BTRFS info (device loop0): trying to use backup root at mount time
BTRFS info (device loop0): disabling tree log
BTRFS info (device loop0): enabling auto defrag
BTRFS info (device loop0): using free space tree
BTRFS error (device loop0): failed to load root free space
assertion failed: !tmp, in fs/btrfs/disk-io.c:1002
------------[ cut here ]------------
kernel BUG at fs/btrfs/messages.c:259!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 4991 Comm: syz-executor159 Not tainted 6.4.0-rc4-syzkaller-00265-g4ecd704a4c51 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
RIP: 0010:btrfs_assertfail+0x18/0x20 fs/btrfs/messages.c:259
Code: df e8 0c 86 35 f7 e9 50 fb ff ff e8 b2 90 01 00 66 90 66 0f 1f 00 89 d1 48 89 f2 48 89 fe 48 c7 c7 00 35 2c 8b e8 c8 60 ff ff <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 53 48 89 fb e8 c3 b1 dd f6 48
RSP: 0018:ffffc9000393f428 EFLAGS: 00010246
RAX: 0000000000000032 RBX: 0000000000000000 RCX: 2877211207295800
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffff88807e0c80a0 R08: ffffffff816f004c R09: fffff52000727dfd
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff88807d13a1f7 R14: ffff88807e0c8060 R15: ffff88807c89c000
FS:  0000555556bd0300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e70d0316f8 CR3: 000000007d44e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 btrfs_global_root_insert+0x1ac/0x1b0 fs/btrfs/disk-io.c:1002
 load_global_roots_objectid+0x469/0x8c0 fs/btrfs/disk-io.c:2384
 load_global_roots fs/btrfs/disk-io.c:2418 [inline]
 btrfs_read_roots fs/btrfs/disk-io.c:2445 [inline]
 init_tree_roots+0xa2e/0x1f80 fs/btrfs/disk-io.c:2868
 open_ctree+0x1b26/0x2fa0 fs/btrfs/disk-io.c:3566
 btrfs_fill_super+0x1c7/0x2f0 fs/btrfs/super.c:1156
 btrfs_mount_root+0x807/0x940 fs/btrfs/super.c:1524
 legacy_get_tree+0xef/0x190 fs/fs_context.c:610
 vfs_get_tree+0x8c/0x270 fs/super.c:1510
 fc_mount fs/namespace.c:1035 [inline]
 vfs_kern_mount+0xbc/0x150 fs/namespace.c:1065
 btrfs_mount+0x39f/0xb50 fs/btrfs/super.c:1584
 legacy_get_tree+0xef/0x190 fs/fs_context.c:610
 vfs_get_tree+0x8c/0x270 fs/super.c:1510
 do_new_mount+0x28f/0xae0 fs/namespace.c:3039
 do_mount fs/namespace.c:3382 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3568
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f27869a4c0a
Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc4d473c68 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f27869a4c0a
RDX: 0000000020005100 RSI: 0000000020005140 RDI: 00007ffc4d473c80
RBP: 00007ffc4d473c80 R08: 00007ffc4d473cc0 R09: 0000000000005103
R10: 0000000000000016 R11: 0000000000000282 R12: 0000000000000004
R13: 0000555556bd02c0 R14: 0000000000000016 R15: 00007ffc4d473cc0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:btrfs_assertfail+0x18/0x20 fs/btrfs/messages.c:259
Code: df e8 0c 86 35 f7 e9 50 fb ff ff e8 b2 90 01 00 66 90 66 0f 1f 00 89 d1 48 89 f2 48 89 fe 48 c7 c7 00 35 2c 8b e8 c8 60 ff ff <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 53 48 89 fb e8 c3 b1 dd f6 48
RSP: 0018:ffffc9000393f428 EFLAGS: 00010246
RAX: 0000000000000032 RBX: 0000000000000000 RCX: 2877211207295800
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffff88807e0c80a0 R08: ffffffff816f004c R09: fffff52000727dfd
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffff88807d13a1f7 R14: ffff88807e0c8060 R15: ffff88807c89c000
FS:  0000555556bd0300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000061cca0 CR3: 000000007d44e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400