===================================================== BUG: KMSAN: uninit-value in __mkroute_output net/ipv4/route.c:2541 [inline] BUG: KMSAN: uninit-value in ip_route_output_key_hash_rcu+0x1ee8/0x3810 net/ipv4/route.c:2815 __mkroute_output net/ipv4/route.c:2541 [inline] ip_route_output_key_hash_rcu+0x1ee8/0x3810 net/ipv4/route.c:2815 ip_route_output_key_hash net/ipv4/route.c:2644 [inline] __ip_route_output_key include/net/route.h:134 [inline] ip_route_output_flow+0x14f/0x320 net/ipv4/route.c:2872 ip_route_output_key include/net/route.h:144 [inline] ip_tunnel_xmit+0x1450/0x3e80 net/ipv4/ip_tunnel.c:767 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0xd1c/0xe20 net/ipv4/ip_gre.c:662 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3545 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3561 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4346 dev_queue_xmit include/linux/netdevice.h:3134 [inline] __bpf_tx_skb net/core/filter.c:2133 [inline] __bpf_redirect_no_mac net/core/filter.c:2163 [inline] __bpf_redirect+0xdd7/0x1600 net/core/filter.c:2186 ____bpf_clone_redirect net/core/filter.c:2457 [inline] bpf_clone_redirect+0x328/0x470 net/core/filter.c:2429 ___bpf_prog_run+0x2180/0xdb80 kernel/bpf/core.c:1958 __bpf_prog_run512+0xb5/0xe0 kernel/bpf/core.c:2199 bpf_dispatcher_nop_func include/linux/bpf.h:1196 [inline] __bpf_prog_run include/linux/filter.h:651 [inline] bpf_prog_run include/linux/filter.h:658 [inline] bpf_test_run+0x482/0xb00 net/bpf/test_run.c:423 bpf_prog_test_run_skb+0x14e5/0x1f20 net/bpf/test_run.c:1045 bpf_prog_test_run+0x6af/0xac0 kernel/bpf/syscall.c:4040 __sys_bpf+0x649/0xd60 kernel/bpf/syscall.c:5401 __do_sys_bpf kernel/bpf/syscall.c:5487 [inline] __se_sys_bpf kernel/bpf/syscall.c:5485 [inline] __ia32_sys_bpf+0xa0/0xe0 kernel/bpf/syscall.c:5485 do_syscall_32_irqs_on arch/x86/entry/common.c:164 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:230 do_fast_syscall_32+0x37/0x70 arch/x86/entry/common.c:255 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:293 entry_SYSENTER_compat_after_hwframe+0x70/0x7a Uninit was stored to memory at: ip_tunnel_init_flow include/net/ip_tunnels.h:268 [inline] ip_tunnel_xmit+0x1161/0x3e80 net/ipv4/ip_tunnel.c:748 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0xd1c/0xe20 net/ipv4/ip_gre.c:662 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3545 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3561 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4346 dev_queue_xmit include/linux/netdevice.h:3134 [inline] __bpf_tx_skb net/core/filter.c:2133 [inline] __bpf_redirect_no_mac net/core/filter.c:2163 [inline] __bpf_redirect+0xdd7/0x1600 net/core/filter.c:2186 ____bpf_clone_redirect net/core/filter.c:2457 [inline] bpf_clone_redirect+0x328/0x470 net/core/filter.c:2429 ___bpf_prog_run+0x2180/0xdb80 kernel/bpf/core.c:1958 __bpf_prog_run512+0xb5/0xe0 kernel/bpf/core.c:2199 bpf_dispatcher_nop_func include/linux/bpf.h:1196 [inline] __bpf_prog_run include/linux/filter.h:651 [inline] bpf_prog_run include/linux/filter.h:658 [inline] bpf_test_run+0x482/0xb00 net/bpf/test_run.c:423 bpf_prog_test_run_skb+0x14e5/0x1f20 net/bpf/test_run.c:1045 bpf_prog_test_run+0x6af/0xac0 kernel/bpf/syscall.c:4040 __sys_bpf+0x649/0xd60 kernel/bpf/syscall.c:5401 __do_sys_bpf kernel/bpf/syscall.c:5487 [inline] __se_sys_bpf kernel/bpf/syscall.c:5485 [inline] __ia32_sys_bpf+0xa0/0xe0 kernel/bpf/syscall.c:5485 do_syscall_32_irqs_on arch/x86/entry/common.c:164 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:230 do_fast_syscall_32+0x37/0x70 arch/x86/entry/common.c:255 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:293 entry_SYSENTER_compat_after_hwframe+0x70/0x7a Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560 pskb_expand_head+0x226/0x1a00 net/core/skbuff.c:2098 __skb_cow include/linux/skbuff.h:3586 [inline] skb_cow_head include/linux/skbuff.h:3620 [inline] ipgre_xmit+0x74a/0xe20 net/ipv4/ip_gre.c:638 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3545 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3561 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4346 dev_queue_xmit include/linux/netdevice.h:3134 [inline] __bpf_tx_skb net/core/filter.c:2133 [inline] __bpf_redirect_no_mac net/core/filter.c:2163 [inline] __bpf_redirect+0xdd7/0x1600 net/core/filter.c:2186 ____bpf_clone_redirect net/core/filter.c:2457 [inline] bpf_clone_redirect+0x328/0x470 net/core/filter.c:2429 ___bpf_prog_run+0x2180/0xdb80 kernel/bpf/core.c:1958 __bpf_prog_run512+0xb5/0xe0 kernel/bpf/core.c:2199 bpf_dispatcher_nop_func include/linux/bpf.h:1196 [inline] __bpf_prog_run include/linux/filter.h:651 [inline] bpf_prog_run include/linux/filter.h:658 [inline] bpf_test_run+0x482/0xb00 net/bpf/test_run.c:423 bpf_prog_test_run_skb+0x14e5/0x1f20 net/bpf/test_run.c:1045 bpf_prog_test_run+0x6af/0xac0 kernel/bpf/syscall.c:4040 __sys_bpf+0x649/0xd60 kernel/bpf/syscall.c:5401 __do_sys_bpf kernel/bpf/syscall.c:5487 [inline] __se_sys_bpf kernel/bpf/syscall.c:5485 [inline] __ia32_sys_bpf+0xa0/0xe0 kernel/bpf/syscall.c:5485 do_syscall_32_irqs_on arch/x86/entry/common.c:164 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:230 do_fast_syscall_32+0x37/0x70 arch/x86/entry/common.c:255 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:293 entry_SYSENTER_compat_after_hwframe+0x70/0x7a CPU: 0 PID: 7454 Comm: syz-executor.2 Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 =====================================================