* Bluetooth: btmtk: regression in 634a4408c breaks MT7922 FUNC_CTRL handshake
From: Sergey Kasmy @ 2026-05-15 21:02 UTC (permalink / raw)
To: linux-bluetooth; +Cc: tristan, marcel, Luiz Augusto von Dentz
[-- Attachment #1: Type: text/plain, Size: 1169 bytes --]
Hi,
Commit 634a4408c0615c523cf7531790f4f14a422b9206 ("Bluetooth: btmtk:
validate WMT event SKB length before struct access") introduced a
regression that breaks my MediaTek MT7922 Bluetooth adapter (USB ID
0e8d:0616).
The device enumerates correctly and the version is read successfully,
but initialization fails at the FUNC_CTRL step:
Bluetooth: hci0: HW/SW Version: 0x008a008a, Build Time: 20260224103448
Bluetooth: hci0: Failed to send wmt func ctrl (-22)
Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is
advertised, but not supported.
Full dmesg is attached to this email.
Reverting the commit fixes the issue on my machine. The issue is
present in both Linux 7.0.8 stable and 6.18.31 LTS. The same hardware
works correctly on Linux 7.0.6, under Windows, as well as in 7.0.8
with this commit reversed.
Hardware:
Adapter: MediaTek MT7922 (0e8d:0616)
Motherboard: MSI MAG B650 TOMAHAWK WIFI (MS-7D75)
CPU: AMD Ryzen 7 7800X3D
To reproduce: boot Linux 7.0.7 or 6.18.31 with the correct adapter and
observe `bluetoothctl show` showing "no default controller available",
as well as the EINVAL error in dmesg.
Regards,
Serghei Casminin
[-- Attachment #2: dmesg-broken-bluetooth.log --]
[-- Type: text/x-log, Size: 117406 bytes --]
[ 0.000000] Linux version 6.18.31-1-lts (linux-lts@archlinux) (gcc (GCC) 16.1.1 20260430, GNU ld (GNU Binutils) 2.46.0) #1 SMP PREEMPT_DYNAMIC Fri, 15 May 2026 15:01:51 +0000
[ 0.000000] Command line: initrd=\initramfs-linux-lts.img root=PARTLABEL=zeus-linux-root rootflags=subvol=/@ ro
[ 0.000000] BIOS-provided physical RAM map:
[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable
[ 0.000000] BIOS-e820: [mem 0x00000000000a0000-0x00000000000fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x0000000009e01fff] usable
[ 0.000000] BIOS-e820: [mem 0x0000000009e02000-0x0000000009ffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000000a000000-0x000000000a1fffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000a200000-0x000000000a20ffff] ACPI NVS
[ 0.000000] BIOS-e820: [mem 0x000000000a210000-0x000000000affffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000b000000-0x000000000b020fff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000000b021000-0x000000008738efff] usable
[ 0.000000] BIOS-e820: [mem 0x000000008738f000-0x000000008d38efff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000008d38f000-0x000000008d47efff] ACPI data
[ 0.000000] BIOS-e820: [mem 0x000000008d47f000-0x000000008f47efff] ACPI NVS
[ 0.000000] BIOS-e820: [mem 0x000000008f47f000-0x00000000985fefff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000985ff000-0x0000000099ff8fff] usable
