bcachefs (loop0): delete_dead_snapshots... done
bcachefs (loop0): check_inodes... done
bcachefs (loop0): check_extents... done
bcachefs (loop0): check_indirect_extents... done
bcachefs (loop0): check_dirents...
bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 6229884513039707068, hashed to 2263426191451115502
  u64s 7 type dirent 4096:6229884513039707068:U32_MAX len 0 ver 0: ÍËle2 -> 2165878814 -> 1056964609 type subvol, fixing
------------[ cut here ]------------
kernel BUG at fs/bcachefs/fsck.c:979!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 6576 Comm: syz.0.16 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:bch2_fsck_update_backpointers+0x3ce/0x3d0 fs/bcachefs/fsck.c:979
Code: 39 fd ff ff e8 83 c4 1b 07 44 89 e9 80 e1 07 38 c1 0f 8c 7a fd ff ff 4c 89 ef e8 cd 4b ec fd e9 6d fd ff ff e8 63 7d 8c fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa
RSP: 0018:ffffc90003cae6a0 EFLAGS: 00010293
RAX: ffffffff843351fd RBX: 1ffff92000795cdc RCX: ffff88802ef41e00
RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010
RBP: ffffc90003cae820 R08: ffffc90003cae797 R09: 0000000000000000
R10: ffffc90003cae750 R11: fffff52000795cf3 R12: ffffc90003caf1d0
R13: 0000000000000010 R14: dffffc0000000000 R15: ffffc90003cae750
FS:  00007fc54db226c0(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005605c71ab008 CR3: 0000000030990000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __bch2_str_hash_check_key+0x21eb/0x2d80 fs/bcachefs/str_hash.c:257
 bch2_str_hash_check_key fs/bcachefs/str_hash.h:414 [inline]
 check_dirent fs/bcachefs/fsck.c:2177 [inline]
 bch2_check_dirents+0x1d31/0x2460 fs/bcachefs/fsck.c:2272
 bch2_run_recovery_pass+0xdf/0x1d0 fs/bcachefs/recovery_passes.c:227
 bch2_run_recovery_passes+0x2a0/0xdb0 fs/bcachefs/recovery_passes.c:280
 bch2_fs_recovery+0x2399/0x37b0 fs/bcachefs/recovery.c:937
 bch2_fs_start+0x70b/0xae0 fs/bcachefs/super.c:1091
 bch2_fs_get_tree+0xd99/0x13a0 fs/bcachefs/fs.c:2570
 vfs_get_tree+0x8f/0x2b0 fs/super.c:1759
 do_new_mount+0x24a/0xa40 fs/namespace.c:3884
 do_mount fs/namespace.c:4224 [inline]
 __do_sys_mount fs/namespace.c:4435 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4412
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc54cd9010a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc54db21e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fc54db21ef0 RCX: 00007fc54cd9010a
RDX: 000020000000f640 RSI: 0000200000000200 RDI: 00007fc54db21eb0
RBP: 000020000000f640 R08: 00007fc54db21ef0 R09: 0000000002a18414
R10: 0000000002a18414 R11: 0000000000000246 R12: 0000200000000200
R13: 00007fc54db21eb0 R14: 000000000000f651 R15: 00002000000004c0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:bch2_fsck_update_backpointers+0x3ce/0x3d0 fs/bcachefs/fsck.c:979
Code: 39 fd ff ff e8 83 c4 1b 07 44 89 e9 80 e1 07 38 c1 0f 8c 7a fd ff ff 4c 89 ef e8 cd 4b ec fd e9 6d fd ff ff e8 63 7d 8c fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa
RSP: 0018:ffffc90003cae6a0 EFLAGS: 00010293
RAX: ffffffff843351fd RBX: 1ffff92000795cdc RCX: ffff88802ef41e00
RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010
RBP: ffffc90003cae820 R08: ffffc90003cae797 R09: 0000000000000000
R10: ffffc90003cae750 R11: fffff52000795cf3 R12: ffffc90003caf1d0
R13: 0000000000000010 R14: dffffc0000000000 R15: ffffc90003cae750
FS:  00007fc54db226c0(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005605c71ab008 CR3: 0000000030990000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400