On Thu, Jun 30, 2022 at 7:11 PM Sachin Sant [off-list ref] wrote:

Following warning is seen while booting recent -next kernel on IBM Power server.

[    1.544420] ------------[ cut here ]------------
[    1.544422] alg: self-tests for rsa-generic (rsa) failed (rc=-22)
[    1.544429] WARNING: CPU: 18 PID: 512 at crypto/testmgr.c:5774 alg_test+0x42c/0x850
[    1.544437] Modules linked in:
[    1.544441] CPU: 18 PID: 512 Comm: cryptomgr_test Not tainted 5.19.0-rc4-next-20220627 #2
[    1.544446] NIP:  c0000000006fa76c LR: c0000000006fa768 CTR: c0000000008552e0
[    1.544448] REGS: c000000008a27980 TRAP: 0700   Not tainted  (5.19.0-rc4-next-20220627)
[    1.544451] MSR:  8000000000029033 <SF,EE,ME,IR,DR,RI,LE>  CR: 28008822  XER: 20040005
[    1.544458] CFAR: c000000000154114 IRQMASK: 0
[    1.544458] GPR00: c0000000006fa768 c000000008a27c20 c000000002a8ff00 0000000000000035
[    1.544458] GPR04: 00000000ffff7fff c000000008a279e0 c000000008a279d8 0000000000000000
[    1.544458] GPR08: 00000000ffff7fff 0000000000000000 c0000000025c6ff8 c000000002947160
[    1.544458] GPR12: 0000000000008000 c0000009afff3f00 c00000000018c6f8 c0000000070c5180
[    1.544458] GPR16: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
[    1.544458] GPR20: 0000000000000000 0000000000000000 0000000000000000 c000000000f1c230
[    1.544458] GPR24: 0000000000000000 c00000000e679080 0000000000000400 ffffffffffffffff
[    1.544458] GPR28: c00000000e679000 000000000000000d c000000002d814a8 ffffffffffffffea
[    1.544491] NIP [c0000000006fa76c] alg_test+0x42c/0x850
[    1.544495] LR [c0000000006fa768] alg_test+0x428/0x850
[    1.544499] Call Trace:
[    1.544500] [c000000008a27c20] [c0000000006fa768] alg_test+0x428/0x850 (unreliable)
[    1.544505] [c000000008a27d90] [c0000000006f8df0] cryptomgr_test+0x40/0x70
[    1.544510] [c000000008a27dc0] [c00000000018c814] kthread+0x124/0x130
[    1.544514] [c000000008a27e10] [c00000000000cdf4] ret_from_kernel_thread+0x5c/0x64
[    1.544518] Instruction dump:
[    1.544520] 409e02e0 3d22002f 892915d1 2f890000 409e02d0 3c62fe77 7f25cb78 7f84e378
[    1.544526] 7fe6fb78 3863ac78 4ba59949 60000000 <0fe00000> fa2100f8 fa410100 fa610108
[    1.544532] ---[ end trace 0000000000000000 ]—

Git bisect points to the following patch.

# git bisect bad
f145d411a67efacc0731fc3f9c7b2d89fb62523a is the first bad commit
commit f145d411a67efacc0731fc3f9c7b2d89fb62523a
    crypto: rsa - implement Chinese Remainder Theorem for faster private key operations

Reverting the patch helps avoid this boot time warning.

- Sachin

Thanks for the report. I've already submitted a follow up patch:
https://patchwork.kernel.org/project/linux-crypto/patch/20220630140506.904-1-ignat@cloudflare.com/

Ignat