panic: UserChainTarget should never be called. goroutine 1130 gp=0x630e1df31860 m=33 mp=0x630e1e0ad808 [running]: panic({0xd05280?, 0x10526f0?}) GOROOT/src/runtime/panic.go:879 +0x15c fp=0x630e1e4dff00 sp=0x630e1e4dfe50 pc=0x960ac gvisor.dev/gvisor/pkg/tcpip/stack.(*UserChainTarget).Action(...) pkg/tcpip/stack/iptables_targets.go:174 gvisor.dev/gvisor/pkg/sentry/socket/netfilter.(*userChainTarget).Action(0x0?, 0x0?, 0x0?, 0x10?, {0x0?, 0x0?}) :1 +0x30 fp=0x630e1e4dff20 sp=0x630e1e4dff00 pc=0x6ffbf0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkRule(0x2?, 0x1, 0x630e1db3d8c0, {{0x630e1e1b9808, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) pkg/tcpip/stack/iptables.go:774 +0x1b0 fp=0x630e1e4e0130 sp=0x630e1e4dff20 pc=0x5d4ea0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkChain(0x630e1e569c08, 0x1, 0x630e1db3d8c0, {{0x630e1e1b9808, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) pkg/tcpip/stack/iptables.go:705 +0xb0 fp=0x630e1e4e0220 sp=0x630e1e4e0130 pc=0x5d4b20 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).check(0xffffffffffffffff?, {{0x630e1e1b9808, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) pkg/tcpip/stack/iptables.go:650 +0xa0 fp=0x630e1e4e03f0 sp=0x630e1e4e0220 pc=0x5d46e0 gvisor.dev/gvisor/pkg/tcpip/stack.check(0x630e1db3d8c0?, {{0x630e1e1b9808, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) pkg/tcpip/stack/iptables.go:640 +0x58 fp=0x630e1e4e04c0 sp=0x630e1e4e03f0 pc=0x5d45f8 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).CheckInput(0x630e1e569c08, 0x630e1db3d8c0, {0x630e1de5cb68, 0x7}) pkg/tcpip/stack/iptables.go:459 +0x188 fp=0x630e1e4e07f0 sp=0x630e1e4e04c0 pc=0x5d3c48 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).deliverPacketLocally(0x630e1e740008, {0x630e1e37a60e, 0x30, 0x72}, 0x630e1db3d8c0, {0x630e1de5cb68?, 0x5?}) pkg/tcpip/network/ipv6/ipv6.go:1436 +0x88 fp=0x630e1e4e0a50 sp=0x630e1e4e07f0 pc=0x77c5d8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).handleValidatedPacket(0x630e1e740008, {0x630e1e37a60e, 0x30, 0x72}, 0x630e1db3d8c0, {0x630e1de5cb68, 0x7}) pkg/tcpip/network/ipv6/ipv6.go:1425 +0x4b8 fp=0x630e1e4e0d40 sp=0x630e1e4e0a50 pc=0x77c4f8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0x630e1e740008, 0x630e1db3d8c0) pkg/tcpip/network/ipv6/ipv6.go:1195 +0x740 fp=0x630e1e4e12a0 sp=0x630e1e4e0d40 pc=0x77a880 gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0x630e1e7646c8, 0x86dd, 0x630e1db3d8c0) pkg/tcpip/stack/nic.go:781 +0x1a0 fp=0x630e1e4e12e0 sp=0x630e1e4e12a0 pc=0x5e0b80 gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0x630e1e4e1348?, 0x86dd, 0x630e1db3d8c0) pkg/tcpip/link/nested/nested.go:61 +0xa8 fp=0x630e1e4e1320 sp=0x630e1e4e12e0 pc=0x799048 gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*Endpoint).DeliverNetworkPacket(0x630e1dfc03c0, 0x86dd, 0x630e1db3d8c0) pkg/tcpip/link/packetsocket/packetsocket.go:50 +0x3c fp=0x630e1e4e1350 sp=0x630e1e4e1320 pc=0x79a7dc gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x630e1db38480, 0x86dd, 0x630e1db3d8c0) pkg/tcpip/link/channel/channel.go:208 +0x6c fp=0x630e1e4e1390 sp=0x630e1e4e1350 pc=0x79d9dc gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x630e1e5b1660, 0x630e1e678150) pkg/tcpip/link/tun/device.go:279 +0x4a4 fp=0x630e1e4e1540 sp=0x630e1e4e1390 pc=0x7a0194 gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x630e1e24b808?, {0x107ed00, 0x630e1e5c2008}, {{0x10749b8, 0x630e1e6d3008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, ...) pkg/sentry/devices/tundev/tundev.go:176 +0x20c fp=0x630e1e4e1600 sp=0x630e1e4e1540 pc=0xa74c2c gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x630e1e5b15f0, {0x107ed00, 0x630e1e5c2008}, {{0x10749b8, 0x630e1e6d3008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, ...) pkg/sentry/vfs/file_description.go:728 +0x58 fp=0x630e1e4e1680 sp=0x630e1e4e1600 pc=0x416a68 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x630e1e5c2008, 0x630e1e5b15f0, {{0x10749b8, 0x630e1e6d3008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, {0x0?}) pkg/sentry/syscalls/linux/sys_read_write.go:333 +0x70 fp=0x630e1e4e1800 sp=0x630e1e4e1680 pc=0x817490 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x630e1e5c2008, 0xb2?, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) pkg/sentry/syscalls/linux/sys_read_write.go:304 +0x100 fp=0x630e1e4e1940 sp=0x630e1e4e1800 pc=0x816980 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x630e1e5c2008, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:143 +0x4e4 fp=0x630e1e4e1c80 sp=0x630e1e4e1940 pc=0x6a25b4 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x630e1e5c2008, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:323 +0x3c fp=0x630e1e4e1ce0 sp=0x630e1e4e1c80 pc=0x6a33dc gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x630e1e5c2008, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:283 +0x58 fp=0x630e1e4e1d30 sp=0x630e1e4e1ce0 pc=0x6a3108 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x630e1e2b7040?) pkg/sentry/kernel/task_syscall.go:258 +0x238 fp=0x630e1e4e1e10 sp=0x630e1e4e1d30 pc=0x6a2ec8 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x630e1e9c6a20?, 0x630e1e5c2008) pkg/sentry/kernel/task_run.go:258 +0xd04 fp=0x630e1e4e1f10 sp=0x630e1e4e1e10 pc=0x6993a4 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x630e1e5c2008, 0x59) pkg/sentry/kernel/task_run.go:89 +0x1a8 fp=0x630e1e4e1fb0 sp=0x630e1e4e1f10 pc=0x6981f8 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:531 +0x20 fp=0x630e1e4e1fd0 sp=0x630e1e4e1fb0 pc=0x6a1330 runtime.goexit({}) src/runtime/asm_arm64.s:1447 +0x4 fp=0x630e1e4e1fd0 sp=0x630e1e4e1fd0 pc=0x9e984 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 392 pkg/sentry/kernel/task_start.go:531 +0xc0