kernel BUG at mm/mmap.c:2460! due to non-zero mm->nr_ptes

Issue

• System panics with the following BUG():

------------[ cut here ]------------
kernel BUG at mm/mmap.c:2460!
invalid opcode: 0000 [#1] SMP 
last sysfs file: /sys/kernel/mm/ksm/run
CPU 7 
Modules linked in: ip6table_filter ip6_tables iptable_filter ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack ipt_REJECT xt_CHECKSUM ip_tables bridge autofs4 target_core_iblock target_core_file target_core_pscsi target_core_mod configfs bnx2fc cnic uio fcoe libfcoe libfc scsi_transport_fc rdma_ucm(U) rds_tcp(U) rds_rdma(U) rds(U) ib_srp(U) scsi_transport_srp scsi_tgt ib_sdp(U) rdma_cm(U) iw_cm(U) ib_addr(U) bonding 8021q garp stp llc ib_ipoib(U) ib_cm(U) ipv6 ib_usa(U) ib_sa(U) ib_uverbs(U) ib_umad(U) kcopy(U) mlx4_ib(U) mlx4_core(U) ib_mthca(U) xfs exportfs vhost_net macvtap macvlan tun kvm_intel kvm uinput iTCO_wdt iTCO_vendor_support microcode ib_qib(U) ib_mad(U) ib_core(U) ses enclosure sg igb dca i2c_algo_bit ptp pps_core serio_raw i2c_i801 i2c_core lpc_ich mfd_core shpchp ext4 jbd2 mbcache sd_mod crc_t10dif isci libsas scsi_transport_sas aacraid pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: xt_state]

Pid: 2325, comm: postgres Tainted: G        W  ---------------    2.6.32-431.el6.x86_64 #1 Inspur NF5270M3/NF5270M3
RIP: 0010:[<ffffffff8114e544>]  [<ffffffff8114e544>] exit_mmap+0x154/0x170
RSP: 0018:ffff8807da0a7c38  EFLAGS: 00010202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000046 RSI: ffff88080b058570 RDI: 0000000000000000
RBP: ffff8807da0a7c78 R08: ffff88087fee2000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000002 R12: ffff88086f2e5400
R13: ffff8800282eebc0 R14: ffff88086f2e5468 R15: ffff880869f48ae0
FS:  0000000000000000(0000) GS:ffff8800282e0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00007fbff83c3e90 CR3: 0000000001a85000 CR4: 00000000001407e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process postgres (pid: 2325, threadinfo ffff8807da0a6000, task ffff880869f48ae0)
Stack:
 ffff880500000001 ffff88086f2e5400 0000000000006fbd ffff8800282eebc0
<d> ffff8807da0a7c78 ffff88086f2e5400 ffff88086f2e5490 ffff88086f2e5400
<d> ffff8807da0a7c98 ffffffff8106f22c ffff880869f48ae0 ffff880869f492d8
Call Trace:
 [<ffffffff8106f22c>] mmput+0x6c/0x120
 [<ffffffff81076b6b>] exit_mm+0x12b/0x180
 [<ffffffff81076f1f>] do_exit+0x15f/0x870
 [<ffffffff8109b2a0>] ? autoremove_wake_function+0x0/0x40
 [<ffffffff81077688>] do_group_exit+0x58/0xd0
 [<ffffffff8108d046>] get_signal_to_deliver+0x1f6/0x460
 [<ffffffff8108af3b>] ? __send_signal+0x19b/0x390
 [<ffffffff8100a265>] do_signal+0x75/0x800
 [<ffffffff8108b230>] ? do_send_sig_info+0x70/0x90
 [<ffffffff810e2067>] ? audit_syscall_entry+0x1d7/0x200
 [<ffffffff8100aa80>] do_notify_resume+0x90/0xc0
 [<ffffffff8100b341>] int_signal+0x12/0x17
Code: 96 49 8d 7d 18 e8 ad d6 00 00 48 89 df 41 c7 45 08 00 00 00 00 e8 2d fe ff ff 48 85 c0 48 89 c3 0f 85 71 ff ff ff e9 7c ff ff ff <0f> 0b eb fe 0f 1f 84 00 00 00 00 00 e8 0b c7 01 00 e9 c1 fe ff 
RIP  [<ffffffff8114e544>] exit_mmap+0x154/0x170
 RSP <ffff8807da0a7c38>