====================================== | [ 18.777187][ T346] page dumped because: VM_BUG_ON_PAGE(({ __kcsan_disable_current(); ; __auto_type __v = (page->page_type); ; __kcsan_enable_current(); __v; }) != (~0U)) | [ 18.777681][ T346] ------------[ cut here ]------------ | [ 18.777858][ T346] kernel BUG at ./include/linux/page-flags.h:1062! | [ 18.778087][ T346] Oops: invalid opcode: 0000 [#1] SMP KASAN [ 18.778436][ T346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 18.778685][ T346] RIP: 0010:page_pool_set_pp_info (./include/linux/page-flags.h:1062 (discriminator 9) net/core/page_pool.c:716 (discriminator 9)) [ 18.778832][ T346] Code: 80 3c 11 00 0f 84 12 ff ff ff 89 04 24 e8 12 de a0 fe 8b 04 24 e9 02 ff ff ff 48 c7 c6 60 98 0d b9 48 89 df e8 6b d0 89 fe 90 <0f> 0b e8 f3 dc a0 fe e9 58 ff ff ff e8 29 dd a0 fe e9 a9 fe ff ff All code ======== 0: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) 4: 0f 84 12 ff ff ff je 0xffffffffffffff1c a: 89 04 24 mov %eax,(%rsp) d: e8 12 de a0 fe call 0xfffffffffea0de24 12: 8b 04 24 mov (%rsp),%eax 15: e9 02 ff ff ff jmp 0xffffffffffffff1c 1a: 48 c7 c6 60 98 0d b9 mov $0xffffffffb90d9860,%rsi 21: 48 89 df mov %rbx,%rdi 24: e8 6b d0 89 fe call 0xfffffffffe89d094 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: e8 f3 dc a0 fe call 0xfffffffffea0dd24 31: e9 58 ff ff ff jmp 0xffffffffffffff8e 36: e8 29 dd a0 fe call 0xfffffffffea0dd64 3b: e9 a9 fe ff ff jmp 0xfffffffffffffee9 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: e8 f3 dc a0 fe call 0xfffffffffea0dcfa 7: e9 58 ff ff ff jmp 0xffffffffffffff64 c: e8 29 dd a0 fe call 0xfffffffffea0dd3a 11: e9 a9 fe ff ff jmp 0xfffffffffffffebf [ 18.779197][ T346] RSP: 0018:ffa00000017ff8a0 EFLAGS: 00010282 [ 18.779346][ T346] RAX: 0000000000000096 RBX: ff110000178fffc0 RCX: 0000000000000000 [ 18.779498][ T346] RDX: 0000000000000096 RSI: 1ffffffff7917b44 RDI: fff3fc00002ffeff [ 18.779657][ T346] RBP: ff1100000dd96800 R08: ffffffffb63bf47a R09: 1ffffffff73bea44 [ 18.779808][ T346] R10: 0000000000000003 R11: fffffbfff73bea45 R12: ff110000178fffc1 [ 18.779965][ T346] R13: 0000000000000000 R14: ff110000178fffc0 R15: 0000000000000000 [ 18.780121][ T346] FS: 00007f08b0a63b80(0000) GS:ff110000b0cc6000(0000) knlGS:0000000000000000 [ 18.780303][ T346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.780441][ T346] CR2: 00007f08b0c615e0 CR3: 0000000009ffd003 CR4: 0000000000771ef0 [ 18.780592][ T346] PKRU: 55555554 [ 18.780670][ T346] Call Trace: [ 18.780746][ T346] [ 18.780796][ T346] net_mp_niov_set_page_pool (net/core/page_pool.c:1360) [ 18.780895][ T346] io_pp_zc_alloc_netmems (io_uring/zcrx.c:1089 io_uring/zcrx.c:1110) [ 18.781000][ T346] fbnic_fill_bdq (./include/net/page_pool/helpers.h:160 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:906) [ 18.781106][ T346] __fbnic_nv_restart (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2470 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2874) [ 18.781206][ T346] fbnic_queue_start (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2903) [ 18.781315][ T346] netdev_rx_queue_reconfig (net/core/netdev_rx_queue.c:137) [ 18.781415][ T346] __netif_mp_open_rxq (net/core/netdev_rx_queue.c:234) [ 18.781522][ T346] ? netdev_rx_queue_restart (net/core/netdev_rx_queue.c:184) [ 18.781626][ T346] io_register_zcrx (io_uring/zcrx.c:818 io_uring/zcrx.c:903) [ 18.781725][ T346] ? io_zcrx_get_region (io_uring/zcrx.c:675 (discriminator 1)) [ 18.781833][ T346] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 18.781943][ T346] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 18.782060][ T346] __io_uring_register (io_uring/register.c:931) [ 18.782157][ T346] ? io_register_resize_rings (./arch/x86/include/asm/atomic.h:28) [ 18.782285][ T346] ? __fget_files (./include/linux/rcupdate.h:871 fs/file.c:1101) [ 18.782389][ T346] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 18.782507][ T346] __do_sys_io_uring_register (io_uring/register.c:1029) [ 18.782619][ T346] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 18.782714][ T346] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 18.782816][ T346] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 18.782921][ T346] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 18.783026][ T346] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 18.783148][ T346] RIP: 0033:0x7f08b0c62ed8 [ 18.783264][ T346] Code: 00 00 f3 0f 1e fa 48 89 f2 f6 87 d0 00 00 00 01 74 20 8b bf cc 00 00 00 be 20 00 00 80 41 ba 01 00 00 00 b8 ab 01 00 00 0f 05 0f 1f 80 00 00 00 00 8b bf c4 00 00 00 be 20 00 00 00 eb de 0f All code ======== 0: 00 00 add %al,(%rax) 2: f3 0f 1e fa endbr64 6: 48 89 f2 mov %rsi,%rdx 9: f6 87 d0 00 00 00 01 testb $0x1,0xd0(%rdi) 10: 74 20 je 0x32 12: 8b bf cc 00 00 00 mov 0xcc(%rdi),%edi 18: be 20 00 00 80 mov $0x80000020,%esi 1d: 41 ba 01 00 00 00 mov $0x1,%r10d 23: b8 ab 01 00 00 mov $0x1ab,%eax 28: 0f 05 syscall 2a:* c3 ret <-- trapping instruction 2b: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 32: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi 38: be 20 00 00 00 mov $0x20,%esi 3d: eb de jmp 0x1d 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: c3 ret 1: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 8: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi e: be 20 00 00 00 mov $0x20,%esi 13: eb de jmp 0xfffffffffffffff3 15: 0f .byte 0xf [ 18.783601][ T346] RSP: 002b:00007fffbe11bd18 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 18.783741][ T346] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08b0c62ed8 [ 18.783893][ T346] RDX: 00007fffbe11bd30 RSI: 0000000000000020 RDI: 0000000000000004 [ 18.784050][ T346] RBP: 00007fffbe11be40 R08: 0000000000000000 R09: 0000000000000000 [ 18.784196][ T346] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fffbe11c108 Finger prints: page_pool_set_pp_info:net_mp_niov_set_page_pool:io_pp_zc_alloc_netmems:fbnic_fill_bdq:__fbnic_nv_restart