Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Stop writes first, preserve the affected storage, and do not assume that a successful write() reached the disk. A Linux page-cache regression can leave data acknowledged by an application but still resident in RAM, a block-cache layer, or a volatile drive cache. Quiesce services, record the running kernel and storage stack, create an image or snapshot, then boot the last known-good kernel and test on a copy. Repair the filesystem only after preservation.

A rollback can stop the regression, but it cannot recreate bytes that were never persisted. Whether the newest data survives depends on application flushes, filesystem behavior, bcache or device-mapper cache mode, controller and drive flush handling, and the availability of a known-good backup.

What a page-cache regression can—and cannot—do

Linux normally treats a buffered file write as a change to memory-backed page-cache pages. The write() system call may return successfully while the kernel schedules writeback for later. A bug in writeback, invalidation, error reporting, or interaction with a filesystem can therefore produce an apparent success before stable storage contains the new bytes.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The Linux kernel VFS documentation says that applications using buffered I/O normally call “fsync, fdatasync, msync or sync_file_range” so that data reaches the backing store and writeback errors are reported. Those calls are a boundary, not a guarantee that every layer below the filesystem is honest: a controller, hypervisor, drive, or cache device must honor flush and force-unit-access (FUA) requests.

#1 Best Overall
Sale
Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car
  • Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
  • With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
  • Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
  • Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
  • Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.

Page-cache corruption is not the same as a physically failing disk. It may affect only a particular kernel release, filesystem, mount option, workload, or storage path. Treat the exact combination as the incident scope; do not assume that every machine running the same distribution is affected.

First response: freeze the blast radius

Every additional write can overwrite evidence or make an inconsistent filesystem harder to reconstruct. Use the following order unless the machine is in immediate danger of hardware failure.

1. Stop application writers

  1. Stop databases, queues, virtual machines, containers, and background jobs that write the affected filesystem. Use the service manager or the application’s own quiesce procedure so it can close files cleanly.
  2. Disable automated cleanup, log rotation, indexing, replication, and scheduled jobs for the affected volume.
  3. If a service cannot be stopped, isolate the host from clients and make the workload as read-only as possible.

Do not delete logs, rotate them manually, run a “cleanup” script, or repeatedly reboot while you are still collecting evidence.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Record the running environment

Save command output to storage that is not the incident volume, or copy it over a trusted administrative channel. These read-only commands establish what must be reproduced during testing:

date -u
uname -a
cat /proc/cmdline
cat /etc/os-release
findmnt -R -o TARGET,SOURCE,FSTYPE,OPTIONS
lsblk -e7 -o NAME,TYPE,SIZE,FSTYPE,MOUNTPOINTS,ROTA,MODEL,SERIAL
cat /proc/mounts
journalctl -k -b --no-pager
dmesg -T

Also record the distribution kernel package version, the bootloader entry selected, filesystem labels and UUIDs, RAID and LVM layout, storage-controller or hypervisor details, and recent application errors. Preserve the output with a timestamp. If the system has bcache or device-mapper cache, capture its status before changing anything.

3. Avoid repeated read-write mounts

If the service is stopped and the filesystem can be remounted without provoking more writes, a read-only remount may limit damage:

Rank #2
EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack
  • Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
  • Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
  • Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
  • Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
  • Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
mount -o remount,ro /mount/point

This command is not universally safe or possible. A busy filesystem, a filesystem needing journal replay, or a layered device may reject it. Do not force an unmount or detach a cache merely to make the command succeed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Preserve a recoverable copy before repair

Filesystem repair changes metadata. Once it has changed the original device, you may lose the ability to compare states or try a different recovery method. Make a storage snapshot or a sector-level image to separate media whenever the device is readable, and perform analysis on that copy.

Choose the least stressful acquisition method

  • Storage snapshot: Use a snapshot that is independent of the affected volume’s write path. Confirm that the snapshot includes all layers—logical volume, cache metadata, and data device as applicable.
  • Block-level image: Image the complete block device, not just a mounted directory, when metadata or an intermediate cache may be involved. Record the source size, sector size, and imaging tool’s complete log.
  • Failing hardware: If the device reports uncorrectable I/O errors, disconnect it from normal service and prioritize an imaging workflow designed for failing media. Repeated filesystem checks on the original can turn a recoverable read problem into a larger failure.

Keep the original read-only and mark every copy with its creation time and source device identity. A copy is not automatically consistent: it reflects whatever data had reached that layer when the snapshot or image was made.

What to preserve from cache layers

For bcache and device-mapper cache, preserve both the backing device and the cache device, including metadata. In writeback mode, the cache can hold the newest version of blocks. Imaging only the backing device may therefore capture an older filesystem state while omitting the newest dirty blocks.

