bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
bcachefs (loop2): recovering from clean shutdown, journal seq 13
------------[ cut here ]------------
kernel BUG at fs/bcachefs/replicas.c:28!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 1 PID: 9705 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-10323-g8f6a15f095a6 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:verify_replicas_entry fs/bcachefs/replicas.c:28 [inline]
RIP: 0010:__replicas_entry_idx+0x331/0x350 fs/bcachefs/replicas.c:233
Code: d9 80 e1 07 80 c1 03 38 c1 0f 8c d7 fe ff ff 48 89 df e8 42 58 be fd e9 ca fe ff ff e8 a8 80 58 fd 90 0f 0b e8 a0 80 58 fd 90 <0f> 0b e8 98 80 58 fd 90 0f 0b e8 90 80 58 fd 90 0f 0b 66 2e 0f 1f
RSP: 0018:ffffc90003cf7090 EFLAGS: 00010246
RAX: ffffffff843db150 RBX: 0000000000000004 RCX: 0000000000040000
RDX: ffffc90004029000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: 0000000000000020 R08: ffffffff843daec8 R09: ffffffff843cbadd
R10: 0000000000000007 R11: ffff88805d615a00 R12: ffff88802f2ae0b8
R13: ffff88802f2ae0b8 R14: 0000000000000001 R15: ffff88804e180000
FS:  00007f700d75c6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555954a68f8 CR3: 000000004785e000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 bch2_replicas_entry_idx fs/bcachefs/replicas.c:248 [inline]
 bch2_replicas_set_usage+0x2ff/0x710 fs/bcachefs/replicas.c:625
 journal_replay_early fs/bcachefs/recovery.c:426 [inline]
 bch2_fs_recovery+0x16ea/0x3700 fs/bcachefs/recovery.c:762
 bch2_fs_start+0x356/0x5b0 fs/bcachefs/super.c:1031
 bch2_fs_open+0xa8d/0xdf0 fs/bcachefs/super.c:2123
 bch2_mount+0x71d/0x1320 fs/bcachefs/fs.c:1917
 legacy_get_tree+0xf0/0x190 fs/fs_context.c:662
 vfs_get_tree+0x92/0x2a0 fs/super.c:1780
 do_new_mount+0x2be/0xb40 fs/namespace.c:3352
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f700ca7e5ea
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f700d75bef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f700d75bf80 RCX: 00007f700ca7e5ea
RDX: 000000002000f640 RSI: 000000002000f680 RDI: 00007f700d75bf40
RBP: 000000002000f640 R08: 00007f700d75bf80 R09: 0000000000000891
R10: 0000000000000891 R11: 0000000000000202 R12: 000000002000f680
R13: 00007f700d75bf40 R14: 000000000000f61c R15: 0000000020000000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:verify_replicas_entry fs/bcachefs/replicas.c:28 [inline]
RIP: 0010:__replicas_entry_idx+0x331/0x350 fs/bcachefs/replicas.c:233
Code: d9 80 e1 07 80 c1 03 38 c1 0f 8c d7 fe ff ff 48 89 df e8 42 58 be fd e9 ca fe ff ff e8 a8 80 58 fd 90 0f 0b e8 a0 80 58 fd 90 <0f> 0b e8 98 80 58 fd 90 0f 0b e8 90 80 58 fd 90 0f 0b 66 2e 0f 1f
RSP: 0018:ffffc90003cf7090 EFLAGS: 00010246
RAX: ffffffff843db150 RBX: 0000000000000004 RCX: 0000000000040000
RDX: ffffc90004029000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: 0000000000000020 R08: ffffffff843daec8 R09: ffffffff843cbadd
R10: 0000000000000007 R11: ffff88805d615a00 R12: ffff88802f2ae0b8
R13: ffff88802f2ae0b8 R14: 0000000000000001 R15: ffff88804e180000
FS:  00007f700d75c6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31221000 CR3: 000000004785e000 CR4: 0000000000350ef0