======================================
| xx__-> [ 1283.115461][    C2] ==================================================================
| [ 1283.115714][    C2] BUG: KASAN: slab-out-of-bounds in tcp_v6_send_response (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/net/inet_sock.h:411 net/ipv6/tcp_ipv6.c:983)
| [ 1283.115929][    C2] Read of size 8 at addr ff1100000f6dc578 by task swapper/2/0
| [ 1283.116141][    C2]
[ 1283.116219][    C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1283.116221][    C2] Call Trace:
[ 1283.116222][    C2]  <IRQ>
[ 1283.116224][    C2]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[ 1283.116229][    C2]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[ 1283.116233][    C2]  print_report (mm/kasan/report.c:482)
[ 1283.116235][    C2]  ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54)
[ 1283.116238][    C2]  ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[ 1283.116239][    C2]  kasan_report (mm/kasan/report.c:595)
[ 1283.116242][    C2]  ? tcp_v6_send_response (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/net/inet_sock.h:411 net/ipv6/tcp_ipv6.c:983)
[ 1283.116244][    C2]  ? tcp_v6_send_response (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/net/inet_sock.h:411 net/ipv6/tcp_ipv6.c:983)
[ 1283.116251][    C2]  kasan_check_range (mm/kasan/generic.c:186 mm/kasan/generic.c:200)
[ 1283.116253][    C2]  ? make_kuid (kernel/user_namespace.c:340 kernel/user_namespace.c:425)
[ 1283.116255][    C2]  tcp_v6_send_response (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/net/inet_sock.h:411 net/ipv6/tcp_ipv6.c:983)
[ 1283.116259][    C2]  ? tcp_v6_send_synack (./include/net/inet_sock.h:338 (discriminator 1))
[ 1283.116261][    C2]  ? mark_usage (kernel/locking/lockdep.c:4690)
[ 1283.116265][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[ 1283.116266][    C2]  ? tcp_v6_send_reset (./include/linux/rcupdate.h:309 (discriminator 2) ./include/linux/rcupdate.h:849 (discriminator 2) net/ipv6/tcp_ipv6.c:1043 (discriminator 2))
[ 1283.116268][    C2]  tcp_v6_send_reset (net/ipv6/tcp_ipv6.c:1131 (discriminator 1))
[ 1283.116271][    C2]  ? mqueue_poll_file (ipc/mqueue.c:671)
[ 1283.116275][    C2]  ? trace_fib6_table_lookup (./include/trace/events/fib6.h:13 (discriminator 22))
[ 1283.116278][    C2]  ? tcp_v6_reqsk_send_ack (./include/linux/skbuff.h:3171)
[ 1283.116279][    C2]  ? tcp_timewait_state_process (net/ipv4/tcp_minisocks.c:121 (discriminator 1))
[ 1283.116283][    C2]  ? ip6_pol_route (./include/linux/rcupdate.h:882 net/ipv6/route.c:2339)
[ 1283.116285][    C2]  ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1))
[ 1283.116288][    C2]  tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1996)
[ 1283.116293][    C2]  ? __lock_acquire (kernel/locking/lockdep.c:5119 (discriminator 6))
[ 1283.116296][    C2]  ? tcp_v6_syn_recv_sock (./include/net/sock.h:1574)
[ 1283.116298][    C2]  ? ipv6_raw_deliver (./include/linux/rcupdate.h:882 net/ipv6/raw.c:207)
[ 1283.116301][    C2]  ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:479)
[ 1283.116304][    C2]  ip6_input_finish (net/ipv6/ip6_input.c:534)
[ 1283.116305][    C2]  ip6_input (./include/linux/netfilter.h:325 ./include/linux/netfilter.h:319 net/ipv6/ip6_input.c:545)
[ 1283.116307][    C2]  ? ip6_input_finish (net/ipv6/ip6_input.c:527 (discriminator 46))
[ 1283.116308][    C2]  ? ip6_rcv_core (./include/linux/skbuff.h:3432 net/ipv6/ip6_input.c:332)
[ 1283.116310][    C2]  ipv6_rcv (./include/net/dst.h:480 (discriminator 4) net/ipv6/ip6_input.c:119 (discriminator 4) ./include/linux/netfilter.h:325 (discriminator 4) ./include/linux/netfilter.h:319 (discriminator 4) net/ipv6/ip6_input.c:351 (discriminator 4))
[ 1283.116311][    C2]  ? ip6_rcv_core (net/ipv6/ip6_input.c:211 (discriminator 96))
[ 1283.116313][    C2]  ? mark_usage (kernel/locking/lockdep.c:4690)
[ 1283.116315][    C2]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[ 1283.116317][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6726 (discriminator 2))
[ 1283.116320][    C2]  __netif_receive_skb_one_core (net/core/dev.c:6264)
[ 1283.116322][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[ 1283.116323][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6726 (discriminator 2))
[ 1283.116325][    C2]  ? __netif_receive_skb_list_core (net/core/dev.c:6310)
[ 1283.116327][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[ 1283.116330][    C2]  process_backlog (net/core/dev.c:6728)
