Chi-Hsien Lin <chi-hsien.lin@xxxxxxxxxxx> wrote: > From: Raveendran Somu <raveendran.somu@xxxxxxxxxxx> > > When the control transfer gets timed out, the error status > was returned without killing that urb, this leads to using > the same urb. This issue causes the kernel crash as the same > urb is sumbitted multiple times. The fix is to kill the > urb for timeout transfer before returning error > > Signed-off-by: Raveendran Somu <raveendran.somu@xxxxxxxxxxx> > Signed-off-by: Chi-hsien Lin <chi-hsien.lin@xxxxxxxxxxx> 5 patches applied to wireless-drivers-next.git, thanks. 93a5bfbc7cad brcmfmac: Fix driver crash on USB control transfer timeout 78179869dc3f brcmfmac: Fix double freeing in the fmac usb data path bd9944918ceb brcmfmac: fix the incorrect return value in brcmf_inform_single_bss(). 2bc50d8828ad brcmfmac: increase max hanger slots from 1K to 3K in fws layer 7f1d42304d93 brcmfmac: add USB autosuspend feature support -- https://patchwork.kernel.org/patch/11457137/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
