loop2: p5 size 1073741824 extends beyond EOD, truncated ================================================================== BUG: KASAN: null-ptr-deref in memcpy include/linux/string.h:347 [inline] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x37b/0x490 net/nfc/llcp_sock.c:532 Read of size 43 at addr (null) by task syz-executor.1/17708 CPU: 1 PID: 17708 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 kasan_report_error mm/kasan/report.c:349 [inline] kasan_report mm/kasan/report.c:409 [inline] kasan_report.cold+0x127/0x2ae mm/kasan/report.c:393 memcpy+0x20/0x50 mm/kasan/kasan.c:302 memcpy include/linux/string.h:347 [inline] llcp_sock_getname+0x37b/0x490 net/nfc/llcp_sock.c:532 SYSC_getpeername+0x109/0x220 net/socket.c:1715 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c889 RSP: 002b:00007f8cc05a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 RAX: ffffffffffffffda RBX: 00007f8cc05aa6d4 RCX: 000000000045c889 RDX: 0000000020001400 RSI: 0000000020001380 RDI: 0000000000000007 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000000f8 R14: 00000000004c37f6 R15: 000000000076bf0c ================================================================== hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected loop2: p1 < > p2 p3 < p5 p6 > p4 loop2: p2 size 1073741824 extends beyond EOD, truncated loop2: p5 size 1073741824 extends beyond EOD, truncated