======================================
| [   20.176214][  T348] page dumped because: VM_BUG_ON_PAGE(({ __kcsan_disable_current(); ; __auto_type __v = (page->page_type); ; __kcsan_enable_current(); __v; }) != (~0U))
| [   20.176627][  T348] ------------[ cut here ]------------
| [   20.176814][  T348] kernel BUG at ./include/linux/page-flags.h:1062!
| [   20.177005][  T348] Oops: invalid opcode: 0000 [#1] SMP KASAN
[   20.177321][  T348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   20.177561][  T348] RIP: 0010:page_pool_set_pp_info (./include/linux/page-flags.h:1062 (discriminator 9) net/core/page_pool.c:716 (discriminator 9))
[   20.177695][  T348] Code: 80 3c 11 00 0f 84 12 ff ff ff 89 04 24 e8 12 de a0 fe 8b 04 24 e9 02 ff ff ff 48 c7 c6 60 98 0d b8 48 89 df e8 6b d0 89 fe 90 <0f> 0b e8 f3 dc a0 fe e9 58 ff ff ff e8 29 dd a0 fe e9 a9 fe ff ff
All code
========
   0:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)
   4:	0f 84 12 ff ff ff    	je     0xffffffffffffff1c
   a:	89 04 24             	mov    %eax,(%rsp)
   d:	e8 12 de a0 fe       	call   0xfffffffffea0de24
  12:	8b 04 24             	mov    (%rsp),%eax
  15:	e9 02 ff ff ff       	jmp    0xffffffffffffff1c
  1a:	48 c7 c6 60 98 0d b8 	mov    $0xffffffffb80d9860,%rsi
  21:	48 89 df             	mov    %rbx,%rdi
  24:	e8 6b d0 89 fe       	call   0xfffffffffe89d094
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	e8 f3 dc a0 fe       	call   0xfffffffffea0dd24
  31:	e9 58 ff ff ff       	jmp    0xffffffffffffff8e
  36:	e8 29 dd a0 fe       	call   0xfffffffffea0dd64
  3b:	e9 a9 fe ff ff       	jmp    0xfffffffffffffee9

