removing the last/final/only vlan from a bonded interface causes 3.0.72 and subsequent kernels to oops. prior to 3.0.72 or after removing commit 9829fe9 [1] the oops doesn't occur. [1] http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?h=linux-3.0.y&id=9829fe9806e22d7a822f4c947cc432c8d1774b54 this problem was initially observed on a workgroup server (first oops below) but since recreated in a virtual environment (second oops below). i'm available to test patches. script to trigger the oops: # bring up ethernet interfaces ip link set eth1 up ip link set eth2 up # bring up bonded interface modprobe bonding ip link set bond0 up ifenslave bond0 eth1 eth2 # bring up vlans vconfig set_name_type DEV_PLUS_VID_NO_PAD vconfig add bond0 2 vconfig add bond0 3 # bring down vlans vconfig rem bond0.2 vconfig rem bond0.3 # OOPS! text of oops on workgroup server (ie real hardware): [307313.830414] BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [307313.840091] IP: [<ffffffffa03a3912>] bond_vlan_rx_kill_vid+0x6d/0x1be [bonding] [307313.850021] PGD 4025e6067 PUD 40cd9e067 PMD 0 [307313.850021] Oops: 0000 [#1] SMP [307313.850021] CPU 1 [307313.850021] Modules linked in: iptable_filter ip_tables x_tables tun powernow_k8 mperf cpufreq_powersave cpufreq_userspace cpufreq_stats cpufreq_conservative 8021q garp stp bonding msr cpuid it87 hwmon_vid loop radeon ttm snd_pcm snd_timer snd drm_kms_helper sg sp5100_tco i2c_piix4 sr_mod pl2303 processor soundcore drm edac_core tpm_tis e1000e snd_page_alloc cdrom i2c_algo_bit usbserial thermal_sys tpm evdev button k10temp edac_mce_amd wmi i2c_core pcspkr joydev serio_raw tpm_bios power_supply vfat fat nls_utf8 nls_cp437 usb_storage ext4 jbd2 crc16 ext2 ext3 jbd mbcache xts gf128mul sha256_generic aes_x86_64 aes_generic dm_crypt dm_mod raid1 raid456 md_mod async_raid6_recov async_pq usbhid hid raid6_pq async_xor xor async_memcpy async_tx sd_mod crc_t10dif ohci_hcd ehci_hcd pata_jmicron ahci libahci libata xhci_hcd scsi_mod usbcore [307313.850021] [307313.850021] Pid: 2236, comm: vconfig Not tainted 3.0.74-vs2.3.2.5+1-k8-x6 #1 Gigabyte Technology Co., Ltd. GA-890FXA-UD5/GA-890FXA-UD5 [307313.850021] RIP: 0010:[<ffffffffa03a3912>] [<ffffffffa03a3912>] bond_vlan_rx_kill_vid+0x6d/0x1be [bonding] [307313.850021] RSP: 0018:ffff88040e029d48 EFLAGS: 00010282 [307313.850021] RAX: 0000000000000010 RBX: ffff880407d1f000 RCX: ffffffffa0369f9d [307313.850021] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88040e39c000 [307313.850021] RBP: ffff880407d1f740 R08: ffff88040de86740 R09: 0000000000000000 [307313.850021] R10: 0000000000000940 R11: 0000000000000fff R12: 0000000000000000 [307313.850021] R13: 0000000000000002 R14: ffff88040f38c600 R15: 0000000000000004 [307313.850021] FS: 00007f8750cb8700(0000) GS:ffff880427c40000(0000) knlGS:0000000000000000 [307313.850021] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [307313.850021] CR2: 0000000000000020 CR3: 000000040dcdf000 CR4: 00000000000006e0 [307313.850021] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [307313.850021] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [307313.850021] Process vconfig (pid: 2236, threadinfo ffff88040e028000, task ffff88040ce1a8a0) [307313.850021] Stack: [307313.850021] ffff88040e1c17e8 ffffffff8131b191 ffff880407d1f000 0000000000000002 [307313.850021] ffff88040c9b9500 ffff880407d1f000 0000000000010002 ffff88040de86000 [307313.850021] ffff88040de86740 ffffffffa03af230 0000000000000000 ffffffffa039420b [307313.850021] Call Trace: [307313.850021] [<ffffffff8131b191>] ? _raw_write_lock_bh+0xe/0x26 [307313.850021] [<ffffffffa039420b>] ? unregister_vlan_dev+0x115/0x12e [8021q] [307313.850021] [<ffffffffa0394bb1>] ? vlan_ioctl_handler+0x326/0x3ad [8021q] [307313.850021] [<ffffffff8131debf>] ? do_page_fault+0x307/0x340 [307313.850021] [<ffffffff8125236d>] ? sock_ioctl+0x18c/0x204 [307313.850021] [<ffffffff810ef486>] ? alloc_file+0x18/0xaa [307313.850021] [<ffffffff810fbb39>] ? do_vfs_ioctl+0x3de/0x42b [307313.850021] [<ffffffff81253333>] ? sock_alloc_file+0xae/0x10c [307313.850021] [<ffffffff810ec398>] ? fd_install+0x27/0x4d [307313.850021] [<ffffffff810fbbd1>] ? sys_ioctl+0x4b/0x72 [307313.850021] [<ffffffff813202fb>] ? system_call_fastpath+0x16/0x1b [307313.850021] Code: 54 24 18 eb 6a 49 8b 3e f6 87 b1 00 00 00 02 48 8b 97 98 01 00 00 74 50 48 8b 8a a0 00 00 00 48 85 c9 74 44 48 8b 95 00 02 00 00 <4a> 8b 34 fa 31 d2 48 85 f6 74 04 48 8b 14 06 48 89 44 24 10 48 [307313.850021] RIP [<ffffffffa03a3912>] bond_vlan_rx_kill_vid+0x6d/0x1be [bonding] [307313.850021] RSP <ffff88040e029d48> [307313.850021] CR2: 0000000000000020 [307313.852725] ---[ end trace 2bfeb3d8ef05f2de ]--- text of oops on virtual machine: [ 17.651750] BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [ 17.660923] IP: [<ffffffffa022a92d>] bond_vlan_rx_kill_vid+0x6d/0x1be [bonding] [ 17.660923] PGD 164f6067 PUD 14cd8067 PMD 0 [ 17.660923] Oops: 0000 [#1] SMP [ 17.660923] CPU 0 [ 17.660923] Modules linked in: 8021q garp stp bonding loop joydev snd_intel8x0 usbhid hid snd_ac97_codec ac ac97_bus power_supply evdev snd_pcm parport_pc parport snd_timer snd tpm_tis tpm tpm_bios i2c_piix4 psmouse soundcore i2c_core pcspkr serio_raw snd_page_alloc processor button thermal_sys ext3 jbd mbcache sg sr_mod sd_mod crc_t10dif cdrom ata_generic ahci libahci ata_piix ohci_hcd ehci_hcd usbcore e1000 libata scsi_mod [last unloaded: scsi_wait_scan] [ 17.660923] [ 17.660923] Pid: 954, comm: vconfig Not tainted 3.0.72+1-k8-x6 #1 innotek GmbH VirtualBox [ 17.660923] RIP: 0010:[<ffffffffa022a92d>] [<ffffffffa022a92d>] bond_vlan_rx_kill_vid+0x6d/0x1be [bonding] [ 17.660923] RSP: 0018:ffff88001689fd48 EFLAGS: 00010282 [ 17.660923] RAX: 0000000000000018 RBX: ffff880014f95000 RCX: ffffffffa00799f1 [ 17.660923] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff880012364000 [ 17.660923] RBP: ffff880014f95740 R08: ffff880016952740 R09: 0000000000000000 [ 17.660923] R10: ffff880014f952ab R11: ffff88001218bed0 R12: 0000000000000000 [ 17.660923] R13: 0000000000000003 R14: ffff880016411200 R15: 0000000000000004 [ 17.660923] FS: 00007ff96577e700(0000) GS:ffff880017c00000(0000) knlGS:0000000000000000 [ 17.660923] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 17.660923] CR2: 0000000000000020 CR3: 0000000015d6b000 CR4: 00000000000006f0 [ 17.660923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 17.660923] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 17.660923] Process vconfig (pid: 954, threadinfo ffff88001689e000, task ffff88001218f140) [ 17.660923] Stack: [ 17.660923] 0000000000000000 ffffffffa0079bfc 0000000000000001 ffff880000000003 [ 17.660923] ffff880014f95740 ffff880014f95000 0000000000010003 ffff880016952000 [ 17.660923] ffff880016952740 ffffffffa0236230 0000000000000000 ffffffffa024420b [ 17.660923] Call Trace: [ 17.660923] [<ffffffffa0079bfc>] ? e1000_vlan_rx_register+0x48/0x121 [e1000] [ 17.660923] [<fffffffa024420b>] ? unregister_vlan_dev+0x115/0x12e [8021q] [ 17.660923] [<ffffffffa0244baf>] ? vlan_ioctl_handler+0x324/0x3ad [8021q] [ 17.660923] [<ffffffff813103af>] ? do_page_fault+0x2f5/0x32e [ 17.660923] [<ffffffff8124630a>] ? sock_ioctl+0x18c/0x204 [ 17.660923] [<ffffffff810e5bab>] ? alloc_file+0x18/0xaa [ 17.660923] [<ffffffff810f1901>] ? do_vfs_ioctl+0x3de/0x42b [ 17.660923] [<ffffffff812472d0>] ? sock_alloc_file+0xae/0x10c [ 17.660923] [<ffffffff810e2c60>] ? fd_install+0x27/0x4d [ 17.660923] [<ffffffff810f1999>] ? sys_ioctl+0x4b/0x72 [ 17.660923] [<ffffffff813127b>] ? system_call_fastpath+0x16/0x1b [ 17.660923] Code: 54 24 18 eb 6a 49 8b 3e f6 87 b1 00 00 00 02 48 8b 97 98 01 00 00 74 50 48 8b 8a a0 00 00 00 48 85 c9 74 44 48 8b 95 00 02 00 00 <4a> 8b 34 fa 31 d2 48 85 f6 74 04 48 8b 14 06 48 89 44 24 10 48 [ 17.660923] RIP [<ffffffffa022a92d>] bond_vlan_rx_kill_vid+0x6d/0x1be [bonding] [ 17.660923] RSP <ffff88001689fd48> [ 17.660923] CR2: 0000000000000020 [ 25.888315] Clocksource tsc unstable (delta = 4687000427 ns) [ 25.999121] bond0: IPv6 duplicate address fe80::a00:27ff:fefb:abbc detected! [ 26.121467] ---[ end trace 68c39b68a85f3094 ]--- corey -- undefined@xxxxxxxxx -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html