ip6_tables: ip6tables: counters copy to user failed while replacing table
------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:27!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 3632 Comm: systemd-journal Not tainted 4.14.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88809465c540 task.stack: ffff888094660000
RIP: 0010:__phys_addr+0x80/0xe0 arch/x86/mm/physaddr.c:27
RSP: 0018:ffff888094667d08 EFLAGS: 00010297
RAX: ffff88809465c540 RBX: 0770707707700770 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff88809465cdc8 RDI: 0770707707700770
RBP: 0770707787700770 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0770e7f707700770
R13: ffff888094667d60 R14: 0000000000000000 R15: 0000000000000286
FS:  00007f26ea10c8c0(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2fc23000 CR3: 0000000094490000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:600 [inline]
 qlink_to_cache mm/kasan/quarantine.c:127 [inline]
 qlist_free_all+0xbb/0x140 mm/kasan/quarantine.c:163
 quarantine_reduce+0x140/0x170 mm/kasan/quarantine.c:259
 kasan_kmalloc+0x95/0xe0 mm/kasan/kasan.c:536
 slab_post_alloc_hook mm/slab.h:442 [inline]
 slab_alloc mm/slab.c:3390 [inline]
 kmem_cache_alloc+0x114/0x770 mm/slab.c:3550
 prepare_creds+0x37/0x380 kernel/cred.c:255
 SYSC_faccessat fs/open.c:365 [inline]
 SyS_faccessat fs/open.c:353 [inline]
 SYSC_access fs/open.c:450 [inline]
 SyS_access+0x76/0x680 fs/open.c:448
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x7f26e93c89c7
RSP: 002b:00007fffeab4f958 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
RAX: ffffffffffffffda RBX: 00007fffeab52980 RCX: 00007f26e93c89c7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055e9499689a3
RBP: 00007fffeab4faa0 R08: 000055e94995e3e5 R09: 0000000000000018
R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 000055e94b4f28c0 R15: 00007fffeab4ff90
Code: c2 7f 04 84 d2 75 26 0f b6 0d 46 58 68 07 4c 89 e0 48 d3 e8 48 85 c0 75 0d e8 ad 8a 30 00 4c 89 e0 5b 5d 41 5c c3 e8 a0 8a 30 00 <0f> 0b 48 c7 c7 49 13 92 88 e8 12 e0 59 00 eb cc e8 8b 8a 30 00 
RIP: __phys_addr+0x80/0xe0 arch/x86/mm/physaddr.c:27 RSP: ffff888094667d08
---[ end trace 5a6c338c520bf79f ]---