panic: UserChainTarget should never be called. goroutine 22899 gp=0x67df819aeb40 m=54 mp=0x67df81857808 [running]: panic({0x1bd63a0?, 0x1f2a9c0?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/go/src/runtime/panic.go:879 +0x15c fp=0x67df82809f00 sp=0x67df82809e50 pc=0x9667c gvisor.dev/gvisor/pkg/tcpip/stack.(*UserChainTarget).Action(...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables_targets.go:174 gvisor.dev/gvisor/pkg/sentry/socket/netfilter.(*userChainTarget).Action(0x0?, 0x0?, 0x0?, 0x10?, {0x0?, 0x0?}) :1 +0x80 fp=0x67df82809f20 sp=0x67df82809f00 pc=0xebbda0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkRule(0x67df8167ba00?, 0x1, 0x67df807fd4a0, {{0x67df81fba008, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:774 +0x3d0 fp=0x67df8280a130 sp=0x67df82809f20 pc=0xbedaf0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkChain(0x67df82102c08, 0x1, 0x67df807fd4a0, {{0x67df81fba008, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:705 +0x16c fp=0x67df8280a220 sp=0x67df8280a130 pc=0xbed25c gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).check(0x67df82102c08?, {{0x67df81fba008, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:650 +0x114 fp=0x67df8280a3f0 sp=0x67df8280a220 pc=0xbec9c4 gvisor.dev/gvisor/pkg/tcpip/stack.check(0x80fe?, {{0x67df81fba008, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:640 +0xc4 fp=0x67df8280a4c0 sp=0x67df8280a3f0 pc=0xbec864 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).CheckInput(0x67df82102c08, 0x67df807fd4a0, {0x67df81834b88, 0x7}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:459 +0x2b8 fp=0x67df8280a7f0 sp=0x67df8280a4c0 pc=0xbeb3c8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).deliverPacketLocally(0x67df80c27508, {0x67df80e4e88e, 0x28, 0x72}, 0x67df807fd4a0, {0x67df81834b88?, 0x5?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1436 +0x168 fp=0x67df8280aa50 sp=0x67df8280a7f0 pc=0x1027738 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).handleValidatedPacket(0x67df80c27508, {0x67df80e4e88e, 0x28, 0x72}, 0x67df807fd4a0, {0x67df81834b88, 0x7}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1425 +0x1148 fp=0x67df8280ad40 sp=0x67df8280aa50 pc=0x10270f8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0x67df80c27508, 0x67df807fd4a0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1195 +0x1d80 fp=0x67df8280b2a0 sp=0x67df8280ad40 pc=0x10205f0 gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0x67df82422b48, 0x86dd, 0x67df807fd4a0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/nic.go:781 +0xa00 fp=0x67df8280b2e0 sp=0x67df8280b2a0 pc=0xc0e280 gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0x67df81561348?, 0x86dd, 0x67df807fd4a0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/nested/nested.go:61 +0x154 fp=0x67df8280b320 sp=0x67df8280b2e0 pc=0x1070c44 gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*Endpoint).DeliverNetworkPacket(0x67df81e9a410, 0x86dd, 0x67df807fd4a0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/packetsocket/packetsocket.go:50 +0xa4 fp=0x67df8280b350 sp=0x67df8280b320 pc=0x1074794 gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x67df81c9a900, 0x86dd, 0x67df807fd4a0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/channel/channel.go:208 +0x18c fp=0x67df8280b390 sp=0x67df8280b350 pc=0x107c3ac gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x67df82392fe0, 0x67df817aecf0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/tun/device.go:279 +0x17f8 fp=0x67df8280b540 sp=0x67df8280b390 pc=0x1083238 gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x1bd6420?, {0x1f583a0, 0x67df8293ec88}, {{0x1f4d9f8, 0x67df81ffe008}, {0x0, 0x1, 0x20000280, 0x4a}, {0x0}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/devices/tundev/tundev.go:176 +0x828 fp=0x67df8280b600 sp=0x67df8280b540 pc=0x1774b18 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x67df82392f70, {0x1f583a0, 0x67df8293ec88}, {{0x1f4d9f8, 0x67df81ffe008}, {0x0, 0x1, 0x20000280, 0x4a}, {0x0}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:728 +0x174 fp=0x67df8280b680 sp=0x67df8280b600 pc=0x707354 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x67df8293ec88, 0x67df82392f70, {{0x1f4d9f8, 0x67df81ffe008}, {0x0, 0x1, 0x20000280, 0x4a}, {0x0}}, {0x3dc?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_read_write.go:333 +0xdc fp=0x67df8280b800 sp=0x67df8280b680 pc=0x11b677c gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x67df8293ec88, 0x405?, {{0xc8}, {0x20000280}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_read_write.go:304 +0x4c0 fp=0x67df8280b940 sp=0x67df8280b800 pc=0x11b4d80 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x67df8293ec88, 0x40, {{0xc8}, {0x20000280}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0x1230 fp=0x67df8280bc80 sp=0x67df8280b940 pc=0xe08340 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x67df8293ec88, 0x40, {{0xc8}, {0x20000280}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xb0 fp=0x67df8280bce0 sp=0x67df8280bc80 pc=0xe0b550 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x67df8293ec88, 0x40, {{0xc8}, {0x20000280}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0x14c fp=0x67df8280bd30 sp=0x67df8280bce0 pc=0xe0a59c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x67df81637450?) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x8cc fp=0x67df8280be10 sp=0x67df8280bd30 pc=0xe09d6c gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x67df823dd830?, 0x67df8293ec88) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x2fec fp=0x67df8280bf10 sp=0x67df8280be10 pc=0xdea75c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x67df8293ec88, 0x128b) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x56c fp=0x67df8280bfb0 sp=0x67df8280bf10 pc=0xde6e6c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x20 fp=0x67df8280bfd0 sp=0x67df8280bfb0 pc=0xe04b80 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x67df8280bfd0 sp=0x67df8280bfd0 pc=0x9ef54 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 22915 /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x16c