bpf: Fix reference state management for synchronous callbacks (CVE-2022-50650) | HOL Guard CVE