Bug 470625

Description of problem:
Netdump not functioning w/ bnx2 >= v1.8h (Broadcom Netxtreme II Network Card): System under test (where Netdump is running), does not send a memory dump to a remote Netdump-server prior to rebooting.

Our developers for bnx2, have looked into the issue. Their conclusion at this time is the issue is a Netdump bug or limitation.


Version-Release number of selected component (if applicable):
Netdump 0.7.16-14 (RHEL 4.7 Gold)

How reproducible:
1) USe RHEL 4.7 Gold x86-64
2) Netdump (0.7.16-14); included with RHEL 4.7 Gold
3) Server system w/ a 5708 LoM (LAN on Motherboard)
   ie: HP DL 385G5
       Dell PowerEdge 1900

Steps to Reproduce:
1. Configure netdump
  a) vi /etc/sysconfig/netdump
  b) Add: 
       DEV=eth0
       NETDUMPADDR=172.16.x.x
  c) save and exit

2. Start netdump daemon:
  a) service netdump start
  b) accept unverfied key (yes)
  c) enter password netdump user

3. Crash the system under test (SUT)
  a) echo c > /proc/sysrq-tigger
 
Actual results:
SUT does not send memory dump to a remote server prior to rebooting.
<0>CR2: 0000000000000036
<3>netpoll_start_netdump: called recursively.  rebooting.

See "Full Trace" below

Expected results:
Netdump should dump memory of crashed system to a remote server over a LAN


Full Trace:

SysRq : Crashing the kernel by request
Unable to handle kernel NULL pointer dereference at 0000000000000000 RIP:
<ffffffff8023c40c>{sysrq_handle_crash+0}
PML4 117110067 PGD 116e82067 PMD 0
Oops: 0002 [1] SMP
CPU 0
Modules linked in: mptctl mptbase sg ipmi_si(U) ipmi_devintf(U)
ipmi_msghandler(U) md5 ipv
6 parport_pc lp parport netconsole netdump autofs4 i2c_dev i2c_core
hp_ilo(U) sunrpc 8021q  ds yenta_socket pcmcia_core joydev button battery ac ehci_hcd uhci_hcd hw_random bnx2(U) dm_snapshot dm_zero dm_mirror ext3 jbd dm_mod ata_piix libata cciss(U) sd_mod scsi_mod
Pid: 27256, comm: bash Not tainted 2.6.9-67.ELsmp
RIP: 0010:[<ffffffff8023c40c>] <ffffffff8023c40c>{sysrq_handle_crash+0}
RSP: 0018:000001011899dec0  EFLAGS: 00010216
RAX: 000000000000001f RBX: ffffffff80406f40 RCX: ffffffff803e95e8
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000063
RBP: 0000000000000063 R08: ffffffff803e95e8 R09: ffffffff80406f40
R10: 0000000100000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000006 R15: 0000000000000000
FS:  0000002a955773e0(0000) GS:ffffffff804f2d80(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000000000 CR3: 0000000000101000 CR4: 00000000000006e0 Process bash (pid: 27256, threadinfo 000001011899c000, task 0000010122249030)
Stack: ffffffff8023c5c2 000001011899c000 0000000000000002 000001011899df50
       0000000000000002 0000002a984d3000 ffffffff801b2741 0000000000000048
       0000000000000000 000001011bd13ec0 Call Trace:<ffffffff8023c5c2>{__handle_sysrq+102}
<ffffffff801b2741>{write_sysrq_trigger+4
3}
       <ffffffff8017af0e>{vfs_write+207} <ffffffff8017aff6>{sys_write+69}
       <ffffffff8011026a>{system_call+126}

Code: c6 04 25 00 00 00 00 00 c3 e9 1c ff f3 ff e9 55 4d f4 ff 48 RIP <ffffffff8023c40c>{sysrq_handle_crash+0} RSP <000001011899dec0>
CR2: 0000000000000000
CPU#0 is executing netdump.
CPU#1 is frozen.
CPU#2 is frozen.
CPU#3 is frozen.
< netdump activated - performing handshake with the server. > <1>Unable to handle kernel NULL pointer dereference at 0000000000000036 RIP:
<1><ffffffffa00c4cea>{:bnx2:bnx2_interrupt+9}
PML4 117110067 PGD 116e82067 PMD 0
<0>Oops: 0000 [2] SMP
CPU 0
Modules linked in: mptctl mptbase sg ipmi_si(U) ipmi_devintf(U)
ipmi_msghandler(U) md5 ipv
6 parport_pc lp parport netconsole netdump autofs4 i2c_dev i2c_core
hp_ilo(U) sunrpc 8021q  ds yenta_socket pcmcia_core joydev button battery ac ehci_hcd uhci_hcd hw_random bnx2(U) dm_snapshot dm_zero dm_mirror ext3 jbd dm_mod ata_piix libata cciss(U) sd_mod scsi_mod
Pid: 27256, comm: bash Not tainted 2.6.9-67.ELsmp
RIP: 0010:[<ffffffffa00c4cea>] <ffffffffa00c4cea>{:bnx2:bnx2_interrupt+9}
RSP: 0018:0000010129fd4890  EFLAGS: 00010046
RAX: 000001012b852240 RBX: 0000010129914380 RCX: 0000000000000006
RDX: 0000000030687465 RSI: 0000010129914000 RDI: 000000000000004a
RBP: 0000010129914000 R08: 0000000000000000 R09: 0000010129914000
R10: 0000010129914380 R11: 0000000000000000 R12: 0000010129914000
R13: 000001011899de18 R14: 000001011f24c4c0 R15: 000001011899de18
FS:  0000002a955773e0(0000) GS:ffffffff804f2d80(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000000036 CR3: 0000000000101000 CR4: 00000000000006e0 Process bash (pid: 27256, threadinfo 000001011899c000, task 0000010122249030)
Stack: 0000010129914000 ffffffffa00cb1c5 ffffffffa00cb194 0000000000000000
       000001011899de18 ffffffff802c0119 0000010129914000 0000010117010e40
       000001012992fd80 ffffffff802c008a Call Trace:<ffffffffa00cb1c5>{:bnx2:poll_bnx2+49}
<ffffffffa00cb194>{:bnx2:poll_bnx2+0}
       <ffffffff802c0119>{netpoll_poll_dev+92}
<ffffffff802c008a>{netpoll_send_skb+340}
       <ffffffffa018d4f2>{:netdump:netpoll_netdump+308}
<ffffffff8023c40c>{sysrq_handle_cr
ash+0}
       <ffffffffa018d39a>{:netdump:netpoll_start_netdump+221}


Code: 41 0f b7 40 36 48 8b 7a 08 0f b7 c0 3b 46 20 75 10 48 8b 02 <1>RIP <ffffffffa00c4cea>{:bnx2:bnx2_interrupt+9} RSP <0000010129fd4890>
<0>CR2: 0000000000000036
<3>netpoll_start_netdump: called recursively.  rebooting.