==================================================================
BUG: KASAN: stack-out-of-bounds in i801_isr_byte_done drivers/i2c/busses/i2c-i801.c:608 [inline]
BUG: KASAN: stack-out-of-bounds in i801_isr drivers/i2c/busses/i2c-i801.c:668 [inline]
BUG: KASAN: stack-out-of-bounds in i801_isr+0xc70/0xd60 drivers/i2c/busses/i2c-i801.c:649
Read of size 1 at addr ffffc90008987d58 by task syz-executor.2/8696

CPU: 2 PID: 8696 Comm: syz-executor.2 Not tainted 5.13.0-rc6-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x141/0x1d7 lib/dump_stack.c:120
 print_address_description.constprop.0.cold+0x5/0x2f8 mm/kasan/report.c:233
 __kasan_report mm/kasan/report.c:419 [inline]
 kasan_report.cold+0x7c/0xd8 mm/kasan/report.c:436
 i801_isr_byte_done drivers/i2c/busses/i2c-i801.c:608 [inline]
 i801_isr drivers/i2c/busses/i2c-i801.c:668 [inline]
 i801_isr+0xc70/0xd60 drivers/i2c/busses/i2c-i801.c:649
 __handle_irq_event_percpu+0x303/0x8f0 kernel/irq/handle.c:156
 handle_irq_event_percpu kernel/irq/handle.c:196 [inline]
 handle_irq_event+0x102/0x290 kernel/irq/handle.c:213
 handle_fasteoi_irq+0x22f/0x9f0 kernel/irq/chip.c:714
 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
 handle_irq arch/x86/kernel/irq.c:231 [inline]
 __common_interrupt+0x9e/0x200 arch/x86/kernel/irq.c:250
 common_interrupt+0x9f/0xd0 arch/x86/kernel/irq.c:240
 </IRQ>
 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:638
RIP: 0010:console_unlock+0xa81/0xc40 kernel/printk/printk.c:2484
Code: 24 08 4c 89 6c 24 20 e9 6c f9 ff ff e8 e8 28 18 00 0f 0b e9 f8 f9 ff ff e8 dc 28 18 00 48 8b bc 24 68 01 00 00 e8 df c7 ff ff <e8> ca 28 18 00 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 30 48 c7
RSP: 0018:ffffc90000ea69c0 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8880152cb880 RSI: ffffffff815cafb3 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff9022792f
R10: ffffffff815cafa5 R11: 0000000000000000 R12: ffffffff84bbe480
R13: 0000000000000200 R14: dffffc0000000000 R15: 0000000000000200
 vprintk_emit+0x1ca/0x560 kernel/printk/printk.c:2174
 vprintk+0x8d/0x260 kernel/printk/printk_safe.c:392
 printk+0xba/0xed kernel/printk/printk.c:2216
 __dev_set_promiscuity.cold+0x55/0x35f net/core/dev.c:8551
 __dev_set_rx_mode+0x217/0x2e0 net/core/dev.c:8672
 dev_uc_add+0xf1/0x110 net/core/dev_addr_lists.c:592
 macsec_dev_open+0xc3/0x440 drivers/net/macsec.c:3495
 __dev_open+0x2bc/0x4d0 net/core/dev.c:1609
 __dev_change_flags+0x583/0x750 net/core/dev.c:8760
 dev_change_flags+0x93/0x170 net/core/dev.c:8831
 do_setlink+0x90a/0x3af0 net/core/rtnetlink.c:2717
 __rtnl_newlink+0xdcf/0x1710 net/core/rtnetlink.c:3385
 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3500
 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5564
 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2504
 netlink_unicast_kernel net/netlink/af_netlink.c:1314 [inline]
 netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1340
 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1929
 sock_sendmsg_nosec net/socket.c:654 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:674
 __sys_sendto+0x21c/0x320 net/socket.c:1977
 __do_compat_sys_socketcall+0x47f/0x660 net/compat.c:476
 do_syscall_32_irqs_on arch/x86/entry/common.c:78 [inline]
 __do_fast_syscall_32+0x67/0xe0 arch/x86/entry/common.c:143
 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:168
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f28549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000ffb98a80 EFLAGS: 00000286 ORIG_RAX: 0000000000000066
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ffb98a94
RDX: 0000000000000000 RSI: 000000000816c000 RDI: 00000000090d4288
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000


Memory state around the buggy address:
 ffffc90008987c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffffc90008987c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffffc90008987d00: 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00
                                                    ^
 ffffc90008987d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffffc90008987e00: 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 00 f2 f2 f2
==================================================================