Kernel panic in "onload" module

Issue

• Kernel panic with following call traces.

------------[ cut here ]------------
kernel BUG at mm/vmalloc.c:1503!
invalid opcode: 0000 [#1] SMP 
last sysfs file: /sys/module/ipv6/initstate
CPU 2 
Modules linked in: ipmi_watchdog ipmi_devintf mptctl mptbase pcc_cpufreq 8021q garp stp llc ipv6 ext3 jbd power_meter mlx4_core onload(U
) sfc_char(U) sfc_resource(U) sfc_affinity(U) sfc_tune(U) sfc(U) ptp pps_core mdio sg microcode serio_raw iTCO_wdt iTCO_vendor_support h
pwdt hpilo bnx2 i7core_edac edac_core shpchp ext4 jbd2 mbcache sd_mod crc_t10dif hpsa radeon ttm drm_kms_helper drm i2c_algo_bit i2c_cor
e dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]

Pid: 0, comm: swapper Not tainted 2.6.32-358.23.2.el6.x86_64 #1 HP ProLiant DL380 G7
RIP: 0010:[<ffffffff811510ac>]  [<ffffffff811510ac>] vfree+0x2c/0x40
RSP: 0018:ffff880028223960  EFLAGS: 00010206
RAX: 0000000000000100 RBX: ffff8805126d0000 RCX: ffffc9000c9366f8
RDX: 000000000000001f RSI: ffff88061b41ea10 RDI: ffffc9000c506000
RBP: ffff880028223960 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffff8805126d0020
R13: 000000000000000c R14: 000000000000000b R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff880028220000(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 00007f55d0793200 CR3: 0000000001a85000 CR4: 00000000000007e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process swapper (pid: 0, threadinfo ffff88061e67e000, task ffff880c1eaf0aa0)
Stack:
 ffff8800282239a0 ffffffffa034455d ffff880028223980 ffff8805126d0000
<d> 0000000000000002 ffff880610f29c00 0000000000000000 0000000000000001
<d> ffff8800282239d0 ffffffffa03447af ffff8805126d0000 0000000000000001
Call Trace:
 <IRQ> 
 [<ffffffffa034455d>] release_netif_resources+0x7d/0x190 [onload]
 [<ffffffffa03447af>] tcp_helper_dtor+0x13f/0x210 [onload]
 [<ffffffffa0344948>] efab_tcp_helper_k_ref_count_dec+0xb8/0x110 [onload]
 [<ffffffffa0344b32>] efab_tcp_helper_rm_free_locked+0x92/0x2f0 [onload]
 [<ffffffffa03451ff>] efab_thr_release+0xaf/0x100 [onload]
 [<ffffffffa0338bd0>] efab_handle_ipp_pkt_task+0xd0/0x200 [onload]
 [<ffffffffa0337f92>] efx_dlfilter_handler+0x202/0x250 [onload]
 [<ffffffffa03254a7>] oo_netfilter_ip+0x67/0x130 [onload]
 [<ffffffff81474de9>] nf_iterate+0x69/0xb0
 [<ffffffff8147f090>] ? ip_rcv_finish+0x0/0x440
 [<ffffffff81474fa4>] nf_hook_slow+0x74/0x110
 [<ffffffff8147f090>] ? ip_rcv_finish+0x0/0x440
 [<ffffffff8147f734>] ip_rcv+0x264/0x350
 [<ffffffff814e7350>] ? vlan_hwaccel_do_receive+0x70/0x130
 [<ffffffff8144891b>] __netif_receive_skb+0x4ab/0x750
 [<ffffffff8144acf8>] netif_receive_skb+0x58/0x60
 [<ffffffff814e75e0>] __vlan_hwaccel_rx+0x1d0/0x270
 [<ffffffffa02b1dad>] efx_rx_deliver+0xdd/0x100 [sfc]
 [<ffffffffa02b38d4>] __efx_rx_packet+0x2b4/0x4c0 [sfc]
 [<ffffffff81063dbc>] ? rebalance_domains+0x3cc/0x5a0
 [<ffffffffa029f1c5>] efx_process_channel+0x45/0xc0 [sfc]
 [<ffffffffa029f273>] efx_poll+0x33/0x100 [sfc]
 [<ffffffff8144d4c3>] net_rx_action+0x103/0x2f0
 [<ffffffff810770b1>] __do_softirq+0xc1/0x1e0
 [<ffffffff810e1760>] ? handle_IRQ_event+0x60/0x170
 [<ffffffff8100c1cc>] call_softirq+0x1c/0x30
 [<ffffffff8100de05>] do_softirq+0x65/0xa0
 [<ffffffff81076e95>] irq_exit+0x85/0x90
 [<ffffffff81517775>] do_IRQ+0x75/0xf0
 [<ffffffff8100b9d3>] ret_from_intr+0x0/0x11
 <EOI> 
 [<ffffffff81307c2c>] ? acpi_idle_enter_bm+0x29c/0x2d0
 [<ffffffff81307c25>] ? acpi_idle_enter_bm+0x295/0x2d0
 [<ffffffff81415647>] cpuidle_idle_call+0xa7/0x140
 [<ffffffff81009fc6>] cpu_idle+0xb6/0x110
 [<ffffffff81507600>] start_secondary+0x2ac/0x2ef
Code: 48 89 e5 0f 1f 44 00 00 65 48 8b 04 25 c8 cb 00 00 48 63 80 44 e0 ff ff a9 00 ff ff 07 75 0c be 01 00 00 00 e8 66 fe ff ff c9 c3 <0f> 0b 66 90 eb fc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 55 
RIP  [<ffffffff811510ac>] vfree+0x2c/0x40
 RSP <ffff880028223960>
(END)