Hello, I have often the following error from the kernel: Eeek! page_mapcount(page) went negative! (-1) page pfn = 170cce page->flags = 200000000000014 page->count = 0 page->mapping = 0000000000000000 vma->vm_ops = 0x0 ------------[ cut here ]------------ kernel BUG at mm/rmap.c:630! invalid opcode: 0000 [1] SMP CPU 1 Modules linked in: vmnet(P) vmmon(P) i2c_nforce2 i2c_core floppy e100 Pid: 10870, comm: wrapper-gtk24.s Tainted: P 2.6.23-gentoo-r3 #13 RIP: 0010:[<ffffffff80265c6e>] [<ffffffff80265c6e>] page_remove_rmap+0x104/0x120 RSP: 0018:ffff810172d11dd8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8101bfe74d10 RCX: 0000000100000000 RDX: 0000000000000000 RSI: 0000000000000096 RDI: ffffffff806446a0 RBP: ffff81000bee4298 R08: ffffffff806446a8 R09: 000000007fffffff R10: 0000000000000006 R11: ffffffff803cb7d6 R12: 00002ae79f9b5000 R13: ffff8101745e4da8 R14: ffff81000103b740 R15: 00002ae79f9b6000 FS: 00002ae79f9b4f40(0000) GS:ffff8101ba2bbac0(0000) knlGS:00000000f7bd66c0 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 00002ae79f674020 CR3: 0000000188b71000 CR4: 00000000000006e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Process wrapper-gtk24.s (pid: 10870, threadinfo ffff810172d10000, task ffff8101aa0cf7d0) Stack: 00000000b76d1020 ffff8101bfe74d10 0000000070cce020 ffffffff8025e67c 0000000000000000 ffff810172d11ec8 ffffffffffffffff 0000000000000000 ffff81000bee4298 ffff810172d11ed0 00000000002b68a4 0000000000000000 Call Trace: [<ffffffff8025e67c>] unmap_vmas+0x426/0x749 [<ffffffff80262342>] exit_mmap+0x76/0xeb [<ffffffff8022b203>] mmput+0x2c/0x9d [<ffffffff802302bb>] do_exit+0x229/0x7ba [<ffffffff802356ff>] recalc_sigpending+0xe/0x25 [<ffffffff802308cb>] sys_exit_group+0x0/0xe [<ffffffff8020baee>] system_call+0x7e/0x83 Code: 0f 0b eb fe 8b 77 18 41 58 5b 5d 83 e6 01 f7 de 83 c6 04 e9 RIP [<ffffffff80265c6e>] page_remove_rmap+0x104/0x120 RSP <ffff810172d11dd8> Fixing recursive fault but reboot is needed! Bad page state in process 'scp' page:ffff8101bfe74d10 flags:0x0200000000000014 mapping:0000000000000000 mapcount:-1 count:0 Trying to fix it up, but a reboot is needed Backtrace: Call Trace: [<ffffffff8025606c>] bad_page+0x63/0x8e [<ffffffff80256bfc>] get_page_from_freelist+0x386/0x562 [<ffffffff80256e31>] __alloc_pages+0x59/0x2bb [<ffffffff80253630>] generic_file_buffered_write+0x1c3/0x61b [<ffffffff804fdba6>] schedule_timeout+0x1e/0xad [<ffffffff802316bc>] current_fs_time+0x1e/0x24 [<ffffffff8039b383>] __up_write+0x21/0x10e [<ffffffff80382958>] xfs_write+0x6dd/0xa81 [<ffffffff8023e35a>] autoremove_wake_function+0x0/0x2e [<ffffffff8037eeea>] xfs_file_aio_write+0x5a/0x5d [<ffffffff80277580>] do_sync_write+0xc9/0x10c [<ffffffff8023e35a>] autoremove_wake_function+0x0/0x2e [<ffffffff80277cc0>] vfs_write+0xad/0x136 [<ffffffff802781fd>] sys_write+0x45/0x6e [<ffffffff8020baee>] system_call+0x7e/0x83 I have tested with different kernel (2.6.23.1 and 2.6.22) and the same error happens with different process. Any idea for knowing what could cause this error? Reproducible: Always Steps to Reproduce: 1. when i move big data 2. 3.
emerge --info and are this gentoo kernel, or vanilla? Filesystem are you using? IDE/SATA driver are you using? Most likely, this bug report also should be forwarded to a place like http://bugzilla.kernel.org/
Created attachment 139562 [details] My .config
Here you are: # emerge --info Portage 2.1.3.19 (default-linux/amd64/2007.0/server, gcc-4.1.2, glibc-2.6.1-r0, 2.6.23-gentoo-r3 x86_64) ================================================================= System uname: 2.6.23-gentoo-r3 x86_64 AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ Timestamp of tree: Sat, 29 Dec 2007 02:46:01 +0000 app-shells/bash: 3.2_p17-r1 dev-java/java-config: 1.3.7, 2.0.33-r1 dev-lang/python: 2.4.4-r6 dev-python/pycrypto: 2.0.1-r6 sys-apps/baselayout: 1.12.10-r5 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.61-r1 sys-devel/automake: 1.9.6-r2, 1.10 sys-devel/binutils: 2.18-r1 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.24 virtual/os-headers: 2.6.23-r2 ACCEPT_KEYWORDS="amd64" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=athlon64 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d" CXXFLAGS="-march=athlon64 -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="distlocks metadata-transfer sfperms strict unmerge-orphans userfetch" GENTOO_MIRRORS="http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="3dnow 3dnowext X aalib acl amd64 berkdb bitmap-fonts bzip2 cli cracklib crypt device-mapper dri fortran gdbm glsa gmp gpm gtk gzip hpn iconv java java5 ldap mailwrapper midi mmx mudflap mysql ncurses nls nptl nptlonly nvidia openmp pam pcre perl python rar readline reflection server session smp snmp spl sse sse2 ssl tcpd truetype truetype-fonts type1-fonts unicode unzip vim vim-pager vim-syntax xml xorg zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="apm ark chips cirrus cyrix dummy fbdev glint i128 i810 mach64 mga neomagic nv r128 radeon rendition s3 s3virge savage siliconmotion sis sisusb tdfx tga trident tseng v4l vesa vga via vmware voodoo" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS My kernel is gentoo-sources-2.6.23-r3 stable and i use SATA driver nforce. Thank you. My .config in attached.
Read the product descriptions please; this has zero on common w/ Gentoo Bugzilla product.
I have the same problem with multiple dd if=/dev/zero of=zerofile.tst bs=1k count=100000000, this is not a vmware problem.
Manuel Brignoli: do you use the same sata chipset?
Yes, IDE interface: nVidia Corporation MCP61 SATA Controller (rev a2) .
How easy is this to reproduce? Can you reproduce this on a session where no out-of-kernel modules have been loaded since boot? (i.e. without vmware loaded at all in the previous report). If so, please post a new crash dump. Other than 2.6.23-gentoo-r3, which other kernels have you tried? Which ones do/don't have this issue? Can you reproduce this on 2.6.24?
Please reopen if you have get a chance to perform the steps asked in comment #8.
