RHEL 5.11 server crashed at exception RIP: netxen_nic_io_write_2M

Issue

• RHEL 5.11 server crashed with below call traces.

WARNING: at drivers/net/netxen/netxen_nic_hw.c:1361 netxen_get_ioaddr()

Call Trace:
 [<ffffffff882a3557>] :netxen_nic:netxen_get_ioaddr+0x77/0x81
 [<ffffffff882ae20e>] :netxen_nic:netxen_alloc_hw_resources+0x4bc/0x902
 [<ffffffff882a5fb8>] :netxen_nic:netxen_nic_attach+0x137/0x3b4
 [<ffffffff882a7036>] :netxen_nic:netxen_attach_work+0x0/0x8f
 [<ffffffff882a704f>] :netxen_nic:netxen_attach_work+0x19/0x8f
 [<ffffffff8004d955>] run_workqueue+0x9e/0xfb
 [<ffffffff8004a1a8>] worker_thread+0x0/0x122
 [<ffffffff8004a298>] worker_thread+0xf0/0x122
 [<ffffffff8008f4e9>] default_wake_function+0x0/0xe
 [<ffffffff80032c56>] kthread+0xfe/0x132
 [<ffffffff8005dfc1>] child_rip+0xa/0x11
 [<ffffffff80032b58>] kthread+0x0/0x132
 [<ffffffff8005dfb7>] child_rip+0x0/0x11

Unable to handle kernel NULL pointer dereference at 0000000000000000 RIP: 
 [<ffffffff882a4b2a>] :netxen_nic:netxen_nic_io_write_2M+0x0/0x3
PGD 0 
Oops: 0002 [1] SMP 
last sysfs file: /class/firmware/0000:18:00.0/loading
CPU 0 
Modules linked in: tcp_diag inet_diag autofs4 lockd sunrpc ipt_REJECT xt_tcpudp x_tables be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi dm_multipath scsi_dh video backlight sbs power_meter hwmon i2c_ec i2c_core dell_wmi wmi button battery asus_acpi acpi_memhotplug ac parport_pc lp parport be2net sr_mod cdrom sg tpm_tis tpm netxen_nic tpm_bios usb_storage hpilo serio_raw 8021q bnx2 i7core_edac edac_mc pcspkr dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod ahci ata_piix libata shpchp cciss sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 74, comm: events/0 Not tainted 2.6.18-404.el5 #1
RIP: 0010:[<ffffffff882a4b2a>]  [<ffffffff882a4b2a>] :netxen_nic:netxen_nic_io_write_2M+0x0/0x3
RSP: 0018:ffff81031f5e1d78  EFLAGS: 00010206
RAX: ffff81061faaf6b0 RBX: ffff81061faaf680 RCX: ffff81061faaf6b0
RDX: 00000000000007ff RSI: 0000000000000000 RDI: ffff810319dc0500
RBP: 00000000ffffffff R08: ffff810319dc0000 R09: 0000000000000000
R10: ffff81054f6d20c0 R11: 00000000000000c8 R12: 0000000000000000
R13: ffff810319dc0500 R14: 0000000000000000 R15: 0000000000000800
FS:  0000000000000000(0000) GS:ffffffff80436000(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 0000000000000000 CR3: 0000000000201000 CR4: 00000000000006a0
Process events/0 (pid: 74, threadinfo ffff81031f5e0000, task ffff81032aaa3830)
Stack:  ffffffff882a9e24 ffff810319dc0000 0000000000000001 ffff810319dc0500
 0000000000000004 ffff810319dc0620 ffff810319dc0500 0000000000000000
 ffffffff882a605f 0000000300000000 ffff810319dc0000 ffff81031f666800
Call Trace:
 [<ffffffff882a9e24>] :netxen_nic:netxen_post_rx_buffers+0x9c/0xf2
 [<ffffffff882a605f>] :netxen_nic:netxen_nic_attach+0x1de/0x3b4
 [<ffffffff882a7036>] :netxen_nic:netxen_attach_work+0x0/0x8f
 [<ffffffff882a704f>] :netxen_nic:netxen_attach_work+0x19/0x8f
 [<ffffffff8004d955>] run_workqueue+0x9e/0xfb
 [<ffffffff8004a1a8>] worker_thread+0x0/0x122
 [<ffffffff8004a298>] worker_thread+0xf0/0x122
 [<ffffffff8008f4e9>] default_wake_function+0x0/0xe
 [<ffffffff80032c56>] kthread+0xfe/0x132
 [<ffffffff8005dfc1>] child_rip+0xa/0x11
 [<ffffffff80032b58>] kthread+0x0/0x132
 [<ffffffff8005dfb7>] child_rip+0x0/0x11


Code: 89 16 c3 48 89 f1 48 89 f0 81 e6 ff ff 03 00 48 c1 e9 19 25 
RIP  [<ffffffff882a4b2a>] :netxen_nic:netxen_nic_io_write_2M+0x0/0x3
 RSP <ffff81031f5e1d78>