The management port IRQ schedules tx_clean_tasklet after disabling TX interrupts. free_irq() stops the hard IRQ, but a tasklet queued before that point can still access the TX queue, ring and device registers while ndo_stop releases them. Kill the tasklet after freeing the IRQ and before purging the queues and freeing the rings. Fixes: d6aa60a10b2f ("NET: Add Ethernet driver for Octeon MGMT devices.") Signed-off-by: Jiale Yao --- drivers/net/ethernet/cavium/octeon/octeon_mgmt.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/net/ethernet/cavium/octeon/octeon_mgmt.c b/drivers/net/ethernet/cavium/octeon/octeon_mgmt.c index c190fc6538d4..2cf3365b9636 100644 --- a/drivers/net/ethernet/cavium/octeon/octeon_mgmt.c +++ b/drivers/net/ethernet/cavium/octeon/octeon_mgmt.c @@ -1254,6 +1254,7 @@ static int octeon_mgmt_stop(struct net_device *netdev) octeon_mgmt_reset_hw(p); free_irq(p->irq, netdev); + tasklet_kill(&p->tx_clean_tasklet); /* dma_unmap is a nop on Octeon, so just free everything. */ skb_queue_purge(&p->tx_list); -- 2.34.1