------------[ cut here ]------------ refcount_t: saturated; leaking memory. WARNING: CPU: 1 PID: 5126 at lib/refcount.c:22 refcount_warn_saturate+0x153/0x1a0 lib/refcount.c:22 Modules linked in: CPU: 1 PID: 5126 Comm: syz.3.128 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:refcount_warn_saturate+0x153/0x1a0 lib/refcount.c:22 Code: 09 01 48 c7 c7 20 ff de 8a e8 19 6f 38 fd 0f 0b eb 8c e8 20 d8 6c fd c6 05 d1 5b f7 09 01 48 c7 c7 20 ff de 8a e8 fd 6e 38 fd <0f> 0b e9 6d ff ff ff e8 01 d8 6c fd c6 05 b6 5b f7 09 01 48 c7 c7 RSP: 0018:ffffc9000c6cf7d8 EFLAGS: 00010246 RAX: 9a3a4a93653f5900 RBX: 0000000000000001 RCX: 0000000000080000 RDX: ffffc9000f64d000 RSI: 00000000000040d0 RDI: 00000000000040d1 RBP: 00000000ffffffff R08: ffffc9000c6cf4e7 R09: 1ffff920018d9e9c R10: dffffc0000000000 R11: fffff520018d9e9d R12: ffff888029565218 R13: ffffffff96c6a820 R14: 0000000000000001 R15: ffff888029565200 FS: 00007f5b5fff66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c323f96 CR3: 00000000275e4000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_add include/linux/refcount.h:-1 [inline] __refcount_inc include/linux/refcount.h:250 [inline] refcount_inc include/linux/refcount.h:267 [inline] kref_get include/linux/kref.h:45 [inline] dvb_device_get drivers/media/dvb-core/dvbdev.c:631 [inline] dvb_device_open+0x31b/0x360 drivers/media/dvb-core/dvbdev.c:106 chrdev_open+0x585/0x5f0 fs/char_dev.c:414 do_dentry_open+0x7dd/0x10b0 fs/open.c:882 do_open fs/namei.c:3634 [inline] path_openat+0x2674/0x2f10 fs/namei.c:3791 do_filp_open+0x1ee/0x420 fs/namei.c:3818 do_sys_openat2+0x14b/0x4f0 fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __x64_sys_openat+0x135/0x160 fs/open.c:1347 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f5b61d5e68e Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007f5b5fff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f5b5fff66c0 RCX: 00007f5b61d5e68e RDX: 0000000000000002 RSI: 00007f5b5fff5c00 RDI: ffffffffffffff9c RBP: 00007f5b5fff5c00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f5b62026128 R14: 00007f5b62026090 R15: 00007ffdf2b868b8