kfree() 関数でカーネルパニックが発生する

Issue

• カーネルがパニックになり、以下のコールトレースが出力されます。

kernel BUG at mm/slab.c:524!
invalid opcode:0000 [#1] SMP 
last sysfs file:/sys/devices/virtual/dmi/id/product_serial
CPU 0 
Modules linked in: mvfs(U) nfs lockd fscache auth_rpcgss nfs_acl sunrpc autofs4 ipmi_devintf cpufreq_ondemand acpi_cpufreq freq_table mperf bonding 8021q garp stp llc ipv6 microcode i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support shpchp sg ioatdma igb dca ptp pps_core ext4 mbcache jbd2 sr_mod cdrom sd_mod crc_t10dif ahci wmi megaraid_sas dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]

Pid:13359, comm: scan Not tainted 2.6.32-358.11.1.el6.x86_64 #1 IBM System x3650 M4 :-[7915YZJ]-/00Y8362
RIP:0010:[<ffffffff8116944c>]  [<ffffffff8116944c>] kfree+0x29c/0x320
RSP:0000:ffff88087395db68  EFLAGS:00210046
RAX: ffffea000005d3e0 RBX: ffffffff81aa4c00 RCX:0000000000000000
RDX:0020000000000400 RSI: ffff880028211960 RDI: ffffffff81aa4c00
RBP: ffff88087395dbc8 R08:000000000000000c R09: ffff8800610bde00
R10:0000000000000000 R11:0000000000000000 R12: ffffffff8109fa94
R13:0000000000200286 R14:0000000000000000 R15: ffff88087395dd18
FS:0000000000000000(0000) GS:ffff880028200000(0000) knlGS:0000000000000000
CS:0010 DS:002b ES:002b CR0:000000008005003b
CR2:00000000f4a15400 CR3:00000006927c5000 CR4:00000000000407f0
DR0:0000000000000000 DR1:0000000000000000 DR2:0000000000000000
DR3:0000000000000000 DR6:00000000ffff0ff0 DR7:0000000000000400
Process scan (pid:13359, threadinfo ffff88087395c000, task ffff880871932040)
Stack:
 ffff88004fc1f980 ffff880028211960 ffffffff81aa9100 0000000000200282
<d> ffff88087395dbb8 0000000000200282 ffff8800676b7e58 ffff8800676b7e58
<d> ffffffff81aa4c00 ffff88001af27680 ffff880658fd6cf8 ffff88087395dd18
Call Trace:
 [<ffffffff8109fa94>] groups_free+0x54/0x60
 [<ffffffffa038285f>] mdki_dup_default_creds+0x11d/0x17f [mvfs]
 [<ffffffffa03828d7>] mdki_linux_init_call_data+0x16/0x27 [mvfs]
 [<ffffffffa037924e>] vnode_dop_hash+0x53/0xb3 [mvfs]
 [<ffffffffa0381f01>] ? mdki_linux_destroy_call_data+0x29/0x35 [mvfs]
 [<ffffffffa037a705>] ? vnode_iop_permission+0x4d/0x5d [mvfs]
 [<ffffffff811907c4>] __link_path_walk+0x1f4/0x1030
 [<ffffffff811d1370>] ? compat_filldir64+0x0/0xe0
 [<ffffffff8119188a>] path_walk+0x6a/0xe0
 [<ffffffff81191a5b>] do_path_lookup+0x5b/0xa0
 [<ffffffff811926e7>] user_path_at+0x57/0xa0
 [<ffffffffa0376e96>] ? mvfs_release_thread_ptr+0xe/0x10 [mvfs]
 [<ffffffffa0381f01>] ? mdki_linux_destroy_call_data+0x29/0x35 [mvfs]
 [<ffffffff81075787>] ? current_fs_time+0x27/0x30
 [<ffffffffa0379855>] ? vnode_fop_readdir+0x7f/0x9f [mvfs]
 [<ffffffff81186afc>] vfs_fstatat+0x3c/0x80
 [<ffffffff81186bae>] vfs_lstat+0x1e/0x20
 [<ffffffff8104eb74>] sys32_lstat64+0x24/0x40
 [<ffffffff811d29b4>] ? compat_sys_getdents64+0xb4/0xe0
 [<ffffffff8104dc73>] ia32_sysret+0x0/0x5
Code:4d c8 89 c2 83 c0 01 49 89 4c d4 18 41 89 04 24 66 ff 03 66 66 90 e9 91 fe ff ff 0f 0b eb fe 48 8b 40 10 48 8b 10 e9 46 fe ff ff <0f> 0b 66 90 eb fc 48 8b 40 10 48 8b 10 66 85 d2 0f 89 d5 fd ff 
RIP  [<ffffffff8116944c>] kfree+0x29c/0x320
 RSP <ffff88087395db68>