kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 15748 Comm: syz-executor5 Not tainted 4.4.161+ #2
task: ffff8800a792df00 task.stack: ffff880000348000
RIP: 0010:[<ffffffff81d29898>]  [<ffffffff81d29898>] is_loop_device drivers/block/loop.c:656 [inline]
RIP: 0010:[<ffffffff81d29898>]  [<ffffffff81d29898>] loop_validate_file+0x208/0x400 drivers/block/loop.c:667
RSP: 0018:ffff88000034fad8  EFLAGS: 00010206
RAX: 0000000000000036 RBX: dffffc0000000000 RCX: ffffc9000156b000
RDX: 000000000000008c RSI: ffffffff81d29868 RDI: 00000000000001b0
RBP: ffff88000034faf0 R08: ffff8800a792e7c8 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: ffff8800b84f3980 R14: ffff8800b84f3980 R15: ffff8800ba55ee58
FS:  0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f576bb40
audit: type=1400 audit(1540031443.270:78): avc:  denied  { create } for  pid=15762 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000000924d40 CR3: 00000001d7427000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8800ba55ed00 0000000000004c00 ffff8800b4769e00 ffff88000034fb80
 ffffffff81d33077 ffff880000000001 ffffffff8147f1c9 0000004000000008
 ffff88000034fb28 ffff880000000000 5e18c8516525a913 ffff8800ba55ee50
Call Trace:
 [<ffffffff81d33077>] loop_set_fd drivers/block/loop.c:920 [inline]
 [<ffffffff81d33077>] lo_ioctl+0x6a7/0x16b0 drivers/block/loop.c:1367
 [<ffffffff81d34132>] lo_compat_ioctl+0xb2/0x140 drivers/block/loop.c:1560
binder: 15762:15767 transaction failed 29189/-22, size 24-8 line 3014
binder: 15762:15767 BC_ACQUIRE_DONE u0000000000000000 no match
binder: 15762:15767 unknown command 1073741824
binder: 15762:15767 ioctl c0306201 200003c0 returned -22
 [<ffffffff81a92e24>] compat_blkdev_ioctl+0x3a4/0x3546 block/compat_ioctl.c:751
 [<ffffffff8159376f>] C_SYSC_ioctl fs/compat_ioctl.c:1592 [inline]
 [<ffffffff8159376f>] compat_SyS_ioctl+0x4af/0x2220 fs/compat_ioctl.c:1544
 [<ffffffff8100629e>] do_syscall_32_irqs_on arch/x86/entry/common.c:396 [inline]
 [<ffffffff8100629e>] do_fast_syscall_32+0x31e/0xa80 arch/x86/entry/common.c:463
 [<ffffffff82707350>] sysenter_flags_fixed+0xd/0x1a
Code: 00 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 f7 01 00 00 4d 8b a4 24 f0 00 00 00 49 8d bc 24 b0 01 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 cc 01 00 00 4d 8b a4 24 b0 01 00 00 4c 89 e0 
RIP  [<ffffffff81d29898>] is_loop_device drivers/block/loop.c:656 [inline]
RIP  [<ffffffff81d29898>] loop_validate_file+0x208/0x400 drivers/block/loop.c:667
 RSP <ffff88000034fad8>
audit: type=1400 audit(1540031443.660:79): avc:  denied  { set_context_mgr } for  pid=15762 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0
binder: 15762:15766 ioctl 40046207 0 returned -13
---[ end trace e808caa6994dcd22 ]---