Bug 719517

Summary: Eeek! page_mapcount(page) went negative!
Product: Red Hat Enterprise Linux 5 Reporter: Alexey Maximov <neizmirasego>
Component: kernelAssignee: Red Hat Kernel Manager <kernel-mgr>
Status: CLOSED WONTFIX QA Contact: Red Hat Kernel QE team <kernel-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 5.3CC: collura, neizmirasego
Target Milestone: rcFlags: pm-rhel: needinfo? (neizmirasego)
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-02 13:18:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Alexey Maximov 2011-07-07 06:17:07 UTC
Description of problem:

Server rebooted with the following panic message

[root@cpmg ~]# Eeek! page_mapcount(page) went negative! (-1)
  page->flags = c001003c
  page->count = 1
  page->mapping = d575c368
------------[ cut here ]------------
kernel BUG at mm/rmap.c:589!
invalid opcode: 0000 [#1]
SMP 
last sysfs file: /block/ram0/range
Modules linked in: cpmgNmi(U) wdt(U) cpmgLed(U) cpmgGpio(U) ip6table_mangle ip6table_filter ip6_tables iptable_nat ip_nat iptable_mangle xt_tcpudp xt_comment xt_state ip_conntrack nfnetlink iptable_filter ip_tables x_tables tcp_westwood nfsd exportfs lockd nfs_acl auth_rpcgss ipv6 xfrm_nalgo crypto_api sunrpc dm_mirror dm_multipath scsi_dh parport_pc lp parport sg i2c_i801 i2c_core iegbe(U) pcspkr dm_raid45 dm_message dm_region_hash dm_log dm_mod dm_mem_cache usb_storage ahci libata sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
CPU:    0
EIP:    0060:[<c046943a>]    Tainted: G      VLI
EFLAGS: 00010246   (2.6.18-164.11.1.el5 #1) 
EIP is at page_remove_rmap+0x66/0xc0
eax: 0000001e   ebx: c1df2b00   ecx: 00000046   edx: 00000000
esi: c1df2b00   edi: 016b5000   ebp: fffacad4   esp: ded2fdf4
ds: 007b   es: 007b   ss: 0068
Process jsvc (pid: 4759, ti=ded2f000 task=f19c5000 task.ti=ded2f000)
Stack: c063ec01 d575c368 c063ebea 00000001 6f958620 c1df2b00 c04638cd 00000000 
       e572e8b4 ded2fe78 00000000 00000001 d0b6ec80 01800000 d5607014 d0b6ec80 
       c200c400 fffffffb fffffffe d0b6ecc8 d5607014 000cdee9 01acd000 00000000 
Call Trace:
 [<c04638cd>] unmap_vmas+0x2f3/0x5cc
 [<c046668e>] exit_mmap+0x77/0xee
 [<c042344d>] mmput+0x25/0x69
 [<c0428059>] do_exit+0x20c/0x794
 [<c0428657>] sys_exit_group+0x0/0xd
 [<c042fa20>] get_signal_to_deliver+0x378/0x39f
 [<c0404583>] do_notify_resume+0x77/0x67d
 [<c042efb8>] specific_send_sig_info+0x8a/0x94
 [<c042ddda>] recalc_sigpending+0xe/0x20
 [<c042de9c>] sigprocmask+0xb0/0xce
 [<c042fe1f>] sys_rt_sigprocmask+0x47/0xbd
 [<c042fe1f>] sys_rt_sigprocmask+0x47/0xbd
 [<c0404fa6>] work_notifysig+0x13/0x19
 =======================
Code: 40 02 00 83 c4 10 3d 00 40 02 00 75 03 8b 53 0c 8b 42 04 50 68 ea eb 63 c0 e8 e2 c9 fb ff ff 73 10 68 01 ec 63 c0 e8 d5 c9 fb ff <0f> 0b 4d 02 96 eb 63 c0 83 c4 10 8b 53 10 89 d8 83 f2 01 83 e2 
EIP: [<c046943a>] page_remove_rmap+0x66/0xc0 SS:ESP 0068:ded2fdf4
 <0>Kernel panic - not syncing: Fatal exception

Comment 1 RHEL Program Management 2014-03-07 12:48:14 UTC
This bug/component is not included in scope for RHEL-5.11.0 which is the last RHEL5 minor release. This Bugzilla will soon be CLOSED as WONTFIX (at the end of RHEL5.11 development phase (Apr 22, 2014)). Please contact your account manager or support representative in case you need to escalate this bug.

Comment 2 RHEL Program Management 2014-06-02 13:18:13 UTC
Thank you for submitting this request for inclusion in Red Hat Enterprise Linux 5. We've carefully evaluated the request, but are unable to include it in RHEL5 stream. If the issue is critical for your business, please provide additional business justification through the appropriate support channels (https://access.redhat.com/site/support).