System running Oracle ACFS panicked in __list_add()

Issue

• The server crash and reboot for a few times. It has got Oracle Cluster running.
• This panic message seen in the system log:

BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
IP: [<ffffffff812890a7>] __list_add+0x17/0xa0
PGD bd4875067 PUD bf09b7067 PMD 0 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/virtual/block/ofsctl/queue/scheduler
CPU 5 
Modules linked in: oracleacfs(P)(U) oracleadvm(P)(U) oracleoks(P)(U) hangcheck_timer autofs4 nfs lockd fscache auth_rpcgss nfs_acl sunrpc ipmi_devintf cpufreq_ondemand freq_table pcc_cpufreq bonding 8021q garp stp llc ipv6 ext3 jbd hpilo hpwdt power_meter sg serio_raw bnx2x libcrc32c mdio tg3 iTCO_wdt iTCO_vendor_support ioatdma dca shpchp ext4 mbcache jbd2 sd_mod crc_t10dif hpsa pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]

Pid: 62049, comm: acfsrepl_transp Tainted: P           ---------------    2.6.32-358.14.1.el6.x86_64 #1 HP ProLiant DL380p Gen8
RIP: 0010:[<ffffffff812890a7>]  [<ffffffff812890a7>] __list_add+0x17/0xa0
RSP: 0018:ffff880bec179b18  EFLAGS: 00010286
RAX: 0000000000001d6a RBX: ffff88039c96e3f0 RCX: ffffffffa05a6cd8
RDX: 0000000000000000 RSI: ffff8803757e5348 RDI: ffff88039c96e3f0
RBP: ffff880bec179b38 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8803757e5318
R13: 0000000000000000 R14: ffff8808314587c0 R15: 0000000000000101
FS:  00007fdd5b877700(0000) GS:ffff8800456a0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000000008 CR3: 0000000f091e4000 CR4: 00000000000407e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process acfsrepl_transp (pid: 62049, threadinfo ffff880bec178000, task ffff880f0a8d7540)
Stack:
 ffff880b00030004 ffff88039c96e380 ffff8803757e5318 0000000000000000
<d> ffff880bec179b68 ffffffff8119a651 ffff880bec179be8 ffff88039c96e380
<d> ffff8803757e5318 0000000000000000 ffff880bec179b88 ffffffff8119a75d
Call Trace:
 [<ffffffff8119a651>] __d_instantiate+0x41/0x110
 [<ffffffff8119a75d>] d_instantiate+0x3d/0x70
 [<ffffffff8119b95e>] d_splice_alias+0xbe/0x110
 [<ffffffffa055ef9c>] ofs_lookup+0x22c/0x620 [oracleacfs]
 [<ffffffff811905a5>] do_lookup+0x1a5/0x230
 [<ffffffff81190d64>] __link_path_walk+0x734/0x1030
 [<ffffffffa0486b81>] ? OfsReleaseDLMLock_int+0x221/0x8d0 [oracleacfs]
 [<ffffffff811918ea>] path_walk+0x6a/0xe0
 [<ffffffff81191abb>] do_path_lookup+0x5b/0xa0
 [<ffffffff811825e0>] ? get_empty_filp+0xa0/0x180
 [<ffffffff811929fb>] do_filp_open+0xfb/0xdc0
 [<ffffffffa056018c>] ? OfsErrno+0x1ec/0x260 [oracleacfs]
 [<ffffffff810757a7>] ? current_fs_time+0x27/0x30
 [<ffffffff8119c561>] ? touch_atime+0x71/0x1a0
 [<ffffffff8119f682>] ? alloc_fd+0x92/0x160
 [<ffffffff8117dff9>] do_sys_open+0x69/0x140
 [<ffffffff8117e110>] sys_open+0x20/0x30
 [<ffffffff8100b072>] system_call_fastpath+0x16/0x1b
Code: ff 48 8b 03 eb 92 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 48 83 ec 20 48 89 5d e8 4c 89 65 f0 48 89 fb 4c 89 6d f8 <4c> 8b 42 08 49 89 f5 49 89 d4 49 39 f0 75 27 4d 8b 45 00 4d 39 
RIP  [<ffffffff812890a7>] __list_add+0x17/0xa0
 RSP <ffff880bec179b18>
CR2: 0000000000000008