ci2 starts bisection 2026-09-25 17:01:10.614799244 +0000 UTC m=+53272.500276208 bisecting fixing commit since e4f7d8be268ecf717f94ee2e242afa79ddeacaed building syzkaller on 746171eef8d3611ed06d1a92ef68d5bee5031150 ensuring issue is reproducible on original commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed testing commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 6bbe8b3feef3b527281a685e45599f5bde3658a5d7ed162374610d6d2935f6cb all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 945ad5914cc834edb35eedcb5fe0e5279ea3cfceaff3fa7e18a43a361c6e0b51 all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed kconfig minimization: base=7505 full=9788 leaves diff=2010 split chunks (needed=false): <2010> split chunk #0 of len 2010 into 5 parts testing without sub-chunk 1/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: d7303d370120f791603f75cf226b42112d1f51a405c10292b148838b20a3e3cf all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ef180d2fbbd8bb8023d95ddb3bcae013c17e5fbc4d8a24ae6f03c330339e5bd8 all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 2feadd697e81e33fe3010498092965a58b0b7ee0ce8a1572bb63471095a70697 all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: e6e9454cd230ad154a24865767046856a0c4028c11b562df23f041e760d41caf all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit e4f7d8be268ecf717f94ee2e242afa79ddeacaed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: d97e71d4ec0ddf50aec523379218ecd882206e16b4446e40be227b78e0e9afb5 all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] the chunk can be dropped disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing current HEAD 1a8763b93150b2c8f3992c27a5ce7857fee4ab0f testing commit 1a8763b93150b2c8f3992c27a5ce7857fee4ab0f gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 655430a40093cdb35aa202b4b866d5fc76c7e069ea2e40698766d0e94757e172 all runs: OK false negative chance: 0.000 # git bisect start 1a8763b93150b2c8f3992c27a5ce7857fee4ab0f e4f7d8be268ecf717f94ee2e242afa79ddeacaed Bisecting: 1136 revisions left to test after this (roughly 10 steps) [ec896c5fbdd320e12c81dd9bec69725abc3616c4] nfsd: add filehandle match check to nfsd4_delegreturn() determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit ec896c5fbdd320e12c81dd9bec69725abc3616c4 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: f9d89febe9b7b92d133c006d39b73b6ede9cfbe5216e113e5edd202c8e8c8f49 all runs: OK false negative chance: 0.000 # git bisect bad ec896c5fbdd320e12c81dd9bec69725abc3616c4 Bisecting: 568 revisions left to test after this (roughly 9 steps) [e00f7d2b5f2540a3415a229c982af7a25ff6362e] ipv4: fix use-after-free in fib_nhc_update_mtu() determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit e00f7d2b5f2540a3415a229c982af7a25ff6362e gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: bd3f82bb468c1b147f9876261478a97a8ab82ccb62fa0867c2f7bf912380de5a all runs: OK false negative chance: 0.000 # git bisect bad e00f7d2b5f2540a3415a229c982af7a25ff6362e Bisecting: 283 revisions left to test after this (roughly 8 steps) [81c9b4921f62d1642b9d775524ae9240e521a5ed] drm/amdgpu: fix division by zero with invalid uvd dimensions determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit 81c9b4921f62d1642b9d775524ae9240e521a5ed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 47b2da85118030421bfe280290f10c929dbc2749251f0c513df7710b33d277a0 all runs: OK false negative chance: 0.000 # git bisect bad 81c9b4921f62d1642b9d775524ae9240e521a5ed Bisecting: 141 revisions left to test after this (roughly 7 steps) [9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4] tipc: fix infinite loop in __tipc_nl_compat_dumpit determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit 9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 4585a528523ef394c406ce8b392d28a6adbfd50d0d01f11ab7dde9837dd65b23 all runs: OK false negative chance: 0.000 # git bisect bad 9cd8c88e1336ec0fbe02af1ddf2b52838d30fae4 Bisecting: 70 revisions left to test after this (roughly 6 steps) [ee5e65964f456adfe14d526fba0bd055de98ecf3] sctp: fix auth_hmacs array size in struct sctp_cookie determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit ee5e65964f456adfe14d526fba0bd055de98ecf3 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 51dcdd2b44e939ae04fa2f95bf6c1a1f1ba902c3d554663a924b2c4b45085a54 all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] # git bisect good ee5e65964f456adfe14d526fba0bd055de98ecf3 Bisecting: 35 revisions left to test after this (roughly 5 steps) [268cea3800eda5fa3ee04a49ee2973b8766a8df3] firewire: net: Fix fragmented datagram reassembly determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit 268cea3800eda5fa3ee04a49ee2973b8766a8df3 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: fe0c5533ca68ff32bab39338e6f329d9f39f3fa920329beb67cb886a206056aa run #0: ignore: lost connection to test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad 