Extracting prog: 1m35.018578519s
Minimizing prog: 19m34.933540693s
Simplifying prog options: 2m15.034763703s
Extracting C: 26.836591984s
Simplifying C: 0s


extracting reproducer from 70 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll-bpf$MAP_CREATE-socket$nl_generic-sendmsg$nl_generic-socket-memfd_create-sendmsg$nl_route
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000180)='\x00', 0x2)
sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
program crashed: WARNING in ipip_tunnel_xmit
single: successfully extracted reproducer
found reproducer with 19 syscalls
minimizing guilty program
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll-bpf$MAP_CREATE-socket$nl_generic-sendmsg$nl_generic-socket-memfd_create
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000180)='\x00', 0x2)

program crashed: WARNING in ipip_tunnel_xmit
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll-bpf$MAP_CREATE-socket$nl_generic-sendmsg$nl_generic-socket
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket(0x10, 0x3, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll-bpf$MAP_CREATE-socket$nl_generic-sendmsg$nl_generic
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll-bpf$MAP_CREATE-socket$nl_generic
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: WARNING in ipip_tunnel_xmit
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll-bpf$MAP_CREATE
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50)

program crashed: WARNING in ipip_tunnel_xmit
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00'})
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, 0x0, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r1=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r1, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$xdp-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r1=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0xa, r1, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r1=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r1, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, 0x0, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00'})
bind$xdp(r0, 0x0, 0x0)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=33.092793682s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
program did not crash
simplifying guilty program options
testing program (duration=33.092793682s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
extracting C reproducer
testing compiled C program (duration=33.092793682s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
program did not crash
testing program (duration=33.092793682s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
extracting C reproducer
testing compiled C program (duration=33.092793682s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
program did not crash
testing program (duration=33.092793682s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
validation run: crashed=true
testing program (duration=33.092793682s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
validation run: crashed=true
testing program (duration=33.092793682s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-ioctl$PAGEMAP_SCAN-openat$vicodec1-ppoll
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x32, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x40, 0x0, 0x0, 0x3, 0x0, 0x1b, 0x6e, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

