------------[ cut here ]------------ WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224, CPU#0: syz.5.178/7779 Modules linked in: CPU: 0 UID: 0 PID: 7779 Comm: syz.5.178 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224 lr : drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224 sp : ffff80009ffe7b00 x29: ffff80009ffe7b00 x28: 1fffe0001b81a00e x27: dfff800000000000 x26: 1fffe0001959f40e x25: ffff80008c3326a8 x24: ffff0000dc0d02d8 x23: ffff0000cacfa070 x22: ffff0000dc0d0000 x21: ffff80008c332610 x20: 0000000000000000 x19: ffff0000dc0d0410 x18: 00000000ffffffff x17: ffff800093598000 x16: ffff800082e5c7a4 x15: 0000000000000001 x14: 1ffff00013ffcf40 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 00000000000066b3 x9 : ffff8000b1ae7000 x8 : 00000000000066b4 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff80008afa71a8 x2 : 0000000000000001 x1 : 0000000000000008 x0 : ffff0000dc0d0380 Call trace: drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224 (P) drm_file_free+0x664/0x860 drivers/gpu/drm/drm_file.c:269 drm_close_helper drivers/gpu/drm/drm_file.c:290 [inline] drm_release+0x2b0/0x3e4 drivers/gpu/drm/drm_file.c:438 __fput+0x340/0x75c fs/file_table.c:468 ____fput+0x20/0x58 fs/file_table.c:496 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 1012 hardirqs last enabled at (1011): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (1012): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (864): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (864): [] release_sock+0x14c/0x1ac net/core/sock.c:3804 softirqs last disabled at (862): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (862): [] release_sock+0x34/0x1ac net/core/sock.c:3793 ---[ end trace 0000000000000000 ]---