kexec_file_load failed with -ELIBBAD

[Dave Young]

Hi,

kexec_file_load failed recently with a Fedora kernel 5.7.10-200.fc32.x86_64:

# kexec -s -l /boot/cffa62f902ee423bafa9f42e6ab99f3c/5.7.10-200.fc32.x86_64/linux
kexec_file_load failed: Accessing a corrupted shared library

kernel give below debug output:

[101114.084765] PEFILE: checksum @ da
[101114.084768] PEFILE: header size = 200
[101114.084770] PEFILE: cert = 1290 @a4e440 [46 09 00 00 00 02 02 00 30 82 09 3a 06 09 2a
86 48 86 f7 0d 01 07 02 a0 82 09 2b 30 82 09 27 02 01 01 31 0f 30 0d 06 09 60 86 48 01 65
03 04 02 01 05 00 30 5c 06 0a 2b 06 01 04 01 82 37 02 01]
[101114.084773] PEFILE: sig wrapper = { 946, 200, 2 }
[101114.084775] PEFILE: Signature wrapper len wrong
[101114.084777] kexec_file: kernel signature verification failed (-80).

It seems here:
static int pefile_strip_sig_wrapper(const void *pebuf,
                                    struct pefile_context *ctx)
{
...
	if (round_up(wrapper.length, 8) != ctx->sig_len) {
		pr_debug("Signature wrapper len wrong\n");
		return -ELIBBAD;
	}

...

I also cced Lenny see if he has idea.

Thanks
Dave