Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
MIME-Version: 1.0
References: <74179C93-0D19-4A8A-81EB-07BD836A3BD3@linux.ibm.com>
In-Reply-To: <74179C93-0D19-4A8A-81EB-07BD836A3BD3@linux.ibm.com>
From:   Ignat Korchagin <ignat@cloudflare.com>
Date:   Thu, 30 Jun 2022 19:50:08 +0100
Message-ID: <CALrw=nF6EBFQCc8bn9A_Q0nz2O3TSJKsj=ErZUH37-EzLy-qmQ@mail.gmail.com>
Subject: Re: WARN at crypto/testmgr.c:5774 (next)
To:     Sachin Sant <sachinp@linux.ibm.com>
Cc:     linux-crypto <linux-crypto@vger.kernel.org>,
        linuxppc-dev@lists.ozlabs.org, linux-next@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Precedence: bulk

On Thu, Jun 30, 2022 at 7:11 PM Sachin Sant <sachinp@linux.ibm.com> wrote:
>
> Following warning is seen while booting recent -next kernel on IBM Power =
server.
>
> [    1.544420] ------------[ cut here ]------------
> [    1.544422] alg: self-tests for rsa-generic (rsa) failed (rc=3D-22)
> [    1.544429] WARNING: CPU: 18 PID: 512 at crypto/testmgr.c:5774 alg_tes=
t+0x42c/0x850
> [    1.544437] Modules linked in:
> [    1.544441] CPU: 18 PID: 512 Comm: cryptomgr_test Not tainted 5.19.0-r=
c4-next-20220627 #2
> [    1.544446] NIP:  c0000000006fa76c LR: c0000000006fa768 CTR: c00000000=
08552e0
> [    1.544448] REGS: c000000008a27980 TRAP: 0700   Not tainted  (5.19.0-r=
c4-next-20220627)
> [    1.544451] MSR:  8000000000029033 <SF,EE,ME,IR,DR,RI,LE>  CR: 2800882=
2  XER: 20040005
> [    1.544458] CFAR: c000000000154114 IRQMASK: 0
> [    1.544458] GPR00: c0000000006fa768 c000000008a27c20 c000000002a8ff00 =
0000000000000035
> [    1.544458] GPR04: 00000000ffff7fff c000000008a279e0 c000000008a279d8 =
0000000000000000
> [    1.544458] GPR08: 00000000ffff7fff 0000000000000000 c0000000025c6ff8 =
c000000002947160
> [    1.544458] GPR12: 0000000000008000 c0000009afff3f00 c00000000018c6f8 =
c0000000070c5180
> [    1.544458] GPR16: 0000000000000000 0000000000000000 0000000000000000 =
0000000000000000
> [    1.544458] GPR20: 0000000000000000 0000000000000000 0000000000000000 =
c000000000f1c230
> [    1.544458] GPR24: 0000000000000000 c00000000e679080 0000000000000400 =
ffffffffffffffff
> [    1.544458] GPR28: c00000000e679000 000000000000000d c000000002d814a8 =
ffffffffffffffea
> [    1.544491] NIP [c0000000006fa76c] alg_test+0x42c/0x850
> [    1.544495] LR [c0000000006fa768] alg_test+0x428/0x850
> [    1.544499] Call Trace:
> [    1.544500] [c000000008a27c20] [c0000000006fa768] alg_test+0x428/0x850=
 (unreliable)
> [    1.544505] [c000000008a27d90] [c0000000006f8df0] cryptomgr_test+0x40/=
0x70
> [    1.544510] [c000000008a27dc0] [c00000000018c814] kthread+0x124/0x130
> [    1.544514] [c000000008a27e10] [c00000000000cdf4] ret_from_kernel_thre=
ad+0x5c/0x64
> [    1.544518] Instruction dump:
> [    1.544520] 409e02e0 3d22002f 892915d1 2f890000 409e02d0 3c62fe77 7f25=
cb78 7f84e378
> [    1.544526] 7fe6fb78 3863ac78 4ba59949 60000000 <0fe00000> fa2100f8 fa=
410100 fa610108
> [    1.544532] ---[ end trace 0000000000000000 ]=E2=80=94
>
> Git bisect points to the following patch.
>
> # git bisect bad
> f145d411a67efacc0731fc3f9c7b2d89fb62523a is the first bad commit
> commit f145d411a67efacc0731fc3f9c7b2d89fb62523a
>     crypto: rsa - implement Chinese Remainder Theorem for faster private =
key operations
>
> Reverting the patch helps avoid this boot time warning.
>
> - Sachin

Thanks for the report. I've already submitted a follow up patch:
https://patchwork.kernel.org/project/linux-crypto/patch/20220630140506.904-=
1-ignat@cloudflare.com/

Ignat