Chi-Hsien Lin <chi-hsien.lin@xxxxxxxxxxx> wrote: > From: Raveendran Somu <raveendran.somu@xxxxxxxxxxx> > > When the control transfer gets timed out, the error status > was returned without killing that urb, this leads to using > the same urb. This issue causes the kernel crash as the same > urb is sumbitted multiple times. The fix is to kill the > urb for timeout transfer before returning error > > Signed-off-by: Raveendran Somu <raveendran.somu@xxxxxxxxxxx> > Signed-off-by: Chi-hsien Lin <chi-hsien.lin@xxxxxxxxxxx> I assume there will be v2 based on comments. 6 patches set to Changes Requested. 11380001 [1/6] brcmfmac: Fix driver crash on USB control transfer timeout 11380003 [2/6] brcmfmac: Fix double freeing in the fmac usb data path 11380005 [3/6] brcmfmac: fix the incorrect return value in brcmf_inform_single_bss(). 11380007 [4/6] brcmfmac: increase max hanger slots from 1K to 3K in fws layer 11380009 [5/6] brcmfmac: add USB autosuspend feature support 11380011 [6/6] brcmfmac: To support printing USB console messages -- https://patchwork.kernel.org/patch/11380001/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
