usb 3-1: Direct firmware load for isl3887usb failed with error -2 usb 3-1: Firmware not found. ================================================================== BUG: KASAN: use-after-free in p54u_load_firmware_cb.cold+0x97/0x13d drivers/net/wireless/intersil/p54/p54usb.c:933 Read of size 8 at addr ffff8881d94af568 by task kworker/0:4/2785 CPU: 0 PID: 2785 Comm: kworker/0:4 Not tainted 5.2.0-rc6+ #15 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events request_firmware_work_func Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xca/0x13e lib/dump_stack.c:113 print_address_description+0x67/0x231 mm/kasan/report.c:188 __kasan_report.cold+0x1a/0x32 mm/kasan/report.c:317 kasan_report+0xe/0x20 mm/kasan/common.c:614 p54u_load_firmware_cb.cold+0x97/0x13d drivers/net/wireless/intersil/p54/p54usb.c:933 request_firmware_work_func+0x126/0x242 drivers/base/firmware_loader/main.c:785 process_one_work+0x905/0x1570 kernel/workqueue.c:2269 worker_thread+0x96/0xe20 kernel/workqueue.c:2415 kthread+0x30b/0x410 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] SMP KASAN CPU: 0 PID: 2785 Comm: kworker/0:4 Not tainted 5.2.0-rc6+ #15 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events request_firmware_work_func RIP: 0010:nearest_obj include/linux/slub_def.h:176 [inline] RIP: 0010:print_address_description+0xc0/0x231 mm/kasan/report.c:193 Code: 01 00 00 b9 0b 00 00 00 48 8b 5d 18 be 11 ff ff 01 4c 89 e0 48 c1 e1 29 48 c1 e6 27 48 01 e9 48 c1 f9 06 48 c1 e1 0c 48 01 f1 <8b> 73 18 48 29 c8 48 99 48 f7 fe 66 8b 45 2a 48 89 f7 4c 89 e6 48 RSP: 0018:ffff8881c9a8fbd8 EFLAGS: 00010086 RAX: ffff8881d94af568 RBX: dead000000000400 RCX: ffff8881d94af000 RDX: ffffea0007652b01 RSI: ffff888000000000 RDI: ffffed1039351f6d RBP: ffffea0007652bc0 R08: 0000000000000000 R09: ffffed103b643ed7 R10: ffffed103b643ed6 R11: ffff8881db21f6b7 R12: ffff8881d94af568 R13: ffffffff82e0346b R14: ffff8881d94af568 R15: ffff8881db232400 FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd02955978 CR3: 00000001b05cb000 CR4: 00000000001406f0 Call Trace: __kasan_report.cold+0x1a/0x32 mm/kasan/report.c:317 kasan_report+0xe/0x20 mm/kasan/common.c:614 p54u_load_firmware_cb.cold+0x97/0x13d drivers/net/wireless/intersil/p54/p54usb.c:933 request_firmware_work_func+0x126/0x242 drivers/base/firmware_loader/main.c:785 process_one_work+0x905/0x1570 kernel/workqueue.c:2269 worker_thread+0x96/0xe20 kernel/workqueue.c:2415 kthread+0x30b/0x410 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace 696e3176a10074a0 ]--- RIP: 0010:nearest_obj include/linux/slub_def.h:176 [inline] RIP: 0010:print_address_description+0xc0/0x231 mm/kasan/report.c:193 Code: 01 00 00 b9 0b 00 00 00 48 8b 5d 18 be 11 ff ff 01 4c 89 e0 48 c1 e1 29 48 c1 e6 27 48 01 e9 48 c1 f9 06 48 c1 e1 0c 48 01 f1 <8b> 73 18 48 29 c8 48 99 48 f7 fe 66 8b 45 2a 48 89 f7 4c 89 e6 48 RSP: 0018:ffff8881c9a8fbd8 EFLAGS: 00010086 RAX: ffff8881d94af568 RBX: dead000000000400 RCX: ffff8881d94af000 RDX: ffffea0007652b01 RSI: ffff888000000000 RDI: ffffed1039351f6d RBP: ffffea0007652bc0 R08: 0000000000000000 R09: ffffed103b643ed7 R10: ffffed103b643ed6 R11: ffff8881db21f6b7 R12: ffff8881d94af568 R13: ffffffff82e0346b R14: ffff8881d94af568 R15: ffff8881db232400 FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd02955978 CR3: 00000001b05cb000 CR4: 00000000001406f0