RHEL7: Kernel panic after exit_mmap()

Issue

• BUG_ON trigerred with below logs:

[2823266.186413] ------------[ cut here ]------------
[2823266.186426] WARNING: CPU: 1 PID: 78055 at mm/rmap.c:235 anon_vma_clone+0x1b1/0x1c0
[2823266.186428] Modules linked in: tcp_diag udp_diag inet_diag vmw_vsock_vmci_transport vsock sunrpc ppdev iosf_mbi crc32_pclmul ghash_clmulni_intel vmw_balloon aesni_intel lrw gf128mul glue_helper ablk_helper cryptd joydev pcspkr sg vmw_vmci i2c_piix4 parport_pc parport binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper sd_mod crc_t10dif crct10dif_generic syscopyarea sysfillrect sysimgblt fb_sys_fops ttm crct10dif_pclmul crct10dif_common crc32c_intel drm ata_piix serio_raw libata vmxnet3 vmw_pvscsi nfit libnvdimm drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse
[2823266.186556] CPU: 1 PID: 78055 Comm: nmon2csv.sh Not tainted 3.10.0-1160.53.1.el7.x86_64 #1
[2823266.186557] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
[2823266.186559] Call Trace:
[2823266.186575]  [<ffffffff9f583579>] dump_stack+0x19/0x1b
[2823266.186582]  [<ffffffff9ee9b278>] __warn+0xd8/0x100
[2823266.186585]  [<ffffffff9ee9b3bd>] warn_slowpath_null+0x1d/0x20
[2823266.186588]  [<ffffffff9f003291>] anon_vma_clone+0x1b1/0x1c0
[2823266.186590]  [<ffffffff9f0032d2>] anon_vma_fork+0x32/0x120
[2823266.186593]  [<ffffffff9ee98313>] dup_mm+0x453/0x760
[2823266.186596]  [<ffffffff9ee99ad6>] copy_process+0x1486/0x1a80
[2823266.186599]  [<ffffffff9ee9a281>] do_fork+0x91/0x330
[2823266.186601]  [<ffffffff9ee9a5a6>] SyS_clone+0x16/0x20
[2823266.186604]  [<ffffffff9f596374>] stub_clone+0x44/0x70
[2823266.186608]  [<ffffffff9f595f92>] ? system_call_fastpath+0x25/0x2a
[2823266.186610] ---[ end trace 40248aab2d1a7c47 ]---
[2823266.187966] ------------[ cut here ]------------
[2823266.188079] kernel BUG at mm/rmap.c:415!
[2823266.188167] invalid opcode: 0000 [#1] SMP 
[2823266.188811] Modules linked in: tcp_diag udp_diag inet_diag vmw_vsock_vmci_transport vsock sunrpc ppdev iosf_mbi crc32_pclmul ghash_clmulni_intel vmw_balloon aesni_intel lrw gf128mul glue_helper ablk_helper cryptd joydev pcspkr sg vmw_vmci i2c_piix4 parport_pc parport binfmt_misc ip_tables xfs libcrc32c sr_mod cdrom ata_generic pata_acpi vmwgfx drm_kms_helper sd_mod crc_t10dif crct10dif_generic syscopyarea sysfillrect sysimgblt fb_sys_fops ttm crct10dif_pclmul crct10dif_common crc32c_intel drm ata_piix serio_raw libata vmxnet3 vmw_pvscsi nfit libnvdimm drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse
[2823266.189013] CPU: 1 PID: 78055 Comm: nmon2csv.sh Tainted: G        W      ------------   3.10.0-1160.53.1.el7.x86_64 #1
[2823266.189037] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
[2823266.189062] task: ffff9adc80620000 ti: ffff9adc05820000 task.ti: ffff9adc05820000
[2823266.189079] RIP: 0010:[<ffffffff9f003098>]  [<ffffffff9f003098>] unlink_anon_vmas+0x168/0x1b0
[2823266.189103] RSP: 0018:ffff9adc05823d18  EFLAGS: 00010202
[2823266.189117] RAX: 0000000000000001 RBX: ffff9adcb31c4440 RCX: 0000000180400016
[2823266.189134] RDX: ffff9adc0a942de8 RSI: fffffe4382e58a80 RDI: ffff9adc1a6f9d20
[2823266.189150] RBP: ffff9adc05823d58 R08: ffff9adc3962ae00 R09: 0000000180400016
[2823266.189167] R10: 000000003962a001 R11: ffff9adc3962ae00 R12: ffff9adcb31c4450
[2823266.189184] R13: ffff9adc0a942df8 R14: ffff9adc3962ae00 R15: ffff9adbb5b3cbe0
[2823266.189202] FS:  0000000000000000(0000) GS:ffff9adcb9640000(0000) knlGS:0000000000000000
[2823266.189239] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[2823266.189259] CR2: 00007f8b1f059d00 CR3: 00000000a2fce000 CR4: 00000000007607e0
[2823266.189372] PKRU: 55555554
[2823266.189413] Call Trace:
[2823266.189458]  [<ffffffff9eff0ac8>] free_pgtables+0xa8/0x120
[2823266.189516]  [<ffffffff9effd656>] exit_mmap+0xc6/0x1a0
[2823266.189559]  [<ffffffff9ee97b87>] mmput+0x67/0xf0
[2823266.189588]  [<ffffffff9eea1908>] do_exit+0x288/0xa30
[2823266.189617]  [<ffffffff9f590678>] ? __do_page_fault+0x238/0x500
[2823266.189647]  [<ffffffff9eea212f>] do_group_exit+0x3f/0xa0
[2823266.189692]  [<ffffffff9eea21a4>] SyS_exit_group+0x14/0x20
[2823266.189720]  [<ffffffff9f595f92>] system_call_fastpath+0x25/0x2a
[2823266.189752] Code: 48 8b 3d bc 4c fc 00 4c 89 f6 e8 c4 3d 02 00 48 8b 43 10 4d 39 ec 48 8d 50 f0 75 b7 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b 80 3d 20 d7 b2 00 00 74 16 49 8d 7e 08 48 89 55 d0 e8 a0 
[2823266.189908] RIP  [<ffffffff9f003098>] unlink_anon_vmas+0x168/0x1b0
[2823266.189966]  RSP <ffff9adc05823d18>
[2823266.192805] ---[ end trace 40248aab2d1a7c48 ]---
[2823266.192820] Kernel panic - not syncing: Fatal exception
[2823266.193015] Kernel Offset: 0x1de00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

• Many more pattern of panic occurs due to memory corruption.

dget_parent+114 / __rb_erase_color+0x155 / __rb_insert_augmented+0x24 / 
down_read_trylock+9 / native_queued_spin_lock_slowpath+272