=====================================================
BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 mm/kmsan/kmsan_hooks.c:253
CPU: 0 PID: 8537 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x21c/0x280 lib/dump_stack.c:118
 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:122
 kmsan_internal_check_memory+0x358/0x3d0 mm/kmsan/kmsan.c:459
 kmsan_copy_to_user+0x81/0x90 mm/kmsan/kmsan_hooks.c:253
 instrument_copy_to_user include/linux/instrumented.h:91 [inline]
 copyout lib/iov_iter.c:143 [inline]
 copy_page_to_iter_iovec lib/iov_iter.c:216 [inline]
 copy_page_to_iter+0xad8/0x2260 lib/iov_iter.c:925
 pipe_read+0x97f/0x22c0 fs/pipe.c:309
 call_read_iter include/linux/fs.h:1876 [inline]
 new_sync_read fs/read_write.c:415 [inline]
 vfs_read+0x136b/0x1590 fs/read_write.c:481
 ksys_read+0x275/0x500 fs/read_write.c:607
 __do_sys_read fs/read_write.c:617 [inline]
 __se_sys_read+0x92/0xb0 fs/read_write.c:615
 __x64_sys_read+0x4a/0x70 fs/read_write.c:615
 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45de29
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffa5ef30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00000000000264c0 RCX: 000000000045de29
RDX: 0000000000000031 RSI: 0000000020000100 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 000000000169fb7f R14: 00007ffa5ef319c0 R15: 000000000118bf2c

Uninit was created at:
 kmsan_save_stack_with_flags+0x3c/0x90 mm/kmsan/kmsan.c:143
 kmsan_internal_alloc_meta_for_pages mm/kmsan/kmsan_shadow.c:268 [inline]
 kmsan_alloc_page+0xc5/0x1a0 mm/kmsan/kmsan_shadow.c:292
 __alloc_pages_nodemask+0xf34/0x1120 mm/page_alloc.c:4927
 alloc_pages_current+0x685/0xb50 mm/mempolicy.c:2275
 alloc_pages include/linux/gfp.h:545 [inline]
 push_pipe+0x73d/0xcd0 lib/iov_iter.c:538
 __pipe_get_pages lib/iov_iter.c:1279 [inline]
 pipe_get_pages_alloc lib/iov_iter.c:1386 [inline]
 iov_iter_get_pages_alloc+0x210e/0x26b0 lib/iov_iter.c:1404
 default_file_splice_read+0x2dd/0x1590 fs/splice.c:385
 do_splice_to fs/splice.c:871 [inline]
 do_splice+0x36d2/0x39e0 fs/splice.c:1179
 __do_sys_splice fs/splice.c:1419 [inline]
 __se_sys_splice+0x323/0x500 fs/splice.c:1401
 __x64_sys_splice+0x6e/0x90 fs/splice.c:1401
 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Byte 0 of 1 is uninitialized
Memory access of size 1 starts at ffff88810cd41000
Data copied to user address 0000000020000100
=====================================================