------------[ cut here ]------------
WARNING: CPU: 0 PID: 26154 at kernel/bpf/helpers.c:712 try_get_fmt_tmp_buf kernel/bpf/helpers.c:712 [inline]
WARNING: CPU: 0 PID: 26154 at kernel/bpf/helpers.c:712 bpf_bprintf_prepare+0xeba/0x10b0 kernel/bpf/helpers.c:760
Modules linked in:
CPU: 0 PID: 26154 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:try_get_fmt_tmp_buf kernel/bpf/helpers.c:712 [inline]
RIP: 0010:bpf_bprintf_prepare+0xeba/0x10b0 kernel/bpf/helpers.c:760
Code: c6 e8 da 9d 63 02 83 c0 01 48 98 48 01 c5 48 89 6c 24 08 e8 c8 d8 ec ff 8d 6b 02 83 44 24 10 01 e9 d6 f5 ff ff e8 b6 d8 ec ff <0f> 0b 65 ff 0d 3d 15 7b 7e bf 01 00 00 00 41 bc f0 ff ff ff e8 8d
RSP: 0018:ffffc900000074c8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000100
RDX: ffff8880214f8000 RSI: ffffffff8187e9fa RDI: 0000000000000003
RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff8187e594 R11: 0000000000000000 R12: ffffc900000075f8
R13: 0000000000000100 R14: ffffc900000076b0 R15: 0000000000000003
FS:  00007f287f7ab700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30726000 CR3: 000000008e5dd000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 ____bpf_trace_printk kernel/trace/bpf_trace.c:389 [inline]
 bpf_trace_printk+0xab/0x3a0 kernel/trace/bpf_trace.c:380
 bpf_prog_0605f9f479290f07+0x2f/0xcc4
 bpf_dispatcher_nop_func include/linux/bpf.h:684 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1788 [inline]
 bpf_trace_run1+0x127/0x390 kernel/trace/bpf_trace.c:1824
 __bpf_trace_workqueue_activate_work+0x8b/0xc0 include/trace/events/workqueue.h:59
 trace_workqueue_activate_work+0x119/0x220 include/trace/events/workqueue.h:59
 __queue_work+0x52d/0xed0 kernel/workqueue.c:1486
 queue_work_on+0xee/0x110 kernel/workqueue.c:1524
 queue_work include/linux/workqueue.h:507 [inline]
 ieee80211_queue_work net/mac80211/util.c:924 [inline]
 ieee80211_queue_work+0x129/0x160 net/mac80211/util.c:917
 ieee80211_rx_h_mgmt net/mac80211/rx.c:3628 [inline]
 ieee80211_rx_handlers+0x3b85/0xae60 net/mac80211/rx.c:3794
 ieee80211_invoke_rx_handlers net/mac80211/rx.c:3824 [inline]
 ieee80211_prepare_and_rx_handle+0x22ad/0x5070 net/mac80211/rx.c:4538
 __ieee80211_rx_handle_packet net/mac80211/rx.c:4636 [inline]
 ieee80211_rx_list+0x930/0x2680 net/mac80211/rx.c:4820
 ieee80211_rx_napi+0xf7/0x3d0 net/mac80211/rx.c:4843
 ieee80211_rx include/net/mac80211.h:4528 [inline]
 ieee80211_tasklet_handler+0xd4/0x130 net/mac80211/main.c:235
 tasklet_action_common.constprop.0+0x201/0x2e0 kernel/softirq.c:784
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:559
 invoke_softirq kernel/softirq.c:433 [inline]
 __irq_exit_rcu+0x136/0x200 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:191
Code: 74 24 10 e8 fa b6 41 f8 48 89 ef e8 92 2f 42 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 <e8> c3 37 36 f8 65 8b 05 dc 40 e9 76 85 c0 74 0a 5b 5d c3 e8 70 20
RSP: 0018:ffffc90002207200 EFLAGS: 00000206
RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff204d73a
RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
RBP: ffffffff8bff5c80 R08: 0000000000000001 R09: ffffffff9022595f
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000212 R14: 1ffff9200019c806 R15: 0000000000000003
 ____bpf_trace_printk kernel/trace/bpf_trace.c:398 [inline]
 bpf_trace_printk+0x172/0x3a0 kernel/trace/bpf_trace.c:380
 bpf_prog_0605f9f479290f07+0x2f/0x480
 bpf_dispatcher_nop_func include/linux/bpf.h:684 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1788 [inline]
 bpf_trace_run4+0x149/0x3c0 kernel/trace/bpf_trace.c:1827
 __bpf_trace_ext4_writepages_result+0x10a/0x150 include/trace/events/ext4.h:520
 trace_ext4_writepages_result include/trace/events/ext4.h:520 [inline]
 ext4_writepages+0xd6e/0x3b70 fs/ext4/inode.c:2868
 do_writepages+0xec/0x290 mm/page-writeback.c:2352
 __filemap_fdatawrite_range+0x2a5/0x390 mm/filemap.c:413
 filemap_write_and_wait_range mm/filemap.c:686 [inline]
 filemap_write_and_wait_range+0x65/0x100 mm/filemap.c:680
 __iomap_dio_rw+0x5a1/0x1330 fs/iomap/direct-io.c:533
 iomap_dio_rw+0x30/0x90 fs/iomap/direct-io.c:649
 ext4_dio_write_iter fs/ext4/file.c:568 [inline]
 ext4_file_write_iter+0xe18/0x14e0 fs/ext4/file.c:678
 call_write_iter include/linux/fs.h:2114 [inline]
 new_sync_write+0x426/0x650 fs/read_write.c:518
 vfs_write+0x796/0xa30 fs/read_write.c:605
 ksys_write+0x12d/0x250 fs/read_write.c:658
 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f287f7ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
RDX: 0000000000400c00 RSI: 0000000020000200 RDI: 0000000000000006
RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
R13: 00007ffef8e7a28f R14: 00007f287f7ab300 R15: 0000000000022000