Kernel crashes at function do_split calling from ext{3|4}_add_entry in Red Hat Enterprise Linux

Issue

• Kernel crashes at function do_split calling from ext4_add_entry with following logs:

BUG: unable to handle kernel paging request at ffff88095de05f90
IP: [<ffffffffa02e7259>] do_split+0x309/0x5c0 [ext3]
Kernel PGD 1a90063 PUD 0 
User   PGD 83fe73067 PUD 0 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/pci0000:00/0000:00:15.0/0000:03:00.0/host2/target2:0:8/2:0:8:0/block/sdh/size
CPU 1 
Modules linked in: tcp_diag inet_diag autofs4 lockd sunrpc vsock(U) ipv6 ext3 jbd ppdev parport_pc parport vmware_balloon vmci(U) sg i2c_piix4 shpchp ext4 jbd2 mbcache sd_mod crc_t10dif sr_mod cdrom vmxnet3 vmw_pvscsi pata_acpi ata_generic ata_piix vmwgfx ttm drm_kms_helper drm i2c_core dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]

Pid: 14098, comm: java Not tainted 2.6.32-754.28.1.el6.x86_64 #1 VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform
RIP: 0010:[<ffffffffa02e7259>]  [<ffffffffa02e7259>] do_split+0x309/0x5c0 [ext3]
RSP: 0018:ffff8801074dbab8  EFLAGS: 00010202
RAX: 00000000ffffffff RBX: ffff880381a8e800 RCX: ffff88015de05f98
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000d
RBP: ffff8801074dbb88 R08: 0000000000000102 R09: 0000000000000200
R10: 001002a89f0498ca R11: 001403849f1bfe8e R12: ffff880381a8ec00
R13: ffff880381a8ec00 R14: 00000000ffffffff R15: ffff88015de05f98
FS:  00007efc82cee700(0000) GS:ffff88005c640000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88095de05f90 CR3: 0000000824c4c000 CR4: 00000000001607e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process java (pid: 14098, threadinfo ffff8801074d8000, task ffff880831d2e040)
Stack:
 ffff8801074dbaf8 0000000000000246 ffff88082b3739b8 ffff8801074dbc68
<d> ffff880381a8e800 ffff880381263438 ffff8801074dbc18 ffff88015de05c00
<d> ffff88015de06000 ffff880381a8ec00 ffff8801074dbc48 ffff8801074dbc60
Call Trace:
 [<ffffffffa02e8824>] ext3_add_entry+0x804/0x910 [ext3]
 [<ffffffffa02e007c>] ? ext3_new_inode+0x46c/0xc50 [ext3]
 [<ffffffffa02e03df>] ? ext3_new_inode+0x7cf/0xc50 [ext3]
 [<ffffffffa02e895e>] ext3_add_nondir+0x2e/0x90 [ext3]
 [<ffffffffa02e8baf>] ext3_create+0xcf/0x120 [ext3]
 [<ffffffff811af16c>] ? generic_permission+0x5c/0xb0
 [<ffffffff811b148c>] vfs_create+0xec/0x110
 [<ffffffff811b530e>] do_filp_open+0xa9e/0xd30
 [<ffffffff811a74f4>] ? cp_new_stat+0xe4/0x100
 [<ffffffff812b2c0a>] ? strncpy_from_user+0x4a/0x90
 [<ffffffff811c2365>] ? alloc_fd+0x55/0x160
 [<ffffffff8119e7d7>] do_sys_open+0x67/0x130
 [<ffffffff815642c2>] ? system_call_after_swapgs+0xa2/0x152
 [<ffffffff815642ce>] ? system_call_after_swapgs+0xae/0x152
 [<ffffffff815642c2>] ? system_call_after_swapgs+0xa2/0x152
 [<ffffffff8119e8e0>] sys_open+0x20/0x30
 [<ffffffff815643a7>] system_call_fastpath+0x35/0x3a
 [<ffffffff815642ce>] ? system_call_after_swapgs+0xae/0x152
Code: b7 c0 46 8d 04 02 45 39 c8 77 09 83 c6 01 41 83 ee 01 79 d6 89 fa 29 f2 89 d0 89 d6 29 d7 4c 8d 3c c1 41 8b 07 89 45 9c 8d 46 ff <8b> 04 c1 89 85 50 ff ff ff 0f 84 51 02 00 00 4c 8b ad 68 ff ff 
RIP  [<ffffffffa02e7259>] do_split+0x309/0x5c0 [ext3]
 RSP <ffff8801074dbab8>
CR2: ffff88095de05f90