FYI, we noticed the following commit (built with gcc-7): commit: 3a6d1980fe96dbbfe3ae58db0048867f5319cdbf ("ALSA: Replace snd_malloc_pages() and snd_free_pages() with standard helpers") https://git.kernel.org/cgit/linux/kernel/git/tiwai/sound.git for-next in testcase: trinity with following parameters: runtime: 300s test-description: Trinity is a linux system call fuzz tester. test-url: http://codemonkey.org.uk/projects/trinity/ on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 768M caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace): +------------------------------------------+------------+------------+ | | 3103c08f96 | 3a6d1980fe | +------------------------------------------+------------+------------+ | boot_successes | 4 | 0 | | boot_failures | 0 | 8 | | kernel_BUG_at_mm/page_alloc.c | 0 | 8 | | invalid_opcode:#[##] | 0 | 8 | | RIP:split_page | 0 | 8 | | Kernel_panic-not_syncing:Fatal_exception | 0 | 8 | +------------------------------------------+------------+------------+ [ 174.830284] kernel BUG at mm/page_alloc.c:2850! [ 174.907025] invalid opcode: 0000 [#1] PREEMPT SMP [ 174.915963] CPU: 0 PID: 263 Comm: udevd Not tainted 4.20.0-rc1-00027-g3a6d198 #1 [ 174.929127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 174.944353] RIP: 0010:split_page+0x57/0x18b [ 174.952000] Code: 83 e4 01 31 c9 31 d2 44 89 e6 48 c7 c7 28 b8 7d 82 e8 39 58 fb ff 45 85 e4 74 11 48 c7 c6 43 ef 3f 82 48 89 df e8 40 99 03 00 <0f> 0b 4c 8b 63 08 31 c9 31 d2 48 c7 c7 b8 ca 7d 82 4d 89 e6 41 83 [ 174.985253] RSP: 0018:ffff88002f2c3900 EFLAGS: 00010293 [ 174.994749] RAX: ffffffff823fef43 RBX: ffff880029ef0800 RCX: ffff88002f2be680 [ 175.007746] RDX: 0000000000000000 RSI: ffffffff811f9b57 RDI: ffffffff827e3508 [ 175.020574] RBP: ffff88002f2c3930 R08: ffff88002f2bedc8 R09: 0000000066963706 [ 175.033637] R10: ffffffff82782de8 R11: ffffffff82782de8 R12: 0000000000000001 [ 175.046565] R13: ffff88002e920000 R14: 0000000000000005 R15: 0000000000000000 [ 175.059653] FS: 00007fd7d5b20780(0000) GS:ffff880029800000(0000) knlGS:0000000000000000 [ 175.074301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.084409] CR2: 00007ffde3b44fb8 CR3: 000000002f2b2000 CR4: 00000000000006b0 [ 175.096626] Call Trace: [ 175.101392] make_alloc_exact+0x8e/0xb2 [ 175.108457] alloc_pages_exact+0x3d/0x44 [ 175.115778] snd_dma_alloc_pages+0xfc/0x2d4 [snd_pcm] [ 175.124958] snd_pcm_lib_preallocate_pages1+0x7f/0x1f2 [snd_pcm] [ 175.136068] snd_pcm_lib_preallocate_pages_for_all+0x64/0xa5 [snd_pcm] [ 175.147988] snd_pcsp_new_pcm+0x93/0xa4 [snd_pcsp] [ 175.157007] pcsp_probe+0x209/0x2ad [snd_pcsp] [ 175.165239] ? pcsp_remove+0x2f/0x2f [snd_pcsp] [ 175.173530] platform_drv_probe+0x4e/0xa7 [ 175.180818] ? platform_drv_remove+0x58/0x58 [ 175.188822] really_probe+0x202/0x3ba [ 175.197734] driver_probe_device+0x10a/0x157 [ 175.205613] __driver_attach+0xcb/0x116 [ 175.212806] ? driver_probe_device+0x157/0x157 [ 175.220999] bus_for_each_dev+0x9d/0xc5 [ 175.228133] driver_attach+0x27/0x2a [ 175.234801] bus_add_driver+0x11a/0x241 [ 175.241909] driver_register+0xe9/0x136 [ 175.248997] __platform_driver_register+0x44/0x49 [ 175.257747] ? 0xffffffffa00c7000 [ 175.263944] pcsp_init+0x60/0x1000 [snd_pcsp] [ 175.272036] do_one_initcall+0x173/0x3a0 [ 175.279269] ? kmem_cache_alloc_trace+0x2a5/0x2c0 [ 175.287789] ? do_init_module+0x27/0x1ff [ 175.295143] do_init_module+0x5f/0x1ff [ 175.302240] load_module+0x1dad/0x23e9 [ 175.309116] ? kernel_read_file+0x260/0x272 [ 175.317219] __se_sys_finit_module+0x97/0xa7 [ 175.325160] ? __se_sys_finit_module+0x97/0xa7 [ 175.333382] __x64_sys_finit_module+0x1b/0x1e [ 175.341454] do_syscall_64+0x39c/0x4df [ 175.348394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.357783] RIP: 0033:0x7fd7d51f54a9 [ 175.364266] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d bf 79 2b 00 f7 d8 64 89 01 48 [ 175.398068] RSP: 002b:00007ffde3b4d318 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 175.411608] RAX: ffffffffffffffda RBX: 0000000000a91190 RCX: 00007fd7d51f54a9 [ 175.424442] RDX: 0000000000000000 RSI: 00007fd7d54c10aa RDI: 000000000000000d [ 175.437048] RBP: 00007fd7d54c10aa R08: 0000000000000000 R09: 0000000000a91190 [ 175.449913] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 175.462625] R13: 0000000000020000 R14: 0000000000000000 R15: 0000000000a91190 [ 175.475555] Modules linked in: drm_panel_orientation_quirks snd_pcsp(+) snd_pcm agpgart cfbfillrect snd_timer cfbimgblt cfbcopyarea snd fb_sys_fops syscopyarea sysfillrect soundcore sysimgblt serio_raw fb fbdev i2c_piix4 evbug [ 175.573671] ---[ end trace 3dad41c41965c82c ]--- To reproduce: git clone https://github.com/intel/lkp-tests.git cd lkp-tests bin/lkp qemu -k job-script # job-script is attached in this email Thanks, lkp