Hi, there is a dangling pointer in ictx->rx_urb_intf1 in function imon_init_intf1 in v5.14-rc3 in function imon_init_intf1: 2322: ictx->rx_urb_intf1 = rx_urb; ... 2362: usb_free_urb(rx_urb); leave a dangling pointer here, I'm not sure whether it can be triggered somewhere. Any feedback would be appreciated, thanks :) Best wishes, Nil Yi