[ 0.000000] BIOS-e820: [mem 0x0000000099ff9000-0x0000000099ffbfff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000099ffc000-0x0000000099ffffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000009a000000-0x000000009bffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000009d7f3000-0x000000009fffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000f7000000-0x00000000ffffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000083defffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000083ef40000-0x00000008801fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved
[ 0.000000] NX (Execute Disable) protection: active
[ 0.000000] APIC: Static calls initialized
[ 0.000000] efi: EFI v2.9 by American Megatrends
[ 0.000000] efi: ACPI=0x8f466000 ACPI 2.0=0x8f466014 TPMFinalLog=0x8f433000 SMBIOS=0x95ac4000 SMBIOS 3.0=0x95ac3000 MEMATTR=0x821b3018 ESRT=0x81a63418 RNG=0x8d3c0f18 INITRD=0x7e07d318 TPMEventLog=0x8d3b6018
[ 0.000000] random: crng init done
[ 0.000000] efi: Remove mem67: MMIO range=[0xe0000000-0xefffffff] (256MB) from e820 map
[ 0.000000] e820: remove [mem 0xe0000000-0xefffffff] reserved
[ 0.000000] efi: Remove mem68: MMIO range=[0xf7000000-0xfedfffff] (126MB) from e820 map
[ 0.000000] e820: remove [mem 0xf7000000-0xfedfffff] reserved
[ 0.000000] efi: Not removing mem69: MMIO range=[0xfee00000-0xfee00fff] (4KB) from e820 map
[ 0.000000] efi: Remove mem70: MMIO range=[0xfee01000-0xffffffff] (17MB) from e820 map
[ 0.000000] e820: remove [mem 0xfee01000-0xffffffff] reserved
[ 0.000000] efi: Remove mem72: MMIO range=[0x860000000-0x8801fffff] (514MB) from e820 map
[ 0.000000] e820: remove [mem 0x860000000-0x8801fffff] reserved
[ 0.000000] SMBIOS 3.7.0 present.
[ 0.000000] DMI: Micro-Star International Co., Ltd. MS-7D75/MAG B650 TOMAHAWK WIFI (MS-7D75), BIOS 1.O0 06/24/2025
[ 0.000000] DMI: Memory slots populated: 2/4
[ 0.000000] tsc: Fast TSC calibration using PIT
[ 0.000000] tsc: Detected 4200.014 MHz processor
[ 0.000112] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
[ 0.000113] e820: remove [mem 0x000a0000-0x000fffff] usable
[ 0.000117] last_pfn = 0x83df00 max_arch_pfn = 0x400000000
[ 0.000122] MTRR map: 5 entries (3 fixed + 2 variable; max 20), built from 9 variable MTRRs
[ 0.000123] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT
[ 0.000251] e820: update [mem 0xa0000000-0xffffffff] usable ==> reserved
[ 0.000256] last_pfn = 0x9a000 max_arch_pfn = 0x400000000
[ 0.002790] esrt: Reserving ESRT space from 0x0000000081a63418 to 0x0000000081a63450.
[ 0.002794] e820: update [mem 0x81a63000-0x81a63fff] usable ==> reserved
[ 0.002804] Using GB pages for direct mapping
[ 0.003181] Secure boot disabled
[ 0.003181] RAMDISK: [mem 0x76790000-0x79429fff]
[ 0.003292] ACPI: Early table checksum verification disabled
[ 0.003294] ACPI: RSDP 0x000000008F466014 000024 (v02 ALASKA)
[ 0.003296] ACPI: XSDT 0x000000008F465728 00010C (v01 ALASKA A M I 01072009 AMI 01000013)
[ 0.003299] ACPI: FACP 0x000000008D474000 000114 (v06 ALASKA A M I 01072009 AMI 00010013)
[ 0.003302] ACPI: DSDT 0x000000008D3FB000 06DF4A (v199 ALASKA A M I 01072009 INTL 20221020)
[ 0.003303] ACPI: FACS 0x000000008F463000 000040
[ 0.003305] ACPI: SSDT 0x000000008D476000 00816C (v02 AMD Splinter 00000002 MSFT 05000000)
