[17:42:20] step 1: 2G image, mkfs -n 4096, loop + dm-delay (read=15ms write=5ms) [17:42:22] step 1: populate S1 with 100000 files, snapshot -r to S2 (S2 now shares every S1 block) [17:42:45] S1 id=256 root level=3 (want >=2; this is the shape from IDEA.md step 1) [17:42:45] step 2: delete S1 (S2 keeps every one of S1's root children referenced) [17:42:45] step 3: sync-poll for a non-zero drop key at root level 3, then unmount [17:42:51] poll 2: drop key (44188 ...) level 3 -- child dropped, unmounting [17:42:52] step 4: resume/interrupt cycles, looking for drop key to go non-zero -> (0 0) [17:42:53] attempt 1: drop key (0 ...) level 0 [17:42:53] BUG REPRODUCED: drop key went from (44188 ...) to (0 0) while S1's root item still exists [17:42:53] step 5: uninterrupted mount, wait up to 300s for completion or abort [17:43:34] abort signature in dmesg after 26s [17:43:36] RESULT: kernel abort matches the incident signature (full log: ./work-repro-simple-unpatched-3/dmesg-step5.log) [17:44:06] btrfs check --readonly rc=1 (full log: ./work-repro-simple-unpatched-3/check.log) [17:44:06] RESULT: check reports mismatches matching the incident [17:44:07] S2 content: DIFFERS or unreadable (100101 entries; ./work-repro-simple-unpatched-3/s2.manifest) [17:44:07] summary: zeroed=1 aborted=1 check_bad=1 drop_done=0 s2_ok=0 [17:44:07] VERDICT: bug reproduced