A RHEL 5 cluster node is panicing on this function "Unable to handle kernel paging request at 0000000000200200 RIP: [<ffffffff8015c650>] list_del+0xb/0x6b"

Issue

• A RHEL 5 cluster node is panicing and throwing the following backtrace:

NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory
NFSD: starting 90-second grace period
hdc: drive_cmd: status=0x51 { DriveReady SeekComplete Error }
hdc: drive_cmd: error=0x04 { AbortedCommand }
ide: failed opcode was: 0xec
dlm: closing connection to node 2
dlm: closing connection to node 1
dlm: connecting to 1
Unable to handle kernel paging request at 0000000000200200 RIP: 
 [<ffffffff8015c650>] list_del+0xb/0x6b
PGD 0 
Oops: 0000 [1] SMP 
last sysfs file: /devices/pci0000:00/0000:00:00.0/irq
CPU 2 
Modules linked in: nfs nfsd exportfs nfs_acl auth_rpcgss autofs4 hidp rfcomm l2cap bluetooth lock_dlm gfs2 dlm configfs lockd sunrpc be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi acpiphp ext3 jbd dm_multipath scsi_dh video backlight sbs power_meter hwmon i2c_ec dell_wmi wmi button battery asus_acpi acpi_memhotplug ac lp ide_cd floppy parport_pc i2c_piix4 parport tpm_tis i2c_core serio_raw tpm cdrom sg e1000 pcspkr shpchp tpm_bios dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod ata_piix libata mptspi mptscsih mptbase scsi_transport_spi sd_mod scsi_mod uhci_hcd ohci_hcd ehci_hcd
Pid: 4035, comm: dlm_send Not tainted 2.6.18-348.6.1.el5 #1
RIP: 0010:[<ffffffff8015c650>]  [<ffffffff8015c650>] list_del+0xb/0x6b
RSP: 0018:ffff81052ca0ddf0  EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff81052fdfae60 RCX: 0000000000200200
RDX: ffff8104f58b9a18 RSI: ffff810517f54a40 RDI: ffff810517f54a40
RBP: ffff810517f54a40 R08: 0000000000000286 R09: f00c890aef0c890a
R10: ffff8104f58b9ab8 R11: 0000000000000058 R12: 0000000000000058
R13: 0000000000000058 R14: 0000000000000000 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8101127430c0(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 0000000000200200 CR3: 0000000000201000 CR4: 00000000000006a0
Process dlm_send (pid: 4035, threadinfo ffff81052ca0c000, task ffff81052f7f9830)
Stack:  0000000000000000 ffffffff8864e54f ffffffff802600e8 ffff81052fdfaf40
 ffff81052fdfaf48 ffff81053f8465c0 0000000000000282 ffff81052fdfae60
 ffffffff8864e435 ffffffff8004d89e 0000000000010000 ffff81053f8465c0
Call Trace:
 [<ffffffff8864e54f>] :dlm:process_send_sockets+0x11a/0x1a5
 [<ffffffff802600e8>] tcp_sendpage+0x0/0x651
 [<ffffffff8864e435>] :dlm:process_send_sockets+0x0/0x1a5
 [<ffffffff8004d89e>] run_workqueue+0x9e/0xfb
 [<ffffffff8004a0e7>] worker_thread+0x0/0x122
 [<ffffffff800a3ab7>] keventd_create_kthread+0x0/0xc4
 [<ffffffff8004a1d7>] worker_thread+0xf0/0x122
 [<ffffffff8008f455>] default_wake_function+0x0/0xe
 [<ffffffff800a3ab7>] keventd_create_kthread+0x0/0xc4
 [<ffffffff800a3ab7>] keventd_create_kthread+0x0/0xc4
 [<ffffffff80032c23>] kthread+0xfe/0x132
 [<ffffffff8005dfc1>] child_rip+0xa/0x11
 [<ffffffff800a3ab7>] keventd_create_kthread+0x0/0xc4
 [<ffffffff80032b25>] kthread+0x0/0x132
 [<ffffffff8005dfb7>] child_rip+0x0/0x11


Code: 48 8b 11 48 39 fa 74 1a 48 c7 c7 e9 e0 2c 80 31 c0 e8 46 83 
RIP  [<ffffffff8015c650>] list_del+0xb/0x6b
 RSP <ffff81052ca0ddf0>