------------[ cut here ]------------
NETDEV WATCHDOG: sl0 (): transmit queue 0 timed out 33260 ms
WARNING: CPU: 1 PID: 5770 at net/sched/sch_generic.c:525 dev_watchdog+0x8cd/0x8f0 net/sched/sch_generic.c:525
Modules linked in:
CPU: 1 PID: 5770 Comm: syz-executor.0 Not tainted 6.7.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:dev_watchdog+0x8cd/0x8f0 net/sched/sch_generic.c:525
Code: 2c 77 06 01 90 48 8b 5c 24 10 48 89 df e8 8b 31 e6 ff 45 89 e8 89 e9 48 89 de 48 89 c2 48 c7 c7 a0 7b ec 8b e8 c4 84 c1 f8 90 <0f> 0b 90 90 e9 23 fd ff ff e8 85 43 fb f8 90 0f 0b 90 e9 bc fc ff
RSP: 0018:ffffc900001f0be0 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff8880807e2000 RCX: ffffffff814db519
RDX: ffff888022710000 RSI: ffffffff814db526 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 00000000001961f0 R12: ffff88807d091000
R13: 00000000000081ec R14: ffff8880807e2548 R15: 000000010004e602
FS:  0000555556dc1480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd328377198 CR3: 00000000253d6000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 call_timer_fn+0x193/0x590 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x764/0xb20 kernel/time/timer.c:2022
 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035
 __do_softirq+0x21a/0x8de kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:kernel_text_address+0x28/0xf0 kernel/extable.c:133
Code: b5 90 66 0f 1f 00 53 48 89 fb 48 83 ec 08 48 81 ff 00 00 00 81 72 14 48 81 ff 00 00 c0 8a 73 0b 48 83 c4 08 b8 01 00 00 00 5b <c3> 48 89 df e8 8f 87 a9 ff 85 c0 75 e9 48 c7 c0 c4 0a 19 8f 48 ba
RSP: 0018:ffffc9000ad37898 EFLAGS: 00000296
RAX: 0000000000000001 RBX: ffffffff81ddf443 RCX: ffffffff8139efec
RDX: 1ffff920015a6f24 RSI: ffffffff8139f004 RDI: ffffffff81ddf443
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000ad37920
R13: ffffffff8174ddf0 R14: ffffc9000ad37998 R15: ffff888022710000
 __kernel_text_address+0xd/0x30 kernel/extable.c:79
 unwind_get_return_address+0x78/0xe0 arch/x86/kernel/unwind_orc.c:369
 arch_stack_walk+0xbe/0x170 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x50 mm/kasan/common.c:45
 kasan_set_track+0x25/0x30 mm/kasan/common.c:52
 __kasan_slab_alloc+0x81/0x90 mm/kasan/common.c:328
 kasan_slab_alloc include/linux/kasan.h:188 [inline]
 slab_post_alloc_hook mm/slab.h:763 [inline]
 slab_alloc_node mm/slub.c:3478 [inline]
 slab_alloc mm/slub.c:3486 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3493 [inline]
 kmem_cache_alloc+0x15d/0x2f0 mm/slub.c:3502
 kmem_cache_zalloc include/linux/slab.h:711 [inline]
 lsm_file_alloc security/security.c:612 [inline]
 security_file_alloc+0x41/0x250 security/security.c:2603
 init_file+0x99/0x250 fs/file_table.c:166
 alloc_empty_file+0x91/0x1d0 fs/file_table.c:220
 alloc_file+0x5e/0x7f0 fs/file_table.c:303
 alloc_file_pseudo+0x174/0x240 fs/file_table.c:346
 sock_alloc_file+0x50/0x1d0 net/socket.c:469
 sock_map_fd net/socket.c:494 [inline]
 __sys_socket+0x1bf/0x260 net/socket.c:1713
 __do_sys_socket net/socket.c:1718 [inline]
 __se_sys_socket net/socket.c:1716 [inline]
 __x64_sys_socket+0x72/0xb0 net/socket.c:1716
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fd32827ea67
Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffed7dd93b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd32827ea67
RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 00007ffed7dd9acc R08: 00007ffed7dd93ac R09: 00007ffed7dd97b7
R10: 00007ffed7dd9430 R11: 0000000000000206 R12: 0000000000000032
R13: 00000000003615e1 R14: 00000000003615e1 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	b5 90                	mov    $0x90,%ch
   2:	66 0f 1f 00          	nopw   (%rax)
   6:	53                   	push   %rbx
   7:	48 89 fb             	mov    %rdi,%rbx
   a:	48 83 ec 08          	sub    $0x8,%rsp
   e:	48 81 ff 00 00 00 81 	cmp    $0xffffffff81000000,%rdi
  15:	72 14                	jb     0x2b
  17:	48 81 ff 00 00 c0 8a 	cmp    $0xffffffff8ac00000,%rdi
  1e:	73 0b                	jae    0x2b
  20:	48 83 c4 08          	add    $0x8,%rsp
  24:	b8 01 00 00 00       	mov    $0x1,%eax
  29:	5b                   	pop    %rbx
* 2a:	c3                   	ret <-- trapping instruction
  2b:	48 89 df             	mov    %rbx,%rdi
  2e:	e8 8f 87 a9 ff       	call   0xffa987c2
  33:	85 c0                	test   %eax,%eax
  35:	75 e9                	jne    0x20
  37:	48 c7 c0 c4 0a 19 8f 	mov    $0xffffffff8f190ac4,%rax
  3e:	48                   	rex.W
  3f:	ba                   	.byte 0xba