bcachefs (loop6): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
  while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low!
turning off the locking correctness validator.
CPU: 1 UID: 0 PID: 8644 Comm: syz.6.274 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 add_chain_cache kernel/locking/lockdep.c:-1 [inline]
 lookup_chain_cache_add kernel/locking/lockdep.c:3855 [inline]
 validate_chain kernel/locking/lockdep.c:3876 [inline]
 __lock_acquire+0xf9c/0x30a4 kernel/locking/lockdep.c:5237
 lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5868
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x5c/0x7c kernel/locking/spinlock.c:162
 class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:557 [inline]
 fill_pool+0x1b8/0x4e0 lib/debugobjects.c:406
 debug_objects_fill_pool+0x84/0xa0 lib/debugobjects.c:725
 debug_object_activate+0x48/0x460 lib/debugobjects.c:814
 debug_work_activate kernel/workqueue.c:668 [inline]
 insert_work+0x4c/0x2cc kernel/workqueue.c:2181
 __queue_work+0xdb0/0x1210 kernel/workqueue.c:2339
 queue_work_on+0xdc/0x18c kernel/workqueue.c:2390
 queue_work include/linux/workqueue.h:669 [inline]
 loop_queue_work drivers/block/loop.c:862 [inline]
 loop_queue_rq+0x944/0xaa8 drivers/block/loop.c:1887
 __blk_mq_issue_directly block/blk-mq.c:2695 [inline]
 blk_mq_request_issue_directly+0x2c0/0x560 block/blk-mq.c:2782
 blk_mq_issue_direct+0x254/0x558 block/blk-mq.c:2803
 blk_mq_dispatch_queue_requests+0x568/0x674 block/blk-mq.c:2878
 blk_mq_flush_plug_list+0x370/0x488 block/blk-mq.c:2961
 __blk_flush_plug+0x330/0x408 block/blk-core.c:1220
 blk_finish_plug block/blk-core.c:1247 [inline]
 __submit_bio+0x3f4/0x4d8 block/blk-core.c:649
 __submit_bio_noacct_mq block/blk-core.c:722 [inline]
 submit_bio_noacct_nocheck+0x390/0xaac block/blk-core.c:751
 submit_bio_noacct+0xc94/0x177c block/blk-core.c:874
 submit_bio+0x3b4/0x550 block/blk-core.c:916
 write_one_super fs/bcachefs/super-io.c:1019 [inline]
 bch2_write_super+0x1e54/0x28dc fs/bcachefs/super-io.c:1177
 bch2_gc_mark_key+0x734/0x9b0 fs/bcachefs/btree_gc.c:680
 bch2_gc_btree fs/bcachefs/btree_gc.c:758 [inline]
 bch2_gc_btrees fs/bcachefs/btree_gc.c:792 [inline]
 bch2_check_allocations+0x1698/0x3c34 fs/bcachefs/btree_gc.c:1094
 bch2_run_recovery_pass fs/bcachefs/recovery_passes.c:484 [inline]
 __bch2_run_recovery_passes+0x2b8/0xd54 fs/bcachefs/recovery_passes.c:539
 bch2_run_recovery_passes+0x174/0x1f4 fs/bcachefs/recovery_passes.c:610
 bch2_fs_recovery+0x1c34/0x2fb4 fs/bcachefs/recovery.c:1016
 bch2_fs_start+0x940/0xbec fs/bcachefs/super.c:1213
 bch2_fs_get_tree+0x880/0x107c fs/bcachefs/fs.c:2488
 vfs_get_tree+0x90/0x28c fs/super.c:1815
 do_new_mount+0x278/0x7f4 fs/namespace.c:3808
 path_mount+0x5b4/0xde0 fs/namespace.c:4123
 do_mount fs/namespace.c:4136 [inline]
 __do_sys_mount fs/namespace.c:4347 [inline]
 __se_sys_mount fs/namespace.c:4324 [inline]
 __arm64_sys_mount+0x3e8/0x468 fs/namespace.c:4324
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
bcachefs (loop6): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
  while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
bcachefs (loop6): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
  while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
bcachefs (loop6): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
  while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
bcachefs (loop6): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
bcachefs (loop6): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
bcachefs (loop6): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
bcachefs (loop6): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
bcachefs (loop6): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
bcachefs (loop6): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
  Ratelimiting new instances of previous error
bcachefs (loop6): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
  Ratelimiting new instances of previous error
 done
bcachefs (loop6): going read-write
bcachefs (loop6): journal_replay...
