el0_svc_common+0x138/0x244 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:191
 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
------------[ cut here ]------------
kernel BUG at fs/btrfs/transaction.c:1691!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 6065 Comm: syz-executor602 Not tainted 6.4.0-rc7-syzkaller-ge40939bbfc68 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : create_pending_snapshot+0x2128/0x27d8 fs/btrfs/transaction.c:1691
lr : create_pending_snapshot+0x2128/0x27d8 fs/btrfs/transaction.c:1691
sp : ffff8000967573e0
x29: ffff8000967576c0 x28: ffff800096757600 x27: ffff0000deb430a8
x26: ffff0000deb430c8 x25: ffff0000d00b2000 x24: ffff0000e023b810
x23: dfff800000000000 x22: ffff700012ceaea8 x21: ffff0000dbac0000
x20: ffff0000e023bc58 x19: 00000000fffffff4 x18: ffff8000967567c0
x17: 0000000000000000 x16: ffff80008a443320 x15: 0000000000000001
x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000
x8 : ffff0000cb9e5340 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800096756918 x4 : ffff80008df9ee80 x3 : ffff800082cfd768
x2 : 0000000000000001 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 create_pending_snapshot+0x2128/0x27d8 fs/btrfs/transaction.c:1691
 create_pending_snapshots+0x150/0x198 fs/btrfs/transaction.c:1888
 btrfs_commit_transaction+0x1000/0x2d24 fs/btrfs/transaction.c:2358
 create_snapshot+0x418/0x6f0 fs/btrfs/ioctl.c:846
 btrfs_mksubvol+0x494/0x5f8 fs/btrfs/ioctl.c:996
 btrfs_mksnapshot+0xc8/0x158 fs/btrfs/ioctl.c:1042
 __btrfs_ioctl_snap_create+0x2e4/0x3c0 fs/btrfs/ioctl.c:1295
 btrfs_ioctl_snap_create_v2+0x1a4/0x38c fs/btrfs/ioctl.c:1382
 btrfs_ioctl+0x9b4/0xb08
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x244 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:191
 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
Code: d2d00017 f2fbfff7 17fff92e 978ef1fa (d4210000) 
---[ end trace 0000000000000000 ]---