Comment 0 for bug 1616107

A Kernel oops leaves Ubuntu 16.04 unusable when a network bridge is brought down on a HPE 530SFP+ 10GBit NIC that uses bnx2x as a driver. This error does not appear in Ubuntu 14.04 however.

The error is reproducible whenever issuing the commands "shutdown", "service networking stop" or "brctl delbr br0". Manually creating the bridge and subsequently bringing it down results in the same error.

/var/log/kern.log:
[...]
Aug 23 15:09:46 base1 kernel: [ 617.996677] device ens1f0 left promiscuous mode
Aug 23 15:09:46 base1 kernel: [ 617.996699] br0: port 1(ens1f0) entered disabled state
Aug 23 15:09:46 base1 kernel: [ 617.996730] BUG: unable to handle kernel NULL pointer dereference at 00000000000000d2
Aug 23 15:09:46 base1 kernel: [ 618.008306] IP: [<ffffffffc0486d78>] __vlan_flush+0x18/0x60 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.020549] PGD 10374c0067 PUD 1033927067 PMD 0
Aug 23 15:09:46 base1 kernel: [ 618.032773] Oops: 0002 [#1] SMP
Aug 23 15:09:46 base1 kernel: [ 618.044434] Modules linked in: nls_iso8859_1 ipmi_ssif intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_in$
Aug 23 15:09:46 base1 kernel: [ 618.058563] CPU: 3 PID: 4049 Comm: brctl Not tainted 4.4.0-34-generic #53-Ubuntu
Aug 23 15:09:46 base1 kernel: [ 618.058564] Hardware name: HP ProLiant DL120 Gen9/ProLiant DL120 Gen9, BIOS P86 05/05/2016
Aug 23 15:09:46 base1 kernel: [ 618.058574] task: ffff881030676040 ti: ffff8810341e4000 task.ti: ffff8810341e4000
Aug 23 15:09:46 base1 kernel: [ 618.058576] RIP: 0010:[<ffffffffc0486d78>] [<ffffffffc0486d78>] __vlan_flush+0x18/0x60 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.058754] RSP: 0018:ffff8810341e7d68 EFLAGS: 00010206
Aug 23 15:09:46 base1 kernel: [ 618.058769] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
Aug 23 15:09:46 base1 kernel: [ 618.058774] RDX: ffff881038470848 RSI: 0000000000000000 RDI: 0000000000000000
Aug 23 15:09:46 base1 kernel: [ 618.058775] RBP: ffff8810341e7d78 R08: 0000000000000000 R09: ffffffff8170d949
Aug 23 15:09:46 base1 kernel: [ 618.058776] R10: ffffea0000d61340 R11: ffff8810329d2c00 R12: 00000000000000c0
Aug 23 15:09:46 base1 kernel: [ 618.058777] R13: ffff881030044000 R14: ffff881038470840 R15: 0000000000000000
Aug 23 15:09:46 base1 kernel: [ 618.058782] FS: 00007f9aebc94700(0000) GS:ffff88107fcc0000(0000) knlGS:0000000000000000
Aug 23 15:09:46 base1 kernel: [ 618.058789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Aug 23 15:09:46 base1 kernel: [ 618.058790] CR2: 00000000000000d2 CR3: 000000102fe83000 CR4: 00000000001406e0
Aug 23 15:09:46 base1 kernel: [ 618.058802] Stack:
Aug 23 15:09:46 base1 kernel: [ 618.058806] 0000000000000000 ffff8810356a4c00 ffff8810341e7d98 ffffffffc0489258
Aug 23 15:09:46 base1 kernel: [ 618.058822] ffff8810356a4c00 ffff881038470840 ffff8810341e7dc0 ffffffffc0479bd8
Aug 23 15:09:46 base1 kernel: [ 618.058825] ffff881038470838 ffff881038470848 ffff881038470000 ffff8810341e7df8
Aug 23 15:09:46 base1 kernel: [ 618.058827] Call Trace:
Aug 23 15:09:46 base1 kernel: [ 618.058863] [<ffffffffc0489258>] nbp_vlan_flush+0x28/0x65 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.058870] [<ffffffffc0479bd8>] del_nbp+0x98/0x130 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.058889] [<ffffffffc0479cb2>] br_dev_delete+0x42/0xb0 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.058895] [<ffffffffc0479dea>] br_del_bridge+0x4a/0x70 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.058911] [<ffffffffc047b4e3>] br_ioctl_deviceless_stub+0x153/0x230 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.058984] [<ffffffff81345533>] ? security_file_alloc+0x33/0x50
Aug 23 15:09:46 base1 kernel: [ 618.059095] [<ffffffff81704625>] sock_ioctl+0x215/0x290
Aug 23 15:09:46 base1 kernel: [ 618.059121] [<ffffffff81220c3f>] do_vfs_ioctl+0x29f/0x490
Aug 23 15:09:46 base1 kernel: [ 618.059223] [<ffffffff8106b554>] ? __do_page_fault+0x1b4/0x400
Aug 23 15:09:46 base1 kernel: [ 618.059264] [<ffffffff8122b525>] ? fd_install+0x25/0x30
Aug 23 15:09:46 base1 kernel: [ 618.059266] [<ffffffff81220ea9>] SyS_ioctl+0x79/0x90
Aug 23 15:09:46 base1 kernel: [ 618.059359] [<ffffffff8182def2>] entry_SYSCALL_64_fastpath+0x16/0x71
Aug 23 15:09:46 base1 kernel: [ 618.059369] Code: 1b c1 c0 e9 30 ff ff ff 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 54 53 49 89 fc$
Aug 23 15:09:46 base1 kernel: [ 618.059514] RIP [<ffffffffc0486d78>] __vlan_flush+0x18/0x60 [bridge]
Aug 23 15:09:46 base1 kernel: [ 618.059522] RSP <ffff8810341e7d68>
Aug 23 15:09:46 base1 kernel: [ 618.059523] CR2: 00000000000000d2
Aug 23 15:09:46 base1 kernel: [ 618.060149] ---[ end trace f915551f71712a3d ]---
[...]

