BUG: bad host security descriptor; not enough data (4 vs 5 left)

Status: auto-obsoleted due to no activity on 2022/12/09 21:22
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+d934a9036346e0215d8f@syzkaller.appspotmail.com
First crash: 2462d, last: 2356d
▶ ▼ Duplicate bugs (6)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
BUG: bad host security descriptor; not enough data (3 vs 5 left) usb -1 syz, C 2 2350d 2426d 0/29 closed as dup on 2019/12/17 13:15
BUG: bad host encryption descriptor; descriptor is too short (0 vs 5 needed) usb -1 syz, C 8 2329d 2476d 0/29 closed as dup on 2019/11/19 14:41
BUG: bad host encryption descriptor; descriptor is too short (1 vs 5 needed) usb -1 syz, C 1 2353d 2353d 0/29 closed as dup on 2020/02/28 12:53
BUG: bad host security descriptor; not enough data (2 vs 5 left) usb -1 syz, C 7 2310d 2467d 0/29 closed as dup on 2019/11/19 14:41
BUG: bad host security descriptor; not enough data (1 vs 5 left) usb -1 syz, C 2 2339d 2353d 0/29 closed as dup on 2020/02/28 12:52
BUG: bad host encryption descriptor; descriptor is too short (3 vs 5 needed) usb -1 syz, C 1 2359d 2357d 0/29 closed as dup on 2020/02/24 13:31
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
BUG: bad host security descriptor; not enough data (4 vs 5 left) 4 (5) 2019/11/20 13:32
Reminder: 45 active syzbot reports in usb subsystem 1 (1) 2019/11/19 04:27
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: bad host security descriptor; not enough data (3 vs 5 left) usb -1 syz, C 2 2350d 2426d 0/29 closed as dup on 2019/12/17 13:15
upstream BUG: bad host security descriptor; not enough data (2 vs 5 left) usb -1 syz, C 7 2310d 2467d 0/29 closed as dup on 2019/11/19 14:41
upstream BUG: bad host security descriptor; not enough data (1 vs 5 left) usb -1 syz, C 2 2339d 2353d 0/29 closed as dup on 2020/02/28 12:52
▶ ▼ Last patch testing requests (6)
Created Duration User Patch Repo Result
2022/12/09 05:31 15m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing OK log
2022/12/09 04:31 14m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing OK log
2022/12/09 02:31 14m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing OK log
2022/08/30 21:27 0m retest repro https://github.com/google/kasan.git usb-fuzzer error
2022/08/30 20:27 0m retest repro https://github.com/google/kasan.git usb-fuzzer error
2022/08/30 17:27 0m retest repro https://github.com/google/kasan.git usb-fuzzer error

Sample crash report:
usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
usb 1-1: New USB device found, idVendor=13dc, idProduct=5611, bcdDevice=40.15
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
hwa-hc 1-1:0.0: Wire Adapter v106.52 newer than groked v1.0
usb 1-1: BUG: bad host security descriptor; not enough data (4 vs 5 left)
usb 1-1: supported encryption types: 
usb 1-1: E: host doesn't support CCM-1 crypto
hwa-hc 1-1:0.0: Wireless USB HWA host controller
hwa-hc 1-1:0.0: new USB bus registered, assigned bus number 11

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/25 10:36 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 59b57593 .config console log report syz C ci2-upstream-usb
2020/02/23 03:38 https://github.com/google/kasan.git usb-fuzzer 307a2623c9d7 2c36e7a7 .config console log report syz C ci2-upstream-usb
2019/11/11 12:51 https://github.com/google/kasan.git usb-fuzzer 3183c03757f8 dc438b91 .config console log report syz C ci2-upstream-usb
* Struck through repros no longer work on HEAD.