usb 1-1: config 0 has an invalid interface number: 55 but max is 0
usb 1-1: config 0 has no interface number 0
usb 1-1: config 0 interface 55 has no altsetting 0
usb 1-1: New USB device found, idVendor=04fa, idProduct=2490, bcdDevice=12.eb
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
==================================================================
BUG: KASAN: use-after-free in ds_probe+0x5ff/0x750
Read of size 1 at addr ffff8881cb9e29e2 by task kworker/0:5/5713

CPU: 0 PID: 5713 Comm: kworker/0:5 Not tainted 5.1.0-rc3+ #7
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
 dump_stack+0xca/0x13e
 print_address_description+0x67/0x231
 kasan_report.cold+0x1a/0x35
 ds_probe+0x5ff/0x750
 usb_probe_interface+0x30d/0x7b0
 really_probe+0x296/0x680
 driver_probe_device+0xf9/0x200
 __device_attach_driver+0x1c4/0x230
 bus_for_each_drv+0x15e/0x1e0
 __device_attach+0x21e/0x360
 bus_probe_device+0x1ec/0x2a0
 device_add+0xaf4/0x1700
 usb_set_configuration+0xdf2/0x1670
 generic_probe+0x9d/0xd5
 usb_probe_device+0xa8/0x110
 really_probe+0x296/0x680
 driver_probe_device+0xf9/0x200
 __device_attach_driver+0x1c4/0x230
 bus_for_each_drv+0x15e/0x1e0
 __device_attach+0x21e/0x360
 bus_probe_device+0x1ec/0x2a0
 device_add+0xaf4/0x1700
 usb_new_device.cold+0x8b8/0x1030
 hub_event+0x1ac9/0x35a0
 process_one_work+0x90a/0x1580
 worker_thread+0x96/0xe20
 kthread+0x30e/0x420
 ret_from_fork+0x3a/0x50

Allocated by task 5700:
 __kasan_kmalloc.constprop.0+0xbf/0xd0
 kobject_get_path+0xb9/0x190
 kobject_uevent_env+0x237/0x1110
 device_del+0x6f9/0xb90
 usb_disconnect+0x4ce/0x840
 hub_event+0x13f8/0x35a0
 process_one_work+0x90a/0x1580
 worker_thread+0x7ab/0xe20
 kthread+0x30e/0x420
 ret_from_fork+0x3a/0x50

Freed by task 5700:
 __kasan_slab_free+0x130/0x180
 kfree+0xd7/0x290
 kobject_uevent_env+0x27a/0x1110
 device_del+0x6f9/0xb90
 usb_disconnect+0x4ce/0x840
 hub_event+0x13f8/0x35a0
 process_one_work+0x90a/0x1580
 worker_thread+0x7ab/0xe20
 kthread+0x30e/0x420
 ret_from_fork+0x3a/0x50

The buggy address belongs to the object at ffff8881cb9e29c0
 which belongs to the cache kmalloc-64 of size 64
The buggy address is located 34 bytes inside of
 64-byte region [ffff8881cb9e29c0, ffff8881cb9e2a00)
The buggy address belongs to the page:
page:ffffea00072e7880 count:1 mapcount:0 mapping:ffff8881dac03600 index:0x0
flags: 0x200000000000200(slab)
raw: 0200000000000200 ffffea0007552f00 0000001300000013 ffff8881dac03600
raw: 0000000000000000 00000000802a002a 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff8881cb9e2880: fc fc fc fc fb fb fb fb fb fb fb fb fc fc fc fc
 ffff8881cb9e2900: fb fb fb fb fb fb fb fb fc fc fc fc 00 00 00 00
>ffff8881cb9e2980: 00 00 fc fc fc fc fc fc fb fb fb fb fb fb fb fb
                                                       ^
 ffff8881cb9e2a00: fc fc fc fc fb fb fb fb fb fb fb fb fc fc fc fc
 ffff8881cb9e2a80: fb fb fb fb fb fb fb fb fc fc fc fc fb fb fb fb
==================================================================