------------[ cut here ]------------
WARNING: CPU: 0 PID: 7286 at fs/bcachefs/buckets.c:395 __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395
Modules linked in:
CPU: 0 PID: 7286 Comm: syz.0.105 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395
lr : __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395
sp : ffff80009c725b20
x29: ffff80009c725b20 x28: 000000000001ffb8 x27: 1fffe00019dc9825
x26: dfff800000000000 x25: 1fffe0001de22000 x24: 000000000001ffe8
x23: 000000000000000c x22: ffff0000ef110000 x21: ffff0000cee4c000
x20: 0000000000002800 x19: ffff0000cee4c128 x18: ffff80009c725e40
x17: 0000000000000000 x16: ffff800082f95f34 x15: 0000000000000001
x14: 1fffe0001dbf2c08 x13: 0000000000000000 x12: 0000000000000000
x11: ffff60001dbf2c09 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000da09bc80 x7 : 0000000000000000 x6 : 0000001000000000
x5 : ffff80009c726368 x4 : ffff80009c7263f4 x3 : ffff8000827d2c70
x2 : 0000000000002800 x1 : 000000000001ffe8 x0 : 0000000000010000
Call trace:
 __replicas_deltas_realloc+0x16c/0x2a4 fs/bcachefs/buckets.c:395
 bch2_replicas_deltas_realloc fs/bcachefs/buckets.c:427 [inline]
 bch2_update_replicas_list+0x70/0x268 fs/bcachefs/buckets.c:444
 __trigger_extent+0x3b64/0x40c4 fs/bcachefs/buckets.c:1211
 bch2_trigger_extent+0x5bc/0x734 fs/bcachefs/buckets.c:1261
 bch2_trigger_reflink_v+0x178/0x1fc fs/bcachefs/reflink.c:309
 bch2_key_trigger fs/bcachefs/bkey_methods.h:88 [inline]
 bch2_key_trigger_new fs/bcachefs/bkey_methods.h:116 [inline]
 run_one_trans_trigger fs/bcachefs/btree_trans_commit.c:517 [inline]
 run_btree_triggers+0x680/0xc18 fs/bcachefs/btree_trans_commit.c:544
 bch2_trans_commit_run_triggers fs/bcachefs/btree_trans_commit.c:576 [inline]
 __bch2_trans_commit+0x30c/0x592c fs/bcachefs/btree_trans_commit.c:1022
 bch2_trans_commit fs/bcachefs/btree_update.h:170 [inline]
 bch2_extent_update+0x3d0/0x9b4 fs/bcachefs/io_write.c:326
 bch2_remap_range+0x1998/0x33a0 fs/bcachefs/reflink.c:554
 bch2_remap_file_range+0x6b0/0xc28 fs/bcachefs/fs-io.c:903
 vfs_clone_file_range+0x534/0xb20 fs/remap_range.c:403
 ioctl_file_clone fs/ioctl.c:240 [inline]
 ioctl_file_clone_range fs/ioctl.c:259 [inline]
 do_vfs_ioctl+0xe3c/0x2404 fs/ioctl.c:854
 __do_sys_ioctl fs/ioctl.c:905 [inline]
 __se_sys_ioctl fs/ioctl.c:893 [inline]
 __arm64_sys_ioctl+0xe4/0x1c8 fs/ioctl.c:893
 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:131
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:150
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598
irq event stamp: 362
hardirqs last  enabled at (361): [<ffff8000809b9148>] lruvec_stat_mod_folio include/linux/vmstat.h:561 [inline]
hardirqs last  enabled at (361): [<ffff8000809b9148>] __kmalloc_large_node+0x124/0x200 mm/slub.c:4071
hardirqs last disabled at (362): [<ffff80008b13d724>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470
softirqs last  enabled at (338): [<ffff8000801e2570>] softirq_handle_end kernel/softirq.c:400 [inline]
softirqs last  enabled at (338): [<ffff8000801e2570>] handle_softirqs+0xa3c/0xbfc kernel/softirq.c:582
softirqs last disabled at (323): [<ffff800080020de8>] __do_softirq+0x14/0x20 kernel/softirq.c:588
---[ end trace 0000000000000000 ]---