------------[ cut here ]------------
kernel BUG at fs/btrfs/transaction.c:1672!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 3702 Comm: syz-executor.2 Not tainted 6.1.36-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : create_pending_snapshot+0x2024/0x2634 fs/btrfs/transaction.c:1672
lr : create_pending_snapshot+0x2024/0x2634 fs/btrfs/transaction.c:1672
sp : ffff80002cf57480
x29: ffff80002cf57720 x28: dfff800000000000 x27: 1fffe0001a34a895
x26: ffff0000db9e1790 x25: ffff0000e2941ce0 x24: ffff0001283b7000
x23: ffff7000059eaec0 x22: ffff0000d1a54400 x21: ffff0000df82c468
x20: ffff0000e2942170 x19: 00000000fffffff4 x18: 1fffe000368b9f76
x17: 0000000000000000 x16: ffff80001210ac24 x15: 0000000000000000
x14: 0000000000000002 x13: fffffffffffda5f0 x12: 0000000000040000
x11: 00000000000147c6 x10: ffff80001e78a000 x9 : ffff80000a0fc6d4
x8 : 00000000000147c7 x7 : fffffffffffda5f0 x6 : fffffffffffda5b0
x5 : ffff80002cf56958 x4 : 00000000ffffffff x3 : 0000000000000d40
x2 : ffff0000d5f8af00 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 create_pending_snapshot+0x2024/0x2634 fs/btrfs/transaction.c:1672
 create_pending_snapshots+0x150/0x198 fs/btrfs/transaction.c:1868
 btrfs_commit_transaction+0x10e0/0x2cd4 fs/btrfs/transaction.c:2336
 create_snapshot+0x418/0x6f0 fs/btrfs/ioctl.c:835
 btrfs_mksubvol+0x510/0x650 fs/btrfs/ioctl.c:985
 btrfs_mksnapshot+0xc8/0x158 fs/btrfs/ioctl.c:1031
 __btrfs_ioctl_snap_create+0x2e4/0x3c0 fs/btrfs/ioctl.c:2186
 btrfs_ioctl_snap_create_v2+0x1a4/0x38c fs/btrfs/ioctl.c:2273
 btrfs_ioctl+0x9b4/0xb08
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581
Code: 52800101 97a1c360 17fffd2e 978ff45a (d4210000) 
---[ end trace 0000000000000000 ]---