------------[ cut here ]------------ WARNING: CPU: 1 PID: 3508 at drivers/gpu/drm/drm_prime.c:223 drm_prime_destroy_file_private+0xc/0x14 drivers/gpu/drm/drm_prime.c:224 Modules linked in: CPU: 1 UID: 0 PID: 3508 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : drm_prime_destroy_file_private+0xc/0x14 drivers/gpu/drm/drm_prime.c:223 lr : drm_file_free+0x1d8/0x284 drivers/gpu/drm/drm_file.c:269 sp : ffff80008931bd20 x29: ffff80008931bd20 x28: f0f00000091f3840 x27: fdf000000afdaac0 x26: 0000000000000000 x25: fdf000000afdab08 x24: 0000000000000000 x23: f5f0000004cfc150 x22: f5f0000004cfc000 x21: fdf000000afdaa00 x20: fdf000000afdaae0 x19: fdf000000afdaae0 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000040 x14: f2f0000008891eb0 x13: 0000000000000228 x12: 0000000000000000 x11: f7f000000b05b2a8 x10: 0000000000000000 x9 : f9f0000003001300 x8 : ffff80008931bc60 x7 : dead000000000100 x6 : 0000000000000011 x5 : ffff800080982c7c x4 : ffffc1ffc0222460 x3 : 0000000080150011 x2 : 0000000000000000 x1 : f0f00000091f3840 x0 : f3f0000008845b10 Call trace: drm_prime_destroy_file_private+0xc/0x14 drivers/gpu/drm/drm_prime.c:224 (P) drm_close_helper.isra.0+0x68/0x78 drivers/gpu/drm/drm_file.c:290 drm_release+0x64/0x128 drivers/gpu/drm/drm_file.c:438 __fput+0xcc/0x2dc fs/file_table.c:468 ____fput+0x14/0x20 fs/file_table.c:496 task_work_run+0x78/0xd4 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0x15c/0x180 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x108/0x10c arch/arm64/kernel/entry-common.c:747 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:765 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:596 ---[ end trace 0000000000000000 ]---