[ 1169.487211][ T6946] ==================================================================
[ 1169.487489][ T6946] BUG: KASAN: global-out-of-bounds in snmp6_seq_show_item64.constprop.0+0x341/0x500
[ 1169.487810][ T6946] Read of size 8 at addr ffffffff9e0db9f0 by task cat/6946
[ 1169.488060][ T6946] 
[ 1169.488155][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: cat Not tainted 6.17.0-rc3-virtme #1 PREEMPT(full) 
[ 1169.488160][ T6946] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1169.488166][ T6946] Call Trace:
[ 1169.488170][ T6946]  <TASK>
[ 1169.488172][ T6946]  dump_stack_lvl+0x82/0xc0
[ 1169.488181][ T6946]  print_address_description.constprop.0+0x2c/0x3a0
[ 1169.488201][ T6946]  ? snmp6_seq_show_item64.constprop.0+0x341/0x500
[ 1169.488205][ T6946]  print_report+0xb4/0x270
[ 1169.488209][ T6946]  ? snmp6_seq_show_item64.constprop.0+0x341/0x500
[ 1169.488213][ T6946]  ? kasan_addr_to_slab+0x21/0x70
[ 1169.488217][ T6946]  ? snmp6_seq_show_item64.constprop.0+0x341/0x500
[ 1169.488220][ T6946]  kasan_report+0xca/0x100
[ 1169.488225][ T6946]  ? snmp6_seq_show_item64.constprop.0+0x341/0x500
[ 1169.488230][ T6946]  snmp6_seq_show_item64.constprop.0+0x341/0x500
[ 1169.488236][ T6946]  ? sockstat6_seq_show+0x1d0/0x1d0
[ 1169.488248][ T6946]  ? rcu_is_watching+0x12/0xb0
[ 1169.488262][ T6946]  ? __kvmalloc_node_noprof+0x23f/0x570
[ 1169.488271][ T6946]  snmp6_dev_seq_show+0xcf/0x180
[ 1169.488274][ T6946]  seq_read_iter+0x3fa/0x1060
[ 1169.488286][ T6946]  proc_reg_read_iter+0x19b/0x260
[ 1169.488300][ T6946]  vfs_read+0x74d/0xda0
[ 1169.488307][ T6946]  ? kernel_read+0x1f0/0x1f0
[ 1169.488310][ T6946]  ? lock_vma_under_rcu+0x18a/0x3d0
[ 1169.488318][ T6946]  ? find_held_lock+0x2b/0x80
[ 1169.488331][ T6946]  ksys_read+0xf7/0x1d0
[ 1169.488334][ T6946]  ? vfs_write+0x12c0/0x12c0
[ 1169.488336][ T6946]  ? do_user_addr_fault+0x955/0xe00
[ 1169.488355][ T6946]  do_syscall_64+0xc1/0x370
[ 1169.488362][ T6946]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 1169.488372][ T6946] RIP: 0033:0x7f64b9e0c292
[ 1169.488377][ T6946] Code: c0 e9 b2 fe ff ff 50 48 8d 3d 6a 15 0c 00 e8 65 e1 01 00 0f 1f 44 00 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 0f 05 <48> 3d 00 f0 ff ff 77 56 c3 0f 1f 44 00 00 48 83 ec 28 48 89 54 24
[ 1169.488380][ T6946] RSP: 002b:00007ffd8fbc3ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1169.488387][ T6946] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007f64b9e0c292
[ 1169.488389][ T6946] RDX: 0000000000020000 RSI: 00007f64b9cea000 RDI: 0000000000000005
[ 1169.488392][ T6946] RBP: 00007f64b9cea000 R08: 00007f64b9ce9010 R09: 0000000000000000
[ 1169.488393][ T6946] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000022000
[ 1169.488395][ T6946] R13: 0000000000000005 R14: 0000000000020000 R15: 0000000000020000
[ 1169.488402][ T6946]  </TASK>
[ 1169.488403][ T6946] 
[ 1169.495631][ T6946] The buggy address belongs to the variable:
[ 1169.495829][ T6946]  snmp6_ipstats_list+0x210/0x3e0
[ 1169.496013][ T6946] 
[ 1169.496095][ T6946] The buggy address belongs to the physical page:
[ 1169.496292][ T6946] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x338db
[ 1169.496593][ T6946] flags: 0x80000000002000(reserved|node=0|zone=1)
[ 1169.496810][ T6946] raw: 0080000000002000 ffffea0000ce36c8 ffffea0000ce36c8 0000000000000000
[ 1169.497111][ T6946] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1169.497398][ T6946] page dumped because: kasan: bad access detected
[ 1169.497608][ T6946] 
[ 1169.497689][ T6946] Memory state around the buggy address:
[ 1169.497845][ T6946]  ffffffff9e0db880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1169.498093][ T6946]  ffffffff9e0db900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1169.498325][ T6946] >ffffffff9e0db980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9
[ 1169.498568][ T6946]                                                              ^
[ 1169.498802][ T6946]  ffffffff9e0dba00: f9 f9 f9 f9 00 00 00 00 00 01 f9 f9 f9 f9 f9 f9
[ 1169.499040][ T6946]  ffffffff9e0dba80: 00 00 04 f9 f9 f9 f9 f9 00 00 00 01 f9 f9 f9 f9
[ 1169.499273][ T6946] ==================================================================
[ 1169.499568][ T6946] Disabling lock debugging due to kernel taint
[ 1181.094441][ T7018] Initializing XFRM netlink socket