loop3: p215 size 2097152 extends beyond EOD, truncated loop3: p216 size 2097152 extends beyond EOD, truncated kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access loop3: p217 size 2097152 extends beyond EOD, general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 8713 Comm: kworker/0:3 Not tainted 4.14.213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events l2cap_chan_timeout task: ffff8880b307a500 task.stack: ffff8880584c8000 RIP: 0010:strcmp+0x57/0xb0 lib/string.c:352 RSP: 0018:ffff8880584cf8c0 EFLAGS: 00010002 RAX: 000000001fffffff RBX: ffffffff87ccdc61 RCX: ffffffff8beb4d40 RDX: 0000000000000007 RSI: 00000000ffffffff RDI: ffffffff87ccdc60 RBP: 0000000000000026 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff893bb8a0 R11: dffffc0000000000 R12: 0000000100000000 R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000ffffffff FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4b270c3000 CR3: 00000000a20fe000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: count_matching_names kernel/locking/lockdep.c:647 [inline] register_lock_class+0xaae/0x1320 kernel/locking/lockdep.c:808 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:176 spin_lock_bh include/linux/spinlock.h:322 [inline] lock_sock_nested+0x39/0x100 net/core/sock.c:2788 l2cap_sock_teardown_cb+0x93/0x650 net/bluetooth/l2cap_sock.c:1341 l2cap_chan_del+0xaf/0x950 net/bluetooth/l2cap_core.c:599 l2cap_chan_close+0x103/0x870 net/bluetooth/l2cap_core.c:757 l2cap_chan_timeout+0x143/0x2a0 net/bluetooth/l2cap_core.c:430 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 truncated kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Code: loop3: p218 size 2097152 extends beyond EOD, 89 truncated fa 48 c1 e8 03 83 e2 07 42 0f b6 04 28 38 d0 7f loop3: p219 size 2097152 extends beyond EOD, 04 84 c0 75 50 0f b6 6b ff 4c 8d 66 01 48 89 truncated f0 48 89 f2 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 loop3: p220 size 2097152 extends beyond EOD, 84 truncated c0 75 24 41 3a 6c 24 ff 74 ae 19 RIP: strcmp+0x57/0xb0 lib/string.c:352 RSP: ffff8880584cf8c0 ---[ end trace 0300a07cb170b4b6 ]--- loop3: p221 size 2097152 extends beyond EOD,