Bug 719517 - Eeek! page_mapcount(page) went negative! [NEEDINFO]
Summary: Eeek! page_mapcount(page) went negative!
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: kernel
Version: 5.3
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Red Hat Kernel Manager
QA Contact: Red Hat Kernel QE team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-07-07 06:17 UTC by Alexey Maximov
Modified: 2014-06-02 13:18 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-06-02 13:18:13 UTC
Target Upstream Version:
pm-rhel: needinfo? (neizmirasego)

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Alexey Maximov 2011-07-07 06:17:07 UTC 
Description of problem:

Server rebooted with the following panic message

[root@cpmg ~]# Eeek! page_mapcount(page) went negative! (-1)
  page->flags = c001003c
  page->count = 1
  page->mapping = d575c368
------------[ cut here ]------------
kernel BUG at mm/rmap.c:589!
invalid opcode: 0000 [#1]
SMP 
last sysfs file: /block/ram0/range
Modules linked in: cpmgNmi(U) wdt(U) cpmgLed(U) cpmgGpio(U) ip6table_mangle ip6table_filter ip6_tables iptable_nat ip_nat iptable_mangle xt_tcpudp xt_comment xt_state ip_conntrack nfnetlink iptable_filter ip_tables x_tables tcp_westwood nfsd exportfs lockd nfs_acl auth_rpcgss ipv6 xfrm_nalgo crypto_api sunrpc dm_mirror dm_multipath scsi_dh parport_pc lp parport sg i2c_i801 i2c_core iegbe(U) pcspkr dm_raid45 dm_message dm_region_hash dm_log dm_mod dm_mem_cache usb_storage ahci libata sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
CPU:    0
EIP:    0060:[<c046943a>]    Tainted: G      VLI
EFLAGS: 00010246   (2.6.18-164.11.1.el5 #1) 
EIP is at page_remove_rmap+0x66/0xc0
eax: 0000001e   ebx: c1df2b00   ecx: 00000046   edx: 00000000
esi: c1df2b00   edi: 016b5000   ebp: fffacad4   esp: ded2fdf4
ds: 007b   es: 007b   ss: 0068
Process jsvc (pid: 4759, ti=ded2f000 task=f19c5000 task.ti=ded2f000)
Stack: c063ec01 d575c368 c063ebea 00000001 6f958620 c1df2b00 c04638cd 00000000 
       e572e8b4 ded2fe78 00000000 00000001 d0b6ec80 01800000 d5607014 d0b6ec80 
       c200c400 fffffffb fffffffe d0b6ecc8 d5607014 000cdee9 01acd000 00000000 
Call Trace:
 [<c04638cd>] unmap_vmas+0x2f3/0x5cc
 [<c046668e>] exit_mmap+0x77/0xee
 [<c042344d>] mmput+0x25/0x69
 [<c0428059>] do_exit+0x20c/0x794
 [<c0428657>] sys_exit_group+0x0/0xd
 [<c042fa20>] get_signal_to_deliver+0x378/0x39f
 [<c0404583>] do_notify_resume+0x77/0x67d
 [<c042efb8>] specific_send_sig_info+0x8a/0x94
 [<c042ddda>] recalc_sigpending+0xe/0x20
 [<c042de9c>] sigprocmask+0xb0/0xce
 [<c042fe1f>] sys_rt_sigprocmask+0x47/0xbd
 [<c042fe1f>] sys_rt_sigprocmask+0x47/0xbd
 [<c0404fa6>] work_notifysig+0x13/0x19
 =======================
Code: 40 02 00 83 c4 10 3d 00 40 02 00 75 03 8b 53 0c 8b 42 04 50 68 ea eb 63 c0 e8 e2 c9 fb ff ff 73 10 68 01 ec 63 c0 e8 d5 c9 fb ff <0f> 0b 4d 02 96 eb 63 c0 83 c4 10 8b 53 10 89 d8 83 f2 01 83 e2 
EIP: [<c046943a>] page_remove_rmap+0x66/0xc0 SS:ESP 0068:ded2fdf4
 <0>Kernel panic - not syncing: Fatal exception
Comment 1 RHEL Program Management 2014-03-07 12:48:14 UTC 
This bug/component is not included in scope for RHEL-5.11.0 which is the last RHEL5 minor release. This Bugzilla will soon be CLOSED as WONTFIX (at the end of RHEL5.11 development phase (Apr 22, 2014)). Please contact your account manager or support representative in case you need to escalate this bug.
Comment 2 RHEL Program Management 2014-06-02 13:18:13 UTC 
Thank you for submitting this request for inclusion in Red Hat Enterprise Linux 5. We've carefully evaluated the request, but are unable to include it in RHEL5 stream. If the issue is critical for your business, please provide additional business justification through the appropriate support channels (https://access.redhat.com/site/support).
Note You need to log in before you can comment on or make changes to this bug.