when merge fails, put the fs in read-only