=====================================================
BUG: KMSAN: uninit-value in erspan_build_header+0x167/0x2f0 include/net/erspan.h:197
 erspan_build_header+0x167/0x2f0 include/net/erspan.h:197
 erspan_xmit+0x12e8/0x1ed0 net/ipv4/ip_gre.c:735
 __netdev_start_xmit include/linux/netdevice.h:5275 [inline]
 netdev_start_xmit include/linux/netdevice.h:5284 [inline]
 xmit_one net/core/dev.c:3871 [inline]
 dev_hard_start_xmit+0x24e/0xad0 net/core/dev.c:3887
 sch_direct_xmit+0x3b2/0xcf0 net/sched/sch_generic.c:347
 __dev_xmit_skb net/core/dev.c:4186 [inline]
 __dev_queue_xmit+0x3016/0x5a50 net/core/dev.c:4802
 dev_queue_xmit include/linux/netdevice.h:3384 [inline]
 __bpf_tx_skb net/core/filter.c:2153 [inline]
 __bpf_redirect_common net/core/filter.c:2197 [inline]
 __bpf_redirect+0x162e/0x1760 net/core/filter.c:2204
 ____bpf_clone_redirect net/core/filter.c:2487 [inline]
 bpf_clone_redirect+0x4a6/0x6c0 net/core/filter.c:2450
 ___bpf_prog_run+0x12af/0xeb60 kernel/bpf/core.c:2041
 __bpf_prog_run32+0xc2/0xf0 kernel/bpf/core.c:2335
 bpf_dispatcher_nop_func include/linux/bpf.h:1402 [inline]
 __bpf_prog_run include/linux/filter.h:723 [inline]
 bpf_prog_run include/linux/filter.h:730 [inline]
 bpf_test_run+0x493/0xdf0 net/bpf/test_run.c:423
 bpf_prog_test_run_skb+0x22a5/0x3050 net/bpf/test_run.c:1159
 bpf_prog_test_run+0x5bb/0x9f0 kernel/bpf/syscall.c:4722
 __sys_bpf+0x925/0xee0 kernel/bpf/syscall.c:6247
 __do_sys_bpf kernel/bpf/syscall.c:6342 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6340 [inline]
 __ia32_sys_bpf+0xa4/0xf0 kernel/bpf/syscall.c:6340
 ia32_sys_call+0x33e7/0x4360 arch/x86/include/generated/asm/syscalls_32.h:358
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]
 __do_fast_syscall_32+0x17f/0x3f0 arch/x86/entry/syscall_32.c:307
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/syscall_32.c:332
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:370
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:4508 [inline]
 slab_alloc_node mm/slub.c:4830 [inline]
 kmem_cache_alloc_node_noprof+0x3cd/0x12d0 mm/slub.c:4882
 kmalloc_reserve net/core/skbuff.c:613 [inline]
 pskb_expand_head+0x2ef/0x1fb0 net/core/skbuff.c:2315
 __skb_cow include/linux/skbuff.h:3854 [inline]
 skb_cow_head include/linux/skbuff.h:3888 [inline]
 erspan_xmit+0x9c3/0x1ed0 net/ipv4/ip_gre.c:721
 __netdev_start_xmit include/linux/netdevice.h:5275 [inline]
 netdev_start_xmit include/linux/netdevice.h:5284 [inline]
 xmit_one net/core/dev.c:3871 [inline]
 dev_hard_start_xmit+0x24e/0xad0 net/core/dev.c:3887
 sch_direct_xmit+0x3b2/0xcf0 net/sched/sch_generic.c:347
 __dev_xmit_skb net/core/dev.c:4186 [inline]
 __dev_queue_xmit+0x3016/0x5a50 net/core/dev.c:4802
 dev_queue_xmit include/linux/netdevice.h:3384 [inline]
 __bpf_tx_skb net/core/filter.c:2153 [inline]
 __bpf_redirect_common net/core/filter.c:2197 [inline]
 __bpf_redirect+0x162e/0x1760 net/core/filter.c:2204
 ____bpf_clone_redirect net/core/filter.c:2487 [inline]
 bpf_clone_redirect+0x4a6/0x6c0 net/core/filter.c:2450
 ___bpf_prog_run+0x12af/0xeb60 kernel/bpf/core.c:2041
 __bpf_prog_run32+0xc2/0xf0 kernel/bpf/core.c:2335
 bpf_dispatcher_nop_func include/linux/bpf.h:1402 [inline]
 __bpf_prog_run include/linux/filter.h:723 [inline]
 bpf_prog_run include/linux/filter.h:730 [inline]
 bpf_test_run+0x493/0xdf0 net/bpf/test_run.c:423
 bpf_prog_test_run_skb+0x22a5/0x3050 net/bpf/test_run.c:1159
 bpf_prog_test_run+0x5bb/0x9f0 kernel/bpf/syscall.c:4722
 __sys_bpf+0x925/0xee0 kernel/bpf/syscall.c:6247
 __do_sys_bpf kernel/bpf/syscall.c:6342 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6340 [inline]
 __ia32_sys_bpf+0xa4/0xf0 kernel/bpf/syscall.c:6340
 ia32_sys_call+0x33e7/0x4360 arch/x86/include/generated/asm/syscalls_32.h:358
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]
 __do_fast_syscall_32+0x17f/0x3f0 arch/x86/entry/syscall_32.c:307
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/syscall_32.c:332
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:370
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e

CPU: 0 UID: 0 PID: 7680 Comm: syz.5.405 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
=====================================================