======================================
| xx__-> [   16.661858][  T231] ==================================================================
| [ 16.662158][ T231] BUG: KASAN: global-out-of-bounds in snmp6_seq_show_item64.constprop.0 (net/ipv6/proc.c:211) 
| [   16.662505][  T231] Read of size 8 at addr ffffffffae2d4790 by task seq-ext_ipv4/231
| [   16.662742][  T231]
[   16.662833][  T231] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   16.662836][  T231] Call Trace:
[   16.662838][  T231]  <TASK>
[ 16.662840][ T231] dump_stack_lvl (lib/dump_stack.c:123) 
[ 16.662848][ T231] print_address_description.constprop.0 (mm/kasan/report.c:379) 
[ 16.662858][ T231] ? snmp6_seq_show_item64.constprop.0 (net/ipv6/proc.c:211) 
[ 16.662861][ T231] print_report (mm/kasan/report.c:483) 
[ 16.662865][ T231] ? snmp6_seq_show_item64.constprop.0 (net/ipv6/proc.c:211) 
[ 16.662868][ T231] ? kasan_addr_to_slab (./include/linux/mm.h:1180 mm/kasan/../slab.h:187 mm/kasan/common.c:38) 
[ 16.662872][ T231] ? snmp6_seq_show_item64.constprop.0 (net/ipv6/proc.c:211) 
[ 16.662874][ T231] kasan_report (mm/kasan/report.c:597) 
[ 16.662879][ T231] ? snmp6_seq_show_item64.constprop.0 (net/ipv6/proc.c:211) 
[ 16.662884][ T231] snmp6_seq_show_item64.constprop.0 (net/ipv6/proc.c:211) 
[ 16.662888][ T231] ? sockstat6_seq_show (net/ipv6/proc.c:202) 
[ 16.662900][ T231] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) 
[ 16.662907][ T231] ? trace_kmalloc (./include/trace/events/kmem.h:54 (discriminator 21)) 
[ 16.662912][ T231] ? __kvmalloc_node_noprof (mm/slub.c:5055) 
[ 16.662918][ T231] snmp6_seq_show (net/ipv6/proc.c:224) 
[ 16.662920][ T231] seq_read_iter (fs/seq_file.c:231) 
[ 16.662931][ T231] seq_read (fs/seq_file.c:163) 
[ 16.662934][ T231] ? seq_read_iter (fs/seq_file.c:152) 
[ 16.662938][ T231] ? __lock_acquire (kernel/locking/lockdep.c:5237) 
[ 16.662947][ T231] ? __mutex_trylock_common (./arch/x86/include/asm/atomic64_64.h:101 ./include/linux/atomic/atomic-arch-fallback.h:4296 ./include/linux/atomic/atomic-long.h:1482 ./include/linux/atomic/atomic-instrumented.h:4458 kernel/locking/mutex.c:113) 
[ 16.662951][ T231] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) 
[ 16.662956][ T231] proc_reg_read (fs/proc/inode.c:308 fs/proc/inode.c:320) 
[ 16.662963][ T231] vfs_read (fs/read_write.c:570) 
[ 16.662969][ T231] ? fdget_pos (fs/file.c:1235) 
[ 16.662975][ T231] ? ww_mutex_lock (kernel/locking/mutex.c:759) 
[ 16.662982][ T231] ? kernel_read (fs/read_write.c:553) 
[ 16.662986][ T231] ? __lock_release (kernel/locking/lockdep.c:5536) 
[ 16.662990][ T231] ? __fget_files (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 fs/file.c:1072) 
[ 16.662994][ T231] ? __fget_files (fs/file.c:1075) 
[ 16.663000][ T231] ksys_read (fs/read_write.c:715) 
[ 16.663004][ T231] ? vfs_write (fs/read_write.c:705) 
[ 16.663010][ T231] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 16.663015][ T231] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[   16.663019][  T231] RIP: 0033:0x7fd96debc2cc
[ 16.663023][ T231] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8b f8 ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 7f 8b f8 ff 48
All code
========
   0:	ec                   	in     (%dx),%al
   1:	28 48 89             	sub    %cl,-0x77(%rax)
   4:	54                   	push   %rsp
   5:	24 18                	and    $0x18,%al
   7:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
   c:	89 7c 24 08          	mov    %edi,0x8(%rsp)
  10:	e8 29 8b f8 ff       	call   0xfffffffffff88b3e
  15:	48 8b 54 24 18       	mov    0x18(%rsp),%rdx
  1a:	48 8b 74 24 10       	mov    0x10(%rsp),%rsi
  1f:	41 89 c0             	mov    %eax,%r8d
  22:	8b 7c 24 08          	mov    0x8(%rsp),%edi
  26:	31 c0                	xor    %eax,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 34                	ja     0x66
  32:	44 89 c7             	mov    %r8d,%edi
  35:	48 89 44 24 08       	mov    %rax,0x8(%rsp)
  3a:	e8 7f 8b f8 ff       	call   0xfffffffffff88bbe
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 34                	ja     0x3c
   8:	44 89 c7             	mov    %r8d,%edi
   b:	48 89 44 24 08       	mov    %rax,0x8(%rsp)
  10:	e8 7f 8b f8 ff       	call   0xfffffffffff88b94
  15:	48                   	rex.W
[   16.663026][  T231] RSP: 002b:00007fd96d5b8210 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   16.663031][  T231] RAX: ffffffffffffffda RBX: 00007fd960000b60 RCX: 00007fd96debc2cc
[   16.663033][  T231] RDX: 0000000000000400 RSI: 00007fd960000dc0 RDI: 0000000000000009
[   16.663035][  T231] RBP: 00007fd96dfb45c0 R08: 0000000000000000 R09: 0000000000000000
[   16.663037][  T231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000


Finger prints:
print_report:kasan_report:snmp6_seq_show:seq_read_iter:seq_read