------------[ cut here ]------------ WARNING: CPU: 0 PID: 4904 at net/sched/sch_taprio.c:1022 taprio_get_start_time+0x13c/0x16c net/sched/sch_taprio.c:1022 Modules linked in: CPU: 0 PID: 4904 Comm: syz.2.88 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : taprio_get_start_time+0x13c/0x16c net/sched/sch_taprio.c:1022 lr : taprio_get_start_time+0x13c/0x16c net/sched/sch_taprio.c:1022 sp : ffff8000213e6c00 x29: ffff8000213e6c00 x28: 00000000f8f8f8f8 x27: dfff800000000000 x26: 0000000000000000 x25: ffff0000f513c700 x24: dfff800000000000 x23: 0000000000000003 x22: 0000004d6563c881 x21: 0000000000000000 x20: 0000000000000000 x19: ffff8000213e6cf8 x18: 1fffe00033e6997e x17: ffff80000ff7acd4 x16: ffff8000082dd284 x15: ffff800018508000 x14: 0000000000000001 x13: 1ffff00002a78071 x12: 0000000000080000 x11: 00000000000029ee x10: ffff80002835b000 x9 : ffff8000101d958c x8 : 00000000000029ef x7 : ffff8000083c7974 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: taprio_get_start_time+0x13c/0x16c net/sched/sch_taprio.c:1022 taprio_change+0x3940/0x4ef8 net/sched/sch_taprio.c:1657 taprio_init+0x4ac/0x53c net/sched/sch_taprio.c:1824 qdisc_create+0x704/0xe48 net/sched/sch_api.c:1331 tc_modify_qdisc+0x96c/0x1814 net/sched/sch_api.c:-1 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] ____sys_sendmsg+0x588/0x90c net/socket.c:2519 ___sys_sendmsg net/socket.c:2573 [inline] __sys_sendmsg+0x288/0x374 net/socket.c:2602 __do_sys_sendmsg net/socket.c:2611 [inline] __se_sys_sendmsg net/socket.c:2609 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 1037 hardirqs last enabled at (1036): [] seqcount_lockdep_reader_access include/linux/seqlock.h:104 [inline] hardirqs last enabled at (1036): [] timekeeping_get_delta kernel/time/timekeeping.c:254 [inline] hardirqs last enabled at (1036): [] timekeeping_get_ns+0x120/0x3b8 kernel/time/timekeeping.c:388 hardirqs last disabled at (1037): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1002): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1032): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1032): [] taprio_change+0x37d8/0x4ef8 net/sched/sch_taprio.c:1638 ---[ end trace 0000000000000000 ]--- EXT4-fs error (device loop2): ext4_generic_delete_entry:2731: inode #12: block 7: comm syz.2.88: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 EXT4-fs error (device loop2) in ext4_delete_inline_entry:1839: Corrupt filesystem