[ 0.003306] ACPI: SSDT 0x000000008D475000 000221 (v02 ALASKA CPUSSDT 01072009 AMI 01072009)
[ 0.003307] ACPI: FIDT 0x000000008D46D000 00009C (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.003308] ACPI: MCFG 0x000000008D46C000 00003C (v01 ALASKA A M I 01072009 MSFT 00010013)
[ 0.003309] ACPI: HPET 0x000000008D46B000 000038 (v01 ALASKA A M I 01072009 AMI 00000005)
[ 0.003310] ACPI: WDRT 0x000000008D46A000 000047 (v01 ALASKA A M I 01072009 AMI 00000005)
[ 0.003311] ACPI: UEFI 0x000000008EE20000 000048 (v01 ALASKA A M I 01072009 AMI 01000013)
[ 0.003312] ACPI: FPDT 0x000000008D469000 000044 (v01 ALASKA A M I 01072009 AMI 01000013)
[ 0.003313] ACPI: VFCT 0x000000008D3E1000 0190A0 (v01 ALASKA A M I 00000001 AMD 33504F47)
[ 0.003314] ACPI: SSDT 0x000000008D46F000 004DEE (v02 AMD AMD CPU 00000001 AMD 00000001)
[ 0.003315] ACPI: SSDT 0x000000008D46E000 000041 (v01 AMD AppCompD 00000001 INTL 20221020)
[ 0.003316] ACPI: TPM2 0x000000008D3DF000 00004C (v04 ALASKA A M I 00000001 AMI 00000000)
[ 0.003317] ACPI: SSDT 0x000000008D3DE000 0006D4 (v02 AMD CPMWLRC 00000001 INTL 20221020)
[ 0.003318] ACPI: SSDT 0x000000008D3DC000 00169E (v02 AMD CPMDFIG2 00000001 INTL 20221020)
[ 0.003319] ACPI: SSDT 0x000000008D3D9000 002AA6 (v02 AMD CDFAAIG2 00000001 INTL 20221020)
[ 0.003320] ACPI: SSDT 0x000000008D3D8000 0008BA (v02 AMD CPMDFDG2 00000001 INTL 20221020)
[ 0.003321] ACPI: SSDT 0x000000008D3CE000 009A9E (v02 AMD CPMCMN 00000001 INTL 20221020)
[ 0.003322] ACPI: SSDT 0x000000008D3CB000 0027FE (v02 AMD AOD 00000001 INTL 20221020)
[ 0.003323] ACPI: WSMT 0x000000008D3CA000 000028 (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.003324] ACPI: APIC 0x000000008D3C9000 00015E (v06 ALASKA A M I 01072009 AMI 00010013)
[ 0.003325] ACPI: IVRS 0x000000008D3C8000 0000C8 (v02 AMD AmdTable 00000001 AMD 00000001)
[ 0.003326] ACPI: SSDT 0x000000008D3C7000 000500 (v02 AMD MEMTOOL0 00000002 INTL 20221020)
[ 0.003327] ACPI: SSDT 0x000000008D3C6000 0009D0 (v02 AMD CPMMSOSC 00000001 INTL 20221020)
[ 0.003328] ACPI: SSDT 0x000000008D3C5000 00047C (v02 AMD AMDWOV 00000001 INTL 20221020)
[ 0.003329] ACPI: SSDT 0x000000008D3C3000 001046 (v02 AMD CPMACPV4 00000001 INTL 20221020)
[ 0.003330] ACPI: SSDT 0x000000008D3C2000 00053E (v01 AMD CPMAPMFD 00000001 INTL 20221020)
[ 0.003331] ACPI: SSDT 0x000000008D3C1000 00044E (v02 AMD AmdTable 00000001 INTL 20221020)
[ 0.003332] ACPI: BGRT 0x000000008D3E0000 000038 (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.003333] ACPI: Reserving FACP table memory at [mem 0x8d474000-0x8d474113]
[ 0.003334] ACPI: Reserving DSDT table memory at [mem 0x8d3fb000-0x8d468f49]
[ 0.003334] ACPI: Reserving FACS table memory at [mem 0x8f463000-0x8f46303f]
[ 0.003335] ACPI: Reserving SSDT table memory at [mem 0x8d476000-0x8d47e16b]
[ 0.003335] ACPI: Reserving SSDT table memory at [mem 0x8d475000-0x8d475220]
[ 0.003335] ACPI: Reserving FIDT table memory at [mem 0x8d46d000-0x8d46d09b]
[ 0.003335] ACPI: Reserving MCFG table memory at [mem 0x8d46c000-0x8d46c03b]
[ 0.003336] ACPI: Reserving HPET table memory at [mem 0x8d46b000-0x8d46b037]
