Comment 2 for bug 107325

I just got something similar but it seems the problem appeared after firefox crash :

[36968.052000] Eeek! page_mapcount(page) went negative! (-1)
[36968.052000] page pfn = 3817d
[36968.052000] page->flags = 80000014
[36968.052000] page->count = 1
[36968.052000] page->mapping = 00000000
[36968.052000] vma->vm_ops = 0x0
[36968.052000] ------------[ cut here ]------------
[36968.052000] kernel BUG at mm/rmap.c:588!
[36968.052000] invalid opcode: 0000 [#1]
[36968.052000] SMP
[36968.052000] Modules linked in: bluetooth snd_rtctimer binfmt_misc vboxdrv ppdev powernow_k8 cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative tc1100_wmi pcc_acpi dev_acpi sony_acpi video sbs i2c_ec dock button battery container ac asus_acpi backlight fuse parport_pc lp parport ndiswrapper tuner tvaudio snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm_oss msp3400 snd_pcm snd_mixer_oss bttv video_buf snd_seq_dummy ir_common snd_seq_oss compat_ioctl32 i2c_algo_bit snd_seq_midi snd_rawmidi btcx_risc snd_seq_midi_event snd_seq snd_timer snd_seq_device nvidia(P) tveeprom videodev v4l2_common v4l1_compat snd soundcore amd64_agp pcspkr shpchp pci_hotplug snd_page_alloc k8temp i2c_nforce2 i2c_core agpgart evdev tsdev ext3 jbd mbcache sg sd_mod ide_cd cdrom ide_disk sata_nv usbhid hid ata_generic libata scsi_mod amd74xx generic ehci_hcd ohci_hcd usbcore thermal processor fan fbcon tileblit font bitblit softcursor vesafb capability commoncap
[36968.052000] CPU: 0
[36968.052000] EIP: 0060:[<c0169f10>] Tainted: P VLI
[36968.052000] EFLAGS: 00210246 (2.6.20-15-generic #2)
[36968.052000] EIP is at page_remove_rmap+0xe0/0xf0
[36968.052000] eax: 00000000 ebx: c1702fa0 ecx: 00200046 edx: 00000000
[36968.052000] esi: eed935c0 edi: 0ccfc000 ebp: c1702fa0 esp: ce709ec8
[36968.052000] ds: 007b es: 007b ss: 0068
[36968.052000] Process firefox-bin (pid: 26697, ti=ce708000 task=c7789a90 task.ti=ce708000)
[36968.052000] Stack: c036966b 00000000 fffffd00 dcda83f0 c0163a8d f8bd34ad 0cd49fff 0c568000
[36968.052000] eed935c0 ce709f58 00000000 00000000 0cd4a000 da5110cc e14fbe40 c1806140
[36968.052000] ffffff04 ffffffff c139b50c dcda8000 da5110cc 3817d067 3817d067 0006b000
[36968.052000] Call Trace:
[36968.052000] [<c0163a8d>] unmap_vmas+0x2dd/0x5c0
[36968.052000] [<c0166c89>] unmap_region+0x99/0x110
[36968.052000] [<c016777d>] do_munmap+0x14d/0x1e0
[36968.052000] [<c016800d>] sys_brk+0xdd/0xf0
[36968.052000] [<c01031f0>] sysenter_past_esp+0x69/0xa9
[36968.052000] =======================
[36968.052000] Code: c0 74 0d 8b 50 08 b8 fc a1 36 c0 e8 3b ca fd ff 8b 46 48 85 c0 74 14 8b 40 10 85 c0 74 0d 8b 50 2c b8 1c a2 36 c0 e8 20 ca fd ff <0f> 0b eb fe 8b 53 0c eb 95 8d b4 26 00 00 00 00 55 57 56 89 d6
[36968.052000] EIP: [<c0169f10>] page_remove_rmap+0xe0/0xf0 SS:ESP 0068:ce709ec8
[36968.052000] <6>note: firefox-bin[26697] exited with preempt_count 1
[36968.052000] BUG: scheduling while atomic: firefox-bin/0x10000001/26697
[36968.052000] [<c02ec938>] __sched_text_start+0x5f8/0xa90
[36968.052000] [<c0120f46>] __cond_resched+0x16/0x40
[36968.052000] [<c02ecdfa>] cond_resched+0x2a/0x40
[36968.052000] [<c013e328>] down_read+0x8/0x20
[36968.052000] [<c013fbf0>] futex_wake+0x20/0xc0
