linux-kernel - [syzbot] WARNING in drm_prime_destroy_file

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1f849a1a.ab5b.19b9b6beda1.Coremail.wangzhi_xd@stu.xidian.edu.cn>
Date: Thu, 8 Jan 2026 10:25:00 +0800 (GMT+08:00)
From: 王志 <wangzhi_xd@....xidian.edu.cn>
To: linux-kernel@...r.kernel.org, dri-devel@...ts.freedesktop.org
Cc: syzkaller-bugs@...glegroups.com
Subject: [syzbot] WARNING in drm_prime_destroy_file_private

syzbot has found the following issue on:

HEAD commit:    6.18.0-rcX
git tree:       linux-stable
console output: (see below)
kernel config:  (please provide if available)

---

WARNING: CPU: 3 PID: 28430 at drivers/gpu/drm/drm_prime.c:223 drm_prime_destroy_file_private+0x43/0x60
Modules linked in:
CPU: 3 UID: 0 PID: 28430 Comm: syz.0.6460 Not tainted 6.18.0 #1 PREEMPT(full) 
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
RIP: 0010:drm_prime_destroy_file_private+0x43/0x60
Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 a3 4f 81 fc e8 9e 4f 81 fc 90 <0f> 0b 90 5b e9 94 4f 81 fc e8 7f a8 e7 fc eb d8 66 66 2e 0f 1f 84
RSP: 0018:ffffc900032c7cb8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888100aa4380 RCX: ffffffff8b428d97
RDX: ffff888122c61d00 RSI: ffffffff85390862 RDI: ffff888100aa4410
RBP: 0000000000000000 R08: 0000000000000001 R09: fffff52000658f77
R10: ffffc900032c7bbf R11: 0000000000000000 R12: ffff888100aa4000
R13: dffffc0000000000 R14: ffff888100aa42d8 R15: ffff888100aa42b0
FS:  000055556463b500(0000) GS:ffff8881a2701000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c2acc50 CR3: 00000001326c0000 CR4: 00000000000006f0

Call Trace:
 <TASK>
 drm_file_free.part.0+0x805/0xcf0
 drm_close_helper.isra.0+0x183/0x1f0
 drm_release+0x1ab/0x360
 __fput+0x402/0xb50
 task_work_run+0x16b/0x260
 exit_to_user_mode_loop+0xf9/0x130
 do_syscall_64+0x424/0xfa0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
 </TASK>
Download attachment "(2).config" of type "application/octet-stream" (291629 bytes)