C++ Spot the Bug

spot-the-bug-lambda.cpp

template <typename Func>
auto decorator(Func func) {
    return [&]{
        std::cout << "Calling f():\n";
        func();
    };
}
auto foo(fs::path filepath) {
    auto func = [filepath] {
        std::cout << filepath << "\n";
    });
    auto newfunc = decorator(func);
    return newfunc;
}
int main(){
    auto newfunc = foo(fs::path("C:\\"));
    newfunc();
}

/*
Can you spot the bug? 

filepath is being captured by copy into the func lambda, 
basically creating a member variable for it. 
Then, we passfunc to the function decorator and return a new lambda that invokes func. 
The decorator's lambda know which func to call only by reference (capturing [&]) - but alas, 
when invoking newfunc in main, func has already been freed due to RAII! 
So undefined behavior would occur trying to access uninitialized address.
*/