Hi, there is a dangling pointer in mos7840_port->write_urb_pool[j] in function mos7840_open in v5.14-rc3. in function mos7840_open err path : 717: err: 718: for (j = 0; j < NUM_URBS; ++j) { 719: urb = mos7840_port->write_urb_pool[j]; 720: if (!urb) 721: continue; 722: kfree(urb->transfer_buffer); 723: usb_free_urb(urb); } leave a dangling pointer here, I'm not sure whether it can be triggered somewhere. Any feedback would be appreciated, thanks :) Best wishes, Nil Yi