Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Sachin Sant <sachinp@linux.ibm.com>
Content-Type: text/plain;
        charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.100.31\))
Subject: WARN at crypto/testmgr.c:5774 (next)
Message-Id: <74179C93-0D19-4A8A-81EB-07BD836A3BD3@linux.ibm.com>
Date:   Thu, 30 Jun 2022 23:40:55 +0530
Cc:     linuxppc-dev@lists.ozlabs.org, linux-next@vger.kernel.org
To:     linux-crypto@vger.kernel.org, ignat@cloudflare.com
Precedence: bulk

Following warning is seen while booting recent -next kernel on IBM Power =
server.

[    1.544420] ------------[ cut here ]------------
[    1.544422] alg: self-tests for rsa-generic (rsa) failed (rc=3D-22)
[    1.544429] WARNING: CPU: 18 PID: 512 at crypto/testmgr.c:5774 =
alg_test+0x42c/0x850
[    1.544437] Modules linked in:
[    1.544441] CPU: 18 PID: 512 Comm: cryptomgr_test Not tainted =
5.19.0-rc4-next-20220627 #2
[    1.544446] NIP:  c0000000006fa76c LR: c0000000006fa768 CTR: =
c0000000008552e0
[    1.544448] REGS: c000000008a27980 TRAP: 0700   Not tainted  =
(5.19.0-rc4-next-20220627)
[    1.544451] MSR:  8000000000029033 <SF,EE,ME,IR,DR,RI,LE>  CR: =
28008822  XER: 20040005
[    1.544458] CFAR: c000000000154114 IRQMASK: 0=20
[    1.544458] GPR00: c0000000006fa768 c000000008a27c20 c000000002a8ff00 =
0000000000000035=20
[    1.544458] GPR04: 00000000ffff7fff c000000008a279e0 c000000008a279d8 =
0000000000000000=20
[    1.544458] GPR08: 00000000ffff7fff 0000000000000000 c0000000025c6ff8 =
c000000002947160=20
[    1.544458] GPR12: 0000000000008000 c0000009afff3f00 c00000000018c6f8 =
c0000000070c5180=20
[    1.544458] GPR16: 0000000000000000 0000000000000000 0000000000000000 =
0000000000000000=20
[    1.544458] GPR20: 0000000000000000 0000000000000000 0000000000000000 =
c000000000f1c230=20
[    1.544458] GPR24: 0000000000000000 c00000000e679080 0000000000000400 =
ffffffffffffffff=20
[    1.544458] GPR28: c00000000e679000 000000000000000d c000000002d814a8 =
ffffffffffffffea=20
[    1.544491] NIP [c0000000006fa76c] alg_test+0x42c/0x850
[    1.544495] LR [c0000000006fa768] alg_test+0x428/0x850
[    1.544499] Call Trace:
[    1.544500] [c000000008a27c20] [c0000000006fa768] =
alg_test+0x428/0x850 (unreliable)
[    1.544505] [c000000008a27d90] [c0000000006f8df0] =
cryptomgr_test+0x40/0x70
[    1.544510] [c000000008a27dc0] [c00000000018c814] kthread+0x124/0x130
[    1.544514] [c000000008a27e10] [c00000000000cdf4] =
ret_from_kernel_thread+0x5c/0x64
[    1.544518] Instruction dump:
[    1.544520] 409e02e0 3d22002f 892915d1 2f890000 409e02d0 3c62fe77 =
7f25cb78 7f84e378=20
[    1.544526] 7fe6fb78 3863ac78 4ba59949 60000000 <0fe00000> fa2100f8 =
fa410100 fa610108=20
[    1.544532] ---[ end trace 0000000000000000 ]=E2=80=94

Git bisect points to the following patch.

# git bisect bad
f145d411a67efacc0731fc3f9c7b2d89fb62523a is the first bad commit
commit f145d411a67efacc0731fc3f9c7b2d89fb62523a
    crypto: rsa - implement Chinese Remainder Theorem for faster private =
key operations

Reverting the patch helps avoid this boot time warning.

- Sachin=