=====================================================
BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x4bc/0x39c0 net/ipv4/ip_tunnel.c:653
CPU: 0 PID: 8602 Comm: syz-executor041 Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 ip_tunnel_xmit+0x4bc/0x39c0 net/ipv4/ip_tunnel.c:653
 __gre_xmit net/ipv4/ip_gre.c:466 [inline]
 ipgre_xmit+0x111e/0x11e0 net/ipv4/ip_gre.c:648
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 garp_queue_xmit net/802/garp.c:259 [inline]
 garp_join_timer+0x1fc/0x380 net/802/garp.c:410
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1417
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1462
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1731
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1744
 __do_softirq+0x1b9/0x715 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x6e/0x90 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:420
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0x106/0x130 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0010:console_unlock+0x1878/0x1c00 kernel/printk/printk.c:2590
Code: 31 f6 e8 9b c6 00 00 48 83 bc 24 90 00 00 00 00 75 3c 48 8b 84 24 98 00 00 00 48 89 84 24 c8 00 00 00 ff b4 24 c8 00 00 00 9d <44> 89 f0 34 01 22 44 24 27 44 89 f3 0a 5c 24 0f 3c 01 74 1b f6 c3
RSP: 0018:ffff88812f082a00 EFLAGS: 00000286
RAX: 0000000000000286 RBX: 0000000000000000 RCX: ffff88812a99be80
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000001b8e0
RBP: ffff88812f082b98 R08: ffffea000000000f R09: ffff88813fffa000
R10: 00000000c7008d00 R11: 00000000ffffffff R12: 0000000000000000
R13: ffff88812a99c8f8 R14: 0000000000000000 R15: ffffffff918a2f00
 vprintk_emit+0x3fd/0x7f0 kernel/printk/printk.c:2109
 vprintk_default+0x86/0xa0 kernel/printk/printk.c:2126
 vprintk_func+0x2ed/0x2f0 kernel/printk/printk_safe.c:393
 printk+0x180/0x1cd kernel/printk/printk.c:2157
 __dev_set_promiscuity+0x5b5/0xc10 net/core/dev.c:8270
 __dev_change_flags+0x8d8/0xce0 net/core/dev.c:8488
 rtnl_configure_link+0x301/0x4e0 net/core/rtnetlink.c:3125
 __rtnl_newlink net/core/rtnetlink.c:3451 [inline]
 rtnl_newlink+0x30b5/0x3d40 net/core/rtnetlink.c:3491
 rtnetlink_rcv_msg+0x1442/0x18a0 net/core/rtnetlink.c:5553
 netlink_rcv_skb+0x6fa/0x810 net/netlink/af_netlink.c:2494
 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:5571
 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline]
 netlink_unicast+0x11d6/0x14a0 net/netlink/af_netlink.c:1330
 netlink_sendmsg+0x1740/0x1840 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0xcfc/0x12f0 net/socket.c:2345
 ___sys_sendmsg net/socket.c:2399 [inline]
 __sys_sendmsg+0x714/0x830 net/socket.c:2432
 __do_sys_sendmsg net/socket.c:2441 [inline]
 __se_sys_sendmsg+0x97/0xb0 net/socket.c:2439
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2439
 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4438f9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffec5dc51d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004438f9
RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d
R10: 000000000000000d R11: 0000000000000246 R12: 00007ffec5dc51f0
R13: 00000000000f4240 R14: 00000000000233b0 R15: 00007ffec5dc51e4

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 __alloc_skb+0x2f8/0xb30 net/core/skbuff.c:210
 alloc_skb include/linux/skbuff.h:1099 [inline]
 garp_pdu_init net/802/garp.c:212 [inline]
 garp_pdu_append_attr+0x2f0/0x13a0 net/802/garp.c:283
 garp_attr_event+0x25d/0x360 net/802/garp.c:325
 garp_gid_event net/802/garp.c:389 [inline]
 garp_join_timer+0x10e/0x380 net/802/garp.c:406
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1417
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1462
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1731
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1744
 __do_softirq+0x1b9/0x715 kernel/softirq.c:343
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x4bc/0x39c0 net/ipv4/ip_tunnel.c:653
CPU: 0 PID: 8807 Comm: syz-executor041 Tainted: G    B             5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5f/0xa0 mm/kmsan/kmsan_instr.c:197
