bcachefs (loop0): btree node scan found 7 nodes after overwrites
 done
bcachefs (loop0): check_topology...
bcachefs (loop0): btree root extents unreadable, must recover from scan
bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX
bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 18446744073692774400:100663295:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
btree node with incorrect max_key  at btree=extents level=1:
  parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0
  child: u64s 11 type btree_ptr_v2 18446744073692774400:100663295:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing
bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 18446744073692774400:100663296:0 - SPOS_MAX
bcachefs (loop0): set_node_max(): u64s 11 type btree_ptr_v2 18446744073692774400:100663295:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 -> SPOS_MAX
 done
bcachefs (loop0): accounting_read... done
bcachefs (loop0): alloc_read... done
bcachefs (loop0): snapshots_read... done
bcachefs (loop0): scanning for old btree nodes: min_version 0.11: inode_btree_change
bcachefs (loop0): going read-write
u64s 12 type alloc_v4 0:37:0 len 0 ver 0: 
  gen 0 oldest_gen 0 data_type btree
  journal_seq_nonempty 6
  journal_seq_empty    0
  need_discard         1
  need_inc_gen         1
  dirty_sectors        256
  stripe_sectors       0
  cached_sectors       0
  stripe               0
  stripe_redundancy    0
  io_time[READ]        1
  io_time[WRITE]       1024
  fragmentation     0
  bp_start          8
  incorrectly set at freespace:0:37:0 (free 0, genbits 0 should be 0), shutting down
u64s 12 type alloc_v4 0:37:0 len 0 ver 0: 
  gen 0 oldest_gen 0 data_type btree
  journal_seq_nonempty 6
  journal_seq_empty    0
  need_discard         1
  need_inc_gen         1
  dirty_sectors        256
  stripe_sectors       0
  cached_sectors       0
  stripe               0
  stripe_redundancy    0
  io_time[READ]        1
  io_time[WRITE]       1024
  fragmentation     0
  bp_start          8
  incorrectly set at freespace:0:37:0 (free 0, genbits 0 should be 0), shutting down
bcachefs (loop0): bch2_btree_update_start(): error fsck_errors_not_fixed
Kernel panic - not syncing: trans should be locked, unlocked by bch2_btree_update_start+0x131a/0x1680 fs/bcachefs/btree_update_interior.c:1253
CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-09352-g0c86b42439b6 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 panic+0x349/0x880 kernel/panic.c:354
 bch2_trans_unlocked_or_in_restart_error+0xa5/0x100 fs/bcachefs/btree_iter.c:1457
 bch2_trans_verify_not_unlocked_or_in_restart fs/bcachefs/btree_iter.h:334 [inline]
 bch2_path_get+0x12c4/0x1610 fs/bcachefs/btree_iter.c:1741
 bch2_trans_iter_init_common fs/bcachefs/btree_iter.h:519 [inline]
 bch2_trans_node_iter_init+0x3e2/0x720 fs/bcachefs/btree_iter.c:3074
 bch2_move_btree+0x4ed/0xe20 fs/bcachefs/move.c:960
 bch2_scan_old_btree_nodes+0x14d/0x3c0 fs/bcachefs/move.c:1101
 bch2_fs_recovery+0x3897/0x3e20 fs/bcachefs/recovery.c:1050
 bch2_fs_start+0x37c/0x620 fs/bcachefs/super.c:1057
 bch2_fs_get_tree+0x1270/0x18d0 fs/bcachefs/fs.c:2253
 vfs_get_tree+0x90/0x2b0 fs/super.c:1759
 do_new_mount+0x2cf/0xb70 fs/namespace.c:3878
 do_mount fs/namespace.c:4218 [inline]
 __do_sys_mount fs/namespace.c:4429 [inline]
 __se_sys_mount+0x38c/0x400 fs/namespace.c:4406
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f50d538e90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f50d6197e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f50d6197ef0 RCX: 00007f50d538e90a
RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f50d6197eb0
RBP: 00002000000000c0 R08: 00007f50d6197ef0 R09: 0000000000800002
R10: 0000000000800002 R11: 0000000000000246 R12: 0000200000000000
R13: 00007f50d6197eb0 R14: 0000000000005968 R15: 0000200000000100
 </TASK>
Kernel Offset: disabled
Rebooting in 86400 seconds..