------------[ cut here ]------------ refcount_t: decrement hit 0; leaking memory. WARNING: CPU: 0 PID: 7891 at lib/refcount.c:31 refcount_warn_saturate+0x17c/0x1a0 lib/refcount.c:31 Modules linked in: CPU: 0 PID: 7891 Comm: kworker/0:5 Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events linkwatch_event RIP: 0010:refcount_warn_saturate+0x17c/0x1a0 lib/refcount.c:31 Code: f4 8a 31 c0 e8 75 54 38 fd 0f 0b e9 64 ff ff ff e8 c9 78 6e fd c6 05 c6 4e f5 09 01 48 c7 c7 80 ff f4 8a 31 c0 e8 54 54 38 fd <0f> 0b e9 43 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 fe ff RSP: 0018:ffffc9000a6dfb68 EFLAGS: 00010246 RAX: b731ea914171e900 RBX: 0000000000000004 RCX: ffff88803c670000 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: 0000000000000004 R08: ffffffff8169fb82 R09: ffffed1017344f2c R10: ffffed1017344f2c R11: 0000000000000000 R12: ffff88803baf8000 R13: 1ffff1100775f0b7 R14: 1ffff1100775f0b8 R15: ffff88803baf85b8 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1462d50020 CR3: 000000006fd0e000 CR4: 00000000003506f0 Call Trace: __linkwatch_run_queue+0x4f5/0x800 net/core/link_watch.c:213 linkwatch_event+0x48/0x50 net/core/link_watch.c:252 process_one_work+0x853/0x1140 kernel/workqueue.c:2298 worker_thread+0xac1/0x1320 kernel/workqueue.c:2445 kthread+0x468/0x490 kernel/kthread.c:327 ret_from_fork+0x1f/0x30