Comment # 41 on bug 105684 from Vlastimil Babka

(In reply to jian-hong from comment #40)
> Created attachment 140819 [details]
> 4.18.0-rc6 Build config file

Paul Menzel posted this bug to linux-mm mailing list and I've noticed that all
bug splats have code that indicates CONFIG_SLAB_FREELIST_HARDENED is enabled.
Your latest .config above has it disabled and exhibits no bug, making it very
suspicious. Possibly also the related CONFIG_SLAB_FREELIST_RANDOM. Can you try
if enabling either (or both) back reintroduces the bug? Or others if disabling
fixes it? Thanks.