binder: 7964:7967 got transaction to context manager from process owning it input: syz1 as /devices/virtual/input/input28 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 7971 Comm: syz-executor4 Not tainted 4.9.124+ #38 task: ffff8801aa0017c0 task.stack: ffff8801aa038000 RIP: 0010:[] [] is_loop_device drivers/block/loop.c:645 [inline] RIP: 0010:[] [] loop_validate_file+0x208/0x400 drivers/block/loop.c:656 RSP: 0018:ffff8801aa03fc80 EFLAGS: 00010206 RAX: 0000000000000036 RBX: dffffc0000000000 RCX: ffffc90005aaa000 RDX: 0000000000000091 RSI: ffffffff81d81a68 RDI: 00000000000001b0 RBP: ffff8801aa03fc98 R08: ffff8801aa002070 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: ffff8801d7d8ed40 R14: ffff8801d7d8ed40 R15: ffff8801d6313758 FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f579eb40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 0000000031c22000 CR3: 00000001cfcac000 CR4: 00000000001606b0 Stack: ffff8801d6313600 ffff8801c8a3a000 0000000000000004 ffff8801aa03fd20 ffffffff81d886dd ffff8801ffffffff ffff8801d6313610 ffff8801d63053e0 ffff8801d6313618 ffff8801d6634910 0000000000000000 965178a8ba431c1c Call Trace: [] loop_change_fd drivers/block/loop.c:702 [inline] [] lo_ioctl+0x3ed/0x1670 drivers/block/loop.c:1359 [] lo_compat_ioctl+0xb2/0x140 drivers/block/loop.c:1549 [] compat_blkdev_ioctl+0x3a4/0x38c0 block/compat_ioctl.c:751 [] C_SYSC_ioctl fs/compat_ioctl.c:1602 [inline] [] compat_SyS_ioctl+0x12d/0x1fd0 fs/compat_ioctl.c:1549 [] do_syscall_32_irqs_on arch/x86/entry/common.c:325 [inline] [] do_fast_syscall_32+0x2f1/0x860 arch/x86/entry/common.c:387 [] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137 Code: 00 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 f7 01 00 00 4d 8b a4 24 f0 00 00 00 49 8d bc 24 b0 01 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 cc 01 00 00 4d 8b a4 24 b0 01 00 00 4c 89 e0 RIP [] is_loop_device drivers/block/loop.c:645 [inline] RIP [] loop_validate_file+0x208/0x400 drivers/block/loop.c:656 RSP ---[ end trace 709c1a70316665d1 ]---