Kernel panic in vmxnet3_tq_tx_complete() function of unsigned (U) kernel module [vmxnet3]

Issue

• Kernel panic with following call traces.

Kernel BUG at ...tmp/vmware-root/modules/vmxnet3-only/vmxnet3_drv.c:422
invalid opcode: 0000 [1] SMP 
last sysfs file: /devices/pci0000:00/0000:00:15.0/0000:03:00.0/irq
CPU 4 
Modules linked in: netconsole nfs nfs_acl lockd sunrpc be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi vmsync(U) vsock(U) vmmemctl(U) acpiphp dm_multipath scsi_dh video backlight sbs power_meter hwmon i2c_ec dell_wmi wmi button battery asus_acpi acpi_memhotplug ac lp ide_cd tpm_tis tpm floppy pcspkr cdrom tpm_bios sg i2c_piix4 i2c_core serio_raw parport_pc vmci(U) parport shpchp pvscsi(U) vmxnet3(U) vmxnet(U) dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod ahci ata_piix libata mptspi mptscsih mptbase scsi_transport_spi sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 4178, comm: java Tainted: G     --------------------    2.6.18-400.1.1.el5 #1
RIP: 0010:[<ffffffff881fa947>]  [<ffffffff881fa947>] :vmxnet3:vmxnet3_tq_tx_complete+0x4f/0x1c0
RSP: 0018:ffff8102b393f7e8  EFLAGS: 00210097
RAX: 0000000000000125 RBX: ffff81093de82500 RCX: ffff8109397d9b78
RDX: 0000000000000125 RSI: 0000000000000125 RDI: ffff81093de82500
RBP: ffff81093de82500 R08: 0000000000000000 R09: 00000000000009af
R10: 0000000000000000 R11: 0000022000000220 R12: 0000000000000052
R13: ffff81093de82500 R14: 0000000000000001 R15: ffff81093f174000
FS:  00002af7e8bbb940(0000) GS:ffff8101207eff40(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00002ba2ccdeecd4 CR3: 00000003305b9000 CR4: 00000000000006e0
Process java (pid: 4178, threadinfo ffff8102b393e000, task ffff8105ffded080)
Stack:  0000000000000003 ffff81093de82500 0000000000000001 0000000000000052
 0000000000000100 0000000000000001 ffff81093deb12c0 ffffffff881fc309
 0000022000000220 ffff81093de82500 0000000000000001 0000000000000052
Call Trace:
 [<ffffffff881fc309>] :vmxnet3:vmxnet3_do_poll+0x3c/0x88
 [<ffffffff881fde52>] :vmxnet3:vmxnet3_netpoll+0x27/0x30
 [<ffffffff80246cb4>] netpoll_poll_dev+0x47/0x36c
 [<ffffffff8002e39a>] __alloc_skb+0x37/0x12e
 [<ffffffff80247195>] find_skb+0xbd/0xec
 [<ffffffff80247b7f>] netpoll_send_udp+0x2a/0x263
 [<ffffffff886e90e1>] :netconsole:write_msg+0x49/0x60
 [<ffffffff800941e6>] __call_console_drivers+0x5b/0x69
 [<ffffffff80017321>] release_console_sem+0x13e/0x200
 [<ffffffff800949db>] vprintk+0x2b2/0x317
 [<ffffffff80247088>] netpoll_send_skb_on_dev+0xaf/0xef
 [<ffffffff80094a92>] printk+0x52/0xbd
 [<ffffffff8005ddf9>] error_exit+0x0/0x84
 [<ffffffff8005ddf9>] error_exit+0x0/0x84
 [<ffffffff8006c743>] printk_address+0x9f/0xab
 [<ffffffff80094a92>] printk+0x52/0xbd
 [<ffffffff80094a92>] printk+0x52/0xbd
 [<ffffffff800cd718>] show_free_areas+0x3b6/0x3bb
 [<ffffffff800a2539>] kernel_text_address+0x1a/0x26
 [<ffffffff8006c429>] dump_trace+0x206/0x22f
 [<ffffffff800842ce>] show_mem+0x2d/0x16b
 [<ffffffff800cb672>] out_of_memory+0x93/0x2f3
 [<ffffffff8000f6a2>] __alloc_pages+0x27f/0x308
 [<ffffffff8001308d>] __do_page_cache_readahead+0x96/0x17b
 [<ffffffff800139ce>] filemap_nopage+0x14c/0x360
 [<ffffffff80008972>] __handle_mm_fault+0x1fd/0x103b
 [<ffffffff800a5f63>] hrtimer_wakeup+0x0/0x22
 [<ffffffff800671ae>] do_page_fault+0x499/0x842
 [<ffffffff8006eda2>] do_gettimeofday+0x40/0x90
 [<ffffffff80063002>] thread_return+0x62/0xfe
 [<ffffffff8005ddf9>] error_exit+0x0/0x84


Code: 0f 0b 68 2d 0f 20 88 c2 a6 01 eb fe 48 c1 e2 04 48 03 55 28 
RIP  [<ffffffff881fa947>] :vmxnet3:vmxnet3_tq_tx_complete+0x4f/0x1c0
 RSP <ffff8102b393f7e8>