------------[ cut here ]------------ cbs: dequeue() called with unknown port rate. WARNING: CPU: 0 PID: 11280 at net/sched/sch_cbs.c:185 cbs_dequeue_soft+0x37e/0x4b0 net/sched/sch_cbs.c:185 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 11280 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 panic+0x2dc/0x755 kernel/panic.c:220 __warn.cold+0x2f/0x3c kernel/panic.c:581 report_bug+0x289/0x300 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:179 [inline] fixup_bug arch/x86/kernel/traps.c:174 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1028 RIP: 0010:cbs_dequeue_soft+0x37e/0x4b0 net/sched/sch_cbs.c:185 Code: 1d 2c b3 f5 03 31 ff 89 de e8 fe 6d a6 fb 84 db 75 1a e8 b5 6c a6 fb 48 c7 c7 80 7d 4a 88 c6 05 0c b3 f5 03 01 e8 0a bb 77 fb <0f> 0b 45 31 e4 eb b1 49 bc ff ff ff ff ff ff ff 7f 48 89 55 d0 e8 RSP: 0018:ffff8880ae809508 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000100 RSI: ffffffff815bf786 RDI: ffffed1015d01293 RBP: ffff8880ae809550 R08: ffff8880a0020300 R09: fffffbfff14ed341 R10: fffffbfff14ed340 R11: ffffffff8a769a07 R12: ffff8880a3e3d000 R13: ffff8880965162c8 R14: 0000003c7d1e9f5f R15: ffffffffffffffff cbs_dequeue+0x34/0x40 net/sched/sch_cbs.c:237 dequeue_skb net/sched/sch_generic.c:258 [inline] qdisc_restart net/sched/sch_generic.c:361 [inline] __qdisc_run+0x1e7/0x19d0 net/sched/sch_generic.c:379 __dev_xmit_skb net/core/dev.c:3533 [inline] __dev_queue_xmit+0x16f1/0x37c0 net/core/dev.c:3838 dev_queue_xmit+0x18/0x20 net/core/dev.c:3902 neigh_hh_output include/net/neighbour.h:500 [inline] neigh_output include/net/neighbour.h:509 [inline] ip6_finish_output2+0xf58/0x2550 net/ipv6/ip6_output.c:116 __ip6_finish_output+0x444/0xaa0 net/ipv6/ip6_output.c:142 ip6_finish_output+0x38/0x1f0 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip6_output+0x235/0x7f0 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] ndisc_send_skb+0xf29/0x14a0 net/ipv6/ndisc.c:505 ndisc_send_rs+0x134/0x6d0 net/ipv6/ndisc.c:699 addrconf_rs_timer+0x30f/0x680 net/ipv6/addrconf.c:3879 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1771 [inline] __run_timers kernel/time/timer.c:1738 [inline] run_timer_softirq+0x6c0/0x17f0 kernel/time/timer.c:1784 __do_softirq+0x262/0x98c kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x19b/0x1e0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1a3/0x610 arch/x86/kernel/apic/apic.c:1133 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830 RIP: 0010:update_stack_state+0xa8/0x5f0 arch/x86/kernel/unwind_frame.c:201 Code: 03 0f 8e 29 04 00 00 41 8b 45 00 49 8d 7d 58 48 89 f9 48 c1 e9 03 89 85 5c ff ff ff 48 b8 00 00 00 00 00 fc ff df 80 3c 01 00 <0f> 85 96 04 00 00 49 8b 45 58 48 85 c0 0f 84 35 03 00 00 48 05 a8 RSP: 0018:ffff888095957720 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11012b2af25 RDX: 1ffff11012b2af9d RSI: ffff888095957d28 RDI: ffff888095957928 RBP: ffff8880959577e8 R08: ffff8880a0020300 R09: ffff888095957928 R10: ffff8880959578f8 R11: ffff888095957908 R12: 1ffff11012b2af04 R13: ffff8880959578d0 R14: 1ffff11012b2aeec R15: ffff888095957d28 unwind_next_frame.part.0+0x1a9/0xa20 arch/x86/kernel/unwind_frame.c:311 unwind_next_frame+0x3b/0x50 arch/x86/kernel/unwind_frame.c:265 arch_stack_walk+0x81/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xac/0xe0 kernel/stacktrace.c:123 save_stack+0x23/0x90 mm/kasan/common.c:69 set_track mm/kasan/common.c:77 [inline] __kasan_kmalloc mm/kasan/common.c:510 [inline] __kasan_kmalloc.constprop.0+0xcf/0xe0 mm/kasan/common.c:483 kasan_slab_alloc+0xf/0x20 mm/kasan/common.c:518 slab_post_alloc_hook mm/slab.h:584 [inline] slab_alloc mm/slab.c:3319 [inline] kmem_cache_alloc+0x121/0x710 mm/slab.c:3483 sk_prot_alloc+0x67/0x310 net/core/sock.c:1597 sk_alloc+0x39/0xf70 net/core/sock.c:1657 inet_create net/ipv4/af_inet.c:321 [inline] inet_create+0x368/0xe00 net/ipv4/af_inet.c:247 __sock_create+0x3d8/0x730 net/socket.c:1418 sock_create net/socket.c:1469 [inline] __sys_socket+0x103/0x220 net/socket.c:1511 __do_sys_socket net/socket.c:1520 [inline] __se_sys_socket net/socket.c:1518 [inline] __x64_sys_socket+0x73/0xb0 net/socket.c:1518 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4598e9 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007efe57522c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 RDX: 0000000000000088 RSI: 0000000000000002 RDI: 0000000000000002 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efe575236d4 R13: 00000000004c8640 R14: 00000000004df2e8 R15: 00000000ffffffff Kernel Offset: disabled Rebooting in 86400 seconds..