RHEL6: rpciod crashes in __rpc_sleep_on_priority from call_reserve

Issue

• kernel crashes with the following message

general protection fault: 0000 [#1] SMP
last sysfs file: /sys/module/ipv6/initstate
CPU 3
Modules linked in: bridge fuse iptable_filter ip_tables ipmi_devintf ipmi_si ipmi_msghandler nfs lockd fscache nfs_acl auth_rpcgss sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf bonding 8021q garp stp llc ipv6 power_meter sg microcode i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ioatdma i7core_edac edac_core e1000e igb dca ext4 mbcache jbd2 sr_mod cdrom sd_mod crc_t10dif pata_acpi ata_generic ata_piix megaraid_sas dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]

Pid: 6397, comm: rpciod/3 Tainted: G        W  ---------------    2.6.32-279.9.1.el6.x86_64 #1 NEC Express5800/R120b-1 [N8100-1722]/MS-91E7-001
RIP: 0010:[<ffffffffa02ba460>]  [<ffffffffa02ba460>] __rpc_sleep_on_priority+0xb0/0x300 [sunrpc]
RSP: 0018:ffff880237e77ca0  EFLAGS: 00010292
RAX: 10000000007c01f4 RBX: ffff88015abe7080 RCX: 10000000007c027c
RDX: ffff880239984998 RSI: 0000000000006f85 RDI: ffff880239984990
RBP: ffff880237e77ce0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff880239984990
R13: 0000000000000000 R14: 0000000000000000 R15: ffff880235c2be00
FS:  0000000000000000(0000) GS:ffff880028260000(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 000000000804c990 CR3: 000000027182e000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process rpciod/3 (pid: 6397, threadinfo ffff880237e76000, task ffff88023632eaa0)
Stack:
 ffff8800282766e8 ffff88023632ead8 ffff880237e77cf0 ffff880239984990
<d> ffff88015abe7080 0000000000000000 0000000000000000 ffffffffa02ae480
<d> ffff880237e77d10 ffffffffa02ba6fd ffff880239984800 ffff88015abe7080
Call Trace:
 [<ffffffffa02ae480>] ? call_reserve+0x0/0x60 [sunrpc]
 [<ffffffffa02ba6fd>] rpc_sleep_on_priority+0x4d/0x70 [sunrpc]
 [<ffffffffa02b2b11>] xprt_reserve_xprt_cong+0x91/0x190 [sunrpc]
 [<ffffffffa02b1e08>] xprt_reserve+0x88/0x370 [sunrpc]
 [<ffffffffa02ae480>] ? call_reserve+0x0/0x60 [sunrpc]
 [<ffffffffa02ae4b4>] call_reserve+0x34/0x60 [sunrpc]
 [<ffffffffa02b9e37>] __rpc_execute+0x77/0x350 [sunrpc]
 [<ffffffffa02ba1b0>] ? rpc_async_schedule+0x0/0x20 [sunrpc]
 [<ffffffffa02ba1c5>] rpc_async_schedule+0x15/0x20 [sunrpc]
 [<ffffffff8108c7e0>] worker_thread+0x170/0x2a0
 [<ffffffff81092150>] ? autoremove_wake_function+0x0/0x40
 [<ffffffff8108c670>] ? worker_thread+0x0/0x2a0
 [<ffffffff81091de6>] kthread+0x96/0xa0
 [<ffffffff8100c14a>] child_rip+0xa/0x20
 [<ffffffff81091d50>] ? kthread+0x0/0xa0
 [<ffffffff8100c140>] ? child_rip+0x0/0x20
Code: 4b 8d 54 2c 08 48 8b 0a 48 39 ca 48 8d 81 78 ff ff ff 74 36 8b b3 c8 00 00 00 39 b0 c8 00 00 00 75 15 e9 14 01 00 00 0f 1f 40 00 <39> b0 c8 00 00 00 0f 84 04 01 00 00 48 8b 88 88 00 00 00 48 39
RIP  [<ffffffffa02ba460>] __rpc_sleep_on_priority+0xb0/0x300 [sunrpc]
 RSP <ffff880237e77ca0>