======================================
| [   20.230955][  T346] page dumped because: VM_BUG_ON_PAGE(({ __kcsan_disable_current(); ; __auto_type __v = (page->page_type); ; __kcsan_enable_current(); __v; }) != (~0U))
| [   20.231333][  T346] ------------[ cut here ]------------
| [   20.231487][  T346] kernel BUG at ./include/linux/page-flags.h:1062!
| [   20.231674][  T346] Oops: invalid opcode: 0000 [#1] SMP KASAN
[   20.231977][  T346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   20.232185][  T346] RIP: 0010:page_pool_set_pp_info (./include/linux/page-flags.h:1062 (discriminator 9) net/core/page_pool.c:716 (discriminator 9))
[   20.232317][  T346] Code: 80 3c 11 00 0f 84 12 ff ff ff 89 04 24 e8 12 de a0 fe 8b 04 24 e9 02 ff ff ff 48 c7 c6 60 98 8d ad 48 89 df e8 6b d0 89 fe 90 <0f> 0b e8 f3 dc a0 fe e9 58 ff ff ff e8 29 dd a0 fe e9 a9 fe ff ff
All code
========
   0:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)
   4:	0f 84 12 ff ff ff    	je     0xffffffffffffff1c
   a:	89 04 24             	mov    %eax,(%rsp)
   d:	e8 12 de a0 fe       	call   0xfffffffffea0de24
  12:	8b 04 24             	mov    (%rsp),%eax
  15:	e9 02 ff ff ff       	jmp    0xffffffffffffff1c
  1a:	48 c7 c6 60 98 8d ad 	mov    $0xffffffffad8d9860,%rsi
  21:	48 89 df             	mov    %rbx,%rdi
  24:	e8 6b d0 89 fe       	call   0xfffffffffe89d094
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	e8 f3 dc a0 fe       	call   0xfffffffffea0dd24
  31:	e9 58 ff ff ff       	jmp    0xffffffffffffff8e
  36:	e8 29 dd a0 fe       	call   0xfffffffffea0dd64
  3b:	e9 a9 fe ff ff       	jmp    0xfffffffffffffee9

