===================================================== BUG: KMSAN: use-after-free in usbvision_v4l2_open+0x4c9/0x690 drivers/media/usb/usbvision/usbvision-video.c:341 CPU: 1 PID: 13481 Comm: v4l_id Not tainted 5.4.0-rc2+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x191/0x1f0 lib/dump_stack.c:113 kmsan_report+0x14e/0x2c0 mm/kmsan/kmsan_report.c:110 __msan_warning+0x73/0xe0 mm/kmsan/kmsan_instr.c:245 usbvision_v4l2_open+0x4c9/0x690 drivers/media/usb/usbvision/usbvision-video.c:341 v4l2_open+0x2bc/0x510 drivers/media/v4l2-core/v4l2-dev.c:423 chrdev_open+0xc58/0xe00 fs/char_dev.c:414 do_dentry_open+0xdae/0x1810 fs/open.c:797 vfs_open+0xaf/0xe0 fs/open.c:914 do_last fs/namei.c:3408 [inline] path_openat+0x17f4/0x6ab0 fs/namei.c:3525 do_filp_open+0x2b8/0x710 fs/namei.c:3555 do_sys_open+0x642/0xa30 fs/open.c:1097 __do_sys_open fs/open.c:1115 [inline] __se_sys_open+0xad/0xc0 fs/open.c:1110 __x64_sys_open+0x4a/0x70 fs/open.c:1110 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x7fd627890120 Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 RSP: 002b:00007ffe2626f908 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007ffe2626fa68 RCX: 00007fd627890120 RDX: 00007fd627b45138 RSI: 0000000000000000 RDI: 00007ffe26270f13 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000400884 R13: 00007ffe2626fa60 R14: 0000000000000000 R15: 0000000000000000 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:154 [inline] kmsan_internal_poison_shadow+0x60/0x120 mm/kmsan/kmsan.c:137 kmsan_slab_free+0x8d/0x100 mm/kmsan/kmsan_hooks.c:123 slab_free_freelist_hook mm/slub.c:1473 [inline] slab_free mm/slub.c:3040 [inline] kfree+0x4c1/0x2db0 mm/slub.c:3982 usbvision_release+0x356/0x440 drivers/media/usb/usbvision/usbvision-video.c:1347 usbvision_disconnect+0x1e8/0x4f0 drivers/media/usb/usbvision/usbvision-video.c:1570 usb_unbind_interface+0x3a2/0xdd0 drivers/usb/core/driver.c:423 __device_release_driver drivers/base/dd.c:1134 [inline] device_release_driver_internal+0x96f/0xd80 drivers/base/dd.c:1165 device_release_driver+0x4b/0x60 drivers/base/dd.c:1188 bus_remove_device+0x4bf/0x670 drivers/base/bus.c:532 device_del+0xcd5/0x1cb0 drivers/base/core.c:2375 usb_disable_device+0x567/0x1150 drivers/usb/core/message.c:1241 usb_disconnect+0x51e/0xd60 drivers/usb/core/hub.c:2199 hub_port_connect drivers/usb/core/hub.c:4949 [inline] hub_port_connect_change drivers/usb/core/hub.c:5213 [inline] port_event drivers/usb/core/hub.c:5359 [inline] hub_event+0x3fd0/0x72f0 drivers/usb/core/hub.c:5441 process_one_work+0x1572/0x1ef0 kernel/workqueue.c:2269 process_scheduled_works kernel/workqueue.c:2331 [inline] worker_thread+0x189c/0x2460 kernel/workqueue.c:2417 kthread+0x4b5/0x4f0 kernel/kthread.c:256 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355 =====================================================