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	e8 f3 dc a0 fe       	call   0xfffffffffea0dcfa
   7:	e9 58 ff ff ff       	jmp    0xffffffffffffff64
   c:	e8 29 dd a0 fe       	call   0xfffffffffea0dd3a
  11:	e9 a9 fe ff ff       	jmp    0xfffffffffffffebf
[   20.178045][  T348] RSP: 0018:ffa00000017ef8a0 EFLAGS: 00010282
[   20.178178][  T348] RAX: 0000000000000096 RBX: ff110000187fffc0 RCX: 0000000000000000
[   20.178328][  T348] RDX: 0000000000000096 RSI: 1ffffffff7717b44 RDI: fff3fc00002fdeff
[   20.178482][  T348] RBP: ff1100000f056800 R08: ffffffffb53bf47a R09: 1ffffffff71bea44
[   20.178625][  T348] R10: 0000000000000003 R11: fffffbfff71bea45 R12: ff110000187fffc1
[   20.178775][  T348] R13: 0000000000000000 R14: ff110000187fffc0 R15: 0000000000000000
[   20.178922][  T348] FS:  00007f16dc5cbb80(0000) GS:ff110000b1cc6000(0000) knlGS:0000000000000000
[   20.179091][  T348] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   20.179217][  T348] CR2: 00007f16dc7c95e0 CR3: 000000000e2d9003 CR4: 0000000000771ef0
[   20.179422][  T348] PKRU: 55555554
[   20.179495][  T348] Call Trace:
[   20.179567][  T348]  <TASK>
[   20.179617][  T348]  net_mp_niov_set_page_pool (net/core/page_pool.c:1360)
[   20.179714][  T348]  io_pp_zc_alloc_netmems (io_uring/zcrx.c:1089 io_uring/zcrx.c:1110)
[   20.179812][  T348]  fbnic_fill_bdq (./include/net/page_pool/helpers.h:160 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:906)
[   20.179907][  T348]  __fbnic_nv_restart (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2470 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2874)
[   20.180003][  T348]  fbnic_queue_start (drivers/net/ethernet/meta/fbnic/fbnic_txrx.c:2903)
[   20.180102][  T348]  netdev_rx_queue_reconfig (net/core/netdev_rx_queue.c:137)
[   20.180197][  T348]  __netif_mp_open_rxq (net/core/netdev_rx_queue.c:234)
[   20.180292][  T348]  ? netdev_rx_queue_restart (net/core/netdev_rx_queue.c:184)
[   20.180431][  T348]  io_register_zcrx (io_uring/zcrx.c:818 io_uring/zcrx.c:903)
[   20.180525][  T348]  ? io_zcrx_get_region (io_uring/zcrx.c:675 (discriminator 1))
[   20.180621][  T348]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   20.180719][  T348]  ? __do_sys_io_uring_register (io_uring/register.c:1028)
[   20.180885][  T348]  __io_uring_register (io_uring/register.c:931)
[   20.180981][  T348]  ? io_register_resize_rings (./arch/x86/include/asm/atomic.h:28)
[   20.181104][  T348]  ? __fget_files (./include/linux/rcupdate.h:871 fs/file.c:1101)
[   20.181243][  T348]  ? __do_sys_io_uring_register (io_uring/register.c:1028)
[   20.181363][  T348]  __do_sys_io_uring_register (io_uring/register.c:1029)
[   20.181459][  T348]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   20.181552][  T348]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   20.181653][  T348]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[   20.181751][  T348]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[   20.181846][  T348]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   20.182007][  T348] RIP: 0033:0x7f16dc7caed8
[   20.182108][  T348] Code: 00 00 f3 0f 1e fa 48 89 f2 f6 87 d0 00 00 00 01 74 20 8b bf cc 00 00 00 be 20 00 00 80 41 ba 01 00 00 00 b8 ab 01 00 00 0f 05 <c3> 0f 1f 80 00 00 00 00 8b bf c4 00 00 00 be 20 00 00 00 eb de 0f
All code
========
   0:	00 00                	add    %al,(%rax)
   2:	f3 0f 1e fa          	endbr64
   6:	48 89 f2             	mov    %rsi,%rdx
   9:	f6 87 d0 00 00 00 01 	testb  $0x1,0xd0(%rdi)
  10:	74 20                	je     0x32
  12:	8b bf cc 00 00 00    	mov    0xcc(%rdi),%edi
  18:	be 20 00 00 80       	mov    $0x80000020,%esi
  1d:	41 ba 01 00 00 00    	mov    $0x1,%r10d
  23:	b8 ab 01 00 00       	mov    $0x1ab,%eax
  28:	0f 05                	syscall
  2a:*	c3                   	ret		<-- trapping instruction
  2b:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  32:	8b bf c4 00 00 00    	mov    0xc4(%rdi),%edi
  38:	be 20 00 00 00       	mov    $0x20,%esi
  3d:	eb de                	jmp    0x1d
  3f:	0f                   	.byte 0xf

Code starting with the faulting instruction
===========================================
   0:	c3                   	ret
   1:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
   8:	8b bf c4 00 00 00    	mov    0xc4(%rdi),%edi
   e:	be 20 00 00 00       	mov    $0x20,%esi
  13:	eb de                	jmp    0xfffffffffffffff3
  15:	0f                   	.byte 0xf
[   20.182464][  T348] RSP: 002b:00007ffcac576698 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[   20.182607][  T348] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f16dc7caed8
[   20.182750][  T348] RDX: 00007ffcac5766b0 RSI: 0000000000000020 RDI: 0000000000000004
[   20.182932][  T348] RBP: 00007ffcac5767c0 R08: 0000000000000000 R09: 0000000000000000
[   20.183117][  T348] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffcac576a88


Finger prints:
page_pool_set_pp_info:net_mp_niov_set_page_pool:io_pp_zc_alloc_netmems:fbnic_fill_bdq:__fbnic_nv_restart