Extracting prog: 22.195159479s
Minimizing prog: 2m30.31267585s
Simplifying prog options: 0s
Extracting C: 11.526091152s
Simplifying C: 1m48.227486898s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800}}}}}}}, 0x0)

program crashed: panic: UserChainTarget should never be called.
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-syz_emit_ethernet
detailed listing:
executing program 0:
socket$inet6(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800}}}}}}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
detailed listing:
executing program 0:
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800}}}}}}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800}}}}}}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
syz_emit_ethernet(0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
program crashed: panic: UserChainTarget should never be called.
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800}}}}}}}, 0x0)

program crashed: panic: UserChainTarget should never be called.
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800}}}}}}}, 0x0)

program crashed: panic: UserChainTarget should never be called.
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800}}}}}}}, 0x0)

program crashed: panic: UserChainTarget should never be called.
validation run: crashed=true
reproducing took 5m28.914191411s
repro crashed as (corrupted=false):
panic: UserChainTarget should never be called.

goroutine 920 gp=0x2143738450e0 m=6 mp=0x2143731c5808 [running]:
panic({0x12c9940?, 0x161c620?})
	GOROOT/src/runtime/panic.go:879 +0x16f fp=0x2143735e9f58 sp=0x2143735e9ea8 pc=0x48c52f
gvisor.dev/gvisor/pkg/tcpip/stack.(*UserChainTarget).Action(...)
	pkg/tcpip/stack/iptables_targets.go:174
gvisor.dev/gvisor/pkg/sentry/socket/netfilter.(*userChainTarget).Action(0x0?, 0x0?, 0x0?, 0x10?, {0x0?, 0x0?})
	<autogenerated>:1 +0x25 fp=0x2143735e9f78 sp=0x2143735e9f58 pc=0xbc3e85
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkRule(0x0?, 0x1, 0x214373f5e2c0, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...)
	pkg/tcpip/stack/iptables.go:774 +0x282 fp=0x2143735ea188 sp=0x2143735e9f78 pc=0xa6d982
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkChain(0x214373e53c08, 0x1, 0x214373f5e2c0, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...)
	pkg/tcpip/stack/iptables.go:705 +0x12b fp=0x2143735ea278 sp=0x2143735ea188 pc=0xa6d42b
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).check(0x214373e53c08?, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...)
	pkg/tcpip/stack/iptables.go:650 +0xf7 fp=0x2143735ea448 sp=0x2143735ea278 pc=0xa6ce77
gvisor.dev/gvisor/pkg/tcpip/stack.check(0xaa00000000000000?, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...)
	pkg/tcpip/stack/iptables.go:640 +0xa5 fp=0x2143735ea510 sp=0x2143735ea448 pc=0xa6cce5
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).CheckInput(0x214373e53c08, 0x214373f5e2c0, {0x2143733548e8, 0x7})
	pkg/tcpip/stack/iptables.go:459 +0x26f fp=0x2143735ea840 sp=0x2143735ea510 pc=0xa6bd2f
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).deliverPacketLocally(0x214373599508, {0x21437410030e, 0x28, 0x72}, 0x214373f5e2c0, {0x2143733548e8?, 0x0?})
	pkg/tcpip/network/ipv6/ipv6.go:1436 +0xbd fp=0x2143735eaa98 sp=0x2143735ea840 pc=0xc4e1fd
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).handleValidatedPacket(0x214373599508, {0x21437410030e, 0x28, 0x72}, 0x214373f5e2c0, {0x2143733548e8, 0x7})
	pkg/tcpip/network/ipv6/ipv6.go:1425 +0x497 fp=0x2143735ead80 sp=0x2143735eaa98 pc=0xc4e077
