===================================================== BUG: KMSAN: uninit-value in mptcp_incoming_options+0xc93/0x3a80 net/mptcp/options.c:1197 mptcp_incoming_options+0xc93/0x3a80 net/mptcp/options.c:1197 tcp_data_queue+0xb4/0x7f20 net/ipv4/tcp_input.c:5141 tcp_rcv_established+0x1132/0x2600 net/ipv4/tcp_input.c:6155 tcp_v4_do_rcv+0x8a8/0xff0 net/ipv4/tcp_ipv4.c:1906 tcp_v4_rcv+0x4ce0/0x51a0 net/ipv4/tcp_ipv4.c:2329 ip_protocol_deliver_rcu+0x264/0x1300 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x2b8/0x440 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:461 [inline] ip_rcv_finish net/ipv4/ip_input.c:449 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip_rcv+0x476/0x770 net/ipv4/ip_input.c:569 __netif_receive_skb_one_core net/core/dev.c:5529 [inline] __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5643 process_backlog+0x480/0x8b0 net/core/dev.c:5971 __napi_poll+0xe3/0x970 net/core/dev.c:6533 napi_poll net/core/dev.c:6602 [inline] net_rx_action+0x884/0x16d0 net/core/dev.c:6735 __do_softirq+0x1b7/0x7c3 kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x69/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x7a/0x90 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:645 kmsan_get_metadata+0xc/0x2c0 mm/kmsan/shadow.c:125 kmsan_get_shadow_origin_ptr+0x38/0xa0 mm/kmsan/shadow.c:97 get_shadow_origin_ptr mm/kmsan/instrumentation.c:36 [inline] __msan_metadata_ptr_for_load_4+0x24/0x40 mm/kmsan/instrumentation.c:91 leave_rcu fs/namei.c:676 [inline] try_to_unlazy+0x659/0x950 fs/namei.c:786 complete_walk+0x201/0x590 fs/namei.c:891 path_lookupat+0x34e/0x6f0 fs/namei.c:2490 filename_lookup+0x22e/0x740 fs/namei.c:2512 vfs_statx+0xe2/0x660 fs/stat.c:244 vfs_fstatat+0x1f2/0x270 fs/stat.c:299 __do_sys_newfstatat fs/stat.c:463 [inline] __se_sys_newfstatat+0x64/0x870 fs/stat.c:457 __x64_sys_newfstatat+0xbd/0x110 fs/stat.c:457 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was stored to memory at: mptcp_parse_option net/mptcp/options.c:110 [inline] mptcp_get_options+0x2d86/0x2e60 net/mptcp/options.c:396 mptcp_incoming_options+0x124/0x3a80 net/mptcp/options.c:1139 tcp_data_queue+0xb4/0x7f20 net/ipv4/tcp_input.c:5141 tcp_rcv_established+0x1132/0x2600 net/ipv4/tcp_input.c:6155 tcp_v4_do_rcv+0x8a8/0xff0 net/ipv4/tcp_ipv4.c:1906 tcp_v4_rcv+0x4ce0/0x51a0 net/ipv4/tcp_ipv4.c:2329 ip_protocol_deliver_rcu+0x264/0x1300 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x2b8/0x440 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:461 [inline] ip_rcv_finish net/ipv4/ip_input.c:449 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip_rcv+0x476/0x770 net/ipv4/ip_input.c:569 __netif_receive_skb_one_core net/core/dev.c:5529 [inline] __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5643 process_backlog+0x480/0x8b0 net/core/dev.c:5971 __napi_poll+0xe3/0x970 net/core/dev.c:6533 napi_poll net/core/dev.c:6602 [inline] net_rx_action+0x884/0x16d0 net/core/dev.c:6735 __do_softirq+0x1b7/0x7c3 kernel/softirq.c:553 Local variable mp_opt created at: mptcp_incoming_options+0x9b/0x3a80 net/mptcp/options.c:1116 tcp_data_queue+0xb4/0x7f20 net/ipv4/tcp_input.c:5141 CPU: 1 PID: 4444 Comm: udevd Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 =====================================================