If the eq is NULL, req is not deallocated: req = kzalloc(sizeof *req, gfp_flags); if (!req || !_ep) return NULL;
I was too quick when submitting. So I of course mean "If _ep is NULL.."
grabbed for a trivial fix