Backtrace

BUG: Bad rss-counter state mm:000000002703eb13 type:MM_FILEPAGES val:1
BUG: Bad rss-counter state mm:000000002703eb13 type:MM_ANONPAGES val:-1
page:00000000b6501bd7 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1b4c91
flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff)
raw: 0017ffffc0000000 ffffdd9bc7664648 ffffdd9bc765efc8 0000000000000000
raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
------------[ cut here ]------------
kernel BUG at include/linux/mm.h:1198!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 2125 Comm: firefox Tainted: P           OE     5.16.9-200.fc35.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./H61M-S2PV, BIOS FC 07/27/2017
RIP: 0010:copy_page_range+0xe6b/0x14f0
Code: 48 c7 84 24 b0 00 00 00 00 00 00 00 e9 33 ff ff ff 48 89 df e8 86 b5 ff ff e9 c8 fe ff ff 48 c7 c6 98 d0 5b b4 e8 95 45 ff ff <0f> 0b 48 81 e2 00 f0 ff ff e9 8f f6 ff ff 45 31 c9 4c 89 f1 4c 89
RSP: 0018:ffffbd0d082afbb0 EFLAGS: 00010282
RAX: 000000000000005c RBX: ffff9fe38e18ad08 RCX: 0000000000000000
RDX: 0000000000000003 RSI: ffffffffb4634ddd RDI: 00000000ffffffff
RBP: 0000000000000008 R08: 0000000000000000 R09: ffffbd0d082af9e0
R10: ffffbd0d082af9d8 R11: ffffffffb4f462a8 R12: ffff9fe3c3d40d08
R13: ffff9fe365052578 R14: 00001f8233da1000 R15: 80000001b4c91865
FS:  00007fa1e0ba91c0(0000) GS:ffff9fe416c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa1e09e4fe0 CR3: 00000001343fc002 CR4: 00000000000606f0
Call Trace:
 <TASK>
 ? kmem_cache_alloc+0x16c/0x2d0
 dup_mm+0x479/0x600
 copy_process+0x18f5/0x1ca0
 kernel_clone+0x87/0x3b0
 ? get_max_files+0x10/0x10
 __do_sys_fork+0x26/0x30
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fa1d6bea6be
Code: 02 00 00 e8 2d fa ff ff 48 89 ef e8 12 43 3e 01 44 8a 05 95 b2 28 05 45 84 c0 74 4c 48 8b 3d e9 97 36 05 b8 39 00 00 00 0f 05 <49> 89 c6 48 3d 00 f0 ff ff 76 0d e8 02 ac 0c fe 41 f7 de 44 89 30
RSP: 002b:00007fa1e09e6550 EFLAGS: 00000202 ORIG_RAX: 0000000000000039
RAX: ffffffffffffffda RBX: 00007fa1dbf51340 RCX: 00007fa1d6bea6be
RDX: 00000000000000c3 RSI: 00007fa1e09e6578 RDI: 00007fa1e0921e50
RBP: 00007fa1e09e6578 R08: 00007fa1d7fce801 R09: 00007fa1d6be799a
R10: 00007fa1d6be79ba R11: 0000000000000202 R12: 000000000000005a
R13: 00007fa1d9317137 R14: 000000006216634e R15: 00007fa1dbf51300
 </TASK>
Modules linked in: snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set rfkill nf_tables nfnetlink ip6table_filter ip6_tables iptable_filter qrtr sunrpc vfat fat nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel at24 kvm mei_hdcp mei_pxp iTCO_wdt intel_pmc_bxt ppdev iTCO_vendor_support irqbypass rapl intel_cstate snd_hda_codec_realtek nvidia(POE) intel_uncore snd_hda_codec_generic snd_hda_codec_hdmi ledtrig_audio pcspkr uvcvideo snd_hda_intel videobuf2_vmalloc videobuf2_memops snd_intel_dspcfg videobuf2_v4l2 snd_intel_sdw_acpi snd_hda_codec snd_usb_audio
 videobuf2_common videodev snd_hda_core snd_usbmidi_lib snd_hwdep snd_seq snd_rawmidi xpad joydev mc ff_memless i2c_i801 snd_seq_device drm_kms_helper snd_pcm i2c_smbus snd_timer mei_me snd cec soundcore mei lpc_ich parport_pc parport drm zram ip_tables hid_logitech_hidpp hid_logitech_dj crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw ata_generic r8169 pata_acpi video hid_steam ipmi_devintf ipmi_msghandler fuse