kobject: kobject_add_internal failed for qgroups (error: -12 parent: 7e32c2af-f87a-45a1-bcba-64dea7c56a53) ------------[ cut here ]------------ kernfs: can not remove 'enabled', no directory WARNING: fs/kernfs/dir.c:1712 at kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711, CPU#0: syz.3.427/9015 Modules linked in: CPU: 0 UID: 0 PID: 9015 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 lr : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 sp : ffff80009b117890 x29: ffff80009b117890 x28: 0000000000000001 x27: 1fffe0001f174208 x26: dfff800000000000 x25: ffff80009000e288 x24: 1ffff0001169578c x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000000 x20: ffff80008b4abcc0 x19: ffff80008b4abc60 x18: 0000000000000000 x17: 7261702032312d20 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1fffe0003377d0fa x13: 0000000000000000 x12: 0000000000000000 x11: ffff60003377d0fb x10: 0000000000ff0100 x9 : d4d000db58553b00 x8 : d4d000db58553b00 x7 : ffff8000805761f8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807f1034 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 (P) kernfs_remove_by_name include/linux/kernfs.h:633 [inline] remove_files fs/sysfs/group.c:28 [inline] sysfs_remove_group+0xf8/0x2c0 fs/sysfs/group.c:328 sysfs_remove_groups+0x5c/0xb4 fs/sysfs/group.c:352 __kobject_del+0x90/0x2f8 lib/kobject.c:595 kobject_del+0x48/0x68 lib/kobject.c:627 btrfs_sysfs_del_qgroups+0x100/0x14c fs/btrfs/sysfs.c:2672 btrfs_sysfs_add_qgroups+0x238/0x268 fs/btrfs/sysfs.c:2711 btrfs_quota_enable+0x210/0x2438 fs/btrfs/qgroup.c:1002 btrfs_ioctl_quota_ctl+0x178/0x1bc fs/btrfs/ioctl.c:3613 btrfs_ioctl+0x86c/0xc3c fs/btrfs/ioctl.c:5296 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 346426 hardirqs last enabled at (346425): [] vprintk_store+0x898/0xac8 kernel/printk/printk.c:2332 hardirqs last disabled at (346426): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (346388): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (346386): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernfs: can not remove 'inconsistent', no directory WARNING: fs/kernfs/dir.c:1712 at kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711, CPU#1: syz.3.427/9015 Modules linked in: CPU: 1 UID: 0 PID: 9015 Comm: syz.3.427 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 lr : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 sp : ffff80009b117890 x29: ffff80009b117890 x28: 0000000000000001 x27: 1fffe0001f174208 x26: dfff800000000000 x25: ffff80009000e290 x24: 1ffff0001169578c x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000000 x20: ffff80008b4abce0 x19: ffff80008b4abc60 x18: 1fffe00033781890 x17: ffff80008f86e000 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1fffe00033784348 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093398d48 x10: 0000000000000003 x9 : d4d000db58553b00 x8 : d4d000db58553b00 x7 : ffff80008049ea88 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000006 x1 : ffff80008b5a9ce0 x0 : 0000000000000001 Call trace: kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 (P) kernfs_remove_by_name include/linux/kernfs.h:633 [inline] remove_files fs/sysfs/group.c:28 [inline] sysfs_remove_group+0xf8/0x2c0 fs/sysfs/group.c:328 sysfs_remove_groups+0x5c/0xb4 fs/sysfs/group.c:352 __kobject_del+0x90/0x2f8 lib/kobject.c:595 kobject_del+0x48/0x68 lib/kobject.c:627 btrfs_sysfs_del_qgroups+0x100/0x14c fs/btrfs/sysfs.c:2672 btrfs_sysfs_add_qgroups+0x238/0x268 fs/btrfs/sysfs.c:2711 btrfs_quota_enable+0x210/0x2438 fs/btrfs/qgroup.c:1002 btrfs_ioctl_quota_ctl+0x178/0x1bc fs/btrfs/ioctl.c:3613 btrfs_ioctl+0x86c/0xc3c fs/btrfs/ioctl.c:5296 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 346582 hardirqs last enabled at (346581): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1570 [inline] hardirqs last enabled at (346581): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:4995 hardirqs last disabled at (346582): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (346566): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (346566): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (346429): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernfs: can not remove 'drop_subtree_threshold', no