binder: 2456:2475 transaction failed 29189/-3, size 0-0 line 3136
binder: 2456:2478 got reply transaction with no transaction stack
binder: 2456:2478 transaction failed 29201/-71, size 0-0 line 2921
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2491 Comm: syz-executor.5 Not tainted 4.9.141+ #1
task: ffff8801cf67af80 task.stack: ffff8801a9858000
RIP: 0010:[<ffffffff81de0a58>]  [<ffffffff81de0a58>] is_loop_device drivers/block/loop.c:645 [inline]
RIP: 0010:[<ffffffff81de0a58>]  [<ffffffff81de0a58>] loop_validate_file+0x208/0x400 drivers/block/loop.c:656
RSP: 0018:ffff8801a985fae0  EFLAGS: 00010206
RAX: 0000000000000036 RBX: dffffc0000000000 RCX: ffffc9000090f000
RDX: 0000000000000090 RSI: ffffffff81de0a28 RDI: 00000000000001b0
RBP: ffff8801a985faf8 R08: ffff8801cf67b830 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: ffff8801d91b0b80 R14: ffff8801d91b0b80 R15: ffff8801d77869d8
FS:  00007f5c3c268700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020ee6ff8 CR3: 00000001cc49d000 CR4: 00000000001606b0
Stack:
 ffff8801d7786880 ffff8801cf769e00 00000000fffffff0 ffff8801a985fb80
 ffffffff81de7b85 0000000000000001 0000000000000000 0000000000000000
 ffff8801a985fb80 ffff8801a985fde0 ffff8801d77869d0 1ffff1003530bf6c
Call Trace:
 [<ffffffff81de7b85>] loop_set_fd drivers/block/loop.c:909 [inline]
 [<ffffffff81de7b85>] lo_ioctl+0x865/0x1910 drivers/block/loop.c:1375
 [<ffffffff81b0cf54>] __blkdev_driver_ioctl block/ioctl.c:294 [inline]
 [<ffffffff81b0cf54>] blkdev_ioctl+0x7a4/0x1a50 block/ioctl.c:590
 [<ffffffff815ca29e>] block_ioctl+0xde/0x120 fs/block_dev.c:1688
 [<ffffffff81546dec>] vfs_ioctl fs/ioctl.c:43 [inline]
 [<ffffffff81546dec>] file_ioctl fs/ioctl.c:493 [inline]
 [<ffffffff81546dec>] do_vfs_ioctl+0x1ac/0x11a0 fs/ioctl.c:677
 [<ffffffff81547e6f>] SYSC_ioctl fs/ioctl.c:694 [inline]
 [<ffffffff81547e6f>] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685
 [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285
 [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 00 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 f7 01 00 00 4d 8b a4 24 f0 00 00 00 49 8d bc 24 b0 01 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 cc 01 00 00 4d 8b a4 24 b0 01 00 00 4c 89 e0 
RIP  [<ffffffff81de0a58>] is_loop_device drivers/block/loop.c:645 [inline]
RIP  [<ffffffff81de0a58>] loop_validate_file+0x208/0x400 drivers/block/loop.c:656
 RSP <ffff8801a985fae0>
---[ end trace 338039c0e442b955 ]---