kobject: kobject_add_internal failed for qgroups (error: -12 parent: 395ef67a-297e-477c-816d-cd80a5b93e5d) ------------[ cut here ]------------ kernfs: can not remove 'enabled', no directory WARNING: fs/kernfs/dir.c:1785 at kernfs_remove_by_name_ns+0x111/0x120 fs/kernfs/dir.c:1785, CPU#1: syz.0.2528/19794 Modules linked in: CPU: 1 UID: 0 PID: 19794 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:kernfs_remove_by_name_ns+0x114/0x120 fs/kernfs/dir.c:1785 Code: ff 48 89 df e8 5d 8e ff ff 48 89 ef e8 55 c5 20 ff 4c 89 e7 e8 bd d8 20 ff eb af e8 c6 6d 46 ff 48 8d 3d 8f 08 86 0f 4c 89 ee <67> 48 0f b9 3a eb c4 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc900047af928 EFLAGS: 00010287 RAX: 000000000002d75a RBX: 0000000000000000 RCX: ffffc900042f1000 RDX: 0000000000080000 RSI: ffffffff8c4a9fa0 RDI: ffffffff924be1a0 RBP: ffffffff907146a0 R08: 0000000000000005 R09: 0000000000000000 R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000000 R13: ffffffff8c4a9fa0 R14: 0000000000000000 R15: ffffc900047afb18 FS: 00007fcf008146c0(0000) GS:ffff888122a44000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c3d8895 CR3: 000000005630b000 CR4: 0000000000350ef0 Call Trace: kernfs_remove_by_name include/linux/kernfs.h:644 [inline] remove_files+0x96/0x1c0 fs/sysfs/group.c:28 sysfs_remove_group+0x8b/0x1b0 fs/sysfs/group.c:328 sysfs_remove_groups fs/sysfs/group.c:352 [inline] sysfs_remove_groups+0x60/0xb0 fs/sysfs/group.c:344 __kobject_del+0x89/0x220 lib/kobject.c:595 kobject_del lib/kobject.c:627 [inline] kobject_del+0x3f/0x60 lib/kobject.c:619 btrfs_sysfs_del_qgroups+0x11b/0x1f0 fs/btrfs/sysfs.c:2579 btrfs_sysfs_add_qgroups+0x1d2/0x230 fs/btrfs/sysfs.c:2618 btrfs_quota_enable+0x323/0x1650 fs/btrfs/qgroup.c:1032 btrfs_ioctl_quota_ctl fs/btrfs/ioctl.c:3581 [inline] btrfs_ioctl+0x4cf7/0x61b0 fs/btrfs/ioctl.c:5647 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fceff99e559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcf00814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fceffc25fa0 RCX: 00007fceff99e559 RDX: 0000200000005cc0 RSI: 00000000c0109428 RDI: 0000000000000005 RBP: 00007fceffa35ad8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fceffc26038 R14: 00007fceffc25fa0 R15: 00007ffd4b9ac9b8 ---------------- Code disassembly (best guess): 0: ff 48 89 decl -0x77(%rax) 3: df e8 fucomip %st(0),%st 5: 5d pop %rbp 6: 8e ff mov %edi,%? 8: ff 48 89 decl -0x77(%rax) b: ef out %eax,(%dx) c: e8 55 c5 20 ff call 0xff20c566 11: 4c 89 e7 mov %r12,%rdi 14: e8 bd d8 20 ff call 0xff20d8d6 19: eb af jmp 0xffffffca 1b: e8 c6 6d 46 ff call 0xff466de6 20: 48 8d 3d 8f 08 86 0f lea 0xf86088f(%rip),%rdi # 0xf8608b6 27: 4c 89 ee mov %r13,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: eb c4 jmp 0xfffffff5 31: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 36: 90 nop 37: 90 nop 38: 90 nop 39: 90 nop 3a: 90 nop 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop