el0_svc_common+0x138/0x244 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:191 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 ------------[ cut here ]------------ kernel BUG at fs/btrfs/transaction.c:1691! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 14177 Comm: syz-executor.3 Not tainted 6.4.0-rc5-syzkaller-gd8b213732169 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : create_pending_snapshot+0x2128/0x27d8 fs/btrfs/transaction.c:1691 lr : create_pending_snapshot+0x2128/0x27d8 fs/btrfs/transaction.c:1691 sp : ffff8000a4cb7400 x29: ffff8000a4cb76e0 x28: ffff8000a4cb7620 x27: ffff0000def18e70 x26: ffff0000def18e90 x25: ffff0000db743c00 x24: ffff00012fde92b0 x23: dfff800000000000 x22: ffff700014996eac x21: ffff0000d3b2a000 x20: ffff00012fde96f8 x19: 00000000fffffff4 x18: 1fffe000368447c6 x17: 0000000000000000 x16: ffff80008a43bfbc x15: 0000000000000001 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 x11: 0000000000040000 x10: 0000000000015666 x9 : ffff8000a0129000 x8 : 0000000000015667 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000a4cb6938 x4 : ffff80008df9ee80 x3 : ffff800082cfeb48 x2 : 0000000000000001 x1 : 00000000fffffff4 x0 : 0000000000000000 Call trace: create_pending_snapshot+0x2128/0x27d8 fs/btrfs/transaction.c:1691 create_pending_snapshots+0x150/0x198 fs/btrfs/transaction.c:1888 btrfs_commit_transaction+0x1000/0x2d24 fs/btrfs/transaction.c:2358 create_snapshot+0x418/0x6f0 fs/btrfs/ioctl.c:846 btrfs_mksubvol+0x494/0x5f8 fs/btrfs/ioctl.c:996 btrfs_mksnapshot+0xc8/0x158 fs/btrfs/ioctl.c:1042 __btrfs_ioctl_snap_create+0x2e4/0x3c0 fs/btrfs/ioctl.c:1295 btrfs_ioctl_snap_create+0x134/0x180 fs/btrfs/ioctl.c:1322 btrfs_ioctl+0x19c/0xb08 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x244 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:191 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: d2d00017 f2fbfff7 17fff92e 978eeff4 (d4210000) ---[ end trace 0000000000000000 ]---