Kernel panic in list_del() or list_add() with cgroup_event_wake() as the calling function

Issue

• System rebooted on it's own.
• The error below was visible on the console at the time of the failure, or visible in the kernel ring buffer in a vmcore.

general protection fault: 0000 [#1] SMP 
last sysfs file: /sys/devices/virtual/net/vethbdedab4/address
CPU 1 
Modules linked in: veth ipt_addrtype xt_conntrack iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 ip_tables bridge stp llc dm_thin_pool dm_bio_prison dm_persistent_data dm_bufio libcrc32c cpufreq_ondemand freq_table pcc_cpufreq bonding ipv6 microcode power_meter acpi_ipmi ipmi_si ipmi_msghandler iTCO_wdt iTCO_vendor_support hpilo hpwdt sg ixgbe dca ptp pps_core mdio serio_raw lpc_ich mfd_core shpchp ext4 jbd2 mbcache sd_mod crc_t10dif hpsa pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]

Pid: 5867, comm: docker Not tainted 2.6.32-504.23.4.el6.x86_64 #1 HP ProLiant DL360p Gen8
RIP: 0010:[<ffffffff8129ecb0>]  [<ffffffff8129ecb0>] list_del+0x10/0xa0
RSP: 0018:ffff885fa4f2bdc8  EFLAGS: 00010092
RAX: dead000000200200 RBX: ffff882fdbfc69d8 RCX: 0000000000000010
RDX: 0000000000000002 RSI: 0000000000000003 RDI: ffff882fdbfc69d8
RBP: ffff885fa4f2bdd8 R08: 0000000000000010 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: ffff882fdbfc69c0
R13: ffff882ff4961518 R14: 0000000000000010 R15: 0000000000000000
FS:  00007f2f1ffff700(0000) GS:ffff880114220000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000003270473b90 CR3: 0000002fa8129000 CR4: 00000000001407e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process docker (pid: 5867, threadinfo ffff885fa4f2a000, task ffff885fa4ce4ab0)
Stack:
 00000254dae5c640 ffff882fdbfc6a00 ffff885fa4f2be08 ffffffff810cdc32
<d> 0000000100000004 ffff882fe2d5f8f8 0000000000000000 ffff882fe2d5f910
<d> ffff885fa4f2be58 ffffffff81057839 000000c208595ab8 0000000300000001
Call Trace:
 [<ffffffff810cdc32>] cgroup_event_wake+0x42/0x70
 [<ffffffff81057839>] __wake_up_common+0x59/0x90
 [<ffffffff8105bd68>] __wake_up+0x48/0x70
 [<ffffffff811daf8d>] eventfd_release+0x2d/0x40
 [<ffffffff8118fa45>] __fput+0xf5/0x210
 [<ffffffff8118fb85>] fput+0x25/0x30
 [<ffffffff8118addd>] filp_close+0x5d/0x90
 [<ffffffff8118aeb5>] sys_close+0xa5/0x100
 [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
Code: 01 01 01 01 01 48 0f af c2 48 c1 e8 38 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 53 48 89 fb 48 83 ec 08 48 8b 47 08 <4c> 8b 00 4c 39 c7 75 39 48 8b 03 4c 8b 40 08 4c 39 c3 75 4c 48 
RIP  [<ffffffff8129ecb0>] list_del+0x10/0xa0
 RSP <ffff885fa4f2bdc8>