Test persistence deliberately

After writers are quiesced, test whether data can be forced through the stack. Use a disposable file on a test copy or a non-production test volume; do not experiment by writing to the only original.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Application and filesystem boundaries

An application should check the return value of its synchronization call, not only the earlier buffered write. A minimal POSIX-style sequence is:

Rank #3
Sale
BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black | LED mouse pad with 14 lighting modes, covers keyboard & mouse, anti-slip rubber base, waterproof surface, USB powered
  • 【Large size】:Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
  • 【LED backlight mouse pad】:Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
  • 【Anti-slip rubber base】:Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
  • 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
  • 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
fd = open(path, O_WRONLY|O_CREAT, 0600);
write(fd, buffer, length);
if (fsync(fd) == -1) record_error(errno);
close(fd);

fdatasync() can be appropriate when metadata updates that are not required to read the data need not be forced; fsync() is the broader choice. sync_file_range() has narrower semantics and does not by itself provide all durability guarantees an application may expect. Use the filesystem and application’s documented durability contract.

fsync() can report a writeback error that an earlier buffered write() did not return. The VFS keeps an error cursor per open file description, so separate writers may observe the same recorded writeback error. The generic page-cache infrastructure does not remember which file description dirtied each page; consequently, the kernel cannot always identify the original writer that caused an error.

Inspect the kernel while flushing

Run these on the test copy or during a controlled maintenance window:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sync
journalctl -k --since "10 minutes ago" --no-pager
dmesg -T | tail -n 200

Look for writeback failures, I/O errors, filesystem aborts, cache metadata warnings, reset or timeout messages, and flush/FUA failures. A command that returns zero is useful evidence but not proof that every earlier write is durable; correlate it with kernel logs and the storage stack’s documented behavior.

Roll back to the last known-good kernel

Booting an older kernel is a containment and comparison step. It does not restore data that never reached stable storage.

Normal bootloader path

  1. Leave the suspect kernel installed so its version, modules, and evidence remain available, but do not select it for production.
  2. At the bootloader menu, open the “Advanced options” or equivalent entry and select the last kernel version known to work with this workload.
  3. Confirm the selected entry’s command line, root device, initramfs, and storage-controller options. A different command line can change behavior as much as the kernel version.
  4. Boot with nonessential writers disabled. Verify the kernel with uname -a before mounting the recovered copy read-write.

When the machine will not boot

Use the distribution’s recovery environment or a trusted live system. Mount the affected filesystem without write access, or do not mount it at all until its image is available. The recovery environment must support the filesystem, RAID/LVM layout, and cache metadata; otherwise it can misinterpret a healthy layered device as damaged.

Rank #4
Sale
Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing
  • 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
  • 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
  • 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
  • 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
  • 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.

Compare kernels on a clone

Reproduce the workload on a clone or test snapshot under both kernels. Keep the filesystem, mount options, cache mode, controller firmware, and boot parameters constant. Compare writeback errors, application-level checksums, journal messages, cache dirty counts, and device errors. If only the newer kernel fails, keep it out of production while identifying the regression and its fixed release.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Handle bcache and device-mapper cache before detaching anything

A cache layer changes where the newest copy of a block may reside. Determine its mode and dirty-block state before stopping, detaching, replacing, or reassembling devices.

bcache modes

  • Writeback: Writes may be acknowledged while dirty blocks wait on the cache device. The cache can contain the newest data.
  • Writethrough: A write is acknowledged only after the backing device has accepted it, subject to the integrity of lower-level flush handling.
  • Passthrough: The cache is bypassed. Switching to this mode is safe only when the cache is clean or coherency has otherwise been established.

Inspect bcache’s sysfs state and dirty-data counters using the paths provided by your distribution. Do not discard the cache or recreate its metadata because the backing filesystem appears inconsistent. The bcache documentation warns that unrecoverable dirty data can leave the filesystem unrecoverable and cause massive corruption.

device-mapper cache modes

  • Writeback: Dirty blocks can exist only on the cache device until they are flushed to the origin.
  • Writethrough: The origin is updated before acknowledgment, but lower layers still must honor flushes.
  • Passthrough: I/O bypasses caching. The cache must be clean before switching to this mode.

Use the device-mapper status output to identify the target, mode, metadata health, and dirty-block count:

dmsetup status
lvs -a -o+devices,cache_mode,cache_dirty,cache_policy

Exact fields vary by device-mapper and LVM version. Treat missing or ambiguous status as a reason to stop and obtain the cache layer’s documented recovery procedure. If metadata requires checking or repair, userspace recovery tools are needed; do not guess at metadata edits.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Safe cache sequence

  1. Stop writers and preserve both cache and origin devices.
  2. Record mode, dirty count, metadata health, and device identifiers.
  3. Flush using the layer’s documented clean or detach operation, watching for errors.
  4. Only after the cache reports clean should you switch to passthrough or detach it.
  5. Reassemble the stack on a clone first and compare filesystem and application state.

Account for volatile hardware write-back caches

A drive or controller with volatile write-back RAM may acknowledge a write before non-volatile media receives it. Linux therefore issues explicit flushes and FUA for data-integrity operations such as fsync, sync, and unmount. The guarantee depends on every layer honoring those requests.

Best Value
Sale
Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk
  • 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
  • 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
  • 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
  • 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
  • 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.

