diff --git a/.bcachefs_revision b/.bcachefs_revision
index 9192d288..8f438cd1 100644
--- a/.bcachefs_revision
+++ b/.bcachefs_revision
@@ -1 +1 @@
-ce8f0c316862869e9e2c57270b8d5f15f26be5ca
+6ba867b0c788d0f32e8dc142172d60ead6273f1b
diff --git a/libbcachefs/bcachefs_ioctl.h b/libbcachefs/bcachefs_ioctl.h
index 6758b303..dd926db4 100644
--- a/libbcachefs/bcachefs_ioctl.h
+++ b/libbcachefs/bcachefs_ioctl.h
@@ -447,7 +447,12 @@ struct bch_ioctl_fsck_offline {
 	__u64			flags;
 	__u64			opts;		/* string */
 	__u64			nr_devs;
-	__u64			devs[] __counted_by(nr_devs);
+	/*
+	 * Do not re-add __counted_by() here: there's a compiler bug that causes
+	 * a bounds check to happen, even when it's a userspace pointer
+	 * (properly marked as __user)
+	 */
+	__u64			devs[];
 };
 
 /*