directory WARNING: fs/kernfs/dir.c:1712 at kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711, CPU#1: syz.3.427/9015 Modules linked in: CPU: 1 UID: 0 PID: 9015 Comm: syz.3.427 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 lr : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 sp : ffff80009b117890 x29: ffff80009b117890 x28: 0000000000000001 x27: 1fffe0001f174208 x26: dfff800000000000 x25: ffff80009000e298 x24: 1ffff0001169578c x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000000 x20: ffff80008b4abd00 x19: ffff80008b4abc60 x18: 1fffe00033781890 x17: ffff80008f86e000 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1fffe00033784348 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093398d48 x10: 0000000000000003 x9 : d4d000db58553b00 x8 : d4d000db58553b00 x7 : ffff80008049ea88 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000006 x1 : ffff80008b5a9ce0 x0 : 0000000000000001 Call trace: kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 (P) kernfs_remove_by_name include/linux/kernfs.h:633 [inline] remove_files fs/sysfs/group.c:28 [inline] sysfs_remove_group+0xf8/0x2c0 fs/sysfs/group.c:328 sysfs_remove_groups+0x5c/0xb4 fs/sysfs/group.c:352 __kobject_del+0x90/0x2f8 lib/kobject.c:595 kobject_del+0x48/0x68 lib/kobject.c:627 btrfs_sysfs_del_qgroups+0x100/0x14c fs/btrfs/sysfs.c:2672 btrfs_sysfs_add_qgroups+0x238/0x268 fs/btrfs/sysfs.c:2711 btrfs_quota_enable+0x210/0x2438 fs/btrfs/qgroup.c:1002 btrfs_ioctl_quota_ctl+0x178/0x1bc fs/btrfs/ioctl.c:3613 btrfs_ioctl+0x86c/0xc3c fs/btrfs/ioctl.c:5296 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 346624 hardirqs last enabled at (346623): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1570 [inline] hardirqs last enabled at (346623): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:4995 hardirqs last disabled at (346624): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (346608): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (346608): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (346585): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernfs: can not remove 'mode', no directory WARNING: fs/kernfs/dir.c:1712 at kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711, CPU#1: syz.3.427/9015 Modules linked in: CPU: 1 UID: 0 PID: 9015 Comm: syz.3.427 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 lr : kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 sp : ffff80009b117890 x29: ffff80009b117890 x28: 0000000000000001 x27: 1fffe0001f174208 x26: dfff800000000000 x25: ffff80009000e2a0 x24: 1ffff0001169578c x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000000 x20: ffff80008b4abd40 x19: ffff80008b4abc60 x18: 1fffe00033781890 x17: ffff80008f86e000 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1fffe00033784348 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093398d48 x10: 0000000000000003 x9 : d4d000db58553b00 x8 : d4d000db58553b00 x7 : ffff80008049ea88 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000006 x1 : ffff80008b5a9ce0 x0 : 0000000000000001 Call trace: kernfs_remove_by_name_ns+0xd0/0x14c fs/kernfs/dir.c:1711 (P) kernfs_remove_by_name include/linux/kernfs.h:633 [inline] remove_files fs/sysfs/group.c:28 [inline] sysfs_remove_group+0xf8/0x2c0 fs/sysfs/group.c:328 sysfs_remove_groups+0x5c/0xb4 fs/sysfs/group.c:352 __kobject_del+0x90/0x2f8 lib/kobject.c:595 kobject_del+0x48/0x68 lib/kobject.c:627 btrfs_sysfs_del_qgroups+0x100/0x14c fs/btrfs/sysfs.c:2672 btrfs_sysfs_add_qgroups+0x238/0x268 fs/btrfs/sysfs.c:2711 btrfs_quota_enable+0x210/0x2438 fs/btrfs/qgroup.c:1002 btrfs_ioctl_quota_ctl+0x178/0x1bc fs/btrfs/ioctl.c:3613 btrfs_ioctl+0x86c/0xc3c fs/btrfs/ioctl.c:5296 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 346826 hardirqs last enabled at (346825): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1570 [inline] hardirqs last enabled at (346825): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:4995 hardirqs last disabled at (346826): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (346810): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (346810): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (346627): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---