--- x/net/mac80211/iface.c
+++ y/net/mac80211/iface.c
@@ -630,6 +630,7 @@ static void ieee80211_do_stop(struct iee
 		skb_queue_purge(&sdata->skb_queue);
 		skb_queue_purge(&sdata->status_queue);
 	}
+	flush_work(&sdata->work);
 
 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {