diff --git a/net/ipv4/route.c b/net/ipv4/route.c
index 10b686b215f1..f39d0519f431 100644
--- a/net/ipv4/route.c
+++ b/net/ipv4/route.c
@@ -1973,6 +1973,7 @@ int ip_route_input_noref(struct sk_buff *skb, __be32 daddr, __be32 saddr,
 {
 	int res;
 
+	tos &= IPTOS_RT_MASK;
 	rcu_read_lock();
 
 	/* Multicast recognition logic is moved from route cache to here.