bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 6229884513039707068, hashed to 2263426191451115502
  u64s 7 type dirent 4096:6229884513039707068:U32_MAX len 0 ver 0: ÍËle2 -> 2165878814 -> 1056964609 type subvol, fixing
------------[ cut here ]------------
kernel BUG at fs/bcachefs/fsck.c:979!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 5796 Comm: syz.0.16 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:bch2_fsck_update_backpointers+0x3ce/0x3d0 fs/bcachefs/fsck.c:979
Code: 39 fd ff ff e8 b3 a9 20 07 44 89 e9 80 e1 07 38 c1 0f 8c 7a fd ff ff 4c 89 ef e8 8d 47 ec fd e9 6d fd ff ff e8 83 53 8a fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa
RSP: 0018:ffffc9000cd2e6a0 EFLAGS: 00010293
RAX: ffffffff84357ccd RBX: 1ffff920019a5cdc RCX: ffff88801ecbc880
RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010
RBP: ffffc9000cd2e820 R08: ffffc9000cd2e797 R09: 0000000000000000
R10: ffffc9000cd2e750 R11: fffff520019a5cf3 R12: ffffc9000cd2f1d0
R13: 0000000000000010 R14: dffffc0000000000 R15: ffffc9000cd2e750
FS:  00007f5c48e066c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f36fbae0eb8 CR3: 0000000048b86000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __bch2_str_hash_check_key+0x21eb/0x2d80 fs/bcachefs/str_hash.c:257
 bch2_str_hash_check_key fs/bcachefs/str_hash.h:414 [inline]
 check_dirent fs/bcachefs/fsck.c:2177 [inline]
 bch2_check_dirents+0x1d31/0x2460 fs/bcachefs/fsck.c:2272
 bch2_run_recovery_pass+0xdf/0x1d0 fs/bcachefs/recovery_passes.c:227
 bch2_run_recovery_passes+0x2a0/0xdb0 fs/bcachefs/recovery_passes.c:280
 bch2_fs_recovery+0x2399/0x37b0 fs/bcachefs/recovery.c:937
 bch2_fs_start+0x70b/0xae0 fs/bcachefs/super.c:1091
 bch2_fs_get_tree+0xd99/0x13a0 fs/bcachefs/fs.c:2570
 vfs_get_tree+0x8f/0x2b0 fs/super.c:1759
 do_new_mount+0x24a/0xa40 fs/namespace.c:3884
 do_mount fs/namespace.c:4224 [inline]
 __do_sys_mount fs/namespace.c:4435 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4412
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5c47f8f90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5c48e05e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f5c48e05ef0 RCX: 00007f5c47f8f90a
RDX: 000020000000f640 RSI: 0000200000000200 RDI: 00007f5c48e05eb0
RBP: 000020000000f640 R08: 00007f5c48e05ef0 R09: 0000000002a18414
R10: 0000000002a18414 R11: 0000000000000246 R12: 0000200000000200
R13: 00007f5c48e05eb0 R14: 000000000000f651 R15: 00002000000004c0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:bch2_fsck_update_backpointers+0x3ce/0x3d0 fs/bcachefs/fsck.c:979
Code: 39 fd ff ff e8 b3 a9 20 07 44 89 e9 80 e1 07 38 c1 0f 8c 7a fd ff ff 4c 89 ef e8 8d 47 ec fd e9 6d fd ff ff e8 83 53 8a fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa
RSP: 0018:ffffc9000cd2e6a0 EFLAGS: 00010293
RAX: ffffffff84357ccd RBX: 1ffff920019a5cdc RCX: ffff88801ecbc880
RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010
RBP: ffffc9000cd2e820 R08: ffffc9000cd2e797 R09: 0000000000000000
R10: ffffc9000cd2e750 R11: fffff520019a5cf3 R12: ffffc9000cd2f1d0
R13: 0000000000000010 R14: dffffc0000000000 R15: ffffc9000cd2e750
FS:  00007f5c48e066c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555b5d1aa000 CR3: 0000000048b86000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400