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0x214373599508, 0x214373f5e2c0)
	pkg/tcpip/network/ipv6/ipv6.go:1195 +0x679 fp=0x2143735eb2e0 sp=0x2143735ead80 pc=0xc4c499
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0x214373a346c8, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/stack/nic.go:781 +0x10c fp=0x2143735eb318 sp=0x2143735eb2e0 pc=0xa7b00c
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0x7c5fa7?, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/link/nested/nested.go:61 +0x79 fp=0x2143735eb350 sp=0x2143735eb318 pc=0xc70099
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*Endpoint).DeliverNetworkPacket(0x214373e4a5a0, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/link/packetsocket/packetsocket.go:50 +0x38 fp=0x2143735eb378 sp=0x2143735eb350 pc=0xc717b8
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x214373410900, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/link/channel/channel.go:208 +0x6a fp=0x2143735eb3b0 sp=0x2143735eb378 pc=0xc74c2a
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x2143747002e0, 0x21437358ec00)
	pkg/tcpip/link/tun/device.go:279 +0x5ad fp=0x2143735eb560 sp=0x2143735eb3b0 pc=0xc7764d
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x2143730e4508?, {0x164c820, 0x214373ece588}, {{0x1641ed8, 0x214373c50008}, {0x0, 0x1, 0x200000000200, 0x4a}, {0x0}}, ...)
	pkg/sentry/devices/tundev/tundev.go:176 +0x2d7 fp=0x2143735eb628 sp=0x2143735eb560 pc=0xfe6557
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x214374700270, {0x164c820, 0x214373ece588}, {{0x1641ed8, 0x214373c50008}, {0x0, 0x1, 0x200000000200, 0x4a}, {0x0}}, ...)
	pkg/sentry/vfs/file_description.go:728 +0x89 fp=0x2143735eb6a8 sp=0x2143735eb628 pc=0x8761e9
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x214373ece588, 0x214374700270, {{0x1641ed8, 0x214373c50008}, {0x0, 0x1, 0x200000000200, 0x4a}, {0x0}}, {0x0})
	pkg/sentry/syscalls/linux/sys_read_write.go:333 +0xaf fp=0x2143735eb848 sp=0x2143735eb6a8 pc=0xd0ce2f
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x214373ece588, 0xd54e1d?, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_read_write.go:304 +0x1d1 fp=0x2143735eb988 sp=0x2143735eb848 pc=0xd0c0d1
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x214373ece588, 0x1, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x67d fp=0x2143735ebcc8 sp=0x2143735eb988 pc=0xb59cdd
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x214373ece588, 0x1, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x4b fp=0x2143735ebd20 sp=0x2143735ebcc8 pc=0xb5ae6b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x214373ece588, 0x1, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x68 fp=0x2143735ebd70 sp=0x2143735ebd20 pc=0xb5ab88
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x214373952d10?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0x2143735ebe48 sp=0x2143735ebd70 pc=0xb5a905
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x214373b15170?, 0x214373ece588)
	pkg/sentry/kernel/task_run.go:258 +0xf9c fp=0x2143735ebf30 sp=0x2143735ebe48 pc=0xb4f77c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x214373ece588, 0x56)
	pkg/sentry/kernel/task_run.go:89 +0x202 fp=0x2143735ebfc0 sp=0x2143735ebf30 pc=0xb4e2e2
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:531 +0x1b fp=0x2143735ebfe0 sp=0x2143735ebfc0 pc=0xb587fb
runtime.goexit({})
	src/runtime/asm_amd64.s:1771 +0x1 fp=0x2143735ebfe8 sp=0x2143735ebfe0 pc=0x4951e1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 713
	pkg/sentry/kernel/task_start.go:531 +0xc5

