I just got something similar but it seems the problem appeared after firefox crash :
[36968.052000] Eeek! page_mapcount(page) went negative! (-1) [36968.052000] page pfn = 3817d [36968.052000] page->flags = 80000014 [36968.052000] page->count = 1 [36968.052000] page->mapping = 00000000 [36968.052000] vma->vm_ops = 0x0 [36968.052000] ------------[ cut here ]------------ [36968.052000] kernel BUG at mm/rmap.c:588! [36968.052000] invalid opcode: 0000 [#1] [36968.052000] SMP [36968.052000] Modules linked in: bluetooth snd_rtctimer binfmt_misc vboxdrv ppdev powernow_k8 cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative tc1100_wmi pcc_acpi dev_acpi sony_acpi video sbs i2c_ec dock button battery container ac asus_acpi backlight fuse parport_pc lp parport ndiswrapper tuner tvaudio snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm_oss msp3400 snd_pcm snd_mixer_oss bttv video_buf snd_seq_dummy ir_common snd_seq_oss compat_ioctl32 i2c_algo_bit snd_seq_midi snd_rawmidi btcx_risc snd_seq_midi_event snd_seq snd_timer snd_seq_device nvidia(P) tveeprom videodev v4l2_common v4l1_compat snd soundcore amd64_agp pcspkr shpchp pci_hotplug snd_page_alloc k8temp i2c_nforce2 i2c_core agpgart evdev tsdev ext3 jbd mbcache sg sd_mod ide_cd cdrom ide_disk sata_nv usbhid hid ata_generic libata scsi_mod amd74xx generic ehci_hcd ohci_hcd usbcore thermal processor fan fbcon tileblit font bitblit softcursor vesafb capability commoncap [36968.052000] CPU: 0 [36968.052000] EIP: 0060:[<c0169f10>] Tainted: P VLI [36968.052000] EFLAGS: 00210246 (2.6.20-15-generic #2) [36968.052000] EIP is at page_remove_rmap+0xe0/0xf0 [36968.052000] eax: 00000000 ebx: c1702fa0 ecx: 00200046 edx: 00000000 [36968.052000] esi: eed935c0 edi: 0ccfc000 ebp: c1702fa0 esp: ce709ec8 [36968.052000] ds: 007b es: 007b ss: 0068 [36968.052000] Process firefox-bin (pid: 26697, ti=ce708000 task=c7789a90 task.ti=ce708000) [36968.052000] Stack: c036966b 00000000 fffffd00 dcda83f0 c0163a8d f8bd34ad 0cd49fff 0c568000 [36968.052000] eed935c0 ce709f58 00000000 00000000 0cd4a000 da5110cc e14fbe40 c1806140 [36968.052000] ffffff04 ffffffff c139b50c dcda8000 da5110cc 3817d067 3817d067 0006b000 [36968.052000] Call Trace: [36968.052000] [<c0163a8d>] unmap_vmas+0x2dd/0x5c0 [36968.052000] [<c0166c89>] unmap_region+0x99/0x110 [36968.052000] [<c016777d>] do_munmap+0x14d/0x1e0 [36968.052000] [<c016800d>] sys_brk+0xdd/0xf0 [36968.052000] [<c01031f0>] sysenter_past_esp+0x69/0xa9 [36968.052000] ======================= [36968.052000] Code: c0 74 0d 8b 50 08 b8 fc a1 36 c0 e8 3b ca fd ff 8b 46 48 85 c0 74 14 8b 40 10 85 c0 74 0d 8b 50 2c b8 1c a2 36 c0 e8 20 ca fd ff <0f> 0b eb fe 8b 53 0c eb 95 8d b4 26 00 00 00 00 55 57 56 89 d6 [36968.052000] EIP: [<c0169f10>] page_remove_rmap+0xe0/0xf0 SS:ESP 0068:ce709ec8 [36968.052000] <6>note: firefox-bin[26697] exited with preempt_count 1 [36968.052000] BUG: scheduling