------------[ cut here ]------------ WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x44/0x60 drivers/gpu/drm/drm_prime.c:225, CPU#1: syz.0.381/4471 Modules linked in: CPU: 1 UID: 0 PID: 4471 Comm: syz.0.381 Not tainted syzkaller #0 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : drm_prime_destroy_file_private+0x44/0x60 drivers/gpu/drm/drm_prime.c:224 lr : drm_file_free+0x578/0x9b8 drivers/gpu/drm/drm_file.c:269 sp : ffff8000a2507b40 x29: ffff8000a2507b40 x28: ffff000021854260 x27: ffff000021854260 x26: 1fffe0000430a810 x25: 1fffe000028d100e x24: ffff000014688000 x23: ffff000021854260 x22: ffff800085ece960 x21: ffff000021854288 x20: ffff000014688000 x19: ffff000021854328 x18: 0000000000000000 x17: ffff800081f449d8 x16: ffff800081f443d4 x15: ffff800081f53cd0 x14: ffff8000857b4a14 x13: ffff800089e61a70 x12: ffff7000144a0f41 x11: 1ffff000144a0f40 x10: ffff7000144a0f40 x9 : dfff800000000000 x8 : ffff8000a2507a07 x7 : 0000000000000001 x6 : ffff7000144a0f40 x5 : ffff8000a2507a00 x4 : ffff7000144a0f41 x3 : ffff8000857fa2f0 x2 : 1fffe0000430a876 x1 : 0000000000000000 x0 : ffff0000133fbb90 Call trace: drm_prime_destroy_file_private+0x44/0x60 drivers/gpu/drm/drm_prime.c:225 (P) drm_file_free+0x578/0x9b8 drivers/gpu/drm/drm_file.c:269 drm_close_helper.isra.0+0x138/0x1a4 drivers/gpu/drm/drm_file.c:290 drm_release+0x150/0x2e0 drivers/gpu/drm/drm_file.c:438 __fput+0x2d0/0x980 fs/file_table.c:510 ____fput+0x14/0x20 fs/file_table.c:538 task_work_run+0x134/0x238 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:67 [inline] exit_to_user_mode_loop+0x190/0x1c8 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:224 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:86 [inline] el0_svc+0x260/0x2a4 arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:742 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 irq event stamp: 1436 hardirqs last enabled at (1435): [] kasan_quarantine_put+0x1d0/0x240 mm/kasan/quarantine.c:234 hardirqs last disabled at (1436): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (1414): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (1414): [] handle_softirqs+0xa9c/0x1050 kernel/softirq.c:650 softirqs last disabled at (1403): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---