 done
bcachefs (loop6): check_alloc_info...
bcachefs (loop6): bucket incorrectly unset in need_discard btree
  u64s 13 type alloc_v4 0:27:0 len 0 ver 0: 
    gen 0 oldest_gen 0 data_type need_discard
    journal_seq_nonempty 4
    journal_seq_empty    0
    need_discard         1
    need_inc_gen         1
    dirty_sectors        0
    stripe_sectors       0
    cached_sectors       0
    stripe               0
    stripe_redundancy    0
    io_time[READ]        1
    io_time[WRITE]       256
    fragmentation     0
    bp_start          8
  , fixing
bcachefs (loop6): hole in alloc btree missing in freespace btree
  device 0 buckets 29-30, fixing
bcachefs (loop6): hole in alloc btree missing in freespace btree
  device 0 buckets 33-34, fixing
bcachefs (loop6): bucket incorrectly unset in need_discard btree
  u64s 13 type alloc_v4 0:34:0 len 0 ver 0: 
    gen 0 oldest_gen 0 data_type need_discard
    journal_seq_nonempty 5
    journal_seq_empty    134217728
    need_discard         1
    need_inc_gen         1
    dirty_sectors        0
    stripe_sectors       0
    cached_sectors       0
    stripe               0
    stripe_redundancy    0
    io_time[READ]        1
    io_time[WRITE]       512
    fragmentation     0
    bp_start          8
  , fixing
bcachefs (loop6): hole in alloc btree missing in freespace btree
  device 0 buckets 36-37, fixing
bcachefs (loop6): hole in alloc btree missing in freespace btree
  device 0 buckets 39-41, fixing
bcachefs (loop6): hole in alloc btree missing in freespace btree
  device 0 buckets 43-44, fixing
bcachefs (loop6): hole in alloc btree missing in freespace btree
  device 0 buckets 45-120, fixing
 done
bcachefs (loop6): check_lrus...
bcachefs (loop6): incorrect lru entry: lru fragmentation time 134217728
  u64s 5 type set 18446462598867058688:34:0 len 0 ver 0
  for u64s 13 type alloc_v4 0:34:0 len 0 ver 0: 
    gen 0 oldest_gen 0 data_type need_discard
    journal_seq_nonempty 5
    journal_seq_empty    134217728
    need_discard         1
    need_inc_gen         1
    dirty_sectors        0
    stripe_sectors       0
    cached_sectors       0
    stripe               0
    stripe_redundancy    0
    io_time[READ]        1
    io_time[WRITE]       512
    fragmentation     0
    bp_start          8
  , fixing
 done
bcachefs (loop6): check_btree_backpointers... done
bcachefs (loop6): check_backpointers_to_extents... done
bcachefs (loop6): check_extents_to_backpointers...
bcachefs (loop6): scanning for missing backpointers in 4/128 buckets
 done
bcachefs (loop6): check_alloc_to_lru_refs... done
bcachefs (loop6): bucket_gens_init... done
bcachefs (loop6): check_snapshot_trees... done
bcachefs (loop6): check_snapshots...
bcachefs (loop6): snapshot points to missing/incorrect tree:
  u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent          0 children          0          0 subvol 1 tree 0, fixing
 done
bcachefs (loop6): check_subvols... done
bcachefs (loop6): check_subvol_children... done
bcachefs (loop6): delete_dead_snapshots... done
bcachefs (loop6): check_inodes...
