====================================== | [ 126.855210][ T1991] page dumped because: VM_BUG_ON_PAGE(({ __kcsan_disable_current(); ; __auto_type __v = (page->page_type); ; __kcsan_enable_current(); __v; }) != (~0U)) | [ 126.855785][ T1991] ------------[ cut here ]------------ | [ 126.856001][ T1991] kernel BUG at ./include/linux/page-flags.h:1062! | [ 126.856290][ T1991] Oops: invalid opcode: 0000 [#1] SMP KASAN [ 126.856693][ T1991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 126.856992][ T1991] RIP: 0010:page_pool_set_pp_info (./include/linux/page-flags.h:1062 (discriminator 9) net/core/page_pool.c:716 (discriminator 9)) [ 126.857166][ T1991] Code: 80 3c 11 00 0f 84 12 ff ff ff 89 04 24 e8 12 de a0 fe 8b 04 24 e9 02 ff ff ff 48 c7 c6 60 98 6d 90 48 89 df e8 6b d0 89 fe 90 <0f> 0b e8 f3 dc a0 fe e9 58 ff ff ff e8 29 dd a0 fe e9 a9 fe ff ff All code ======== 0: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) 4: 0f 84 12 ff ff ff je 0xffffffffffffff1c a: 89 04 24 mov %eax,(%rsp) d: e8 12 de a0 fe call 0xfffffffffea0de24 12: 8b 04 24 mov (%rsp),%eax 15: e9 02 ff ff ff jmp 0xffffffffffffff1c 1a: 48 c7 c6 60 98 6d 90 mov $0xffffffff906d9860,%rsi 21: 48 89 df mov %rbx,%rdi 24: e8 6b d0 89 fe call 0xfffffffffe89d094 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: e8 f3 dc a0 fe call 0xfffffffffea0dd24 31: e9 58 ff ff ff jmp 0xffffffffffffff8e 36: e8 29 dd a0 fe call 0xfffffffffea0dd64 3b: e9 a9 fe ff ff jmp 0xfffffffffffffee9 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: e8 f3 dc a0 fe call 0xfffffffffea0dcfa 7: e9 58 ff ff ff jmp 0xffffffffffffff64 c: e8 29 dd a0 fe call 0xfffffffffea0dd3a 11: e9 a9 fe ff ff jmp 0xfffffffffffffebf [ 126.857659][ T1991] RSP: 0018:ffa0000005a9f8a0 EFLAGS: 00010282 [ 126.857825][ T1991] RAX: 0000000000000096 RBX: ff110000207fffc0 RCX: 0000000000000000 [ 126.858018][ T1991] RDX: 0000000000000096 RSI: 1ffffffff27d7b44 RDI: fff3fc0000b53eff [ 126.858217][ T1991] RBP: ff1100000ea6e800 R08: ffffffff8d9bf47a R09: 1ffffffff227ea44 [ 126.858419][ T1991] R10: 0000000000000003 R11: fffffbfff227ea45 R12: ff110000207fffc1 [ 126.858616][ T1991] R13: 0000000000000000 R14: ff110000207fffc0 R15: 0000000000000000 [ 126.858818][ T1991] FS: 00007f0116640b80(0000) GS:ff110000d98c6000(0000) knlGS:0000000000000000 [ 126.859054][ T1991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.859228][ T1991] CR2: 00007f011683e5e0 CR3: 000000001d40e001 CR4: 0000000000771ef0 [ 126.859426][ T1991] PKRU: 55555554 [ 126.859523][ T1991] Call Trace: [ 126.859623][ T1991] [ 126.859694][ T1991] net_mp_niov_set_page_pool (net/core/page_pool.c:1360) [ 126.859838][ T1991] io_pp_zc_alloc_netmems (io_uring/zcrx.c:1089 io_uring/zcrx.c:1110) [ 126.859974][ T1991] fbnic_fill_bdq (./include/net/page_pool/helpers.h:160 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:906) [ 126.860109][ T1991] __fbnic_nv_restart (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2470 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2874) [ 126.860240][ T1991] fbnic_queue_start (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2903) [ 126.860370][ T1991] netdev_rx_queue_reconfig (net/core/netdev_rx_queue.c:137) [ 126.860498][ T1991] __netif_mp_open_rxq (net/core/netdev_rx_queue.c:234) [ 126.860626][ T1991] ? netdev_rx_queue_restart (net/core/netdev_rx_queue.c:184) [ 126.860764][ T1991] io_register_zcrx (io_uring/zcrx.c:818 io_uring/zcrx.c:903) [ 126.860892][ T1991] ? io_zcrx_get_region (io_uring/zcrx.c:675 (discriminator 1)) [ 126.861026][ T1991] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 126.861160][ T1991] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 126.861330][ T1991] __io_uring_register (io_uring/register.c:931) [ 126.861462][ T1991] ? io_register_resize_rings (./arch/x86/include/asm/atomic.h:28) [ 126.861630][ T1991] ? __fget_files (./include/linux/rcupdate.h:871 fs/file.c:1101) [ 126.861762][ T1991] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 126.861919][ T1991] __do_sys_io_uring_register (io_uring/register.c:1029) [ 126.862047][ T1991] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 126.862184][ T1991] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 126.862318][ T1991] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 126.862453][ T1991] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 126.862588][ T1991] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 126.862760][ T1991] RIP: 0033:0x7f011683fed8 [ 126.862899][ T1991] Code: 00 00 f3 0f 1e fa 48 89 f2 f6 87 d0 00 00 00 01 74 20 8b bf cc 00 00 00 be 20 00 00 80 41 ba 01 00 00 00 b8 ab 01 00 00 0f 05 0f 1f 80 00 00 00 00 8b bf c4 00 00 00 be 20 00 00 00 eb de 0f All code ======== 0: 00 00 add %al,(%rax) 2: f3 0f 1e fa endbr64 6: 48 89 f2 mov %rsi,%rdx 9: f6 87 d0 00 00 00 01 testb $0x1,0xd0(%rdi) 10: 74 20 je 0x32 12: 8b bf cc 00 00 00 mov 0xcc(%rdi),%edi 18: be 20 00 00 80 mov $0x80000020,%esi 1d: 41 ba 01 00 00 00 mov $0x1,%r10d 23: b8 ab 01 00 00 mov $0x1ab,%eax 28: 0f 05 syscall 2a:* c3 ret <-- trapping instruction 2b: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 32: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi 38: be 20 00 00 00 mov $0x20,%esi 3d: eb de jmp 0x1d 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: c3 ret 1: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 8: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi e: be 20 00 00 00 mov $0x20,%esi 13: eb de jmp 0xfffffffffffffff3 15: 0f .byte 0xf [ 126.863374][ T1991] RSP: 002b:00007fff33d0b538 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 126.863582][ T1991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f011683fed8 [ 126.863786][ T1991] RDX: 00007fff33d0b550 RSI: 0000000000000020 RDI: 0000000000000004 [ 126.863986][ T1991] RBP: 00007fff33d0b660 R08: 0000000000000000 R09: 0000000000000000 [ 126.864186][ T1991] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fff33d0b928 Finger prints: page_pool_set_pp_info:net_mp_niov_set_page_pool:io_pp_zc_alloc_netmems:fbnic_fill_bdq:__fbnic_nv_restart