el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581
------------[ cut here ]------------
kernel BUG at fs/btrfs/transaction.c:1672!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4329 Comm: syz-executor916 Not tainted 6.1.36-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : create_pending_snapshot+0x2024/0x2634 fs/btrfs/transaction.c:1672
lr : create_pending_snapshot+0x2024/0x2634 fs/btrfs/transaction.c:1672
sp : ffff80001dd17480
x29: ffff80001dd17720 x28: dfff800000000000 x27: 1fffe000186367d5
x26: ffff0000c9134c60 x25: ffff0000dfa339c0 x24: ffff0000d9558800
x23: ffff700003ba2ec0 x22: ffff0000c31b3e00 x21: ffff0000df844758
x20: ffff0000dfa33e50 x19: 00000000fffffff4 x18: ffff80001dd16780
x17: 0000000000000000 x16: ffff80001210ac24 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001
x11: ff8080000a0fc6d4 x10: 0000000000000000 x9 : ffff80000a0fc6d4
x8 : ffff0000daaa0000 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001dd16958 x4 : 00000000ffffffff x3 : 0000000000000d40
x2 : ffff0000d5b40c00 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 create_pending_snapshot+0x2024/0x2634 fs/btrfs/transaction.c:1672
 create_pending_snapshots+0x150/0x198 fs/btrfs/transaction.c:1868
 btrfs_commit_transaction+0x10e0/0x2cd4 fs/btrfs/transaction.c:2336
 create_snapshot+0x418/0x6f0 fs/btrfs/ioctl.c:835
 btrfs_mksubvol+0x510/0x650 fs/btrfs/ioctl.c:985
 btrfs_mksnapshot+0xc8/0x158 fs/btrfs/ioctl.c:1031
 __btrfs_ioctl_snap_create+0x2e4/0x3c0 fs/btrfs/ioctl.c:2186
 btrfs_ioctl_snap_create_v2+0x1a4/0x38c fs/btrfs/ioctl.c:2273
 btrfs_ioctl+0x9b4/0xb08
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581
Code: 52800101 97a1c360 17fffd2e 978ff45a (d4210000) 
---[ end trace 0000000000000000 ]---