Comment 33 for bug 705562

The crash itself seems to be back to the initial problem (calling a function pointer which is bad), with a minor variation of hitting a non-execute area. The process affected here is puppetd but again, this could be coincidence.

From whatever the dmesg output before is telling, it seems that there are two xfs volumes getting mounted and unmounted. I am not sure why, but on the second time this happens, it looks like some device-mapper and the xfs module had to be reloaded. And after mounting and unmounting the two volumes, something caused the clocksource to be changed.

As a next experiment, I would play around with loops involving mount/unmount of xfs and maybe also have a look at changing the clocksource around.