[ 0.003336] ACPI: Reserving WDRT table memory at [mem 0x8d46a000-0x8d46a046]
[ 0.003336] ACPI: Reserving UEFI table memory at [mem 0x8ee20000-0x8ee20047]
[ 0.003337] ACPI: Reserving FPDT table memory at [mem 0x8d469000-0x8d469043]
[ 0.003337] ACPI: Reserving VFCT table memory at [mem 0x8d3e1000-0x8d3fa09f]
[ 0.003337] ACPI: Reserving SSDT table memory at [mem 0x8d46f000-0x8d473ded]
[ 0.003338] ACPI: Reserving SSDT table memory at [mem 0x8d46e000-0x8d46e040]
[ 0.003338] ACPI: Reserving TPM2 table memory at [mem 0x8d3df000-0x8d3df04b]
[ 0.003338] ACPI: Reserving SSDT table memory at [mem 0x8d3de000-0x8d3de6d3]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3dc000-0x8d3dd69d]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3d9000-0x8d3dbaa5]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3d8000-0x8d3d88b9]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3ce000-0x8d3d7a9d]
[ 0.003340] ACPI: Reserving SSDT table memory at [mem 0x8d3cb000-0x8d3cd7fd]
[ 0.003340] ACPI: Reserving WSMT table memory at [mem 0x8d3ca000-0x8d3ca027]
[ 0.003340] ACPI: Reserving APIC table memory at [mem 0x8d3c9000-0x8d3c915d]
[ 0.003341] ACPI: Reserving IVRS table memory at [mem 0x8d3c8000-0x8d3c80c7]
[ 0.003341] ACPI: Reserving SSDT table memory at [mem 0x8d3c7000-0x8d3c74ff]
[ 0.003341] ACPI: Reserving SSDT table memory at [mem 0x8d3c6000-0x8d3c69cf]
[ 0.003342] ACPI: Reserving SSDT table memory at [mem 0x8d3c5000-0x8d3c547b]
[ 0.003342] ACPI: Reserving SSDT table memory at [mem 0x8d3c3000-0x8d3c4045]
[ 0.003342] ACPI: Reserving SSDT table memory at [mem 0x8d3c2000-0x8d3c253d]
[ 0.003343] ACPI: Reserving SSDT table memory at [mem 0x8d3c1000-0x8d3c144d]
[ 0.003343] ACPI: Reserving BGRT table memory at [mem 0x8d3e0000-0x8d3e0037]
[ 0.003386] No NUMA configuration found
[ 0.003386] Faking a node at [mem 0x0000000000000000-0x000000083defffff]
[ 0.003391] NODE_DATA(0) allocated [mem 0x83ded5280-0x83defffff]
[ 0.003506] Zone ranges:
[ 0.003506] DMA [mem 0x0000000000001000-0x0000000000ffffff]
[ 0.003507] DMA32 [mem 0x0000000001000000-0x00000000ffffffff]
[ 0.003508] Normal [mem 0x0000000100000000-0x000000083defffff]
[ 0.003508] Device empty
[ 0.003509] Movable zone start for each node
[ 0.003509] Early memory node ranges
[ 0.003510] node 0: [mem 0x0000000000001000-0x000000000009ffff]
[ 0.003510] node 0: [mem 0x0000000000100000-0x0000000009e01fff]
[ 0.003511] node 0: [mem 0x000000000a000000-0x000000000a1fffff]
[ 0.003511] node 0: [mem 0x000000000a210000-0x000000000affffff]
[ 0.003511] node 0: [mem 0x000000000b021000-0x000000008738efff]
[ 0.003512] node 0: [mem 0x00000000985ff000-0x0000000099ff8fff]
[ 0.003512] node 0: [mem 0x0000000099ffc000-0x0000000099ffffff]
[ 0.003512] node 0: [mem 0x0000000100000000-0x000000083defffff]
[ 0.003514] Initmem setup node 0 [mem 0x0000000000001000-0x000000083defffff]
[ 0.003518] On node 0, zone DMA: 1 pages in unavailable ranges
[ 0.003528] On node 0, zone DMA: 96 pages in unavailable ranges
[ 0.003608] On node 0, zone DMA32: 510 pages in unavailable ranges
