------------[ cut here ]------------ refcount_t: decrement hit 0; leaking memory. WARNING: CPU: 1 PID: 4893 at lib/refcount.c:31 refcount_warn_saturate+0x194/0x1f8 lib/refcount.c:31 Modules linked in: CPU: 1 PID: 4893 Comm: syz.3.130 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : refcount_warn_saturate+0x194/0x1f8 lib/refcount.c:31 lr : refcount_warn_saturate+0x194/0x1f8 lib/refcount.c:31 sp : ffff8000211f7800 x29: ffff8000211f7800 x28: 1fffe00018808405 x27: dfff800000000000 x26: dfff800000000000 x25: ffff70000423ef08 x24: ffff0000d1a52800 x23: ffff0000d1a52810 x22: ffff8000211f7840 x21: 0000000000000000 x20: ffff0000dc9205fc x19: ffff800017a17000 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082d4a88 x15: 0000000000000000 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 x11: ff008000081924a8 x10: 0000000000000000 x9 : 68335a67c4f7a000 x8 : 68335a67c4f7a000 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000211f7298 x4 : ffff800015134e80 x3 : ffff800008530c5c x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: refcount_warn_saturate+0x194/0x1f8 lib/refcount.c:31 __refcount_dec include/linux/refcount.h:344 [inline] refcount_dec include/linux/refcount.h:359 [inline] ref_tracker_free+0x538/0x694 lib/ref_tracker.c:118 netdev_tracker_free include/linux/netdevice.h:4071 [inline] netdev_put include/linux/netdevice.h:4088 [inline] ax25_release+0x2c8/0x88c net/ax25/af_ax25.c:1080 __sock_release net/socket.c:654 [inline] sock_close+0xb4/0x1f8 net/socket.c:1399 __fput+0x1bc/0x7c0 fs/file_table.c:320 ____fput+0x20/0x30 fs/file_table.c:348 task_work_run+0x1ec/0x270 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2038/0x2b28 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x138 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 22040 hardirqs last enabled at (22039): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (22040): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (22024): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (22024): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (21369): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]---