------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at net/ipv4/tcp_timer.c:472 tcp_write_timeout net/ipv4/tcp_timer.c:242 [inline]
WARNING: CPU: 0 PID: 0 at net/ipv4/tcp_timer.c:472 tcp_retransmit_timer+0x1636/0x3110 net/ipv4/tcp_timer.c:512
Modules linked in:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
RIP: 0010:tcp_retransmit_timer+0x1636/0x3110 net/ipv4/tcp_timer.c:472
Code: 48 89 fa 48 c1 ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 9a 13 00 00 41 0f b6 91 89 06 00 00 e9 ce f3 ff ff <0f> 0b e9 9b ed ff ff 4c 8b 84 24 88 00 00 00 4d 85 c0 0f 84 0e f4
RSP: 0018:ffffc90000007ba0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 1ffff92000000f7d RCX: ffff888077bde94c
RDX: 1ffff1100ef7bc51 RSI: ffffffff88eba280 RDI: ffff888077bde288
RBP: ffff888077bde030 R08: 0000000000000001 R09: ffffffff8f7289c7
R10: 0000000000000001 R11: 0000000000000000 R12: ffff888077bde130
R13: ffff88801ca79b80 R14: 0000000000000000 R15: ffff888077bde000
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000206a4000 CR3: 00000000721cd000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 tcp_write_timer_handler+0x4d5/0x970 net/ipv4/tcp_timer.c:622
 tcp_write_timer+0x79/0x1b0 net/ipv4/tcp_timer.c:642
 call_timer_fn+0x163/0x4a0 kernel/time/timer.c:1421
 expire_timers kernel/time/timer.c:1466 [inline]
 __run_timers.part.0+0x52e/0x8a0 kernel/time/timer.c:1734
 __run_timers kernel/time/timer.c:1715 [inline]
 run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1747
 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:116 [inline]
RIP: 0010:acpi_idle_do_entry+0x15e/0x1c0 drivers/acpi/processor_idle.c:556
Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6a 48 8b 45 00 a8 08 75 c9 e8 4d 25 d5 f8 eb 07 0f 00 2d a4 54 b0 00 fb f4 <9c> 58 fa f6 c4 02 74 b1 5d e9 24 24 d5 f8 48 89 ef 5d e9 ab f9 ff
RSP: 0018:ffffffff8ac07d88 EFLAGS: 00000206
RAX: 00000000000a00cf RBX: ffff888016321865 RCX: 1ffffffff19920b1
RDX: 0000000000000000 RSI: ffffffff88eb9fa0 RDI: ffffffff89433be0
RBP: ffffffff8acbb4c0 R08: 0000000000000001 R09: 0000000000000001
R10: fffffbfff1597698 R11: 0000000000000001 R12: 0000000000000001
R13: ffff888016321864 R14: ffffffff8b951120 R15: ffff88801867c004
 acpi_idle_enter+0x2c0/0x4b0 drivers/acpi/processor_idle.c:692
 cpuidle_enter_state+0x152/0xb40 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x45/0xa0 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:236 [inline]
 do_idle+0x3e8/0x590 kernel/sched/idle.c:303
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:400
 start_kernel+0x343/0x361 init/main.c:1140
 secondary_startup_64_no_verify+0xc3/0xcb
 </TASK>
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	00 00                	add    %al,(%rax)
   4:	00 fc                	add    %bh,%ah
   6:	ff                   	(bad)
   7:	df 48 c1             	fisttps -0x3f(%rax)
   a:	ea                   	(bad)
   b:	03 80 3c 02 00 75    	add    0x7500023c(%rax),%eax
  11:	6a 48                	pushq  $0x48
  13:	8b 45 00             	mov    0x0(%rbp),%eax
  16:	a8 08                	test   $0x8,%al
  18:	75 c9                	jne    0xffffffe3
  1a:	e8 4d 25 d5 f8       	callq  0xf8d5256c
  1f:	eb 07                	jmp    0x28
  21:	0f 00 2d a4 54 b0 00 	verw   0xb054a4(%rip)        # 0xb054cc
  28:	fb                   	sti
  29:	f4                   	hlt
* 2a:	9c                   	pushfq <-- trapping instruction
  2b:	58                   	pop    %rax
  2c:	fa                   	cli
  2d:	f6 c4 02             	test   $0x2,%ah
  30:	74 b1                	je     0xffffffe3
  32:	5d                   	pop    %rbp
  33:	e9 24 24 d5 f8       	jmpq   0xf8d5245c
  38:	48 89 ef             	mov    %rbp,%rdi
  3b:	5d                   	pop    %rbp
  3c:	e9                   	.byte 0xe9
  3d:	ab                   	stos   %eax,%es:(%rdi)
  3e:	f9                   	stc
  3f:	ff                   	.byte 0xff