random: crng reseeded on system resumption
BUG: unable to handle page fault for address: ffffffffffffffff
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 5a8b067 P4D 5a8b067 PUD 5a8d067 PMD 0 
Oops: Oops: 0000 [#1] SMP KASAN NOPTI
CPU: 1 UID: 0 PID: 849 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) 
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:__cpa_flush_tlb+0xdc/0x2a0
Code: 24 e8 98 ad 3c 00 45 85 ff 0f 85 19 01 00 00 e8 5a b2 3c 00 48 89 e8 48 c1 e8 03 42 80 3c 28 00 0f 85 63 01 00 00 48 c1 e3 0c <48> 03 5d 00 e8 3b b2 3c 00 48 8d 3c 1b 41 8d 5e 01 48 d1 ff 49 89
RSP: 0018:ffff88806cf08df0 EFLAGS: 00010056
RAX: 1fffffffffffffff RBX: 0000000000000000 RCX: ffffffff8136ea38
RDX: ffff888016fc8000 RSI: ffffffff8136ea46 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: fffffbfff0c8720a
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888039887ba0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000555576bc9400(0000) GS:ffff8880e56ef000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffff CR3: 0000000029645000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 __flush_smp_call_function_queue+0x20d/0x740
 __sysvec_call_function_single+0x6d/0x360
 sysvec_call_function_single+0x5f/0xc0
 asm_sysvec_call_function_single+0x1a/0x20
RIP: 0010:handle_softirqs+0x174/0x770
Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf b4 47 06 00 00 e8 42 6b 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d
RSP: 0018:ffff88806cf08f78 EFLAGS: 00000216
RAX: 000000000037ed30 RBX: 00000000ffffffff RCX: ffffffff817bc5c6
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e
RBP: ffff888028c676b8 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff86439057 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_acquire+0x5b/0x2f0
Code: 30 31 c0 66 90 65 8b 05 b7 5e 31 06 89 c0 48 0f a3 05 c9 de f1 04 0f 82 3a 01 00 00 8b 35 b1 ea f1 04 85 f6 0f 85 84 00 00 00 <48> 8b 44 24 30 65 48 2b 05 60 5e 31 06 0f 85 6e 02 00 00 48 83 c4
RSP: 0018:ffff888028c67760 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4b952e4da9267483
RDX: 00000000915d54c6 RSI: 000000005e406224 RDI: 0000000000104185
RBP: ffffffff85c1ccc0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000200
 unwind_next_frame+0xcd/0x2540
 __unwind_start+0x517/0x7c0
 arch_stack_walk+0x62/0xf0
 stack_trace_save+0x8e/0xc0
 kasan_save_stack+0x24/0x50
 kasan_save_track+0x14/0x30
 __kasan_slab_alloc+0x59/0x70
 kmem_cache_alloc_noprof+0x13c/0x470
 __alloc_object+0x2f/0x2d0
 __create_object+0x1d/0x80
 kmem_cache_alloc_noprof+0x397/0x470
 getname_flags.part.0+0x48/0x540
 getname_flags+0x95/0xe0
 do_sys_openat2+0x9f/0x1b0
 __x64_sys_openat+0x142/0x200
 do_syscall_64+0xbf/0x360
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8e47342658
Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
RSP: 002b:00007fff999ef620 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e47342658
RDX: 0000000000090800 RSI: 00007fff999f0850 RDI: 00000000ffffff9c
RBP: 00007fff999f0850 R08: 0000000000090800 R09: 00007fff999f0850
R10: 0000000000000000 R11: 0000000000000287 R12: 00007f8e4739c105
R13: 00007fff999f0850 R14: 0000555576bcac20 R15: 00007fff999f1950
 </TASK>
Modules linked in:
CR2: ffffffffffffffff
---[ end trace 0000000000000000 ]---
RIP: 0010:__cpa_flush_tlb+0xdc/0x2a0
Code: 24 e8 98 ad 3c 00 45 85 ff 0f 85 19 01 00 00 e8 5a b2 3c 00 48 89 e8 48 c1 e8 03 42 80 3c 28 00 0f 85 63 01 00 00 48 c1 e3 0c <48> 03 5d 00 e8 3b b2 3c 00 48 8d 3c 1b 41 8d 5e 01 48 d1 ff 49 89
RSP: 0018:ffff88806cf08df0 EFLAGS: 00010056
RAX: 1fffffffffffffff RBX: 0000000000000000 RCX: ffffffff8136ea38
RDX: ffff888016fc8000 RSI: ffffffff8136ea46 RDI: 0000000000000005
RBP: ffffffffffffffff R08: 0000000000000000 R09: fffffbfff0c8720a
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888039887ba0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000555576bc9400(0000) GS:ffff8880e56ef000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffff CR3: 0000000029645000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
   0:	24 e8                	and    $0xe8,%al
   2:	98                   	cwtl
   3:	ad                   	lods   %ds:(%rsi),%eax
   4:	3c 00                	cmp    $0x0,%al
   6:	45 85 ff             	test   %r15d,%r15d
   9:	0f 85 19 01 00 00    	jne    0x128
   f:	e8 5a b2 3c 00       	callq  0x3cb26e
  14:	48 89 e8             	mov    %rbp,%rax
  17:	48 c1 e8 03          	shr    $0x3,%rax
  1b:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  20:	0f 85 63 01 00 00    	jne    0x189
  26:	48 c1 e3 0c          	shl    $0xc,%rbx
* 2a:	48 03 5d 00          	add    0x0(%rbp),%rbx <-- trapping instruction
  2e:	e8 3b b2 3c 00       	callq  0x3cb26e
  33:	48 8d 3c 1b          	lea    (%rbx,%rbx,1),%rdi
  37:	41 8d 5e 01          	lea    0x1(%r14),%ebx
  3b:	48 d1 ff             	sar    %rdi
  3e:	49                   	rex.WB
  3f:	89                   	.byte 0x89