff ff ff 49 c7 c6 09 08 6f 83 eb 0e <45> 8b 86 80 05 00 00 49 81 c6 68 08 00 00 45 8b 4f 08 48 c7 c7 cc
RSP: 0018:ffffc9000389bb38 EFLAGS: 00010206
RAX: 0000000000280005 RBX: ffffffff83660589 RCX: ea06daf50d067b00
RDX: 0000000000000000 RSI: ffffffff837ed22e RDI: 00000000ffffffff
RBP: ffff888111652598 R08: 0000000000000000 R09: 00000000ffffdfff
R10: 0000000000000000 R11: 3fffffffffffffff R12: ffff8881116524e0
R13: ffff8881115d3128 R14: 0000000000280004 R15: ffff88817a889598
FS:  00007f9371f716c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000280584 CR3: 0000000104fb4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
 do_raw_spin_lock+0x66/0xa0 kernel/locking/spinlock_debug.c:115
 find_next_child fs/libfs.c:602 [inline]
 simple_recursive_removal+0xee/0x2b0 fs/libfs.c:626
 debugfs_remove+0x3f/0x60 fs/debugfs/inode.c:812
 __bch2_fs_stop+0xe8/0x270 fs/bcachefs/super.c:632
 bch2_fs_stop+0xd/0x20 fs/bcachefs/super.c:680
 bch2_fs_get_tree+0x2ff/0x680 fs/bcachefs/fs.c:2297
 vfs_get_tree+0x27/0xf0 fs/super.c:1814
 do_new_mount+0x15a/0x3a0 fs/namespace.c:3507
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4057 [inline]
 __se_sys_mount+0x148/0x1b0 fs/namespace.c:4034
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xe0/0x220 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f937118e58a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9371f70e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f9371f70ef0 RCX: 00007f937118e58a
RDX: 00004000000058c0 RSI: 0000400000005900 RDI: 00007f9371f70eb0
RBP: 00004000000058c0 R08: 00007f9371f70ef0 R09: 0000000000010000
R10: 0000000000010000 R11: 0000000000000246 R12: 0000400000005900
R13: 00007f9371f70eb0 R14: 0000000000005912 R15: 00004000000001c0
 </TASK>
Modules linked in:
CR2: 0000000000280584
---[ end trace 0000000000000000 ]---
RIP: 0010:task_pid_nr include/linux/pid.h:232 [inline]
RIP: 0010:spin_dump kernel/locking/spinlock_debug.c:64 [inline]
RIP: 0010:spin_bug+0x6c/0xa0 kernel/locking/spinlock_debug.c:78
Code: c7 a7 c0 61 83 48 89 de e8 f1 52 e2 ff 41 8b 57 04 49 8d 46 01 48 83 f8 02 73 0f 41 b8 ff ff ff ff 49 c7 c6 09 08 6f 83 eb 0e <45> 8b 86 80 05 00 00 49 81 c6 68 08 00 00 45 8b 4f 08 48 c7 c7 cc
RSP: 0018:ffffc9000389bb38 EFLAGS: 00010206
RAX: 0000000000280005 RBX: ffffffff83660589 RCX: ea06daf50d067b00
RDX: 0000000000000000 RSI: ffffffff837ed22e RDI: 00000000ffffffff
RBP: ffff888111652598 R08: 0000000000000000 R09: 00000000ffffdfff
R10: 0000000000000000 R11: 3fffffffffffffff R12: ffff8881116524e0
R13: ffff8881115d3128 R14: 0000000000280004 R15: ffff88817a889598
FS:  00007f9371f716c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000280584 CR3: 0000000104fb4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	a7                   	cmpsl  %es:(%rdi),%ds:(%rsi)
   1:	c0 61 83 48          	shlb   $0x48,-0x7d(%rcx)
   5:	89 de                	mov    %ebx,%esi
   7:	e8 f1 52 e2 ff       	call   0xffe252fd
   c:	41 8b 57 04          	mov    0x4(%r15),%edx
  10:	49 8d 46 01          	lea    0x1(%r14),%rax
  14:	48 83 f8 02          	cmp    $0x2,%rax
  18:	73 0f                	jae    0x29
  1a:	41 b8 ff ff ff ff    	mov    $0xffffffff,%r8d
  20:	49 c7 c6 09 08 6f 83 	mov    $0xffffffff836f0809,%r14
  27:	eb 0e                	jmp    0x37
* 29:	45 8b 86 80 05 00 00 	mov    0x580(%r14),%r8d <-- trapping instruction
  30:	49 81 c6 68 08 00 00 	add    $0x868,%r14
  37:	45 8b 4f 08          	mov    0x8(%r15),%r9d
  3b:	48                   	rex.W
  3c:	c7                   	.byte 0xc7
  3d:	c7                   	(bad)
  3e:	cc                   	int3