[36968.052000] [<c0140aee>] do_futex+0x34e/0xd50
[36968.052000] [<c0241754>] vt_console_print+0x64/0x300
[36968.052000] [<c01f1084>] vsnprintf+0x2f4/0x5f0
[36968.052000] [<c02416f0>] vt_console_print+0x0/0x300
[36968.052000] [<c0126093>] __call_console_drivers+0x53/0x60
[36968.052000] [<c01264aa>] release_console_sem+0x1ca/0x220
[36968.052000] [<c0141581>] sys_futex+0x91/0x140
[36968.052000] [<c0123d87>] mm_release+0x87/0xa0
[36968.052000] [<c0127c42>] exit_mm+0x12/0xf0
[36968.052000] [<c01292e2>] do_exit+0xf2/0x800
[36968.052000] [<c0126c2b>] printk+0x1b/0x20
[36968.052000] [<c0104eb0>] show_stack+0x0/0x40
[36968.052000] [<c0105350>] do_invalid_op+0x0/0xb0
[36968.052000] [<c01053f2>] do_invalid_op+0xa2/0xb0
[36968.052000] [<c0169f10>] page_remove_rmap+0xe0/0xf0
[36968.052000] [<c02416f0>] vt_console_print+0x0/0x300
[36968.052000] [<c0126093>] __call_console_drivers+0x53/0x60
[36968.052000] [<c01264aa>] release_console_sem+0x1ca/0x220
[36968.052000] [<c02eeb4c>] error_code+0x7c/0x90
[36968.052000] [<c0169f10>] page_remove_rmap+0xe0/0xf0
[36968.052000] [<c0163a8d>] unmap_vmas+0x2dd/0x5c0
[36968.052000] [<c0166c89>] unmap_region+0x99/0x110
[36968.056000] [<c016777d>] do_munmap+0x14d/0x1e0
[36968.056000] [<c016800d>] sys_brk+0xdd/0xf0
[36968.056000] [<c01031f0>] sysenter_past_esp+0x69/0xa9
[36968.056000] =======================
[36968.056000] BUG: scheduling while atomic: firefox-bin/0x00000001/26697
[36968.056000] [<c02ec938>] __sched_text_start+0x5f8/0xa90
[36968.056000] [<c02ec63d>] __sched_text_start+0x2fd/0xa90
[36968.056000] [<c01efca5>] rwsem_down_failed_common+0x75/0x190
[36968.056000] [<c02ee3ca>] rwsem_down_read_failed+0x1a/0x30
[36968.056000] [<c02ee457>] call_rwsem_down_read_failed+0x7/0x10
[36968.056000] [<c013e334>] down_read+0x14/0x20
[36968.056000] [<c013fbf0>] futex_wake+0x20/0xc0
[36968.056000] [<c0140aee>] do_futex+0x34e/0xd50
[36968.056000] [<c0241754>] vt_console_print+0x64/0x300
[36968.056000] [<c01f1084>] vsnprintf+0x2f4/0x5f0
[36968.056000] [<c02416f0>] vt_console_print+0x0/0x300
[36968.056000] [<c0126093>] __call_console_drivers+0x53/0x60
[36968.056000] [<c01264aa>] release_console_sem+0x1ca/0x220
[36968.056000] [<c0141581>] sys_futex+0x91/0x140
[36968.056000] [<c0123d87>] mm_release+0x87/0xa0
[36968.056000] [<c0127c42>] exit_mm+0x12/0xf0
[36968.056000] [<c01292e2>] do_exit+0xf2/0x800
[36968.056000] [<c0126c2b>] printk+0x1b/0x20
[36968.056000] [<c0104eb0>] show_stack+0x0/0x40
[36968.056000] [<c0105350>] do_invalid_op+0x0/0xb0
[36968.056000] [<c01053f2>] do_invalid_op+0xa2/0xb0
[36968.056000] [<c0169f10>] page_remove_rmap+0xe0/0xf0
[36968.056000] [<c02416f0>] vt_console_print+0x0/0x300
[36968.056000] [<c0126093>] __call_console_drivers+0x53/0x60
[36968.056000] [<c01264aa>] release_console_sem+0x1ca/0x220
[36968.056000] [<c02eeb4c>] error_code+0x7c/0x90
[36968.056000] [<c0169f10>] page_remove_rmap+0xe0/0xf0
[36968.056000] [<c0163a8d>] unmap_vmas+0x2dd/0x5c0
[36968.056000] [<c0166c89>] unmap_region+0x99/0x110
[36968.056000] [<c016777d>] do_munmap+0x14d/0x1e0
[36968.056000] [<c016800d>] sys_brk+0xdd/0xf0
[36968.056000] [<c01031f0>] sysenter_past_esp+0x69/0xa9
[36968.056000] =======================