program: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={0x0}) close(0x3) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r6}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r8}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={0x0}) (async) close(0x3) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r6}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0xda2, 0x8169, 0x6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r8}) (async) [ 58.565189][ T5311] ------------[ cut here ]------------ [ 58.567221][ T5311] WARNING: CPU: 0 PID: 5311 at drivers/gpu/drm/drm_prime.c:326 drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.571331][ T5311] Modules linked in: [ 58.572727][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 58.576446][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.580253][ T5311] RIP: 0010:drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.582562][ T5311] Code: 0a 01 48 8b 2c 24 4c 8b 64 24 08 75 3c e8 93 38 30 fc e9 c7 fe ff ff e8 89 38 30 fc 4c 89 ff e9 49 ff ff ff e8 7c 38 30 fc 90 <0f> 0b 90 e9 a3 fe ff ff e8 6e 38 30 fc 4c 89 ff be 03 00 00 00 e8 [ 58.589647][ T5311] RSP: 0018:ffffc9000d46fbe8 EFLAGS: 00010293 [ 58.591896][ T5311] RAX: ffffffff856f3f44 RBX: 1ffff11003d5e825 RCX: ffff888000a94880 [ 58.594839][ T5311] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 00000000ffffffff [ 58.597743][ T5311] RBP: ffff88801eaf4128 R08: ffffffff856f613e R09: 1ffff11003d5e800 [ 58.600494][ T5311] R10: dffffc0000000000 R11: ffffed1003d5e801 R12: ffff8880346dd800 [ 58.603374][ T5311] R13: dffffc0000000000 R14: ffff8880346dd800 R15: ffff88801eaf4000 [ 58.606240][ T5311] FS: 00007f8af6fd96c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 58.609337][ T5311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.611644][ T5311] CR2: 00007f8af6f96fe0 CR3: 00000000442c6000 CR4: 0000000000352ef0 [ 58.614589][ T5311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.617318][ T5311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.620055][ T5311] Call Trace: [ 58.621268][ T5311] [ 58.622343][ T5311] ? __warn+0x165/0x4d0 [ 58.623911][ T5311] ? drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.626050][ T5311] ? report_bug+0x2b3/0x500 [ 58.627713][ T5311] ? drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.629839][ T5311] ? handle_bug+0x60/0x90 [ 58.631379][ T5311] ? exc_invalid_op+0x1a/0x50 [ 58.633019][ T5311] ? asm_exc_invalid_op+0x1a/0x20 [ 58.634980][ T5311] ? drm_gem_prime_import_dev+0x1ce/0x390 [ 58.637003][ T5311] ? drm_gem_prime_fd_to_handle+0x3f4/0x4b0 [ 58.639132][ T5311] ? drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.641299][ T5311] ? drm_gem_prime_fd_to_handle+0x3f4/0x4b0 [ 58.643362][ T5311] drm_ioctl_kernel+0x337/0x440 [ 58.645258][ T5311] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 58.647466][ T5311] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.649401][ T5311] ? __might_fault+0xc6/0x120 [ 58.651172][ T5311] drm_ioctl+0x60e/0xad0 [ 58.652662][ T5311] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 58.654979][ T5311] ? __pfx_drm_ioctl+0x10/0x10 [ 58.656705][ T5311] ? __fget_files+0x2a/0x410 [ 58.658406][ T5311] ? __pfx_drm_ioctl+0x10/0x10 [ 58.660092][ T5311] __se_sys_ioctl+0xf5/0x170 [ 58.661802][ T5311] do_syscall_64+0xf3/0x230 [ 58.663478][ T5311] ? clear_bhb_loop+0x35/0x90 [ 58.665202][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.667462][ T5311] RIP: 0033:0x7f8af6185d29 [ 58.669016][ T5311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.676117][ T5311] RSP: 002b:00007f8af6fd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.679087][ T5311] RAX: ffffffffffffffda RBX: 00007f8af6375fa0 RCX: 00007f8af6185d29 [ 58.681888][ T5311] RDX: 0000000020000800 RSI: 