[ 0.003617] On node 0, zone DMA32: 16 pages in unavailable ranges
[ 0.004711] On node 0, zone DMA32: 33 pages in unavailable ranges
[ 0.004734] On node 0, zone DMA32: 4720 pages in unavailable ranges
[ 0.004734] On node 0, zone DMA32: 3 pages in unavailable ranges
[ 0.021815] On node 0, zone Normal: 24576 pages in unavailable ranges
[ 0.021838] On node 0, zone Normal: 8448 pages in unavailable ranges
[ 0.022509] ACPI: PM-Timer IO Port: 0x808
[ 0.022516] ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1])
[ 0.022526] IOAPIC[0]: apic_id 32, version 33, address 0xfec00000, GSI 0-23
[ 0.022529] IOAPIC[1]: apic_id 33, version 33, address 0xfec01000, GSI 24-55
[ 0.022530] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[ 0.022531] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 low level)
[ 0.022533] ACPI: Using ACPI (MADT) for SMP configuration information
[ 0.022534] ACPI: HPET id: 0x10228201 base: 0xfed00000
[ 0.022540] e820: update [mem 0x80a87000-0x80ae3fff] usable ==> reserved
[ 0.022550] CPU topo: Max. logical packages: 1
[ 0.022551] CPU topo: Max. logical dies: 1
[ 0.022551] CPU topo: Max. dies per package: 1
[ 0.022553] CPU topo: Max. threads per core: 2
[ 0.022554] CPU topo: Num. cores per package: 8
[ 0.022554] CPU topo: Num. threads per package: 16
[ 0.022554] CPU topo: Allowing 16 present CPUs plus 0 hotplug CPUs
[ 0.022566] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff]
[ 0.022567] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000fffff]
[ 0.022568] PM: hibernation: Registered nosave memory: [mem 0x09e02000-0x09ffffff]
[ 0.022568] PM: hibernation: Registered nosave memory: [mem 0x0a200000-0x0a20ffff]
[ 0.022569] PM: hibernation: Registered nosave memory: [mem 0x0b000000-0x0b020fff]
[ 0.022570] PM: hibernation: Registered nosave memory: [mem 0x80a87000-0x80ae3fff]
[ 0.022570] PM: hibernation: Registered nosave memory: [mem 0x81a63000-0x81a63fff]
[ 0.022571] PM: hibernation: Registered nosave memory: [mem 0x8738f000-0x985fefff]
[ 0.022572] PM: hibernation: Registered nosave memory: [mem 0x99ff9000-0x99ffbfff]
[ 0.022572] PM: hibernation: Registered nosave memory: [mem 0x9a000000-0xffffffff]
[ 0.022574] [mem 0xa0000000-0xfedfffff] available for PCI devices
[ 0.022575] Booting paravirtualized kernel on bare hardware
[ 0.022576] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6370452778343963 ns
[ 0.025990] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:16 nr_cpu_ids:16 nr_node_ids:1
[ 0.026223] percpu: Embedded 63 pages/cpu s221184 r8192 d28672 u262144
[ 0.026226] pcpu-alloc: s221184 r8192 d28672 u262144 alloc=1*2097152
[ 0.026227] pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 12 13 14 15
[ 0.026241] Kernel command line: initrd=\initramfs-linux-lts.img root=PARTLABEL=zeus-linux-root rootflags=subvol=/@ ro
[ 0.026451] printk: log buffer data + meta data: 131072 + 458752 = 589824 bytes
[ 0.027642] Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes, linear)
[ 0.028243] Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear)
[ 0.028327] software IO TLB: area num 16.
