Check Point has fixed this problem in Check Point R70.
The VSX NGX R65 installation script in XOS 8.1.4 or XOS 8.5.3 or later will automatically add the following to /etc/sysctl.conf
:net.core.netdev_unregister_max = 5
Workaround for Check Point R65 and R70 before applying fix:
The workaround is to set the following kernel parameter during runtime:echo n > /proc/sys/net/core/netdev_unregister_max
orsysctl -w net.core.netdev_unregister_max=n
To keep the setting persistent over a reboot, edit /etc/sysctl.conf
for the VAP in question and set the line as follows:net.core.netdev_unregister_max=n
is the number of times the kernel will check if the net device was unregistered before moving on. This should be set to number bigger than what is reported in the kernel message "unregister_netdevice: ... Usage count = <number>". Check Point recommends the value be set to 5. The default value is 0.