diff --git a/[refs] b/[refs]
index f8017ca40a3f..8c8772fdff54 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 98e77438aed3cd3343cbb86825127b1d9d2bea33
+refs/heads/master: fbe5e29ec1886967255e76946aaf537b8cc9b81e
diff --git a/trunk/net/atm/br2684.c b/trunk/net/atm/br2684.c
index 52cfd0c3ea71..d07223c834af 100644
--- a/trunk/net/atm/br2684.c
+++ b/trunk/net/atm/br2684.c
@@ -558,12 +558,13 @@ static int br2684_regvcc(struct atm_vcc *atmvcc, void __user * arg)
 	spin_unlock_irqrestore(&rq->lock, flags);
 
 	skb_queue_walk_safe(&queue, skb, tmp) {
-		struct net_device *dev = skb->dev;
+		struct net_device *dev;
+
+		br2684_push(atmvcc, skb);
+		dev = skb->dev;
 
 		dev->stats.rx_bytes -= skb->len;
 		dev->stats.rx_packets--;
-
-		br2684_push(atmvcc, skb);
 	}
 
 	/* initialize netdev carrier state */