RHEL6: kernel BUG at mm/slab.c:3069!, radix_tree_node slab corrupted

Issue

• radix_tree_preload から呼び出された "kernel BUG at mm/slab.c:3069!" によりカーネルがパニックになります。

kernel BUG at mm/slab.c:3069!
....
Pid:2961, comm: nfsd Not tainted 2.6.32-279.19.1.el6.x86_64 #1 Supermicro X8DT3/X8DT3
RIP:0010:[<ffffffff8115da44>]  [<ffffffff8115da44>] cache_alloc_refill+0x1e4/0x240
....
Call Trace:
 [<ffffffff8115eaff>] kmem_cache_alloc+0x15f/0x190
 [<ffffffff8126e2f6>] radix_tree_preload+0x36/0xa0
 [<ffffffff8111024b>] add_to_page_cache_locked+0x7b/0x140
 [<ffffffff8111033c>] add_to_page_cache_lru+0x2c/0x80
 [<ffffffff81110f5d>] grab_cache_page_write_begin+0xbd/0xe0
 [<ffffffff811ab228>] block_write_begin_newtrunc+0x88/0xd0
 [<ffffffffa02e9852>] xfs_vm_write_begin+0x42/0x70 [xfs]
 [<ffffffffa02e9330>] ? xfs_get_blocks+0x0/0x20 [xfs]
 [<ffffffff81110793>] generic_file_buffered_write+0x123/0x2e0
 [<ffffffffa02e1f39>] ? xfs_trans_unlocked_item+0x39/0x60 [xfs]
 [<ffffffffa02ef71a>] xfs_file_buffered_aio_write+0xea/0x1a0 [xfs]
 [<ffffffff81422715>] ? memcpy_toiovec+0x55/0x80
 [<ffffffffa02efbdb>] xfs_file_aio_write+0x1bb/0x2e0 [xfs]
 [<ffffffffa02c8493>] ? xfs_iget+0x473/0x6f0 [xfs]
 [<ffffffffa02efa20>] ? xfs_file_aio_write+0x0/0x2e0 [xfs]
 [<ffffffff8117614b>] do_sync_readv_writev+0xfb/0x140
 [<ffffffff81090990>] ? autoremove_wake_function+0x0/0x40
 [<ffffffff81219b4b>] ? selinux_file_permission+0xfb/0x150
 [<ffffffff8120ca26>] ? security_file_permission+0x16/0x20
 [<ffffffff811770d6>] do_readv_writev+0xd6/0x1f0
 [<ffffffff81215ec4>] ? inode_has_perm+0x54/0xa0
 [<ffffffff81177236>] vfs_writev+0x46/0x60
 [<ffffffffa0569555>] nfsd_vfs_write+0x105/0x430 [nfsd]
 [<ffffffff81173f32>] ? dentry_open+0x52/0xc0
 [<ffffffffa056b9fb>] ? nfsd_open+0x1db/0x230 [nfsd]
 [<ffffffffa056be17>] nfsd_write+0xe7/0x100 [nfsd]
 [<ffffffffa057354f>] nfsd3_proc_write+0xaf/0x140 [nfsd]
 [<ffffffffa056443e>] nfsd_dispatch+0xfe/0x240 [nfsd]
 [<ffffffffa0452794>] svc_process_common+0x344/0x640 [sunrpc]
 [<ffffffff8105fa40>] ? default_wake_function+0x0/0x20
 [<ffffffffa0452dd0>] svc_process+0x110/0x160 [sunrpc]
 [<ffffffffa0564b62>] nfsd+0xc2/0x160 [nfsd]
 [<ffffffffa0564aa0>] ? nfsd+0x0/0x160 [nfsd]
 [<ffffffff81090626>] kthread+0x96/0xa0
 [<ffffffff8100c0ca>] child_rip+0xa/0x20
 [<ffffffff81090590>] ? kthread+0x0/0xa0
 [<ffffffff8100c0c0>] ? child_rip+0x0/0x20
Code:89 ff e8 20 c2 11 00 eb 99 66 0f 1f 44 00 00 41 c7 45 60 01 00 00 00 4d 8b 7d 20 4c 39 7d c0 0f 85 f2 fe ff ff eb 84 0f 0b eb fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 eb f4 8b 55 ac 8b 75 bc 31 
RIP  [<ffffffff8115da44>] cache_alloc_refill+0x1e4/0x240
 RSP <ffff880c200eb5c0>