====================================== | [ 19.371817][ T347] page dumped because: VM_BUG_ON_PAGE(({ __kcsan_disable_current(); ; __auto_type __v = (page->page_type); ; __kcsan_enable_current(); __v; }) != (~0U)) | [ 19.372215][ T347] ------------[ cut here ]------------ | [ 19.372358][ T347] kernel BUG at ./include/linux/page-flags.h:1062! | [ 19.372544][ T347] Oops: invalid opcode: 0000 [#1] SMP KASAN [ 19.372863][ T347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 19.373078][ T347] RIP: 0010:page_pool_set_pp_info (./include/linux/page-flags.h:1062 (discriminator 9) net/core/page_pool.c:716 (discriminator 9)) [ 19.373209][ T347] Code: 80 3c 11 00 0f 84 12 ff ff ff 89 04 24 e8 12 de a0 fe 8b 04 24 e9 02 ff ff ff 48 c7 c6 60 98 0d a1 48 89 df e8 6b d0 89 fe 90 <0f> 0b e8 f3 dc a0 fe e9 58 ff ff ff e8 29 dd a0 fe e9 a9 fe ff ff All code ======== 0: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) 4: 0f 84 12 ff ff ff je 0xffffffffffffff1c a: 89 04 24 mov %eax,(%rsp) d: e8 12 de a0 fe call 0xfffffffffea0de24 12: 8b 04 24 mov (%rsp),%eax 15: e9 02 ff ff ff jmp 0xffffffffffffff1c 1a: 48 c7 c6 60 98 0d a1 mov $0xffffffffa10d9860,%rsi 21: 48 89 df mov %rbx,%rdi 24: e8 6b d0 89 fe call 0xfffffffffe89d094 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: e8 f3 dc a0 fe call 0xfffffffffea0dd24 31: e9 58 ff ff ff jmp 0xffffffffffffff8e 36: e8 29 dd a0 fe call 0xfffffffffea0dd64 3b: e9 a9 fe ff ff jmp 0xfffffffffffffee9 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: e8 f3 dc a0 fe call 0xfffffffffea0dcfa 7: e9 58 ff ff ff jmp 0xffffffffffffff64 c: e8 29 dd a0 fe call 0xfffffffffea0dd3a 11: e9 a9 fe ff ff jmp 0xfffffffffffffebf [ 19.373546][ T347] RSP: 0018:ffa000000184f8a0 EFLAGS: 00010282 [ 19.373677][ T347] RAX: 0000000000000096 RBX: ff110000177fffc0 RCX: 0000000000000000 [ 19.373823][ T347] RDX: 0000000000000096 RSI: 1ffffffff4917b44 RDI: fff3fc0000309eff [ 19.373962][ T347] RBP: ff11000005653800 R08: ffffffff9e3bf47a R09: 1ffffffff43bea44 [ 19.374103][ T347] R10: 0000000000000003 R11: fffffbfff43bea45 R12: ff110000177fffc1 [ 19.374260][ T347] R13: 0000000000000000 R14: ff110000177fffc0 R15: 0000000000000000 [ 19.374396][ T347] FS: 00007f1b0c03bb80(0000) GS:ff110000c8dc6000(0000) knlGS:0000000000000000 [ 19.374556][ T347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.374674][ T347] CR2: 00007f1b0c2395e0 CR3: 000000000c7e3006 CR4: 0000000000771ef0 [ 19.374813][ T347] PKRU: 55555554 [ 19.374881][ T347] Call Trace: [ 19.374950][ T347] [ 19.374996][ T347] net_mp_niov_set_page_pool (net/core/page_pool.c:1360) [ 19.375089][ T347] io_pp_zc_alloc_netmems (io_uring/zcrx.c:1089 io_uring/zcrx.c:1110) [ 19.375181][ T347] fbnic_fill_bdq (./include/net/page_pool/helpers.h:160 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:906) [ 19.375271][ T347] __fbnic_nv_restart (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2470 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2874) [ 19.375362][ T347] fbnic_queue_start (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2903) [ 19.375451][ T347] netdev_rx_queue_reconfig (net/core/netdev_rx_queue.c:137) [ 19.375549][ T347] __netif_mp_open_rxq (net/core/netdev_rx_queue.c:234) [ 19.375638][ T347] ? netdev_rx_queue_restart (net/core/netdev_rx_queue.c:184) [ 19.375734][ T347] io_register_zcrx (io_uring/zcrx.c:818 io_uring/zcrx.c:903) [ 19.375821][ T347] ? io_zcrx_get_region (io_uring/zcrx.c:675 (discriminator 1)) [ 19.375914][ T347] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 19.376004][ T347] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 19.376121][ T347] __io_uring_register (io_uring/register.c:931) [ 19.376211][ T347] ? io_register_resize_rings (./arch/x86/include/asm/atomic.h:28) [ 19.376327][ T347] ? __fget_files (./include/linux/rcupdate.h:871 fs/file.c:1101) [ 19.376419][ T347] ? __do_sys_io_uring_register (io_uring/register.c:1028) [ 19.376533][ T347] __do_sys_io_uring_register (io_uring/register.c:1029) [ 19.376623][ T347] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 19.376716][ T347] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 19.376812][ T347] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 19.376901][ T347] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 19.376991][ T347] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 19.377101][ T347] RIP: 0033:0x7f1b0c23aed8 [ 19.377197][ T347] Code: 00 00 f3 0f 1e fa 48 89 f2 f6 87 d0 00 00 00 01 74 20 8b bf cc 00 00 00 be 20 00 00 80 41 ba 01 00 00 00 b8 ab 01 00 00 0f 05 0f 1f 80 00 00 00 00 8b bf c4 00 00 00 be 20 00 00 00 eb de 0f All code ======== 0: 00 00 add %al,(%rax) 2: f3 0f 1e fa endbr64 6: 48 89 f2 mov %rsi,%rdx 9: f6 87 d0 00 00 00 01 testb $0x1,0xd0(%rdi) 10: 74 20 je 0x32 12: 8b bf cc 00 00 00 mov 0xcc(%rdi),%edi 18: be 20 00 00 80 mov $0x80000020,%esi 1d: 41 ba 01 00 00 00 mov $0x1,%r10d 23: b8 ab 01 00 00 mov $0x1ab,%eax 28: 0f 05 syscall 2a:* c3 ret <-- trapping instruction 2b: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 32: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi 38: be 20 00 00 00 mov $0x20,%esi 3d: eb de jmp 0x1d 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: c3 ret 1: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 8: 8b bf c4 00 00 00 mov 0xc4(%rdi),%edi e: be 20 00 00 00 mov $0x20,%esi 13: eb de jmp 0xfffffffffffffff3 15: 0f .byte 0xf [ 19.377513][ T347] RSP: 002b:00007ffcc90c1798 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 19.377654][ T347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b0c23aed8 [ 19.377790][ T347] RDX: 00007ffcc90c17b0 RSI: 0000000000000020 RDI: 0000000000000004 [ 19.377923][ T347] RBP: 00007ffcc90c18c0 R08: 0000000000000000 R09: 0000000000000000 [ 19.378060][ T347] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffcc90c1b88 Finger prints: page_pool_set_pp_info:net_mp_niov_set_page_pool:io_pp_zc_alloc_netmems:fbnic_fill_bdq:__fbnic_nv_restart