Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <a378dcbc2a7ccb0353beb23b69039117ecbe8114.camel@corsac.net>
Subject: crypto_alg_lookup() returning -80 (ELIBBAD)
From:   Yves-Alexis Perez <corsac@corsac.net>
To:     linux-crypto@vger.kernel.org
Cc:     Tobias Brunner <tobias@strongswan.org>
Date:   Fri, 07 Oct 2022 18:17:53 +0200
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.44.4-1 
MIME-Version: 1.0
Precedence: bulk

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi list,

since some time (and I'm unsure exactly when) my strongSwan IKE/IPsec setup=
 at
home doesn't work anymore, with charon reporting
(https://pastebin.com/7tThD1B5):

received netlink error: Accessing a corrupted shared library (80)

This is on a Debian Bullseye machine running Debian kernel 5.10.140-1 (5.10=
.0-
18-amd64).

With some help from Tobias Brunner (from strongSwan project) I tried to deb=
ug
the issue (I was already fairly certain it was a local issue because if the
standard Debian kernel started misbehaving like that we would have a whole =
lot
more reports everywhere. Removing strongSwan from the equation, I tried to
inject directly an xfrm state with ip (the parameter are a bit bogus but I
don't think it matters at that point):

ip xfrm state add src 10.0.0.1 dst 10.0.0.2 proto esp spi 123456 sel src
10.0.0.3 dst 10.0.0.4 enc aes 0xabcdefabcdef
RTNETLINK answers: Accessing a corrupted shared library

I tried on a different Debian box and the output is:

ip xfrm state add src 10.0.0.1 dst 10.0.0.2 proto esp spi 123456 sel src
10.0.0.3 dst 10.0.0.4 enc aes  0xaabbccddee
RTNETLINK answers: Invalid argument

So there's definitely something fishy in my kernel and I'm unsure why.

Would anyone have a clue about what is happening here, and any idea how to
debug further?

Regards,
- --=20
Yves-Alexis
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmNAUTEACgkQ3rYcyPpX
RFtDUAf/Vu0Ls/bNtEXp1JoxmJucztLoUBGZyaLs1fnxig5TzlLAohOF2OjV1ykh
U3m4fCRqM5JThpLLyISoch4PNBRnjMaR58l/fnvpeEgI7TmBXwJiA4IiVQuvfos/
jxrlp8tAQUvJCm1Se8NGeolBTi0a+SngHig+mW0ix4jde1NKOWdVJ6MZPQgcSIM9
eI8Rdvska6RToQ6VsyscjhjdM6HS6sk7/2me3CF4ezcn3atAJwTANMwLv1Y4CS0x
UeT/HVdWCqPptYUDgyLhcF6OC49wjQ79zTfZcQOGYHJTNh9Q3rXXsLqICYsRaTiU
SXzhPZzOaALKeTfY1jXw0LAFfSwdnQ=3D=3D
=3Dkv2/
-----END PGP SIGNATURE-----