final repro crashed as (corrupted=false):
panic: UserChainTarget should never be called.

goroutine 920 gp=0x2143738450e0 m=6 mp=0x2143731c5808 [running]:
panic({0x12c9940?, 0x161c620?})
	GOROOT/src/runtime/panic.go:879 +0x16f fp=0x2143735e9f58 sp=0x2143735e9ea8 pc=0x48c52f
gvisor.dev/gvisor/pkg/tcpip/stack.(*UserChainTarget).Action(...)
	pkg/tcpip/stack/iptables_targets.go:174
gvisor.dev/gvisor/pkg/sentry/socket/netfilter.(*userChainTarget).Action(0x0?, 0x0?, 0x0?, 0x10?, {0x0?, 0x0?})
	<autogenerated>:1 +0x25 fp=0x2143735e9f78 sp=0x2143735e9f58 pc=0xbc3e85
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkRule(0x0?, 0x1, 0x214373f5e2c0, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...)
	pkg/tcpip/stack/iptables.go:774 +0x282 fp=0x2143735ea188 sp=0x2143735e9f78 pc=0xa6d982
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkChain(0x214373e53c08, 0x1, 0x214373f5e2c0, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...)
	pkg/tcpip/stack/iptables.go:705 +0x12b fp=0x2143735ea278 sp=0x2143735ea188 pc=0xa6d42b
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).check(0x214373e53c08?, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...)
	pkg/tcpip/stack/iptables.go:650 +0xf7 fp=0x2143735ea448 sp=0x2143735ea278 pc=0xa6ce77
gvisor.dev/gvisor/pkg/tcpip/stack.check(0xaa00000000000000?, {{0x214373aee408, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...)
	pkg/tcpip/stack/iptables.go:640 +0xa5 fp=0x2143735ea510 sp=0x2143735ea448 pc=0xa6cce5
gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).CheckInput(0x214373e53c08, 0x214373f5e2c0, {0x2143733548e8, 0x7})
	pkg/tcpip/stack/iptables.go:459 +0x26f fp=0x2143735ea840 sp=0x2143735ea510 pc=0xa6bd2f
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).deliverPacketLocally(0x214373599508, {0x21437410030e, 0x28, 0x72}, 0x214373f5e2c0, {0x2143733548e8?, 0x0?})
	pkg/tcpip/network/ipv6/ipv6.go:1436 +0xbd fp=0x2143735eaa98 sp=0x2143735ea840 pc=0xc4e1fd
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).handleValidatedPacket(0x214373599508, {0x21437410030e, 0x28, 0x72}, 0x214373f5e2c0, {0x2143733548e8, 0x7})
	pkg/tcpip/network/ipv6/ipv6.go:1425 +0x497 fp=0x2143735ead80 sp=0x2143735eaa98 pc=0xc4e077
gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0x214373599508, 0x214373f5e2c0)
	pkg/tcpip/network/ipv6/ipv6.go:1195 +0x679 fp=0x2143735eb2e0 sp=0x2143735ead80 pc=0xc4c499
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0x214373a346c8, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/stack/nic.go:781 +0x10c fp=0x2143735eb318 sp=0x2143735eb2e0 pc=0xa7b00c
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0x7c5fa7?, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/link/nested/nested.go:61 +0x79 fp=0x2143735eb350 sp=0x2143735eb318 pc=0xc70099
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*Endpoint).DeliverNetworkPacket(0x214373e4a5a0, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/link/packetsocket/packetsocket.go:50 +0x38 fp=0x2143735eb378 sp=0x2143735eb350 pc=0xc717b8
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x214373410900, 0x86dd, 0x214373f5e2c0)
	pkg/tcpip/link/channel/channel.go:208 +0x6a fp=0x2143735eb3b0 sp=0x2143735eb378 pc=0xc74c2a
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x2143747002e0, 0x21437358ec00)
	pkg/tcpip/link/tun/device.go:279 +0x5ad fp=0x2143735eb560 sp=0x2143735eb3b0 pc=0xc7764d
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x2143730e4508?, {0x164c820, 0x214373ece588}, {{0x1641ed8, 0x214373c50008}, {0x0, 0x1, 0x200000000200, 0x4a}, {0x0}}, ...)
	pkg/sentry/devices/tundev/tundev.go:176 +0x2d7 fp=0x2143735eb628 sp=0x2143735eb560 pc=0xfe6557
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x214374700270, {0x164c820, 0x214373ece588}, {{0x1641ed8, 0x214373c50008}, {0x0, 0x1, 0x200000000200, 0x4a}, {0x0}}, ...)
	pkg/sentry/vfs/file_description.go:728 +0x89 fp=0x2143735eb6a8 sp=0x2143735eb628 pc=0x8761e9
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x214373ece588, 0x214374700270, {{0x1641ed8, 0x214373c50008}, {0x0, 0x1, 0x200000000200, 0x4a}, {0x0}}, {0x0})
	pkg/sentry/syscalls/linux/sys_read_write.go:333 +0xaf fp=0x2143735eb848 sp=0x2143735eb6a8 pc=0xd0ce2f
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x214373ece588, 0xd54e1d?, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/syscalls/linux/sys_read_write.go:304 +0x1d1 fp=0x2143735eb988 sp=0x2143735eb848 pc=0xd0c0d1
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x214373ece588, 0x1, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x67d fp=0x2143735ebcc8 sp=0x2143735eb988 pc=0xb59cdd
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x214373ece588, 0x1, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x4b fp=0x2143735ebd20 sp=0x2143735ebcc8 pc=0xb5ae6b
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x214373ece588, 0x1, {{0xc8}, {0x200000000200}, {0x4a}, {0x0}, {0x0}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x68 fp=0x2143735ebd70 sp=0x2143735ebd20 pc=0xb5ab88
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x214373952d10?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0x2143735ebe48 sp=0x2143735ebd70 pc=0xb5a905
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x214373b15170?, 0x214373ece588)
	pkg/sentry/kernel/task_run.go:258 +0xf9c fp=0x2143735ebf30 sp=0x2143735ebe48 pc=0xb4f77c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x214373ece588, 0x56)
	pkg/sentry/kernel/task_run.go:89 +0x202 fp=0x2143735ebfc0 sp=0x2143735ebf30 pc=0xb4e2e2
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:531 +0x1b fp=0x2143735ebfe0 sp=0x2143735ebfc0 pc=0xb587fb
runtime.goexit({})
	src/runtime/asm_amd64.s:1771 +0x1 fp=0x2143735ebfe8 sp=0x2143735ebfe0 pc=0x4951e1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 713
	pkg/sentry/kernel/task_start.go:531 +0xc5