00:27 <poulecaca> like because irq is created with devm_request_threaded_irq() it will be freed after mmc_free_host().

00:28 <poulecaca> then handler could be called with a freed host pointer

07:38 <poulecaca> adema_: I would try this patch https://pastebin.com/kA2LX35N. My two cents here is that because irq is managed allocated it is removed after meson_mmc_remove() has finished. And because irq is IRQF_SHARED the handler can be executed at free_irq() (if CONFIG_DEBUG_SHIRQ is enabled). So basically the meson_mmc_irq() will be called after mmc_free_host() hence dereferencing a freed host pointer

13:46 <adema_> poulecaca, yeah your patch worked!