==================================================================
BUG: KASAN: out-of-bounds in i801_isr_byte_done drivers/i2c/busses/i2c-i801.c:608 [inline]
BUG: KASAN: out-of-bounds in i801_isr drivers/i2c/busses/i2c-i801.c:668 [inline]
BUG: KASAN: out-of-bounds in i801_isr+0xc70/0xd60 drivers/i2c/busses/i2c-i801.c:649
Read of size 1 at addr ffffc90001af7d5c by task sshd/8652

CPU: 2 PID: 8652 Comm: sshd Not tainted 5.13.0-rc6-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x141/0x1d7 lib/dump_stack.c:120
 print_address_description.constprop.0.cold+0x5/0x2f8 mm/kasan/report.c:233
 __kasan_report mm/kasan/report.c:419 [inline]
 kasan_report.cold+0x7c/0xd8 mm/kasan/report.c:436
 i801_isr_byte_done drivers/i2c/busses/i2c-i801.c:608 [inline]
 i801_isr drivers/i2c/busses/i2c-i801.c:668 [inline]
 i801_isr+0xc70/0xd60 drivers/i2c/busses/i2c-i801.c:649
 __handle_irq_event_percpu+0x303/0x8f0 kernel/irq/handle.c:156
 handle_irq_event_percpu kernel/irq/handle.c:196 [inline]
 handle_irq_event+0x102/0x290 kernel/irq/handle.c:213
 handle_fasteoi_irq+0x22f/0x9f0 kernel/irq/chip.c:714
 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
 handle_irq arch/x86/kernel/irq.c:231 [inline]
 __common_interrupt+0x9e/0x200 arch/x86/kernel/irq.c:250
 common_interrupt+0x9f/0xd0 arch/x86/kernel/irq.c:240
 </IRQ>
 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__do_softirq+0x196/0x9f6 kernel/softirq.c:545
Code: 00 48 01 f0 48 89 44 24 18 48 c7 c7 20 55 6a 89 e8 7f 99 d6 ff 65 66 c7 05 b5 4a c3 76 00 00 e8 20 ea 3a f8 fb b8 ff ff ff ff <48> c7 c3 c0 a0 c0 8b 41 0f bc c5 41 89 c7 41 83 c7 01 75 47 e9 d2
RSP: 0000:ffffc900007e7eb8 EFLAGS: 00000206
RAX: 00000000ffffffff RBX: ffff888013f99c40 RCX: 1ffffffff1b925c1
RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000
RBP: ffff888011b09c40 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff817aebe8 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000
 invoke_softirq kernel/softirq.c:433 [inline]
 __irq_exit_rcu+0x136/0x200 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x45/0xc0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0033:0x56044a433f87
Code: 00 00 00 e8 e3 67 fd ff 31 c0 48 83 c4 08 c3 0f 1f 40 00 48 8b 47 08 48 39 07 75 d2 eb b1 0f 1f 44 00 00 48 83 7f 40 00 75 c4 <66> 0f 1f 84 00 00 00 00 00 48 8b 47 20 48 3d 00 00 00 08 77 af 48
RSP: 002b:00007fff24393068 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 000056044aaf7030 RDI: 000056044aaf8bf8
RBP: 000056044aaf8bb0 R08: 0000000000000001 R09: 0000000000000000
R10: 000000000000000a R11: 0000000000000010 R12: 00007fff24393074
R13: 00007fff2439311f R14: 000056044a47bbe7 R15: 000056044aaf8bf8


Memory state around the buggy address:
 ffffc90001af7c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90001af7c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90001af7d00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                                                    ^
 ffffc90001af7d80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90001af7e00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================