 ip_tunnel_xmit+0x4bc/0x39c0 net/ipv4/ip_tunnel.c:653
 __gre_xmit net/ipv4/ip_gre.c:466 [inline]
 ipgre_xmit+0x111e/0x11e0 net/ipv4/ip_gre.c:648
 __netdev_start_xmit include/linux/netdevice.h:4778 [inline]
 netdev_start_xmit include/linux/netdevice.h:4792 [inline]
 xmit_one+0x2b6/0x760 net/core/dev.c:3574
 dev_hard_start_xmit net/core/dev.c:3590 [inline]
 __dev_queue_xmit+0x3426/0x45c0 net/core/dev.c:4151
 dev_queue_xmit+0x4b/0x60 net/core/dev.c:4184
 garp_queue_xmit net/802/garp.c:259 [inline]
 garp_join_timer+0x1fc/0x380 net/802/garp.c:410
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1417
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1462
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1731
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1744
 __do_softirq+0x1b9/0x715 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x6e/0x90 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:420
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:432
 sysvec_apic_timer_interrupt+0x106/0x130 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0010:vprintk_emit+0x2cc/0x7f0 kernel/printk/printk.c:2096
Code: 03 00 00 41 8b 84 24 a8 0f 00 00 89 45 a0 e8 2b e4 00 00 48 85 db 0f 85 b4 00 00 00 4c 89 ad 48 ff ff ff ff b5 48 ff ff ff 9d <80> 7d bf 00 0f 85 a9 00 00 00 83 7d c0 fe 0f 85 b1 00 00 00 e8 db
RSP: 0018:ffff88812f082ba8 EFLAGS: 00000282
RAX: 00007ffffffff000 RBX: 0000000000000000 RCX: ffff88812a99ddc0
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000001b8e0
RBP: ffff88812f082c60 R08: ffffea000000000f R09: ffff88813fffa000
R10: 0000000000000009 R11: 000000000000ffff R12: ffff88812a99e838
R13: 0000000000000282 R14: 0000000000000000 R15: 0000000000000025
 vprintk_default+0x86/0xa0 kernel/printk/printk.c:2126
 vprintk_func+0x2ed/0x2f0 kernel/printk/printk_safe.c:393
 printk+0x180/0x1cd kernel/printk/printk.c:2157
 __dev_set_promiscuity+0x5b5/0xc10 net/core/dev.c:8270
 __dev_change_flags+0x8d8/0xce0 net/core/dev.c:8488
 rtnl_configure_link+0x301/0x4e0 net/core/rtnetlink.c:3125
 __rtnl_newlink net/core/rtnetlink.c:3451 [inline]
 rtnl_newlink+0x30b5/0x3d40 net/core/rtnetlink.c:3491
 rtnetlink_rcv_msg+0x1442/0x18a0 net/core/rtnetlink.c:5553
 netlink_rcv_skb+0x6fa/0x810 net/netlink/af_netlink.c:2494
 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:5571
 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline]
 netlink_unicast+0x11d6/0x14a0 net/netlink/af_netlink.c:1330
 netlink_sendmsg+0x1740/0x1840 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0xcfc/0x12f0 net/socket.c:2345
 ___sys_sendmsg net/socket.c:2399 [inline]
 __sys_sendmsg+0x714/0x830 net/socket.c:2432
 __do_sys_sendmsg net/socket.c:2441 [inline]
 __se_sys_sendmsg+0x97/0xb0 net/socket.c:2439
 __x64_sys_sendmsg+0x4a/0x70 net/socket.c:2439
 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4438f9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffec5dc51d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004438f9
RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d
R10: 000000000000000d R11: 0000000000000246 R12: 00007ffec5dc51f0
R13: 00000000000f4240 R14: 0000000000025016 R15: 00007ffec5dc51e4

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8d/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2907 [inline]
 __kmalloc_node_track_caller+0xa37/0x1430 mm/slub.c:4527
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 __alloc_skb+0x2f8/0xb30 net/core/skbuff.c:210
 alloc_skb include/linux/skbuff.h:1099 [inline]
 garp_pdu_init net/802/garp.c:212 [inline]
 garp_pdu_append_attr+0x2f0/0x13a0 net/802/garp.c:283
 garp_attr_event+0x25d/0x360 net/802/garp.c:325
 garp_gid_event net/802/garp.c:389 [inline]
 garp_join_timer+0x10e/0x380 net/802/garp.c:406
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1417
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1462
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1731
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1744
 __do_softirq+0x1b9/0x715 kernel/softirq.c:343
=====================================================