268cea3800eda5fa3ee04a49ee2973b8766a8df3 Bisecting: 17 revisions left to test after this (roughly 4 steps) [bf7b8de875595d49a61c27f1e7ffb547370989ca] crypto: rsa-pkcs1pad: Don't WARN on an empty digest determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit bf7b8de875595d49a61c27f1e7ffb547370989ca gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 831d55f953a16400e94f4fe5cda3cb82c1a2aeca083bf505e48160f7f6b93106 all runs: OK false negative chance: 0.000 # git bisect bad bf7b8de875595d49a61c27f1e7ffb547370989ca Bisecting: 8 revisions left to test after this (roughly 3 steps) [9b3299e05f8f4b4ba0a2181ec38f6fc06dd4cb5c] USB: gadget: snps-udc: fix device name leak on probe failure determine whether the revision contains the guilty commit revision e4f7d8be268ecf717f94ee2e242afa79ddeacaed crashed and is reachable testing commit 9b3299e05f8f4b4ba0a2181ec38f6fc06dd4cb5c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 7d6753d81d0a4f54b49f34edfa7bd6b2c91394fcd0b788c46fdddaccc8cda1cc all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] # git bisect good 9b3299e05f8f4b4ba0a2181ec38f6fc06dd4cb5c Bisecting: 4 revisions left to test after this (roughly 2 steps) [82ec2c1e456b17451f0736c3983402642f961733] usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer determine whether the revision contains the guilty commit revision 9b3299e05f8f4b4ba0a2181ec38f6fc06dd4cb5c crashed and is reachable testing commit 82ec2c1e456b17451f0736c3983402642f961733 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 59564f9a068a3acf02bb573967f4470a0e9634235536d85ac905e5469702a0e1 all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] # git bisect good 82ec2c1e456b17451f0736c3983402642f961733 Bisecting: 2 revisions left to test after this (roughly 1 step) [63c4e55d0741cfaf00515e807cad9293445cd348] USB: serial: io_edgeport: cap received transmit credits determine whether the revision contains the guilty commit revision ee5e65964f456adfe14d526fba0bd055de98ecf3 crashed and is reachable testing commit 63c4e55d0741cfaf00515e807cad9293445cd348 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: e17cec995f299d0ee7a4fd55673eb8b08171968224c2c7be532aa567b81c9bdb all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] # git bisect good 63c4e55d0741cfaf00515e807cad9293445cd348 Bisecting: 0 revisions left to test after this (roughly 1 step) [3eff5bce1da90e3a062bffaada2818bc1974c3f0] USB: serial: option: add TDTECH MT5710-CN determine whether the revision contains the guilty commit revision 63c4e55d0741cfaf00515e807cad9293445cd348 crashed and is reachable testing commit 3eff5bce1da90e3a062bffaada2818bc1974c3f0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 5331f2507112aa4260e6f65bf6e90c68be4f8610063bcdffe1588a0bb5f306d8 all runs: crashed: WARNING in pkcs1pad_verify representative crash: WARNING in pkcs1pad_verify, types: [WARNING] # git bisect good 3eff5bce1da90e3a062bffaada2818bc1974c3f0 bf7b8de875595d49a61c27f1e7ffb547370989ca is the first bad commit commit bf7b8de875595d49a61c27f1e7ffb547370989ca Author: Doruk Tan Ozturk Date: Mon Jul 20 21:15:25 2026 +0200 crypto: rsa-pkcs1pad: Don't WARN on an empty digest KEYCTL_PKEY_VERIFY lets an unprivileged caller supply a zero-length digest (in_len == 0). keyctl_pkey_params_get_2() accepts the zero length and the request reaches pkcs1pad_verify(), where the empty digest is rejected but only after being passed through WARN_ON(!digest_size). The warning is therefore directly user-triggerable, and on kernels built with panic_on_warn=1 an unprivileged process can panic the machine -- a local denial of service. Reproduced as UID 65534 in a setuid sandbox. Keep rejecting the invalid request with -EINVAL, but do not emit a warning for the user-controlled length. Mainline does not contain this code path; commit 1e562deacecc ("crypto: rsassa-pkcs1 - Migrate to sig_alg backend") removed pkcs1pad_verify() in v6.13-rc1. This is a minimal fix for the affected stable branches. It applies as-is to 6.1.y, 6.6.y and 6.12.y (identical pkcs1pad_verify); the 5.10.y/5.15.y form is sent as a separate patch due to the older req->dst_len spelling. Found by 0sec automated security-research tooling (https://0sec.ai). Fixes: c7381b012872 ("crypto: akcipher - new verify API for public key algorithms") Cc: stable@vger.kernel.org Assisted-by: 0sec:multi-model Signed-off-by: Doruk Tan Ozturk Reviewed-by: Lukas Wunner Signed-off-by: Sasha Levin crypto/rsa-pkcs1pad.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: 831d55f953a16400e94f4fe5cda3cb82c1a2aeca083bf505e48160f7f6b93106 parent signature: 5331f2507112aa4260e6f65bf6e90c68be4f8610063bcdffe1588a0bb5f306d8 revisions tested: 19, total time: 6h18m50.09144226s (build: 2h18m19.702963153s, test: 3h34m53.374566245s) first good commit: bf7b8de875595d49a61c27f1e7ffb547370989ca crypto: rsa-pkcs1pad: Don't WARN on an empty digest recipients (to): ["doruk@0sec.ai" "lukas@wunner.de" "sashal@kernel.org"] recipients (cc): []