The kernel crashes in __dec_zone_state() because of the invalid kernel address of struct zone that page_zone() returns. A possible hardware malfunction.

Issue

• The kernel crashes in __dec_zone_state() because of the invalid kernel address of struct zone that page_zone() returns.

BUG: unable to handle kernel paging request at 00000000000194c0
IP: [<ffffffff81157da5>] __dec_zone_state+0x15/0x80
Kernel PGD 0 
User   PGD 0 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/system/node/node0/meminfo
CPU 5 
Modules linked in: falcon_lsm_serviceable(P)(U) falcon_nf_netcontain(P)(U) falcon_kal(U) falcon_lsm_pinned_11110(U) ip_tables vxodm(P)(U) amf(P)(U) vxglm(P)(U) 8021q garp stp llc autofs4 nfs lockd fscache auth_rpcgss nfs_acl sunrpc dmpjbod(P)(U) dmpap(P)(U) dmpaa(P)(U) vxspec(P)(U) vxio(P)(U) vxdmp(P)(U) pcc_cpufreq falcon_lsm_pinned_10703(U) bonding ipv6 vxcafs(P)(U) vxportal(P)(U) fdd(P)(U) vxfs(P)(U) exportfs dm_round_robin dm_multipath iTCO_wdt iTCO_vendor_support serio_raw ixgbe mdio igb dca i2c_algo_bit i2c_core ipmi_devintf power_meter acpi_ipmi ipmi_si ipmi_msghandler sb_edac edac_core lpc_ich mfd_core hpilo hpwdt tg3 ptp pps_core sg ext4 jbd2 mbcache sd_mod lpfc scsi_transport_fc scsi_tgt crc_t10dif hpsa wmi dm_mirror dm_region_hash dm_log dm_mod [last unloaded: falcon_lsm_serviceable]

Pid: 126700, comm: q Tainted: P           -- ------------    2.6.32-754.33.1.el6.x86_64 #1 HP ProLiant DL580 Gen8
RIP: 0010:[<ffffffff81157da5>]  [<ffffffff81157da5>] __dec_zone_state+0x15/0x80
RSP: 0018:ffff8a255502bac8  EFLAGS: 00010202
RAX: 0000000000000005 RBX: ffffea003c7fe200 RCX: 0000000000000100
RDX: ffffc90180c0f240 RSI: 0000000000000007 RDI: 0000000000019440
RBP: ffff8a255502bac8 R08: ffff8abe5619f9e0 R09: 0000000000000000
R10: 0000000000000000 R11: 00000000fffffe4b R12: 00007f3593a00000
R13: ffff8995694e94e0 R14: 0000000000207000 R15: ffff89da9512d218
FS:  00007fb3599d1700(0000) GS:ffff880b36340000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000000194c0 CR3: 000002481002c000 CR4: 00000000001607e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process q (pid: 126700, threadinfo ffff8a2555028000, task ffff8a06076c6ab0)
Stack:
 ffff8a255502bad8 ffffffff81157e3e ffff8a255502baf8 ffffffff8116aa84
<d> 0000000000400000 00007f3593843000 ffff8a255502bc38 ffffffff8115e06a
<d> 0000000000000297 ffffea0325cbc940 ffff88000001fd80 ffffea06fee89530
Call Trace:
 [<ffffffff81157e3e>] __dec_zone_page_state+0x2e/0x30
 [<ffffffff8116aa84>] page_remove_rmap+0x54/0xa0
 [<ffffffff8115e06a>] unmap_vmas+0x78a/0xce0
 [<ffffffff811652e7>] exit_mmap+0x87/0x180
 [<ffffffff8107ea8c>] mmput+0x6c/0x120
 [<ffffffff81086abb>] exit_mm+0x12b/0x180
 [<ffffffff81086e5f>] do_exit+0x15f/0x860
 [<ffffffff810c0883>] ? futex_wake+0x93/0x150
 [<ffffffff810875b8>] do_group_exit+0x58/0xd0
 [<ffffffff8109d536>] get_signal_to_deliver+0x1f6/0x470
 [<ffffffff8100a375>] do_signal+0x75/0x8d0
 [<ffffffff812ad6d5>] ? rwsem_wake+0x75/0x170
 [<ffffffff810c343b>] ? sys_futex+0x7b/0x170
 [<ffffffff815662ce>] ? system_call_after_swapgs+0xae/0x152
 [<ffffffff815662c2>] ? system_call_after_swapgs+0xa2/0x152
 [<ffffffff815662ce>] ? system_call_after_swapgs+0xae/0x152
 [<ffffffff815662c2>] ? system_call_after_swapgs+0xa2/0x152
 [<ffffffff815662ce>] ? system_call_after_swapgs+0xae/0x152
 [<ffffffff815662c2>] ? system_call_after_swapgs+0xa2/0x152
 [<ffffffff8100ac60>] do_notify_resume+0x90/0xc0
 [<ffffffff8156672f>] int_signal+0x12/0x17
Code: 00 48 c7 c2 60 79 01 00 48 89 c6 48 01 d7 e8 63 e6 f4 ff c9 c3 90 55 48 89 e5 0f 1f 44 00 00 65 8b 04 25 38 15 01 00 48 98 89 f6 <48> 8b 54 c7 58 0f b6 4c 32 42 83 e9 01 88 4c 32 42 44 0f b6 42 
RIP  [<ffffffff81157da5>] __dec_zone_state+0x15/0x80
 RSP <ffff8a255502bac8>
CR2: 00000000000194c0