el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193
 el0_svc+0x4c/0x15c arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
------------[ cut here ]------------
kernel BUG at fs/btrfs/transaction.c:1697!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 8941 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : create_pending_snapshot+0x1fe8/0x262c fs/btrfs/transaction.c:1697
lr : create_pending_snapshot+0x1fe8/0x262c fs/btrfs/transaction.c:1697
sp : ffff800024f073e0
x29: ffff800024f076e0 x28: ffff0000c99ac000 x27: ffff0000c91d2800
x26: dfff800000000000 x25: ffff800024f07640 x24: ffff0000e1140158
x23: ffff0000e1140150 x22: 00000000fffffff4 x21: ffff0000c91d28a8
x20: ffff0000e11f8958 x19: ffff0000e11f8da0 x18: 1fffe0003684a5b6
x17: 0000000000000000 x16: ffff80001236e294 x15: 0000000000000001
x14: 0000000000000000 x13: 000000000008a548 x12: 0000000000000001
x11: 0000000000040000 x10: 000000000001a9a6 x9 : ffff80001f1c9000
x8 : 000000000001a9a7 x7 : 000000000008a548 x6 : 000000000008a4d8
x5 : ffff800024f06918 x4 : ffff800015e2fa10 x3 : ffff80000acca4d8
x2 : 0000000000000001 x1 : 00000000fffffff4 x0 : 0000000000000000
Call trace:
 create_pending_snapshot+0x1fe8/0x262c fs/btrfs/transaction.c:1697
 create_pending_snapshots+0x150/0x198 fs/btrfs/transaction.c:1894
 btrfs_commit_transaction+0x1024/0x2d64 fs/btrfs/transaction.c:2364
 create_snapshot+0x418/0x6f0 fs/btrfs/ioctl.c:844
 btrfs_mksubvol+0x494/0x5f8 fs/btrfs/ioctl.c:994
 btrfs_mksnapshot+0xc8/0x158 fs/btrfs/ioctl.c:1040
 __btrfs_ioctl_snap_create+0x2e4/0x3c0 fs/btrfs/ioctl.c:1293
 btrfs_ioctl_snap_create+0x134/0x180 fs/btrfs/ioctl.c:1320
 btrfs_ioctl+0x19c/0xb08
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193
 el0_svc+0x4c/0x15c arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
Code: f9408ff7 f940abf9 17fff981 978f96f1 (d4210000) 
---[ end trace 0000000000000000 ]---