bpf: fix refcnt overflow