BTRFS error (device loop2): failed to load root free space
assertion failed: !tmp, in fs/btrfs/disk-io.c:1002
------------[ cut here ]------------
kernel BUG at fs/btrfs/messages.c:259!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 11107 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : btrfs_assertfail+0x24/0x28 fs/btrfs/messages.c:258
lr : btrfs_assertfail+0x24/0x28 fs/btrfs/messages.c:258
sp : ffff800022ba7120
x29: ffff800022ba7120 x28: ffff0001372ba000 x27: dfff800000000000
x26: ffff0000d5b5b9e0 x25: ffff000135290000 x24: dfff800000000000
x23: 0000000000000000 x22: ffff0001372ba1f7 x21: ffff0000d692c0a0
x20: ffff0000d692c060 x19: ffff0001372ba000 x18: 1fffe000368519b6
x17: ffff800015c7d000 x16: ffff8000123165a4 x15: 0000000000000002
x14: 1ffff00002b900b0 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000040000 x10: 000000000003bbc9 x9 : 90519a34e783f500
x8 : 90519a34e783f500 x7 : ffff80000827ec18 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80000aa5154c
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000032
Call trace:
 btrfs_assertfail+0x24/0x28 fs/btrfs/messages.c:258
 btrfs_global_root_insert+0x18c/0x194 fs/btrfs/disk-io.c:1002
 load_global_roots_objectid+0x3e0/0x808 fs/btrfs/disk-io.c:2385
 load_global_roots fs/btrfs/disk-io.c:2419 [inline]
 btrfs_read_roots fs/btrfs/disk-io.c:2446 [inline]
 init_tree_roots+0x7dc/0x17ac fs/btrfs/disk-io.c:2869
 open_ctree+0x14c4/0x2534 fs/btrfs/disk-io.c:3565
 btrfs_fill_super+0x1b4/0x2c8 fs/btrfs/super.c:1152
 btrfs_mount_root+0x704/0x808 fs/btrfs/super.c:1519
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610
 vfs_get_tree+0x90/0x274 fs/super.c:1510
 fc_mount fs/namespace.c:1035 [inline]
 vfs_kern_mount+0xdc/0x178 fs/namespace.c:1065
 btrfs_mount+0x330/0x9c8 fs/btrfs/super.c:1579
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610
 vfs_get_tree+0x90/0x274 fs/super.c:1510
 do_new_mount+0x25c/0x8c8 fs/namespace.c:3042
 path_mount+0x590/0xe04 fs/namespace.c:3372
 do_mount fs/namespace.c:3385 [inline]
 __do_sys_mount fs/namespace.c:3594 [inline]
 __se_sys_mount fs/namespace.c:3571 [inline]
 __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3571
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193
 el0_svc+0x4c/0x15c arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
Code: aa0003e1 b0002c60 913c8000 97ffdddb (d4210000) 
---[ end trace 0000000000000000 ]---