dmesg | grep bnx2x:
[ 3.523820] bnx2x: QLogic 5771x/578xx 10/20-Gigabit Ethernet Driver bnx2x 1.712.30-0 (2014/02/10)
[ 3.544982] bnx2x 0000:03:00.0: msix capability found
[ 3.549671] bnx2x 0000:03:00.0: part number 0-0-0-0
[ 3.682788] bnx2x 0000:03:00.1: msix capability found
[ 3.685014] bnx2x 0000:03:00.1: part number 0-0-0-0
[ 4.588510] bnx2x 0000:03:00.0 ens1f0: renamed from eth1
[ 4.688509] bnx2x 0000:03:00.1 ens1f1: renamed from eth2
[ 10.104242] bnx2x 0000:03:00.0 ens1f0: failed to initialize vlan filtering on this port
[ 10.713654] bnx2x 0000:03:00.0 ens1f0: using MSI-X IRQs: sp 47 fp[0] 50 ... fp[5] 55
[ 11.946057] bnx2x 0000:03:00.0 ens1f0: NIC Link is Up, 10000 Mbps full duplex, Flow control: ON - receive & transmit

/etc/network/interfaces:
# The loopback network interface
auto lo
iface lo inet loopback

# The primary 10GbE network interface
auto ens1f0
iface ens1f0 inet manual

# The secondary 10GbE network interface
# auto ens1f1
# iface ens1f1 inet manual

# Bridged network interface
auto br0
iface br0 inet static
  address 192.168.xxx.xxx
  netmask 255.255.255.0
  network 192.168.xxx.0
  broadcast 192.168.xxx.255
  gateway 192.168.xxx.xxx
  dns-nameservers 192.168.xxx.xxx 192.168.xxx.xxx
  dns-search xxx
  bridge_ports ens1f0
  bridge_hello 2
  bridge_fd 9
  bridge_maxage 12
  bridge_stp off

lsb_release -rd:
Description: Ubuntu 16.04.1 LTS
Release: 16.04

cat /proc/version_signature:
Ubuntu 4.4.0-34.53-generic 4.4.15

apt-cache policy bridge-utils:
bridge-utils:
  Installed: 1.5-9ubuntu1
  Candidate: 1.5-9ubuntu1
  Version table:
 *** 1.5-9ubuntu1 500
        500 http://de.archive.ubuntu.com/ubuntu xenial/main amd64 Packages
        100 /var/lib/dpkg/status