bcachefs (loop0): alloc_read... done bcachefs (loop0): stripes_read... done bcachefs (loop0): snapshots_read... done bcachefs (loop0): check_allocations... ------------[ cut here ]------------ kernel BUG at fs/bcachefs/buckets.h:96! Oops: invalid opcode: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 3252 Comm: syz-executor Not tainted 6.9.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:gc_bucket fs/bcachefs/buckets.h:96 [inline] RIP: 0010:bch2_gc_alloc_start fs/bcachefs/btree_gc.c:1000 [inline] RIP: 0010:bch2_check_allocations+0x38fc/0x3910 fs/bcachefs/btree_gc.c:1210 Code: 44 89 ee e8 26 e9 00 00 48 8b 77 50 48 c7 c7 22 d3 5f 83 e8 a6 cd 12 01 90 0f 0b 90 0f 0b 90 0f 0b e8 78 ea 13 01 90 0f 0b 90 <0f> 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 90 RSP: 0018:ffffc90002e27640 EFLAGS: 00010206 RAX: ffff8881072c5000 RBX: 0000000000000000 RCX: 000000000001007c RDX: 0000000000000000 RSI: 000000000001007c RDI: ffff88810276b000 RBP: ffffc90002e278e0 R08: 0000000000000004 R09: 0000000000000000 R10: ffffc90002e277b0 R11: ffffc90002e27718 R12: ffff8881037e8000 R13: ffffc90002e27780 R14: 0000000000000029 R15: ffffc90002e27748 FS: 00007f799b8906c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f799aad8275 CR3: 0000000103bfc000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: bch2_run_recovery_pass fs/bcachefs/recovery_passes.c:182 [inline] bch2_run_recovery_passes+0xb9/0x220 fs/bcachefs/recovery_passes.c:225 bch2_fs_recovery+0x9cd/0x1150 fs/bcachefs/recovery.c:812 bch2_fs_start+0x1b9/0x270 fs/bcachefs/super.c:1032 bch2_fs_open+0x405/0x530 fs/bcachefs/super.c:2127 bch2_mount fs/bcachefs/fs.c:1908 [inline] bch2_fs_get_tree+0x265/0x6a0 fs/bcachefs/fs.c:2069 vfs_get_tree+0x2a/0xf0 fs/super.c:1779 do_new_mount+0x15a/0x3a0 fs/namespace.c:3352 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x14b/0x1c0 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xe2/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f799aa7e5ea Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f799b88fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f799b88ff80 RCX: 00007f799aa7e5ea RDX: 0000000020005d80 RSI: 0000000020005dc0 RDI: 00007f799b88ff40 RBP: 0000000020005d80 R08: 00007f799b88ff80 R09: 0000000000000400 R10: 0000000000000400 R11: 0000000000000246 R12: 0000000020005dc0 R13: 00007f799b88ff40 R14: 0000000000005e05 R15: 0000000020005e00 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:gc_bucket fs/bcachefs/buckets.h:96 [inline] RIP: 0010:bch2_gc_alloc_start fs/bcachefs/btree_gc.c:1000 [inline] RIP: 0010:bch2_check_allocations+0x38fc/0x3910 fs/bcachefs/btree_gc.c:1210 Code: 44 89 ee e8 26 e9 00 00 48 8b 77 50 48 c7 c7 22 d3 5f 83 e8 a6 cd 12 01 90 0f 0b 90 0f 0b 90 0f 0b e8 78 ea 13 01 90 0f 0b 90 <0f> 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 0f 0b 90 90 RSP: 0018:ffffc90002e27640 EFLAGS: 00010206 RAX: ffff8881072c5000 RBX: 0000000000000000 RCX: 000000000001007c RDX: 0000000000000000 RSI: 000000000001007c RDI: ffff88810276b000 RBP: ffffc90002e278e0 R08: 0000000000000004 R09: 0000000000000000 R10: ffffc90002e277b0 R11: ffffc90002e27718 R12: ffff8881037e8000 R13: ffffc90002e27780 R14: 0000000000000029 R15: ffffc90002e27748 FS: 00007f799b8906c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f799aad8275 CR3: 0000000103bfc000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400