00000000c00c642e RDI: 0000000000000003 [ 58.684906][ T5311] RBP: 00007f8af6201b08 R08: 0000000000000000 R09: 0000000000000000 [ 58.687665][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.690431][ T5311] R13: 0000000000000000 R14: 00007f8af6375fa0 R15: 00007ffcbc671cd8 [ 58.693186][ T5311] [ 58.694429][ T5311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.696843][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 58.700335][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.704301][ T5311] Call Trace: [ 58.705600][ T5311] [ 58.706746][ T5311] dump_stack_lvl+0x241/0x360 [ 58.708566][ T5311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.710504][ T5311] ? __pfx__printk+0x10/0x10 [ 58.712199][ T5311] ? _printk+0xd5/0x120 [ 58.713746][ T5311] ? __init_begin+0x41000/0x41000 [ 58.715598][ T5311] ? vscnprintf+0x5d/0x90 [ 58.717265][ T5311] panic+0x349/0x880 [ 58.718723][ T5311] ? __warn+0x174/0x4d0 [ 58.720291][ T5311] ? __pfx_panic+0x10/0x10 [ 58.721956][ T5311] __warn+0x344/0x4d0 [ 58.723460][ T5311] ? drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.725677][ T5311] report_bug+0x2b3/0x500 [ 58.727282][ T5311] ? drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.729456][ T5311] handle_bug+0x60/0x90 [ 58.730890][ T5311] exc_invalid_op+0x1a/0x50 [ 58.732553][ T5311] asm_exc_invalid_op+0x1a/0x20 [ 58.734406][ T5311] RIP: 0010:drm_gem_prime_fd_to_handle+0x3f5/0x4b0 [ 58.736804][ T5311] Code: 0a 01 48 8b 2c 24 4c 8b 64 24 08 75 3c e8 93 38 30 fc e9 c7 fe ff ff e8 89 38 30 fc 4c 89 ff e9 49 ff ff ff e8 7c 38 30 fc 90 <0f> 0b 90 e9 a3 fe ff ff e8 6e 38 30 fc 4c 89 ff be 03 00 00 00 e8 [ 58.743931][ T5311] RSP: 0018:ffffc9000d46fbe8 EFLAGS: 00010293 [ 58.746303][ T5311] RAX: ffffffff856f3f44 RBX: 1ffff11003d5e825 RCX: ffff888000a94880 [ 58.749320][ T5311] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 00000000ffffffff [ 58.752354][ T5311] RBP: ffff88801eaf4128 R08: ffffffff856f613e R09: 1ffff11003d5e800 [ 58.755322][ T5311] R10: dffffc0000000000 R11: ffffed1003d5e801 R12: ffff8880346dd800 [ 58.758308][ T5311] R13: dffffc0000000000 R14: ffff8880346dd800 R15: ffff88801eaf4000 [ 58.761270][ T5311] ? drm_gem_prime_import_dev+0x1ce/0x390 [ 58.763437][ T5311] ? drm_gem_prime_fd_to_handle+0x3f4/0x4b0 [ 58.765675][ T5311] ? drm_gem_prime_fd_to_handle+0x3f4/0x4b0 [ 58.767886][ T5311] drm_ioctl_kernel+0x337/0x440 [ 58.769797][ T5311] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 58.772197][ T5311] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.774202][ T5311] ? __might_fault+0xc6/0x120 [ 58.776041][ T5311] drm_ioctl+0x60e/0xad0 [ 58.777674][ T5311] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 58.780107][ T5311] ? __pfx_drm_ioctl+0x10/0x10 [ 58.781886][ T5311] ? __fget_files+0x2a/0x410 [ 58.783616][ T5311] ? __pfx_drm_ioctl+0x10/0x10 [ 58.785455][ T5311] __se_sys_ioctl+0xf5/0x170 [ 58.787229][ T5311] do_syscall_64+0xf3/0x230 [ 58.788979][ T5311] ? clear_bhb_loop+0x35/0x90 [ 58.790982][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.793164][ T5311] RIP: 0033:0x7f8af6185d29 [ 58.794605][ T5311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.801527][ T5311] RSP: 002b:00007f8af6fd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.804611][ T5311] RAX: ffffffffffffffda RBX: 00007f8af6375fa0 RCX: 00007f8af6185d29 [ 58.807471][ T5311] RDX: 0000000020000800 RSI: 00000000c00c642e RDI: 0000000000000003 [ 58.810413][ T5311] RBP: 00007f8af6201b08 R08: 0000000000000000 R09: 0000000000000000 [ 58.813498][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.816335][ T5311] R13: 0000000000000000 R14: 00007f8af6375fa0 R15: 00007ffcbc671cd8 [ 58.819316][ T5311] [ 58.820862][ T5311] Kernel Offset: disabled [ 58.822592][ T5311] Rebooting in 86400 seconds..