Kernel panic in vmmemctl code path Balloon_Deallocate+0x3c/0x104

Issue

• Here's backtrace from kernel ring buffer:

<1>BUG: unable to handle kernel paging request at ffff880aa26e7ff8
<1>IP: [<ffffffffa0214b00>] Balloon_Deallocate+0x3c/0x104 [vmmemctl]
<4>PGD 1a86063 PUD 0 
<4>Oops: 0000 [#1] SMP 
<4>last sysfs file: /sys/devices/system/cpu/online
<4>CPU 1 
<4>Modules linked in: bridge stp llc nfs lockd fscache nfs_acl netconsole configfs autofs4 rpcsec_gss_krb5 auth_rpcgss sunrpc vmmemctl(U) vsock(U) ipv6 ppdev sr_mod cdrom microcode parport_pc parport vmxnet3(U) sg vmci(U) i2c_piix4 i2c_core ata_piix shpchp ext4 jbd2 mbcache sd_mod crc_t10dif mptspi mptscsih mptbase scsi_transport_spi pata_acpi ata_generic dm_mirror dm_region_hash dm_log dm_mod [last unloaded: speedstep_lib]
<4>
<4>Pid: 1369, comm: vmmemctl Not tainted 2.6.32-504.3.3.el6.x86_64 #1 VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform
<4>RIP: 0010:[<ffffffffa0214b00>]  [<ffffffffa0214b00>] Balloon_Deallocate+0x3c/0x104 [vmmemctl]
<4>RSP: 0000:ffff880434341e10  EFLAGS: 00010296
<4>RAX: 00000000ffffffff RBX: ffffffffa02169c0 RCX: ffffffffa0216988
<4>RDX: ffffffffa0216980 RSI: 0000000000000283 RDI: ffffffffa02169c0
<4>RBP: ffff880434341e30 R08: ffff880434340000 R09: 0000000000000000
<4>R10: 0000000000000000 R11: 0000000000000000 R12: ffff8802a26e8000
<4>R13: 0000000000000000 R14: ffff880434341e90 R15: ffff88043a286aa0
<4>FS:  0000000000000000(0000) GS:ffff880036620000(0000) knlGS:0000000000000000
<4>CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
<4>CR2: ffff880aa26e7ff8 CR3: 00000004340de000 CR4: 00000000000407e0
<4>DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
<4>DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
<4>Process vmmemctl (pid: 1369, threadinfo ffff880434340000, task ffff880434aa6040)
<4>Stack:
<4> ffff880434aa6040 0000000000000000 ffff880434aa6040 ffff880434aa6040
<4><d> ffff880434341e80 ffffffffa0214ecc ffff880434341e80 0000000000000283
<4><d> 0000000034341e80 0000000000000000 ffff880434aa6040 ffff880434aa6040
<4>Call Trace:
<4> [<ffffffffa0214ecc>] Balloon_QueryAndExecute+0x38/0x470 [vmmemctl]
<4> [<ffffffffa0214987>] vmballoon_poll_loop+0xeb/0x104 [vmmemctl]
<4> [<ffffffff8109eb00>] ? autoremove_wake_function+0x0/0x40
<4> [<ffffffffa021489c>] ? vmballoon_poll_loop+0x0/0x104 [vmmemctl]
<4> [<ffffffff8109e66e>] kthread+0x9e/0xc0
<4> [<ffffffff8100c20a>] child_rip+0xa/0x20
<4> [<ffffffff8109e5d0>] ? kthread+0x0/0xc0
<4> [<ffffffff8100c200>] ? child_rip+0x0/0x20
<4>Code: ec 08 e9 90 00 00 00 48 3b 1b 74 77 4c 8b 63 08 49 81 ec 48 1f 00 00 41 8b 84 24 40 1f 00 00 ff c8 41 89 84 24 40 1f 00 00 89 c0 <49> 8b 3c c4 e8 0b fc ff ff ff 83 e4 00 00 00 ff 8b a4 00 00 00 
<1>RIP  [<ffffffffa0214b00>] Balloon_Deallocate+0x3c/0x104 [vmmemctl]
<4> RSP <ffff880434341e10>
<4>CR2: ffff880aa26e7ff8