RHEL5: kernel crashed with RIP rb_erase from nfs_access_cache_shrinker and Unable to handle kernel paging request at 000000000000ffff

Issue

• Kernel crashes with a message similar to the following with Unable to handle kernel paging request at 000000000000ffff and RIP rb_erase from nfs_access_cache_shrinker

Unable to handle kernel paging request at 000000000000ffff RIP:
 [<ffffffff80022d9b>] rb_erase+0xe5/0x2aa
PGD 0
Oops: 0000 [1] SMP
last sysfs file: /devices/pci0000:00/0000:00:09.0/0000:09:00.0/host2/rport-2:0-0/target2:0:0/2:0:0:0/timeout
CPU 14
Modules linked in: nls_utf8 raid456 xor raid1 raid0 linear ide_cd cdrom vfat msdos fat nfs nfs_acl mptctl mptbase ipmi_devintf ipmi_si ipmi_msghandler loop seos(PU) autofs4 hidp rfcomm l2cap bluetooth lockd sunrpc bonding ip6t_REJECT xt_tcpudp ip6table_filter ip6_tables x_tables be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi dm_round_robin dm_multipath scsi_dh video backlight sbs power_meter hwmon i2c_ec i2c_core dell_wmi wmi button battery asus_acpi acpi_memhotplug ac parport_pc lp parport sg tpm_tis bnx2x tpm 8021q shpchp tpm_bios hpilo serio_raw mdio pcspkr dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod usb_storage qla2xxx scsi_transport_fc cciss sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 1249, comm: kswapd1 Tainted: P     ---- 2.6.18-274.7.1.el5 #1
RIP: 0010:[<ffffffff80022d9b>]  [<ffffffff80022d9b>] rb_erase+0xe5/0x2aa
RSP: 0018:ffff81181ec29d28  EFLAGS: 00010206
RAX: ffff000000000001 RBX: ffff000000000000 RCX: 000000000000ffff
RDX: ffff000000000000 RSI: ffff810556f6d6a0 RDI: ffff8100df012400
RBP: ffff810556f6d6a0 R08: 0000000000000001 R09: ffff810934b89d78
R10: ffff81066b1dca90 R11: ffffffff80039a58 R12: ffff810556f6d7a0
R13: ffff810556f6d6b8 R14: ffff810556f6d6a8 R15: ffff81180f043470
FS:  0000000000000000(0000) GS:ffff810c200544c0(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 000000000000ffff CR3: 0000000000201000 CR4: 00000000000006a0
Process kswapd1 (pid: 1249, threadinfo ffff81181ec28000, task ffff810c1fbd77e0)
Stack:  ffff8100df012400 ffff810556f6d5c8 ffffffff88bbe190 0000000000000007
 0000003000000080 ffff8100df012418 ffff8108372fbd58 ffff81181ec29d60
 ffff810c1fca89c0 00000000000a1f04 0000000000000109 00000000000000d0
Call Trace:
 [<ffffffff88bbe190>] :nfs:nfs_access_cache_shrinker+0xce/0x1da
 [<ffffffff8003f23e>] shrink_slab+0xdc/0x153
 [<ffffffff80057860>] kswapd+0x35d/0x495
 [<ffffffff800a2e51>] autoremove_wake_function+0x0/0x2e
 [<ffffffff80057503>] kswapd+0x0/0x495
 [<ffffffff800a2c39>] keventd_create_kthread+0x0/0xc4
 [<ffffffff8003270f>] kthread+0xfe/0x132
 [<ffffffff8005dfb1>] child_rip+0xa/0x11
 [<ffffffff800a2c39>] keventd_create_kthread+0x0/0xc4
 [<ffffffff80032611>] kthread+0x0/0x132
 [<ffffffff8005dfa7>] child_rip+0x0/0x11

Code: 48 8b 01 83 e0 03 48 09 d0 48 89 01 48 85 d2 74 12 48 39 7a
RIP  [<ffffffff80022d9b>] rb_erase+0xe5/0x2aa
 RSP <ffff81181ec29d28>