------------[ cut here ]------------ WARNING: CPU: 1 PID: 6405 at fs/bcachefs/buckets.c:395 __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395 Modules linked in: CPU: 1 PID: 6405 Comm: syz.3.16 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395 lr : __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395 sp : ffff8000a0905e60 x29: ffff8000a0905e60 x28: 000000000001ffb8 x27: 1fffe0001ab11825 x26: dfff800000000000 x25: 1fffe0001e616000 x24: 000000000001ffe8 x23: 000000000000000c x22: ffff0000f30b0000 x21: ffff0000d588c000 x20: 0000000000002800 x19: ffff0000d588c128 x18: ffff8000a0906100 x17: 0000000000000000 x16: ffff800082f8f174 x15: 0000000000000001 x14: 1fffe0001e083808 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001e083809 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d14a9e40 x7 : 4000000100000000 x6 : 00000010ffffffff x5 : ffff8000a09066a8 x4 : ffff8000a0906734 x3 : ffff8000827cbe9c x2 : 0000000000002800 x1 : 000000000001ffe8 x0 : 0000000000010000 Call trace: __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395 bch2_replicas_deltas_realloc fs/bcachefs/buckets.c:427 [inline] bch2_update_replicas_list+0x70/0x268 fs/bcachefs/buckets.c:444 __trigger_extent+0x3b64/0x40c4 fs/bcachefs/buckets.c:1211 bch2_trigger_extent+0x534/0x734 fs/bcachefs/buckets.c:1261 bch2_key_trigger fs/bcachefs/bkey_methods.h:88 [inline] bch2_key_trigger_old fs/bcachefs/bkey_methods.h:102 [inline] run_one_trans_trigger fs/bcachefs/btree_trans_commit.c:514 [inline] run_btree_triggers+0x7cc/0xc18 fs/bcachefs/btree_trans_commit.c:544 bch2_trans_commit_run_triggers fs/bcachefs/btree_trans_commit.c:576 [inline] __bch2_trans_commit+0x30c/0x592c fs/bcachefs/btree_trans_commit.c:1022 bch2_trans_commit fs/bcachefs/btree_update.h:170 [inline] bch2_extent_update+0x3d0/0x9b4 fs/bcachefs/io_write.c:326 bch2_remap_range+0x1998/0x33a0 fs/bcachefs/reflink.c:554 bch2_remap_file_range+0x6b0/0xc28 fs/bcachefs/fs-io.c:903 vfs_copy_file_range+0xdf8/0x1248 fs/read_write.c:1522 __do_sys_copy_file_range fs/read_write.c:1612 [inline] __se_sys_copy_file_range fs/read_write.c:1575 [inline] __arm64_sys_copy_file_range+0x468/0x68c fs/read_write.c:1575 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:131 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:150 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 irq event stamp: 82498 hardirqs last enabled at (82497): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (82497): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (82498): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (82302): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (82300): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---