ip6_tables: ip6tables: counters copy to user failed while replacing table kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 3702 Comm: kworker/0:0 Not tainted 4.14.172-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: krxrpcd rxrpc_process_call task: ffff88819c462480 task.stack: ffff88821a830000 RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline] RIP: 0010:atomic_read arch/x86/include/asm/atomic.h:27 [inline] RIP: 0010:refcount_read include/linux/refcount.h:42 [inline] RIP: 0010:rxrpc_get_skb+0x5e/0x350 net/rxrpc/skbuff.c:52 RSP: 0018:ffff88821a837c50 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 000000000000001c RSI: 000000000000000a RDI: 00000000000000e4 RBP: 000000000000000a R08: 0000000000000938 R09: ffffffff8a060280 R10: ffff88819c462d50 R11: ffff88819c462480 R12: 0000000000000000 R13: ffff888078e70650 R14: ffffffff8b04e520 R15: ffff888078e70518 FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000021000000 CR3: 000000019810e000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rxrpc_resend net/rxrpc/call_event.c:319 [inline] rxrpc_process_call+0x54f/0x1135 net/rxrpc/call_event.c:407 process_one_work+0x813/0x1540 kernel/workqueue.c:2114 worker_thread+0x5d1/0x1070 kernel/workqueue.c:2248 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Code: c0 e0 e4 04 8b 4c 0f 46 f0 e8 1f ca 9d fb f0 45 0f c1 26 48 8d bb e4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 RIP: __read_once_size include/linux/compiler.h:183 [inline] RSP: ffff88821a837c50 RIP: atomic_read arch/x86/include/asm/atomic.h:27 [inline] RSP: ffff88821a837c50 RIP: refcount_read include/linux/refcount.h:42 [inline] RSP: ffff88821a837c50 RIP: rxrpc_get_skb+0x5e/0x350 net/rxrpc/skbuff.c:52 RSP: ffff88821a837c50 ---[ end trace a5204543fe150504 ]---