Check controller, drive, RAID, virtual-machine, and storage-network documentation for volatile-cache settings and battery- or capacitor-backed protection. A hypervisor that reports flush completion without forcing the host media breaks the durability contract. If you cannot establish that flushes and FUA are honored, treat recently acknowledged data as uncertain and plan restoration from a known-good backup.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Repair the filesystem only on the preserved copy

Do not run a repair utility on the original device merely because a mount fails. First verify that the image or snapshot is complete and readable, then work offline or from read-only recovery media.

Use the filesystem’s own checker

Commands differ by filesystem and distribution. The following are illustrative, non-modifying checks; substitute the correct device from the image and consult the filesystem project for the supported repair sequence:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
# ext-family filesystems: report without modifying
fsck.ext4 -fn /dev/mapper/recovered-copy

# XFS: inspect without modifying
xfs_repair -n /dev/mapper/recovered-copy

# Btrfs: read-only structural check
btrfs check --readonly /dev/mapper/recovered-copy

Options and safety vary by release. Never run an ext-family checker against a mounted read-write filesystem. XFS repair must be run unmounted, and a read-only Btrfs check is not a substitute for a complete backup. Save the full output, including warnings and suggested repairs.

Apply repairs with a record

  1. Make a second copy of the image before any modifying repair.
  2. Run the distribution- and filesystem-recommended repair command against the copy.
  3. Capture stdout, stderr, exit status, tool version, and the image hash before and after.
  4. If the tool reports unrecoverable metadata or data, stop. Repeated attempts against the same original can destroy evidence; escalate to a specialist recovery workflow.

Verify before reopening service

Mount the repaired copy read-only first. Verification must test the application’s invariants, not only whether the directory tree mounts.

  • Compare file counts, sizes, ownership, permissions, extended attributes, and hashes with the last known-good backup.
  • For databases, run the vendor’s consistency or page-check utility and compare transaction-log sequence and checkpoint state.
  • Check journal replay results and kernel logs for new writeback, checksum, timeout, or reset errors.
  • Confirm that cache metadata is clean and that the recovered stack reports the expected mode.
  • Exercise the workload on a clone under the known-good kernel before production. Include forced flushes and an orderly unmount in the test.

Only after these checks should you mount the repaired copy read-write and re-enable one writer at a time. Keep enhanced monitoring for writeback errors, device errors, cache dirty data, and application durability failures.

Choosing among recovery paths

When several options appear possible, compare them against the facts you have preserved rather than choosing the fastest command.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Recovery path Newest data may still be in cache? Reversibility Consistency risk When it is appropriate
Immediate reboot into an older kernel Yes; RAM, bcache, device-mapper, or drive cache may not have drained Low unless an image exists Can lose in-flight writes and trigger journal replay Only after writers are stopped and preservation is addressed, or when continued operation is more dangerous
Snapshot or block image, then analyze Yes, but the image preserves the state that was readable at capture Highest; original remains untouched Depends on snapshot consistency and complete layered capture Preferred first action when the device is readable
Flush and clean a cache layer Yes until the layer reports clean Good if performed on a clone or with a second copy Metadata or dirty-block loss can corrupt the filesystem After mode and dirty state are known and the documented procedure is available
Filesystem repair on the original No longer reliably observable Lowest Repair may remove evidence or discard unrecoverable structures Last resort only when no image exists and continued access is impossible
Restore from a known-good backup Unpersisted newest data is absent High if the backup is verified Depends on backup consistency and application replay When flush behavior is untrusted or corruption exceeds the copy’s recoverability

Common mistakes and their safer alternatives

  • Mistake: treating write() success as durable. Check fsync() or the application’s documented synchronization call and inspect errors.
  • Mistake: rebooting repeatedly to “clear” page cache. Each reboot can lose volatile data and alter journal state. Preserve an image first.
  • Mistake: detaching a dirty bcache or device-mapper cache. The cache may hold the newest blocks. Determine mode and dirty count, then use the documented clean procedure.
  • Mistake: disabling drive write-back cache without understanding the stack. This may reduce performance but does not repair already uncertain writes. Establish whether flush and FUA are honored.
  • Mistake: running fsck on a mounted production filesystem. Use an offline checker against a copy and save its output.
  • Mistake: assuming a kernel rollback restores lost bytes. Rollback changes execution; it cannot reconstruct data that never reached non-volatile media.
  • Mistake: validating only that the filesystem mounts. Compare hashes, database invariants, journal state, and application-level records before reopening service.

What “without losing data” can realistically mean

No recovery procedure can guarantee bytes that existed only in volatile memory or in a discarded dirty cache. The practical goal is to maximize recoverability: stop new writes, preserve every layer that may contain newer data, use a known-good kernel for controlled testing, and repair only disposable copies. If the storage path cannot prove that flushes and FUA reached non-volatile media, restore from a verified backup and treat the interval since the last trustworthy backup as potentially incomplete.

Keep the suspect kernel and original devices available for forensic comparison, but keep them out of production until the regression, cache behavior, and durability path are understood. Record the final kernel, mount options, cache mode, repair logs, verification results, and any files or transactions restored from backup.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.