RHEL5.3 kernel 2.6.18-128.el5 crashed in put_nfs_open_context due to invalid nfs_open_context list

Issue

kernel crashed while doing a chmod / setattr on an NFS4 file, with the following message

NFS: v4 server returned a bad sequence-id error!
Error: state recovery failed on NFSv4 server 192.168.51.4 with error 2
nfs: server 192.168.51.4 not responding, still trying
nfs: server 192.168.51.4 OK
nfs: server 192.168.51.4 not responding, still trying
nfs: server 192.168.51.4 OK
Unable to handle kernel paging request at 0000000000200200 RIP: 
 [<ffffffff8014c58a>] list_del+0x8/0x71
PGD d23ff067 PUD 7b823067 PMD 0 
Oops: 0000 [1] SMP 
last sysfs file: /devices/pci0000:00/0000:00:00.0/irq
CPU 13 
Modules linked in: nfs lockd fscache nfs_acl autofs4 hidp rfcomm l2cap bluetooth sunrpc bonding ipv6 xfrm_nalgo crypto_api dm_multipath scsi_dh video hwmon backlight sbs i2c_ec i2c_core button battery asus_acpi acpi_memhotplug ac parport_pc lp parport sr_mod cdrom sg shpchp hpilo bnx2 serio_raw pcspkr dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod ata_piix libata cciss sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 17163, comm: chmod Not tainted 2.6.18-128.el5 #1
RIP: 0010:[<ffffffff8014c58a>]  [<ffffffff8014c58a>] list_del+0x8/0x71
RSP: 0018:ffff810202047c98  EFLAGS: 00010247
RAX: 0000000000200200 RBX: ffff8101813e8b08 RCX: ffff8102270954e0
RDX: 00000000000001ed RSI: ffff810202047f08 RDI: ffff8101813e8b08
RBP: ffff8101813e8ac0 R08: ffffffff883d42f8 R09: ffff81003335db40
R10: ffff8102107c86f0 R11: 0000000000000004 R12: ffff8101813e8b08
R13: ffff81003d939a80 R14: ffff810202047d08 R15: ffff810202047f08
FS:  00002b3d58e4b6e0(0000) GS:ffff81041fc90240(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000200200 CR3: 000000009af8e000 CR4: 00000000000006e0
Process chmod (pid: 17163, threadinfo ffff810202046000, task ffff81021f87b7e0)
Stack:  ffff81003d939a80 ffffffff884909fe ffff8101813e8ac0 0000000000000000
 ffff81021ebe5340 ffffffff884a3639 0000000000000000 ffff81003d939a80
 ffff810202047f08 0000000000000000 0000000000000000 ffff8103f418f8e8
Call Trace:
 [<ffffffff884909fe>] :nfs:put_nfs_open_context+0x37/0x93
 [<ffffffff884a3639>] :nfs:nfs4_proc_setattr+0x9f/0xb6
 [<ffffffff884917d0>] :nfs:nfs_setattr+0xd2/0xfc
 [<ffffffff8002c77e>] mntput_no_expire+0x19/0x89
 [<ffffffff8000e00a>] current_fs_time+0x3b/0x40
 [<ffffffff8002c5ca>] notify_change+0x145/0x2e0
 [<ffffffff80043994>] sys_fchmodat+0x9b/0xbe
 [<ffffffff800b4628>] audit_syscall_entry+0x16e/0x1a1
 [<ffffffff8005d229>] tracesys+0x71/0xe0
 [<ffffffff8005d28d>] tracesys+0xd5/0xe0

Code: 48 8b 10 48 39 fa 74 1b 48 89 fe 31 c0 48 c7 c7 01 62 2a 80 
RIP  [<ffffffff8014c58a>] list_del+0x8/0x71
 RSP <ffff810202047c98>