====================================== | [ 19.211936][ T346] page dumped because: VM_BUG_ON_PAGE(({ __kcsan_disable_current(); ; __auto_type __v = (page->page_type); ; __kcsan_enable_current(); __v; }) != (~0U)) | [ 19.212315][ T346] ------------[ cut here ]------------ | [ 19.212455][ T346] kernel BUG at ./include/linux/page-flags.h:1062! | [ 19.212627][ T346] Oops: invalid opcode: 0000 [#1] SMP KASAN [ 19.212911][ T346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 19.213117][ T346] RIP: 0010:page_pool_set_pp_info (./include/linux/page-flags.h:1062 (discriminator 9) net/core/page_pool.c:716 (discriminator 9)) [ 19.213237][ T346] Code: 80 3c 11 00 0f 84 12 ff ff ff 89 04 24 e8 12 de a0 fe 8b 04 24 e9 02 ff ff ff 48 c7 c6 60 98 8d 85 48 89 df e8 6b d0 89 fe 90 <0f> 0b e8 f3 dc a0 fe e9 58 ff ff ff e8 29 dd a0 fe e9 a9 fe ff ff All code ======== 0: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) 4: 0f 84 12 ff ff ff je 0xffffffffffffff1c a: 89 04 24 mov %eax,(%rsp) d: e8 12 de a0 fe call 0xfffffffffea0de24 12: 8b 04 24 mov (%rsp),%eax 15: e9 02 ff ff ff jmp 0xffffffffffffff1c 1a: 48 c7 c6 60 98 8d 85 mov $0xffffffff858d9860,%rsi 21: 48 89 df mov %rbx,%rdi 24: e8 6b d0 89 fe call 0xfffffffffe89d094 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: e8 f3 dc a0 fe call 0xfffffffffea0dd24 31: e9 58 ff ff ff jmp 0xffffffffffffff8e 36: e8 29 dd a0 fe call 0xfffffffffea0dd64 3b: e9 a9 fe ff ff jmp 0xfffffffffffffee9 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: e8 f3 dc a0 fe call 0xfffffffffea0dcfa 7: e9 58 ff ff ff jmp 0xffffffffffffff64 c: e8 29 dd a0 fe call 0xfffffffffea0dd3a 11: e9 a9 fe ff ff jmp 0xfffffffffffffebf [ 19.213568][ T346] RSP: 0018:ffa000000185f8a0 EFLAGS: 00010282 [ 19.213682][ T346] RAX: 0000000000000096 RBX: ff110000183fffc0 RCX: 0000000000000000 [ 19.213816][ T346] RDX: 0000000000000096 RSI: 1ffffffff1217b44 RDI: fff3fc000030beff [ 19.213946][ T346] RBP: ff11000018370800 R08: ffffffff82bbf47a R09: 1ffffffff0cbea44 [ 19.214083][ T346] R10: 0000000000000003 R11: fffffbfff0cbea45 R12: ff110000183fffc1 [ 19.214217][ T346] R13: 0000000000000000 R14: ff110000183fffc0 R15: 0000000000000000 [ 19.214345][ T346] FS: 00007fb6d9e68b80(0000) GS:ff110000e45c6000(0000) knlGS:0000000000000000 [ 19.214501][ T346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.214617][ T346] CR2: 00007fb6d9f70360 CR3: 000000000eb7a001 CR4: 0000000000771ef0 [ 19.214746][ T346] PKRU: 55555554 [ 19.214813][ T346] Call Trace: [ 19.214882][ T346] [ 19.214928][ T346] net_mp_niov_set_page_pool (net/core/page_pool.c:1360) [ 19.215021][ T346] io_pp_zc_alloc_netmems (io_uring/zcrx.c:1089 io_uring/zcrx.c:1110) [ 19.215109][ T346] fbnic_fill_bdq (./include/net/page_pool/helpers.h:160 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:906) [ 19.215201][ T346] __fbnic_nv_restart (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2470 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2874) [ 19.215289][ T346] fbnic_queue_start (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2903) [ 19.215380][ T346] netdev_rx_queue_reconfig (net/core/netdev_rx_queue.c:137) [ 19.215467][ T346] __netif_mp_open_rxq (net/core/netdev_rx_queue.c:234) [ 19.215554][ T346] ? netdev_rx_queue_restart (net/core/netdev_rx_queue.c:184) [ 19.215642][ T346] io_register_zcrx (io_uring/zcrx.c:818 io_uring/zcrx.c:903) [ 19.215728][ T346] ? io_zcrx_get_region (io_uring/zcrx.c:675 (discriminator 1)) [ 19.215825][ T346] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 19.215913][ T346] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 19.216022][ T346] __io_uring_register (io_uring/register.c:931) [ 19.216109][ T346] ? io_register_resize_rings (./arch/x86/include/asm/atomic.h:28) [ 19.216216][ T346] ? __fget_files (./include/linux/rcupdate.h:871 fs/file.c:1101) [ 19.216306][ T346] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 19.216420][ T346] __do_sys_io_uring_register (io_uring/register.c:1029) [ 19.216510][ T346] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 19.216595][ T346] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 19.216685][ T346] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 19.216772][ T346] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 19.216857][ T346] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 19.216965][ T346] RIP: 0033:0x7fb6da067ed8 [ 19.217058][ T346] Code: 00 00 f3 0f 1e fa 48 89 f2 f6 87 d0 00 00 00 01 74 20 8b bf cc 00 00 00 be 20 00 00 80 41 ba 01 00 00 00 b8 ab 01 00 00 0f 05 0f 1f 80 00 00 00 00 8b bf c4 00 00 00 be 20 00 00 00 eb de 0f All code ======== 0: 00 00 add %al,(%rax) 2: f3 0f 1e fa endbr64 6: 48 89 f2 mov %rsi,%rdx 9: f6 87 d0 00 00 00 01 testb $0x1,0xd0(%rdi) 10: 74 20 je 0x32 12: 8b bf cc 00 00 00 mov 0xcc(%rdi),%edi 18: be 20 00 00 80 mov $0x80000020,%esi 1d: 41 ba 01 00 00 00 mov $0x1,%r10d 23: b8 ab 01 00 00 mov $0x1ab,%eax 28: 0f 05 syscall 2a:* c3 ret <-- trapping instruction 2b: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 32: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi 38: be 20 00 00 00 mov $0x20,%esi 3d: eb de jmp 0x1d 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: c3 ret 1: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 8: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi e: be 20 00 00 00 mov $0x20,%esi 13: eb de jmp 0xfffffffffffffff3 15: 0f .byte 0xf [ 19.217367][ T346] RSP: 002b:00007ffd1eea7fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 19.217499][ T346] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6da067ed8 [ 19.217630][ T346] RDX: 00007ffd1eea7ff0 RSI: 0000000000000020 RDI: 0000000000000004 [ 19.217766][ T346] RBP: 00007ffd1eea8100 R08: 0000000000000000 R09: 0000000000000000 [ 19.217901][ T346] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffd1eea83c8 Finger prints: page_pool_set_pp_info:net_mp_niov_set_page_pool:io_pp_zc_alloc_netmems:fbnic_fill_bdq:__fbnic_nv_restart