Kernel panic with Broadcom bnx2 in skb_over_panic

Issue

• Kernel panic with Broadcom bnx2 in skb_over_panic
• Server crashed with panic message similar to the following examples:

skb_over_panic: text:ffffffffxxxxxxxx len:-4 put:-4 head:ffffxxxxxxxxxxxx data:ffffxxxxxxxxxxxx tail:ffffxxxxxxxxxxxx end:ffffxxxxxxxxxxxx dev:ethx
----------- [cut here ] --------- [please bite here ] ---------
Kernel BUG at net/core/skbuff.c:94

Pid: 12345, comm: processname Not tainted 2.6.18-408.el5 #1
RIP: 0010:[<ffffffff802365a0>]  [<ffffffff802365a0>] skb_over_panic+0x4d/0x5d

 <IRQ>  [<ffffffff88493b14>] :bnx2:bnx2_poll_work+0xa74/0x1253
 [<ffffffff80077b6d>] smp_send_reschedule+0x4e/0x53
 [<ffffffff80158437>] __next_cpu+0x19/0x28
 [<ffffffff88498054>] :bnx2:bnx2_poll_msix+0x48/0xfb
 [<ffffffff8000c9cb>] net_rx_action+0xa7/0x1ba
 [<ffffffff800125bb>] __do_softirq+0x89/0x133
 [<ffffffff8005e298>] call_softirq+0x1c/0x28
 [<ffffffff8006d63a>] do_softirq+0x2c/0x7d
 [<ffffffff8006d4ca>] do_IRQ+0xee/0xf7
 [<ffffffff8005d625>] ret_from_intr+0x0/0xa
 <EOI> 

Code: 0f 0b 68 82 c8 2e 80 c2 5e 00 48 83 c4 20 eb fe 03 3a 3b 7a 
RIP  [<ffffffff802365a0>] skb_over_panic+0x4d/0x5d

Kernel BUG at net/core/skbuff.c:94
invalid opcode: 0000 [1] SMP

Pid: 0, comm: swapper Tainted: G      2.6.18-194.8.1.el5 #1
RIP: 0010:[<ffffffff802299d2>]  [<ffffffff802299d2>] skb_over_panic+0x4d/0x5c

Process swapper (pid: 0, threadinfo ffffffff803fa000, task ffffffff80308b60)

Call Trace:
 <IRQ>  [<ffffffff88348296>] :bnx2:bnx2_poll_work+0xa53/0x124f
 [<ffffffff80202c47>] hid_input_report+0x2f6/0x349
 [<ffffffff80150139>] __bitmap_shift_left+0x8e/0x109
 [<ffffffff80080039>] map_single+0xb8/0x142
 [<ffffffff800974de>] current_tick_length+0x5/0x26
 [<ffffffff80097fb6>] do_timer+0x2df/0x52c
 [<ffffffff88348e48>] :bnx2:bnx2_poll+0xdf/0x209
 [<ffffffff8000c88c>] net_rx_action+0xac/0x1e0
 [<ffffffff800123b4>] __do_softirq+0x89/0x133
 [<ffffffff8005e2fc>] call_softirq+0x1c/0x28
 [<ffffffff8006cb8e>] do_softirq+0x2c/0x85
 [<ffffffff8006ca16>] do_IRQ+0xec/0xf5
 [<ffffffff8006b346>] default_idle+0x0/0x50
 [<ffffffff8005d615>] ret_from_intr+0x0/0xa
 <EOI>  [<ffffffff8006b36f>] default_idle+0x29/0x50
 [<ffffffff80049150>] cpu_idle+0x95/0xb8
 [<ffffffff80405807>] start_kernel+0x220/0x225 [<ffffffff8040522f>] _sinittext+0x22f/0x236