Hello:
This patch was applied to netdev/net.git (master) by David S. Miller davem@davemloft.net:
On Wed, 23 Feb 2022 22:19:54 +0100 you wrote:
xennet_destroy_queues() relies on info->netdev->real_num_tx_queues to delete queues. Since d7dac083414eb5bb99a6d2ed53dc2c1b405224e5 ("net-sysfs: update the queue counts in the unregistration path"), unregister_netdev() indirectly sets real_num_tx_queues to 0. Those two facts together means, that xennet_destroy_queues() called from xennet_remove() cannot do its job, because it's called after unregister_netdev(). This results in kfree-ing queues that are still linked in napi, which ultimately crashes:
[...]
Here is the summary with links: - [v2] xen/netfront: destroy queues before real_num_tx_queues is zeroed https://git.kernel.org/netdev/net/c/dcf4ff7a48e7
You are awesome, thank you!