syzbot

=====================================================
BUG: KMSAN: use-after-free in usbvision_v4l2_open+0x4c9/0x690 drivers/media/usb/usbvision/usbvision-video.c:341
CPU: 1 PID: 13481 Comm: v4l_id Not tainted 5.4.0-rc2+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x14e/0x2c0 mm/kmsan/kmsan_report.c:110
 __msan_warning+0x73/0xe0 mm/kmsan/kmsan_instr.c:245
 usbvision_v4l2_open+0x4c9/0x690 drivers/media/usb/usbvision/usbvision-video.c:341
 v4l2_open+0x2bc/0x510 drivers/media/v4l2-core/v4l2-dev.c:423
 chrdev_open+0xc58/0xe00 fs/char_dev.c:414
 do_dentry_open+0xdae/0x1810 fs/open.c:797
 vfs_open+0xaf/0xe0 fs/open.c:914
 do_last fs/namei.c:3408 [inline]
 path_openat+0x17f4/0x6ab0 fs/namei.c:3525
 do_filp_open+0x2b8/0x710 fs/namei.c:3555
 do_sys_open+0x642/0xa30 fs/open.c:1097
 __do_sys_open fs/open.c:1115 [inline]
 __se_sys_open+0xad/0xc0 fs/open.c:1110
 __x64_sys_open+0x4a/0x70 fs/open.c:1110
 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RIP: 0033:0x7fd627890120
Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
RSP: 002b:00007ffe2626f908 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007ffe2626fa68 RCX: 00007fd627890120
RDX: 00007fd627b45138 RSI: 0000000000000000 RDI: 00007ffe26270f13
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000400884
R13: 00007ffe2626fa60 R14: 0000000000000000 R15: 0000000000000000

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:154 [inline]
 kmsan_internal_poison_shadow+0x60/0x120 mm/kmsan/kmsan.c:137
 kmsan_slab_free+0x8d/0x100 mm/kmsan/kmsan_hooks.c:123
 slab_free_freelist_hook mm/slub.c:1473 [inline]
 slab_free mm/slub.c:3040 [inline]
 kfree+0x4c1/0x2db0 mm/slub.c:3982
 usbvision_release+0x356/0x440 drivers/media/usb/usbvision/usbvision-video.c:1347
 usbvision_disconnect+0x1e8/0x4f0 drivers/media/usb/usbvision/usbvision-video.c:1570
 usb_unbind_interface+0x3a2/0xdd0 drivers/usb/core/driver.c:423
 __device_release_driver drivers/base/dd.c:1134 [inline]
 device_release_driver_internal+0x96f/0xd80 drivers/base/dd.c:1165
 device_release_driver+0x4b/0x60 drivers/base/dd.c:1188
 bus_remove_device+0x4bf/0x670 drivers/base/bus.c:532
 device_del+0xcd5/0x1cb0 drivers/base/core.c:2375
 usb_disable_device+0x567/0x1150 drivers/usb/core/message.c:1241
 usb_disconnect+0x51e/0xd60 drivers/usb/core/hub.c:2199
 hub_port_connect drivers/usb/core/hub.c:4949 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5213 [inline]
 port_event drivers/usb/core/hub.c:5359 [inline]
 hub_event+0x3fd0/0x72f0 drivers/usb/core/hub.c:5441
 process_one_work+0x1572/0x1ef0 kernel/workqueue.c:2269
 process_scheduled_works kernel/workqueue.c:2331 [inline]
 worker_thread+0x189c/0x2460 kernel/workqueue.c:2417
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355
=====================================================