bcachefs (loop6): inode points to missing dirent
  inum: 4097:4294967295 
    mode=40700
    flags=(15300000)
    journal_seq=1
    hash_seed=a9fcff247692d1ca
    hash_type=siphash
    bi_size=0
    bi_sectors=0
    bi_version=0
    bi_atime=200535484
    bi_ctime=200535484
    bi_mtime=200535484
    bi_otime=200535484
    bi_uid=0
    bi_gid=0
    bi_nlink=0
    bi_generation=0
    bi_dev=0
    bi_data_checksum=0
    bi_compression=0
    bi_project=0
    bi_background_compression=0
    bi_data_replicas=0
    bi_promote_target=0
    bi_foreground_target=0
    bi_background_target=0
    bi_erasure_code=0
    bi_fields_set=0
    bi_dir=4096
    bi_dir_offset=8070574177064933557
    bi_subvol=0
    bi_parent_subvol=0
    bi_nocow=0
    bi_depth=0
    bi_inodes_32bit=0
    bi_casefold=0, fixing
bcachefs (loop6): inode points to missing dirent
  inum: 4099:4294967295 
    mode=100755
    flags=(15300000)
    journal_seq=5
    hash_seed=fc917866faeb7b5b
    hash_type=siphash
    bi_size=1050
    bi_sectors=8
    bi_version=0
    bi_atime=2770562249
    bi_ctime=2770562249
    bi_mtime=2770562249
    bi_otime=2770562249
    bi_uid=0
    bi_gid=0
    bi_nlink=0
    bi_generation=0
    bi_dev=0
    bi_data_checksum=0
    bi_compression=0
    bi_project=0
    bi_background_compression=1
    bi_data_replicas=0
    bi_promote_target=0
    bi_foreground_target=0
    bi_background_target=0
    bi_erasure_code=0
    bi_fields_set=4098
    bi_dir=8977922886548783724
    bi_dir_offset=0
    bi_subvol=0
    bi_parent_subvol=0
    bi_nocow=0
    bi_depth=0
    bi_inodes_32bit=0
    bi_casefold=0, fixing
 done
bcachefs (loop6): check_extents... done
bcachefs (loop6): check_indirect_extents... done
bcachefs (loop6): check_dirents...
bcachefs (loop6): directory with missing backpointer
  u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir
  inum: 4097:4294967295 
    mode=40700
    flags=(4300000)
    journal_seq=24
    hash_seed=a9fcff247692d1ca
    hash_type=siphash
    bi_size=0
    bi_sectors=0
    bi_version=0
    bi_atime=200535484
    bi_ctime=200535484
    bi_mtime=200535484
    bi_otime=200535484
    bi_uid=0
    bi_gid=0
    bi_nlink=0
    bi_generation=0
    bi_dev=0
    bi_data_checksum=0
    bi_compression=0
    bi_project=0
    bi_background_compression=0
    bi_data_replicas=0
    bi_promote_target=0
    bi_foreground_target=0
    bi_background_target=0
    bi_erasure_code=0
    bi_fields_set=0
    bi_dir=0
    bi_dir_offset=0
    bi_subvol=0
    bi_parent_subvol=0
    bi_nocow=0
    bi_depth=0
    bi_inodes_32bit=0
    bi_casefold=0, fixing
 done
bcachefs (loop6): check_xattrs... done
bcachefs (loop6): check_root... done
bcachefs (loop6): check_unreachable_inodes... done
bcachefs (loop6): check_subvolume_structure... done
bcachefs (loop6): check_directory_structure... done
bcachefs (loop6): check_nlinks...
bcachefs (loop6): inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing
 done
bcachefs (loop6): check_rebalance_work... done
bcachefs (loop6): resume_logged_ops... done
bcachefs (loop6): delete_dead_inodes... done
bcachefs (loop6): set_fs_needs_rebalance... done
bcachefs (loop6): done starting filesystem
bcachefs (loop6): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
  set version_upgrade=incompat to enable