program crashed: WARNING in ipip_tunnel_xmit
validation run: crashed=true
reproducing took 25m53.393210651s
repro crashed as (corrupted=false):
------------[ cut here ]------------
len > ((int)(~0U >> 1))
WARNING: ./include/linux/skbuff.h:2864 at pskb_may_pull_reason include/linux/skbuff.h:2864 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at ipip_tunnel_xmit+0x3d7/0x4d0 net/ipv4/ipip.c:289, CPU#2: syz.0.17/5921
Modules linked in:
CPU: 2 UID: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:pskb_may_pull_reason include/linux/skbuff.h:2864 [inline]
RIP: 0010:pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline]
RIP: 0010:pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline]
RIP: 0010:pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline]
RIP: 0010:ipip_tunnel_xmit+0x3d7/0x4d0 net/ipv4/ipip.c:289
Code: 5e 41 5f e9 9b e4 7a 01 e8 16 e5 c3 f7 89 e9 4c 89 e6 48 89 df 49 8d 94 24 4c 0f 00 00 e8 81 e9 fc ff eb ca e8 fa e4 c3 f7 90 <0f> 0b 90 e9 49 fd ff ff e8 ec e4 c3 f7 44 8b 2c 24 89 ef 44 89 ee
RSP: 0018:ffffc90003a875b0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888036305cc0 RCX: ffffffff8a468db0
RDX: ffff8880277a0000 RSI: ffffffff8a469066 RDI: ffff8880277a0000
RBP: 00000000ffffff40 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000ffffff40 R11: 0000000000000000 R12: ffff888031798000
R13: 0000000000000000 R14: ffff888036305d74 R15: ffffffffffffff40
FS:  000055557354b500(0000) GS:ffff8880d5dd6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000000c0 CR3: 000000003ce12000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 __netdev_start_xmit include/linux/netdevice.h:5397 [inline]
 netdev_start_xmit include/linux/netdevice.h:5406 [inline]
 __dev_direct_xmit+0x5b3/0x750 net/core/dev.c:4942
 __xsk_generic_xmit net/xdp/xsk.c:1256 [inline]
 xsk_generic_xmit+0x2267/0x44a0 net/xdp/xsk.c:1312
 xsk_poll+0x2a5/0x840 net/xdp/xsk.c:1440
 sock_poll+0x160/0x510 net/socket.c:1514
 vfs_poll include/linux/poll.h:82 [inline]
 do_pollfd fs/select.c:877 [inline]
 do_poll fs/select.c:920 [inline]
 do_sys_poll+0x6e5/0xe90 fs/select.c:1015
 __do_sys_ppoll fs/select.c:1112 [inline]
 __se_sys_ppoll fs/select.c:1092 [inline]
 __x64_sys_ppoll+0x2b5/0x350 fs/select.c:1092
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd3cc39e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe3ac99378 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
RAX: ffffffffffffffda RBX: 00007fd3cc625fa0 RCX: 00007fd3cc39e0d9
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000800
RBP: 00007fd3cc435024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd3cc625fac R14: 00007fd3cc625fa0 R15: 00007fd3cc625fa0
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
len > ((int)(~0U >> 1))
WARNING: ./include/linux/skbuff.h:2864 at pskb_may_pull_reason include/linux/skbuff.h:2864 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline], CPU#2: syz.0.17/5921
WARNING: ./include/linux/skbuff.h:2864 at ipip_tunnel_xmit+0x3d7/0x4d0 net/ipv4/ipip.c:289, CPU#2: syz.0.17/5921
Modules linked in:
CPU: 2 UID: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:pskb_may_pull_reason include/linux/skbuff.h:2864 [inline]
RIP: 0010:pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline]
RIP: 0010:pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline]
RIP: 0010:pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline]
RIP: 0010:ipip_tunnel_xmit+0x3d7/0x4d0 net/ipv4/ipip.c:289
Code: 5e 41 5f e9 9b e4 7a 01 e8 16 e5 c3 f7 89 e9 4c 89 e6 48 89 df 49 8d 94 24 4c 0f 00 00 e8 81 e9 fc ff eb ca e8 fa e4 c3 f7 90 <0f> 0b 90 e9 49 fd ff ff e8 ec e4 c3 f7 44 8b 2c 24 89 ef 44 89 ee
RSP: 0018:ffffc90003a875b0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888036305cc0 RCX: ffffffff8a468db0
RDX: ffff8880277a0000 RSI: ffffffff8a469066 RDI: ffff8880277a0000
RBP: 00000000ffffff40 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000ffffff40 R11: 0000000000000000 R12: ffff888031798000
R13: 0000000000000000 R14: ffff888036305d74 R15: ffffffffffffff40
FS:  000055557354b500(0000) GS:ffff8880d5dd6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000000c0 CR3: 000000003ce12000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 __netdev_start_xmit include/linux/netdevice.h:5397 [inline]
 netdev_start_xmit include/linux/netdevice.h:5406 [inline]
 __dev_direct_xmit+0x5b3/0x750 net/core/dev.c:4942
 __xsk_generic_xmit net/xdp/xsk.c:1256 [inline]
 xsk_generic_xmit+0x2267/0x44a0 net/xdp/xsk.c:1312
 xsk_poll+0x2a5/0x840 net/xdp/xsk.c:1440
 sock_poll+0x160/0x510 net/socket.c:1514
 vfs_poll include/linux/poll.h:82 [inline]
 do_pollfd fs/select.c:877 [inline]
 do_poll fs/select.c:920 [inline]
 do_sys_poll+0x6e5/0xe90 fs/select.c:1015
 __do_sys_ppoll fs/select.c:1112 [inline]
 __se_sys_ppoll fs/select.c:1092 [inline]
 __x64_sys_ppoll+0x2b5/0x350 fs/select.c:1092
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd3cc39e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe3ac99378 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
RAX: ffffffffffffffda RBX: 00007fd3cc625fa0 RCX: 00007fd3cc39e0d9
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000800
RBP: 00007fd3cc435024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd3cc625fac R14: 00007fd3cc625fa0 R15: 00007fd3cc625fa0
 </TASK>