BTRFS warning (device loop4): couldn't read tree root
assertion failed: !tmp, in fs/btrfs/disk-io.c:1098
------------[ cut here ]------------
kernel BUG at fs/btrfs/ctree.h:3713!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 11989 Comm: syz-executor.4 Not tainted 6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : assertfail+0x28/0x2c fs/btrfs/ctree.h:3712
lr : assertfail+0x28/0x2c fs/btrfs/ctree.h:3712
sp : ffff8000144cb800
x29: ffff8000144cb800 x28: 0000000000000000 x27: 000000000000000b
x26: 0000000000000000 x25: ffff00011a7c6000 x24: ffff00011a7c6000
x23: 0000000000000000 x22: ffff00011a7c01f7 x21: ffff00011afc40a0
x20: ffff00011a7c0000 x19: ffff00011afc4060 x18: 00000000000003e4
x17: ffff80000c0cd83c x16: ffff80000dbe6158 x15: ffff00011a531a40
x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000
x11: 000000000003ffff x10: ffff80001bd85000 x9 : 6b59dd2923608000
x8 : 6b59dd2923608000 x7 : ffff80000816678c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000006 x1 : 0000000100000000 x0 : 0000000000000032
Call trace:
 assertfail+0x28/0x2c fs/btrfs/ctree.h:3712
 btrfs_global_root_delete+0x0/0x54 fs/btrfs/disk-io.c:1098
 load_global_roots_objectid+0x20c/0x460 fs/btrfs/disk-io.c:2460
 load_global_roots fs/btrfs/disk-io.c:2494 [inline]
 btrfs_read_roots+0x60/0x530 fs/btrfs/disk-io.c:2521
 init_tree_roots+0x288/0x3d0 fs/btrfs/disk-io.c:2940
 open_ctree+0x688/0xdc8 fs/btrfs/disk-io.c:3634
 btrfs_fill_super+0xc0/0x174 fs/btrfs/super.c:1461
 btrfs_mount_root+0x4a4/0x558 fs/btrfs/super.c:1829
 legacy_get_tree+0x30/0x74 fs/fs_context.c:610
 vfs_get_tree+0x40/0x140 fs/super.c:1531
 fc_mount fs/namespace.c:1043 [inline]
 vfs_kern_mount+0xe0/0x140 fs/namespace.c:1073
 btrfs_mount+0x20c/0x5e8 fs/btrfs/super.c:1889
 legacy_get_tree+0x30/0x74 fs/fs_context.c:610
 vfs_get_tree+0x40/0x140 fs/super.c:1531
 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040
 path_mount+0x358/0x890 fs/namespace.c:3370
 do_mount fs/namespace.c:3383 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount fs/namespace.c:3568 [inline]
 __arm64_sys_mount+0x2c4/0x3c4 fs/namespace.c:3568
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584
Code: f0006082 911c6c00 9116cc42 97fffbda (d4210000) 
---[ end trace 0000000000000000 ]---