attempt to access beyond end of device
loop2: rw=4096, want=10248, limit=4126
BTRFS warning (device loop2): couldn't read tree root
------------[ cut here ]------------
WARNING: CPU: 1 PID: 14171 at fs/btrfs/volumes.c:1160 close_fs_devices+0x715/0x930 fs/btrfs/volumes.c:1160
Modules linked in:
CPU: 1 PID: 14171 Comm: syz-executor.2 Not tainted 5.10.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:close_fs_devices+0x715/0x930 fs/btrfs/volumes.c:1160
Code: e8 30 38 45 fe 85 db 0f 85 65 f9 ff ff e8 d3 3f 45 fe 0f 0b e9 59 f9 ff ff e8 c7 3f 45 fe 0f 0b e9 c0 fe ff ff e8 bb 3f 45 fe <0f> 0b e9 f9 fe ff ff 48 c7 c7 dc bf ec 8c e8 e8 b8 86 fe e9 19 f9
RSP: 0018:ffffc90001a1f758 EFLAGS: 00010246
RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000d6a8000
RDX: 0000000000040000 RSI: ffffffff832ada05 RDI: 0000000000000007
RBP: dffffc0000000000 R08: 0000000000000000 R09: ffff8880200de133
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880200de130
R13: ffff8880200de1ec R14: ffff88801831a908 R15: ffff8880200de050
FS:  00007f0624f7f700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000018eb000 CR3: 00000000248e8000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 btrfs_close_devices+0x8e/0x4b0 fs/btrfs/volumes.c:1172
 open_ctree+0x40ce/0x4173 fs/btrfs/disk-io.c:3432
 btrfs_fill_super fs/btrfs/super.c:1316 [inline]
 btrfs_mount_root.cold+0x14/0x165 fs/btrfs/super.c:1672
 legacy_get_tree+0x105/0x220 fs/fs_context.c:592
 vfs_get_tree+0x89/0x2f0 fs/super.c:1549
 fc_mount fs/namespace.c:978 [inline]
 vfs_kern_mount.part.0+0xd3/0x170 fs/namespace.c:1008
 vfs_kern_mount+0x3c/0x60 fs/namespace.c:995
 btrfs_mount+0x234/0xa60 fs/btrfs/super.c:1732
 legacy_get_tree+0x105/0x220 fs/fs_context.c:592
 vfs_get_tree+0x89/0x2f0 fs/super.c:1549
 do_new_mount fs/namespace.c:2875 [inline]
 path_mount+0x13ad/0x20c0 fs/namespace.c:3205
 do_mount fs/namespace.c:3218 [inline]
 __do_sys_mount fs/namespace.c:3426 [inline]
 __se_sys_mount fs/namespace.c:3403 [inline]
 __x64_sys_mount+0x27f/0x300 fs/namespace.c:3403
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x46090a
Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
RSP: 002b:00007f0624f7ea88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f0624f7eb20 RCX: 000000000046090a
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f0624f7eae0
RBP: 00007f0624f7eae0 R08: 00007f0624f7eb20 R09: 0000000020000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000
R13: 0000000020000100 R14: 0000000020001000 R15: 0000000020000040