while atomic: firefox-bin/0x10000001/26697 [36968.052000] [<c02ec938>] __sched_text_start+0x5f8/0xa90 [36968.052000] [<c0120f46>] __cond_resched+0x16/0x40 [36968.052000] [<c02ecdfa>] cond_resched+0x2a/0x40 [36968.052000] [<c013e328>] down_read+0x8/0x20 [36968.052000] [<c013fbf0>] futex_wake+0x20/0xc0 [36968.052000] [<c0140aee>] do_futex+0x34e/0xd50 [36968.052000] [<c0241754>] vt_console_print+0x64/0x300 [36968.052000] [<c01f1084>] vsnprintf+0x2f4/0x5f0 [36968.052000] [<c02416f0>] vt_console_print+0x0/0x300 [36968.052000] [<c0126093>] __call_console_drivers+0x53/0x60 [36968.052000] [<c01264aa>] release_console_sem+0x1ca/0x220 [36968.052000] [<c0141581>] sys_futex+0x91/0x140 [36968.052000] [<c0123d87>] mm_release+0x87/0xa0 [36968.052000] [<c0127c42>] exit_mm+0x12/0xf0 [36968.052000] [<c01292e2>] do_exit+0xf2/0x800 [36968.052000] [<c0126c2b>] printk+0x1b/0x20 [36968.052000] [<c0104eb0>] show_stack+0x0/0x40 [36968.052000] [<c0105350>] do_invalid_op+0x0/0xb0 [36968.052000] [<c01053f2>] do_invalid_op+0xa2/0xb0 [36968.052000] [<c0169f10>] page_remove_rmap+0xe0/0xf0 [36968.052000] [<c02416f0>] vt_console_print+0x0/0x300 [36968.052000] [<c0126093>] __call_console_drivers+0x53/0x60 [36968.052000] [<c01264aa>] release_console_sem+0x1ca/0x220 [36968.052000] [<c02eeb4c>] error_code+0x7c/0x90 [36968.052000] [<c0169f10>] page_remove_rmap+0xe0/0xf0 [36968.052000] [<c0163a8d>] unmap_vmas+0x2dd/0x5c0 [36968.052000] [<c0166c89>] unmap_region+0x99/0x110 [36968.056000] [<c016777d>] do_munmap+0x14d/0x1e0 [36968.056000] [<c016800d>] sys_brk+0xdd/0xf0 [36968.056000] [<c01031f0>] sysenter_past_esp+0x69/0xa9 [36968.056000] ======================= [36968.056000] BUG: scheduling while atomic: firefox-bin/0x00000001/26697 [36968.056000] [<c02ec938>] __sched_text_start+0x5f8/0xa90 [36968.056000] [<c02ec63d>] __sched_text_start+0x2fd/0xa90 [36968.056000] [<c01efca5>] rwsem_down_failed_common+0x75/0x190 [36968.056000] [<c02ee3ca>] rwsem_down_read_failed+0x1a/0x30 [36968.056000] [<c02ee457>] call_rwsem_down_read_failed+0x7/0x10 [36968.056000] [<c013e334>] down_read+0x14/0x20 [36968.056000] [<c013fbf0>] futex_wake+0x20/0xc0 [36968.056000] [<c0140aee>] do_futex+0x34e/0xd50 [36968.056000] [<c0241754>] vt_console_print+0x64/0x300 [36968.056000] [<c01f1084>] vsnprintf+0x2f4/0x5f0 [36968.056000] [<c02416f0>] vt_console_print+0x0/0x300 [36968.056000] [<c0126093>] __call_console_drivers+0x53/0x60 [36968.056000] [<c01264aa>] release_console_sem+0x1ca/0x220 [36968.056000] [<c0141581>] sys_futex+0x91/0x140 [36968.056000] [<c0123d87>] mm_release+0x87/0xa0 [36968.056000] [<c0127c42>] exit_mm+0x12/0xf0 [36968.056000] [<c01292e2>] do_exit+0xf2/0x800 [36968.056000] [<c0126c2b>] printk+0x1b/0x20 [36968.056000] [<c0104eb0>] show_stack+0x0/0x40 [36968.056000] [<c0105350>] do_invalid_op+0x0/0xb0 [36968.056000] [<c01053f2>] do_invalid_op+0xa2/0xb0 [36968.056000] [<c0169f10>] page_remove_rmap+0xe0/0xf0 [36968.056000] [<c02416f0>] vt_console_print+0x0/0x300 [36968.056000] [<c0126093>] __call_console_drivers+0x53/0x60 [36968.056000] [<c01264aa>] release_console_sem+0x1ca/0x220 [36968.056000] [<c02eeb4c>] error_code+0x7c/0x90 [36968.056000] [<c0169f10>] page_remove_rmap+0xe0/0xf0 [36968.056000] [<c0163a8d>] unmap_vmas+0x2dd/0x5c0 [36968.056000] [<c0166c89>] unmap_region+0x99/0x110 [36968.056000] [<c016777d>] do_munmap+0x14d/0x1e0 [36968.056000] [<c016800d>] sys_brk+0xdd/0xf0 [36968.056000] [<c01031f0>] sysenter_past_esp+0x69/0xa9 [36968.056000] =======================
I just got something similar but it seems the problem appeared after firefox crash :
[36968.052000] Eeek! page_mapcount(page) went negative! (-1) conservative tc1100_wmi pcc_acpi dev_acpi sony_acpi video sbs i2c_ec dock button battery container ac asus_acpi backlight fuse parport_pc lp parport ndiswrapper tuner tvaudio snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm_oss msp3400 snd_pcm snd_mixer_oss bttv video_buf snd_seq_dummy ir_common snd_seq_oss compat_ioctl32 i2c_algo_bit snd_seq_midi snd_rawmidi btcx_risc snd_seq_midi_event snd_seq snd_timer snd_seq_device nvidia(P) tveeprom videodev v4l2_common v4l1_compat snd soundcore amd64_agp pcspkr shpchp pci_hotplug snd_page_alloc k8temp i2c_nforce2 i2c_core agpgart evdev tsdev ext3 jbd mbcache sg sd_mod ide_cd cdrom ide_disk sata_nv usbhid hid ata_generic libata scsi_mod amd74xx generic ehci_hcd ohci_hcd usbcore thermal processor fan fbcon tileblit font bitblit softcursor vesafb capability commoncap rmap+0xe0/ 0xf0 0x2dd/0x5c0 0x99/0x110 0x14d/0x1e0 past_esp+ 0x69/0xa9 ======= ======= == rmap+0xe0/ 0xf0 SS:ESP 0068:ce709ec8 bin/0x10000001/ 26697 text_start+ 0x5f8/0xa90 resched+ 0x16/0x40 0x2a/0x40 0x20/0xc0 0x34e/0xd50 print+0x64/ 0x300 0x2f4/0x5f0 print+0x0/ 0x300 console_ drivers+ 0x53/0x60 console_ sem+0x1ca/ 0x220 0x91/0x140 0x87/0xa0 op+0x0/ 0xb0 op+0xa2/ 0xb0 rmap+0xe0/ 0xf0 print+0x0/ 0x300 console_ drivers+ 0x53/0x60 console_ sem+0x1ca/ 0x220 0x7c/0x90 rmap+0xe0/ 0xf0 0x2dd/0x5c0 0x99/0x110 0x14d/0x1e0 past_esp+ 0x69/0xa9 ======= ======= == bin/0x00000001/ 26697 text_start+ 0x5f8/0xa90 text_start+ 0x2fd/0xa90 failed_ common+ 0x75/0x190 read_failed+ 0x1a/0x30 down_read_ failed+ 0x7/0x10 0x20/0xc0 0x34e/0xd50 print+0x64/ 0x300 0x2f4/0x5f0 print+0x0/ 0x300 console_ drivers+ 0x53/0x60 console_ sem+0x1ca/ 0x220 0x91/0x140 0x87/0xa0 op+0x0/ 0xb0 op+0xa2/ 0xb0 rmap+0xe0/ 0xf0 print+0x0/ 0x300 console_ drivers+ 0x53/0x60 console_ sem+0x1ca/ 0x220 0x7c/0x90 rmap+0xe0/ 0xf0 0x2dd/0x5c0 0x99/0x110 0x14d/0x1e0 past_esp+ 0x69/0xa9 ======= ======= ==
[36968.052000] page pfn = 3817d
[36968.052000] page->flags = 80000014
[36968.052000] page->count = 1
[36968.052000] page->mapping = 00000000
[36968.052000] vma->vm_ops = 0x0
[36968.052000] ------------[ cut here ]------------
[36968.052000] kernel BUG at mm/rmap.c:588!