[ 1283.116332][    C2]  __napi_poll (net/core/dev.c:7787)
[ 1283.116335][    C2]  net_rx_action (net/core/dev.c:7850 net/core/dev.c:8007)
[ 1283.116338][    C2]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[ 1283.116339][    C2]  ? __napi_poll (./include/net/gro.h:507)
[ 1283.116341][    C2]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[ 1283.116344][    C2]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:220 (discriminator 1) kernel/locking/spinlock.c:229 (discriminator 1))
[ 1283.116348][    C2]  ? run_timer_softirq (kernel/time/timer.c:2387 kernel/time/timer.c:2395 kernel/time/timer.c:2403)
[ 1283.116351][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[ 1283.116352][    C2]  handle_softirqs (kernel/softirq.c:645)
[ 1283.116355][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[ 1283.116357][    C2]  ? _local_bh_enable (kernel/softirq.c:428 (discriminator 1))
[ 1283.116359][    C2]  __irq_exit_rcu (kernel/softirq.c:679 kernel/softirq.c:519 kernel/softirq.c:767)
[ 1283.116361][    C2]  irq_exit_rcu (kernel/softirq.c:784)
[ 1283.116362][    C2]  sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1062 (discriminator 37) arch/x86/kernel/apic/apic.c:1062 (discriminator 37))
[ 1283.116365][    C2]  </IRQ>
[ 1283.116365][    C2]  <TASK>
[ 1283.116366][    C2]  asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:674)
[ 1283.116369][    C2] RIP: 0010:pv_native_safe_halt (./arch/x86/include/asm/irqflags.h:48 arch/x86/kernel/paravirt.c:63)
[ 1283.116371][    C2] Code: 48 8b 3d 94 e2 67 02 e8 1f 00 00 00 48 2b 05 58 33 a0 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d 13 56 0d 00 fb f4 <c3> 0f 1f 40 d6 48 83 ec 20 8b 17 49 89 f8 83 e2 fe 41 89 d2 0f 01
All code
========
   0:	48 8b 3d 94 e2 67 02 	mov    0x267e294(%rip),%rdi        # 0x267e29b
   7:	e8 1f 00 00 00       	call   0x2b
   c:	48 2b 05 58 33 a0 00 	sub    0xa03358(%rip),%rax        # 0xa0336b
  13:	c3                   	ret
  14:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  1b:	f3 0f 1e fa          	endbr64
  1f:	eb 07                	jmp    0x28
  21:	0f 00 2d 13 56 0d 00 	verw   0xd5613(%rip)        # 0xd563b
  28:	fb                   	sti
  29:	f4                   	hlt
  2a:*	c3                   	ret		<-- trapping instruction
  2b:	0f 1f 40 d6          	nopl   -0x2a(%rax)
  2f:	48 83 ec 20          	sub    $0x20,%rsp
  33:	8b 17                	mov    (%rdi),%edx
  35:	49 89 f8             	mov    %rdi,%r8
  38:	83 e2 fe             	and    $0xfffffffe,%edx
  3b:	41 89 d2             	mov    %edx,%r10d
  3e:	0f                   	.byte 0xf
  3f:	01                   	.byte 0x1

Code starting with the faulting instruction
===========================================
   0:	c3                   	ret
   1:	0f 1f 40 d6          	nopl   -0x2a(%rax)
   5:	48 83 ec 20          	sub    $0x20,%rsp
   9:	8b 17                	mov    (%rdi),%edx
   b:	49 89 f8             	mov    %rdi,%r8
   e:	83 e2 fe             	and    $0xfffffffe,%edx
  11:	41 89 d2             	mov    %edx,%r10d
  14:	0f                   	.byte 0xf
  15:	01                   	.byte 0x1
[ 1283.116373][    C2] RSP: 0018:ffa0000000157e00 EFLAGS: 00000282
[ 1283.116377][    C2] RAX: 0000000004bf0da9 RBX: ff11000001c1c740 RCX: ffffffffab706247
[ 1283.116378][    C2] RDX: ff11000001c1c740 RSI: ffffffffae9116a7 RDI: ffffffffae2949e0
[ 1283.116379][    C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1283.116380][    C2] R10: 0000000000000002 R11: 0000000000000001 R12: 1ff400000002afc3
[ 1283.116381][    C2] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[ 1283.116382][    C2]  ? cpuidle_idle_call.constprop.0 (kernel/sched/idle.c:199)
[ 1283.116386][    C2]  default_idle (./arch/x86/include/asm/paravirt.h:62 arch/x86/kernel/process.c:768)
[ 1283.116388][    C2]  default_idle_call (kernel/sched/idle.c:122)
[ 1283.116389][    C2]  cpuidle_idle_call.constprop.0 (kernel/sched/idle.c:199)
[ 1283.116391][    C2]  ? arch_cpu_idle_exit+0x40/0x40
[ 1283.116393][    C2]  ? mark_tsc_async_resets (arch/x86/kernel/tsc_sync.c:49)
[ 1283.116396][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[ 1283.116397][    C2]  do_idle (kernel/sched/idle.c:355)
[ 1283.116399][    C2]  cpu_startup_entry (kernel/sched/idle.c:454)
[ 1283.116401][    C2]  start_secondary (arch/x86/kernel/smpboot.c:312)
[ 1283.116403][    C2]  ? set_cpu_sibling_map (arch/x86/kernel/smpboot.c:733 (discriminator 4))


Finger prints:
print_report:kasan_report:kasan_check_range:tcp_v6_send_response:tcp_v6_send_reset