------------[ cut here ]------------ WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224, CPU#1: syz.6.205/8067 Modules linked in: CPU: 1 UID: 0 PID: 8067 Comm: syz.6.205 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224 lr : drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224 sp : ffff80009c8d7b00 x29: ffff80009c8d7b00 x28: 1fffe00018be720e x27: dfff800000000000 x26: 1fffe00019641c0e x25: ffff80008c3326a8 x24: ffff0000c5f392d8 x23: ffff0000cb20e070 x22: ffff0000c5f39000 x21: ffff80008c332610 x20: 0000000000000000 x19: ffff0000c5f39410 x18: 00000000ffffffff x17: ffff800083e6b8e4 x16: ffff800082e5c7a4 x15: 0000000000000001 x14: 1ffff0001391af40 x13: 0000000000000000 x12: 0000000000000000 x11: ffff70001391af41 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000f60a3900 x7 : ffff800080ca7408 x6 : ffff800080ca37dc x5 : ffff0000e2684a18 x4 : ffff80008044e9b8 x3 : ffff80008afa71a8 x2 : 0000000000000001 x1 : 0000000000000008 x0 : ffff0000c5f39380 Call trace: drm_prime_destroy_file_private+0x58/0x60 drivers/gpu/drm/drm_prime.c:224 (P) drm_file_free+0x664/0x860 drivers/gpu/drm/drm_file.c:269 drm_close_helper drivers/gpu/drm/drm_file.c:290 [inline] drm_release+0x2b0/0x3e4 drivers/gpu/drm/drm_file.c:438 __fput+0x340/0x75c fs/file_table.c:468 ____fput+0x20/0x58 fs/file_table.c:496 task_work_run+0x1dc/0x260 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x10c/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 1594 hardirqs last enabled at (1593): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (1594): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (1474): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1472): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---