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	e8 f3 dc a0 fe       	call   0xfffffffffea0dcfa
   7:	e9 58 ff ff ff       	jmp    0xffffffffffffff64
   c:	e8 29 dd a0 fe       	call   0xfffffffffea0dd3a
  11:	e9 a9 fe ff ff       	jmp    0xfffffffffffffebf
[   20.232652][  T346] RSP: 0018:ffa00000017ef8a0 EFLAGS: 00010282
[   20.232770][  T346] RAX: 0000000000000096 RBX: ff1100001727ffc0 RCX: 0000000000000000
[   20.232927][  T346] RDX: 0000000000000096 RSI: 1ffffffff6217b44 RDI: fff3fc00002fdeff
[   20.233066][  T346] RBP: ff1100000d63b800 R08: ffffffffaabbf47a R09: 1ffffffff5cbea44
[   20.233204][  T346] R10: 0000000000000003 R11: fffffbfff5cbea45 R12: ff1100001727ffc1
[   20.233342][  T346] R13: 0000000000000000 R14: ff1100001727ffc0 R15: 0000000000000000
[   20.233503][  T346] FS:  00007feeb7992b80(0000) GS:ff110000bc546000(0000) knlGS:0000000000000000
[   20.233670][  T346] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   20.233788][  T346] CR2: 00007feeb7b905e0 CR3: 000000000edce006 CR4: 0000000000771ef0
[   20.233930][  T346] PKRU: 55555554
[   20.234004][  T346] Call Trace:
[   20.234084][  T346]  <TASK>
[   20.234134][  T346]  net_mp_niov_set_page_pool (net/core/page_pool.c:1360)
[   20.234232][  T346]  io_pp_zc_alloc_netmems (io_uring/zcrx.c:1089 io_uring/zcrx.c:1110)
[   20.234330][  T346]  fbnic_fill_bdq (./include/net/page_pool/helpers.h:160 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:906)
[   20.234424][  T346]  __fbnic_nv_restart (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2470 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2874)
[   20.234518][  T346]  fbnic_queue_start (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2903)
[   20.234610][  T346]  netdev_rx_queue_reconfig (net/core/netdev_rx_queue.c:137)
[   20.234704][  T346]  __netif_mp_open_rxq (net/core/netdev_rx_queue.c:234)
[   20.234799][  T346]  ? netdev_rx_queue_restart (net/core/netdev_rx_queue.c:184)
[   20.234891][  T346]  io_register_zcrx (io_uring/zcrx.c:818 io_uring/zcrx.c:903)
[   20.234983][  T346]  ? io_zcrx_get_region (io_uring/zcrx.c:675 (discriminator 1))
[   20.235081][  T346]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   20.235174][  T346]  ? __do_sys_io_uring_register (io_uring/register.c:1028)
[   20.235291][  T346]  __io_uring_register (io_uring/register.c:931)
[   20.235383][  T346]  ? io_register_resize_rings (./arch/x86/include/asm/atomic.h:28)
[   20.235511][  T346]  ? __fget_files (./include/linux/rcupdate.h:871 fs/file.c:1101)
[   20.235603][  T346]  ? __do_sys_io_uring_register (io_uring/register.c:1028)
[   20.235720][  T346]  __do_sys_io_uring_register (io_uring/register.c:1029)
[   20.235811][  T346]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   20.235901][  T346]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   20.235994][  T346]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[   20.236085][  T346]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[   20.236180][  T346]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   20.236292][  T346] RIP: 0033:0x7feeb7b91ed8
[   20.236390][  T346] Code: 00 00 f3 0f 1e fa 48 89 f2 f6 87 d0 00 00 00 01 74 20 8b bf cc 00 00 00 be 20 00 00 80 41 ba 01 00 00 00 b8 ab 01 00 00 0f 05 <c3> 0f 1f 80 00 00 00 00 8b bf c4 00 00 00 be 20 00 00 00 eb de 0f
All code
========
   0:	00 00                	add    %al,(%rax)
   2:	f3 0f 1e fa          	endbr64
   6:	48 89 f2             	mov    %rsi,%rdx
   9:	f6 87 d0 00 00 00 01 	testb  $0x1,0xd0(%rdi)
  10:	74 20                	je     0x32
  12:	8b bf cc 00 00 00    	mov    0xcc(%rdi),%edi
  18:	be 20 00 00 80       	mov    $0x80000020,%esi
  1d:	41 ba 01 00 00 00    	mov    $0x1,%r10d
  23:	b8 ab 01 00 00       	mov    $0x1ab,%eax
  28:	0f 05                	syscall
  2a:*	c3                   	ret		<-- trapping instruction
  2b:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  32:	8b bf c4 00 00 00    	mov    0xc4(%rdi),%edi
  38:	be 20 00 00 00       	mov    $0x20,%esi
  3d:	eb de                	jmp    0x1d
  3f:	0f                   	.byte 0xf

Code starting with the faulting instruction
===========================================
   0:	c3                   	ret
   1:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
   8:	8b bf c4 00 00 00    	mov    0xc4(%rdi),%edi
   e:	be 20 00 00 00       	mov    $0x20,%esi
  13:	eb de                	jmp    0xfffffffffffffff3
  15:	0f                   	.byte 0xf
[   20.236714][  T346] RSP: 002b:00007fffbf647978 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[   20.236857][  T346] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feeb7b91ed8
[   20.236996][  T346] RDX: 00007fffbf647990 RSI: 0000000000000020 RDI: 0000000000000004
[   20.237132][  T346] RBP: 00007fffbf647aa0 R08: 0000000000000000 R09: 0000000000000000
[   20.237268][  T346] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fffbf647d68


Finger prints:
page_pool_set_pp_info:net_mp_niov_set_page_pool:io_pp_zc_alloc_netmems:fbnic_fill_bdq:__fbnic_nv_restart