===================================================== BUG: KMSAN: uninit-value in decode_session6 net/xfrm/xfrm_policy.c:3477 [inline] BUG: KMSAN: uninit-value in __xfrm_decode_session+0x880/0x2890 net/xfrm/xfrm_policy.c:3566 decode_session6 net/xfrm/xfrm_policy.c:3477 [inline] __xfrm_decode_session+0x880/0x2890 net/xfrm/xfrm_policy.c:3566 xfrm_decode_session_reverse include/net/xfrm.h:1223 [inline] icmpv6_route_lookup+0x68b/0xa70 net/ipv6/icmp.c:388 icmp6_send+0x2163/0x29b0 net/ipv6/icmp.c:595 __icmpv6_send include/linux/icmpv6.h:28 [inline] icmpv6_send include/linux/icmpv6.h:49 [inline] ip6_link_failure+0x40/0x320 net/ipv6/route.c:2787 dst_link_failure include/net/dst.h:437 [inline] ip6_tnl_xmit+0x22dc/0x3760 net/ipv6/ip6_tunnel.c:1268 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1384 [inline] ip6_tnl_start_xmit+0x1851/0x1a70 net/ipv6/ip6_tunnel.c:1432 __netdev_start_xmit include/linux/netdevice.h:4889 [inline] netdev_start_xmit include/linux/netdevice.h:4903 [inline] xmit_one net/core/dev.c:3544 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3560 sch_direct_xmit+0x3c5/0xd40 net/sched/sch_generic.c:342 qdisc_restart net/sched/sch_generic.c:407 [inline] __qdisc_run+0x14ab/0x35a0 net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3834 [inline] __dev_queue_xmit+0x1b92/0x52b0 net/core/dev.c:4306 dev_queue_xmit include/linux/netdevice.h:3082 [inline] neigh_connected_output+0x569/0x660 net/core/neighbour.c:1583 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x2191/0x2900 net/ipv6/ip6_output.c:135 __ip6_finish_output net/ipv6/ip6_output.c:196 [inline] ip6_finish_output+0xa10/0x1340 net/ipv6/ip6_output.c:207 NF_HOOK_COND include/linux/netfilter.h:293 [inline] ip6_output+0x323/0x610 net/ipv6/ip6_output.c:228 dst_output include/net/dst.h:458 [inline] ip6_local_out+0xe9/0x140 net/ipv6/output_core.c:155 ip6_send_skb net/ipv6/ip6_output.c:2017 [inline] ip6_push_pending_frames+0x1f9/0x560 net/ipv6/ip6_output.c:2037 rawv6_push_pending_frames+0xbe8/0xdf0 net/ipv6/raw.c:581 rawv6_sendmsg+0x29c3/0x2e50 net/ipv6/raw.c:920 inet_sendmsg+0x105/0x190 net/ipv4/af_inet.c:840 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2558 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2612 __sys_sendmsg+0x225/0x3c0 net/socket.c:2641 __compat_sys_sendmsg net/compat.c:346 [inline] __do_compat_sys_sendmsg net/compat.c:353 [inline] __se_compat_sys_sendmsg net/compat.c:350 [inline] __ia32_compat_sys_sendmsg+0x9d/0xe0 net/compat.c:350 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246 entry_SYSENTER_compat_after_hwframe+0x70/0x82 Uninit was created at: slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767 slab_alloc_node mm/slub.c:3478 [inline] __kmem_cache_alloc_node+0x536/0x8d0 mm/slub.c:3517 kmalloc_trace+0x51/0x200 mm/slab_common.c:1114 kmalloc include/linux/slab.h:599 [inline] ima_add_digest_entry+0x61/0x670 security/integrity/ima/ima_queue.c:99 ima_add_template_entry+0x568/0x870 security/integrity/ima/ima_queue.c:179 ima_store_template security/integrity/ima/ima_api.c:122 [inline] ima_store_measurement+0x371/0x8d0 security/integrity/ima/ima_api.c:371 process_measurement+0x2416/0x36e0 security/integrity/ima/ima_main.c:353 ima_file_check+0xb3/0x100 security/integrity/ima/ima_main.c:543 do_open fs/namei.c:3641 [inline] path_openat+0x4c36/0x5a00 fs/namei.c:3796 do_filp_open+0x20d/0x590 fs/namei.c:3823 do_sys_openat2+0x1bf/0x2f0 fs/open.c:1422 do_sys_open fs/open.c:1437 [inline] __do_compat_sys_openat fs/open.c:1497 [inline] __se_compat_sys_openat fs/open.c:1495 [inline] __ia32_compat_sys_openat+0x298/0x300 fs/open.c:1495 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246 entry_SYSENTER_compat_after_hwframe+0x70/0x82 CPU: 0 PID: 21047 Comm: syz-executor.1 Not tainted 6.6.0-rc4-syzkaller-00229-g82714078aee4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 =====================================================