------------[ cut here ]------------
refcount_t: underflow; use-after-free.
WARNING: CPU: 0 PID: 13224 at lib/refcount.c:28 refcount_warn_saturate+0x107/0x1f0 lib/refcount.c:28
Modules linked in:
CPU: 0 PID: 13224 Comm: kworker/0:27 Not tainted 6.2.0-rc6-next-20230131-syzkaller-09515-g80bd9028feca #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: events nsim_dev_trap_report_work
RIP: 0010:refcount_warn_saturate+0x107/0x1f0 lib/refcount.c:28
Code: 1d b5 df 45 0a 31 ff 89 de e8 b5 2a 6b fd 84 db 75 a3 e8 9c 2e 6b fd 48 c7 c7 40 ba a6 8a c6 05 95 df 45 0a 01 e8 99 c9 32 fd <0f> 0b eb 87 e8 80 2e 6b fd 0f b6 1d 7e df 45 0a 31 ff 89 de e8 80
RSP: 0018:ffffc90015997c28 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8880268ad7c0 RSI: ffffffff81692aec RDI: 0000000000000005
RBP: ffff88807e526224 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e526224
R13: ffff88807e526140 R14: ffff888039102550 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020358030 CR3: 000000003aef0000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 __refcount_sub_and_test include/linux/refcount.h:283 [inline]
 __refcount_dec_and_test include/linux/refcount.h:315 [inline]
 refcount_dec_and_test include/linux/refcount.h:333 [inline]
 skb_unref include/linux/skbuff.h:1198 [inline]
 skb_unref include/linux/skbuff.h:1192 [inline]
 consume_skb+0x14b/0x170 net/core/skbuff.c:1137
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:824 [inline]
 nsim_dev_trap_report_work+0x87c/0xc80 drivers/net/netdevsim/dev.c:853
 process_one_work+0x9bf/0x1820 kernel/workqueue.c:2390
 worker_thread+0x669/0x1090 kernel/workqueue.c:2537
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>