------------[ cut here ]------------
WARNING: CPU: 1 PID: 0 at net/core/sock.c:2065 sk_destruct+0x128/0x140
Modules linked in:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.18.0-rc7-syzkaller-00164-g6c3f5bec9b40 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:sk_destruct+0x128/0x140 net/core/sock.c:2065
Code: 41 e8 9c 9d 67 f9 49 81 c7 f0 04 00 00 4c 89 ff 48 c7 c6 10 78 1e 88 5b 41 5c 41 5d 41 5e 41 5f e9 ed 7e 51 f9 e8 78 9d 67 f9 <0f> 0b 42 80 3c 23 00 0f 85 56 ff ff ff e9 59 ff ff ff 66 0f 1f 44
RSP: 0018:ffffc900001e0950 EFLAGS: 00010246
RAX: ffffffff881e77f8 RBX: 1ffff1100e7ec945 RCX: ffff88813fef1d80
RDX: 0000000080000101 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900001e0a58 R08: ffffffff881e7727 R09: ffffed100e7ec90d
R10: ffffed100e7ec90d R11: 1ffff1100e7ec90c R12: dffffc0000000000
R13: ffff888073f64a28 R14: 0000000000000000 R15: ffff888073f64800
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055a2abce40b0 CR3: 000000000c88e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000003b DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 tcp_wfree+0x3ec/0x5a0 net/ipv4/tcp_output.c:1182
 skb_orphan include/linux/skbuff.h:3007 [inline]
 loopback_xmit+0x157/0x660 drivers/net/loopback.c:79
 __netdev_start_xmit include/linux/netdevice.h:4775 [inline]
 netdev_start_xmit include/linux/netdevice.h:4789 [inline]
 xmit_one net/core/dev.c:3532 [inline]
 dev_hard_start_xmit+0x20b/0x450 net/core/dev.c:3548
 sch_direct_xmit+0x2ae/0x5e0 net/sched/sch_generic.c:342
 qdisc_restart net/sched/sch_generic.c:407 [inline]
 __qdisc_run+0x9df/0x1cd0 net/sched/sch_generic.c:415
 qdisc_run include/net/pkt_sched.h:126 [inline]
 net_tx_action+0x659/0x9e0 net/core/dev.c:5004
 __do_softirq+0x382/0x793 kernel/softirq.c:558
 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:551 [inline]
RIP: 0010:acpi_idle_enter+0x42d/0x790 drivers/acpi/processor_idle.c:686
Code: fc 48 83 e3 08 44 8b 7c 24 04 0f 85 22 01 00 00 4c 8d 74 24 40 e8 f3 e0 00 fd eb 0c e8 0c 3d fa fc 0f 00 2d f5 7b 68 06 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 25 4b fd
RSP: 0018:ffffc90000177c00 EFLAGS: 00000286
RAX: ef946ddda1437f00 RBX: 0000000000000000 RCX: ffffffff90b8d603
RDX: dffffc0000000000 RSI: ffffffff8a8d0480 RDI: ffffffff8ae88f20
RBP: ffffc90000177cb0 R08: ffffffff818cb980 R09: ffffed1027fde3b1
R10: ffffed1027fde3b1 R11: 1ffff11027fde3b0 R12: dffffc0000000000
R13: ffff888140aac864 R14: ffffc90000177c40 R15: 0000000000000001
 cpuidle_enter_state+0x517/0xed0 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:236 [inline]
 do_idle+0x3d2/0x640 kernel/sched/idle.c:303
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:400
 start_secondary+0xe4/0xf0 arch/x86/kernel/smpboot.c:266
 secondary_startup_64_no_verify+0xc4/0xcb
 </TASK>
----------------
Code disassembly (best guess):
   0:	fc                   	cld
   1:	48 83 e3 08          	and    $0x8,%rbx
   5:	44 8b 7c 24 04       	mov    0x4(%rsp),%r15d
   a:	0f 85 22 01 00 00    	jne    0x132
  10:	4c 8d 74 24 40       	lea    0x40(%rsp),%r14
  15:	e8 f3 e0 00 fd       	callq  0xfd00e10d
  1a:	eb 0c                	jmp    0x28
  1c:	e8 0c 3d fa fc       	callq  0xfcfa3d2d
  21:	0f 00 2d f5 7b 68 06 	verw   0x6687bf5(%rip)        # 0x6687c1d
  28:	fb                   	sti
  29:	f4                   	hlt
* 2a:	4c 89 f3             	mov    %r14,%rbx <-- trapping instruction
  2d:	48 c1 eb 03          	shr    $0x3,%rbx
  31:	42 80 3c 23 00       	cmpb   $0x0,(%rbx,%r12,1)
  36:	74 08                	je     0x40
  38:	4c 89 f7             	mov    %r14,%rdi
  3b:	e8 7d 25 4b fd       	callq  0xfd4b25bd