automount causes kernel panic in autofs4_expire_indirect

Issue

Using autofs4, the occasional kernel panic happens and a vmcore gets captured over kdump and the log looks like this:

BUG: unable to handle kernel paging request at ffffffffffffffc0
IP: [<ffffffffa011117e>] autofs4_expire_indirect+0xbe/0x500 [autofs4]
PGD 1a87067 PUD 1a88067 PMD 0 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/system/cpu/cpu15/cache/index2/shared_cpu_map
CPU 3 
Modules linked in: ipmi_si mpt2sas scsi_transport_sas raid_class mptctl mptbase ipmi_devintf ipmi_msghandler dell_rbu nfs lockd fscache(T) nfs_acl auth_rpcgss autofs4 sunrpc ipv6 power_meter hwmon sg igb dca dcdbas microcode serio_raw ghes hed iTCO_wdt iTCO_vendor_support i7core_edac edac_core ext4 mbcache jbd2 sr_mod cdrom sd_mod crc_t10dif pata_acpi ata_generic ata_piix megaraid_sas dm_mod [last unloaded: ipmi_si]
Pid: 13112, comm: automount Tainted: G           ---------------- T 2.6.32-131.12.1.el6.x86_64 #1 PowerEdge R710
RIP: 0010:[<ffffffffa011117e>]  [<ffffffffa011117e>] autofs4_expire_indirect+0xbe/0x500 [autofs4]
RSP: 0018:ffff88024b73fd18  EFLAGS: 00010286
RAX: 0000000000002d74 RBX: ffff88061a74d9c0 RCX: 0000000000000005
RDX: 0000000000002d74 RSI: ffffffff81a83ec0 RDI: ffffffff81a83ec0
RBP: ffff88024b73fd78 R08: ffff8803207bb1c8 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81a83ec0
R13: 0000000000000000 R14: ffff88012c456800 R15: ffff8803207bb180
FS:  00007f8d64097700(0000) GS:ffff880028220000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: ffffffffffffffc0 CR3: 0000000320e92000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process automount (pid: 13112, threadinfo ffff88024b73e000, task ffff880321319580)
Stack:
 0000000000000000 0000000000000000 000000000000ea60 0000000000000001
<0> ffff88061f0b28a8 ffff8803baf71860 00000000000006f7 ffff88061f0b2840
<0> ffff88061fe54c00 ffff88061f0b2840 00007f8d64096d00 000000000000007c
Call Trace:
 [<ffffffffa0111685>] autofs4_do_expire_multi+0xc5/0xf0 [autofs4]
 [<ffffffffa0111c2f>] autofs_dev_ioctl_expire+0x1f/0x30 [autofs4]
 [<ffffffffa011227c>] _autofs_dev_ioctl+0x25c/0x390 [autofs4]
 [<ffffffff81092511>] ? lock_hrtimer_base+0x31/0x60
 [<ffffffffa0111c10>] ? autofs_dev_ioctl_expire+0x0/0x30 [autofs4]
 [<ffffffff8109334f>] ? hrtimer_try_to_cancel+0x3f/0xd0
 [<ffffffffa01123c3>] autofs_dev_ioctl+0x13/0x20 [autofs4]
 [<ffffffff81184fe2>] vfs_ioctl+0x22/0xa0
 [<ffffffff814dc6e3>] ? do_nanosleep+0x93/0xc0
 [<ffffffff81185184>] do_vfs_ioctl+0x84/0x580
 [<ffffffff810922c0>] ? hrtimer_wakeup+0x0/0x30
 [<ffffffff81093304>] ? hrtimer_start_range_ns+0x14/0x20
 [<ffffffff81185701>] sys_ioctl+0x81/0xa0
 [<ffffffff8100b172>] system_call_fastpath+0x16/0x1b
Code: 8b 55 c0 66 ff 02 66 66 90 4c 89 f7 e8 dc 97 07 e1 48 c7 c7 c0 3e a8 81 e8 70 c3 3c e1 4d 8b 6d 00 4c 39 6d c8 0f 84 42 03 00 00 <49> 83 7d c0 00 4d 8d 75 b0 74 e7 41 f6 45 b4 10 75 e0 4d 85 f6 
RIP  [<ffffffffa011117e>] autofs4_expire_indirect+0xbe/0x500 [autofs4]
 RSP <ffff88024b73fd18>
CR2: ffffffffffffffc0