[36968.052000] invalid opcode: 0000 [#1]
[36968.052000] SMP
[36968.052000] Modules linked in: bluetooth snd_rtctimer binfmt_misc vboxdrv ppdev powernow_k8 cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_
[36968.052000] CPU: 0
[36968.052000] EIP: 0060:[<c0169f10>] Tainted: P VLI
[36968.052000] EFLAGS: 00210246 (2.6.20-15-generic #2)
[36968.052000] EIP is at page_remove_
[36968.052000] eax: 00000000 ebx: c1702fa0 ecx: 00200046 edx: 00000000
[36968.052000] esi: eed935c0 edi: 0ccfc000 ebp: c1702fa0 esp: ce709ec8
[36968.052000] ds: 007b es: 007b ss: 0068
[36968.052000] Process firefox-bin (pid: 26697, ti=ce708000 task=c7789a90 task.ti=ce708000)
[36968.052000] Stack: c036966b 00000000 fffffd00 dcda83f0 c0163a8d f8bd34ad 0cd49fff 0c568000
[36968.052000] eed935c0 ce709f58 00000000 00000000 0cd4a000 da5110cc e14fbe40 c1806140
[36968.052000] ffffff04 ffffffff c139b50c dcda8000 da5110cc 3817d067 3817d067 0006b000
[36968.052000] Call Trace:
[36968.052000] [<c0163a8d>] unmap_vmas+
[36968.052000] [<c0166c89>] unmap_region+
[36968.052000] [<c016777d>] do_munmap+
[36968.052000] [<c016800d>] sys_brk+0xdd/0xf0
[36968.052000] [<c01031f0>] sysenter_
[36968.052000] =======
[36968.052000] Code: c0 74 0d 8b 50 08 b8 fc a1 36 c0 e8 3b ca fd ff 8b 46 48 85 c0 74 14 8b 40 10 85 c0 74 0d 8b 50 2c b8 1c a2 36 c0 e8 20 ca fd ff <0f> 0b eb fe 8b 53 0c eb 95 8d b4 26 00 00 00 00 55 57 56 89 d6
[36968.052000] EIP: [<c0169f10>] page_remove_
[36968.052000] <6>note: firefox-bin[26697] exited with preempt_count 1
[36968.052000] BUG: scheduling while atomic: firefox-
[36968.052000] [<c02ec938>] __sched_
[36968.052000] [<c0120f46>] __cond_
[36968.052000] [<c02ecdfa>] cond_resched+
[36968.052000] [<c013e328>] down_read+0x8/0x20
[36968.052000] [<c013fbf0>] futex_wake+
[36968.052000] [<c0140aee>] do_futex+
[36968.052000] [<c0241754>] vt_console_
[36968.052000] [<c01f1084>] vsnprintf+
[36968.052000] [<c02416f0>] vt_console_
[36968.052000] [<c0126093>] __call_
[36968.052000] [<c01264aa>] release_
[36968.052000] [<c0141581>] sys_futex+
[36968.052000] [<c0123d87>] mm_release+
[36968.052000] [<c0127c42>] exit_mm+0x12/0xf0
[36968.052000] [<c01292e2>] do_exit+0xf2/0x800
[36968.052000] [<c0126c2b>] printk+0x1b/0x20
[36968.052000] [<c0104eb0>] show_stack+0x0/0x40
[36968.052000] [<c0105350>] do_invalid_
[36968.052000] [<c01053f2>] do_invalid_
[36968.052000] [<c0169f10>] page_remove_
[36968.052000] [<c02416f0>] vt_console_
[36968.052000] [<c0126093>] __call_
[36968.052000] [<c01264aa>] release_
[36968.052000] [<c02eeb4c>] error_code+
[36968.052000] [<c0169f10>] page_remove_
[36968.052000] [<c0163a8d>] unmap_vmas+
[36968.052000] [<c0166c89>] unmap_region+
[36968.056000] [<c016777d>] do_munmap+
[36968.056000] [<c016800d>] sys_brk+0xdd/0xf0
[36968.056000] [<c01031f0>] sysenter_
[36968.056000] =======
[36968.056000] BUG: scheduling while atomic: firefox-
[36968.056000] [<c02ec938>] __sched_
[36968.056000] [<c02ec63d>] __sched_
[36968.056000] [<c01efca5>] rwsem_down_
[36968.056000] [<c02ee3ca>] rwsem_down_
[36968.056000] [<c02ee457>] call_rwsem_
[36968.056000] [<c013e334>] down_read+0x14/0x20
[36968.056000] [<c013fbf0>] futex_wake+
[36968.056000] [<c0140aee>] do_futex+
[36968.056000] [<c0241754>] vt_console_
[36968.056000] [<c01f1084>] vsnprintf+
[36968.056000] [<c02416f0>] vt_console_
[36968.056000] [<c0126093>] __call_
[36968.056000] [<c01264aa>] release_
[36968.056000] [<c0141581>] sys_futex+
[36968.056000] [<c0123d87>] mm_release+
[36968.056000] [<c0127c42>] exit_mm+0x12/0xf0
[36968.056000] [<c01292e2>] do_exit+0xf2/0x800
[36968.056000] [<c0126c2b>] printk+0x1b/0x20
[36968.056000] [<c0104eb0>] show_stack+0x0/0x40
[36968.056000] [<c0105350>] do_invalid_
[36968.056000] [<c01053f2>] do_invalid_
[36968.056000] [<c0169f10>] page_remove_
[36968.056000] [<c02416f0>] vt_console_
[36968.056000] [<c0126093>] __call_
[36968.056000] [<c01264aa>] release_
[36968.056000] [<c02eeb4c>] error_code+
[36968.056000] [<c0169f10>] page_remove_
[36968.056000] [<c0163a8d>] unmap_vmas+
[36968.056000] [<c0166c89>] unmap_region+
[36968.056000] [<c016777d>] do_munmap+
[36968.056000] [<c016800d>] sys_brk+0xdd/0xf0
[36968.056000] [<c01031f0>] sysenter_
[36968.056000] =======