------------[ cut here ]------------ !atomic_long_inc_not_zero(&event->refcount) WARNING: kernel/events/core.c:10739 at __perf_event_overflow+0xb9e/0xec0 kernel/events/core.c:10739, CPU#1: syz.4.2986/19761 Modules linked in: CPU: 1 UID: 0 PID: 19761 Comm: syz.4.2986 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:__perf_event_overflow+0xb9e/0xec0 kernel/events/core.c:10739 Code: 08 37 00 4d 89 3e 4c 8b 7c 24 10 e9 c2 fc ff ff e8 a7 e7 cc ff 49 bd 00 00 00 00 00 fc ff df e9 08 fe ff ff e8 93 e7 cc ff 90 <0f> 0b 90 e9 21 ff ff ff e8 85 e7 cc ff 48 c7 c7 c0 1a d7 8b e8 b9 RSP: 0000:ffffc9000c57f9c0 EFLAGS: 00010283 RAX: ffffffff81f8a3ed RBX: ffff888068460100 RCX: 0000000000080000 RDX: ffffc90013ff8000 RSI: 000000000000239a RDI: 000000000000239b RBP: ffffc9000c57fad0 R08: ffff888068460257 R09: 1ffff1100d08c04a R10: dffffc0000000000 R11: ffffed100d08c04b R12: ffff888068460000 R13: dffffc0000000000 R14: ffff888068460250 R15: 0000000000000000 FS: 00007fb2b16d36c0(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb2b16d2ff8 CR3: 0000000080096000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: perf_swevent_overflow kernel/events/core.c:10837 [inline] perf_swevent_event+0x323/0x650 kernel/events/core.c:-1 do_perf_sw_event kernel/events/core.c:10977 [inline] ___perf_sw_event+0x4a6/0x730 kernel/events/core.c:11004 __perf_sw_event+0xf9/0x1a0 kernel/events/core.c:11016 perf_sw_event include/linux/perf_event.h:1604 [inline] do_user_addr_fault+0x12a8/0x1340 arch/x86/mm/fault.c:1281 handle_page_fault arch/x86/mm/fault.c:1474 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fb2b16dac50 Code: 21 ca 41 8b 44 24 20 41 0f b6 4c 24 24 48 f7 e2 48 01 f8 48 83 d2 00 48 0f ad d0 48 d3 ea f6 c1 40 48 0f 44 d0 e9 5a ff ff ff <48> 89 7d c8 31 c0 48 81 ff 00 ca 9a 3b 72 1c 31 d2 48 81 c7 00 36 RSP: 002b:00007fb2b16d2fc0 EFLAGS: 00010246 RAX: 000000000002c7b4 RBX: 0000000000000001 RCX: 000000000000039f RDX: 000000000703c828 RSI: 00007fb2b16d30b0 RDI: 000000000703c828 RBP: 00007fb2b16d3030 R08: 7fffffffffffffff R09: 3fffffffffffffff R10: 4000000000000000 R11: 0000000000000246 R12: 00007fb2b16d4000 R13: 000000000002c7b4 R14: 00007fb2b16d4038 R15: 0000000000000010