[ 0.031793] Fallback order for Node 0: 0
[ 0.031795] Built 1 zonelists, mobility grouping on. Total pages: 8153597
[ 0.031795] Policy zone: Normal
[ 0.031870] mem auto-init: stack:all(zero), heap alloc:on, heap free:off
[ 0.061481] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=16, Nodes=1
[ 0.068569] ftrace: allocating 57128 entries in 224 pages
[ 0.068570] ftrace: allocated 224 pages with 3 groups
[ 0.069201] Dynamic Preempt: voluntary
[ 0.069238] rcu: Preemptible hierarchical RCU implementation.
[ 0.069238] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=16.
[ 0.069239] rcu: RCU priority boosting: priority 1 delay 500 ms.
[ 0.069240] Trampoline variant of Tasks RCU enabled.
[ 0.069240] Rude variant of Tasks RCU enabled.
[ 0.069240] Tracing variant of Tasks RCU enabled.
[ 0.069241] rcu: RCU calculated value of scheduler-enlistment delay is 30 jiffies.
[ 0.069241] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=16
[ 0.069249] RCU Tasks: Setting shift to 4 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=16.
[ 0.069250] RCU Tasks Rude: Setting shift to 4 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=16.
[ 0.069251] RCU Tasks Trace: Setting shift to 4 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=16.
[ 0.071750] NR_IRQS: 524544, nr_irqs: 1096, preallocated irqs: 16
[ 0.071925] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.072066] kfence: initialized - using 2097152 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____)
[ 0.072090] Console: colour dummy device 80x25
[ 0.072091] printk: legacy console [tty0] enabled
[ 0.072114] ACPI: Core revision 20250807
[ 0.072322] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484873504 ns
[ 0.072333] APIC: Switch to symmetric I/O mode setup
[ 0.072546] AMD-Vi: Using global IVHD EFR:0x246577efa2254afa, EFR2:0x0
[ 0.073323] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[ 0.089005] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x3c8a6ebf4fa, max_idle_ns: 440795385315 ns
[ 0.089007] Calibrating delay loop (skipped), value calculated using timer frequency.. 8403.02 BogoMIPS (lpj=14000046)
[ 0.089018] x86/cpu: User Mode Instruction Prevention (UMIP) activated
[ 0.089043] LVT offset 1 assigned for vector 0xf9
[ 0.089141] LVT offset 2 assigned for vector 0xf4
[ 0.089190] Last level iTLB entries: 4KB 512, 2MB 512, 4MB 256
[ 0.089190] Last level dTLB entries: 4KB 3072, 2MB 3072, 4MB 1536, 1GB 0
[ 0.089193] process: using mwait in idle threads
[ 0.089194] mitigations: Enabled attack vectors: user_kernel, user_user, guest_host, guest_guest, SMT mitigations: auto
[ 0.089196] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl
[ 0.089197] Transient Scheduler Attacks: Mitigation: Clear CPU buffers
[ 0.089197] Spectre V2 : Mitigation: Enhanced / Automatic IBRS
[ 0.089198] Spectre V2 : User space: Mitigation: STIBP always-on protection
[ 0.089198] Speculative Return Stack Overflow: Mitigation: Safe RET
[ 0.089199] VMSCAPE: Mitigation: IBPB before exit to userspace
[ 0.089199] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
[ 0.089200] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier
[ 0.089201] active return thunk: srso_alias_return_thunk
[ 0.089206] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
[ 0.089206] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
[ 0.089207] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
[ 0.089207] x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask'
[ 0.089208] x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256'
[ 0.089208] x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256'
[ 0.089209] x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers'
[ 0.089209] x86/fpu: Supporting XSAVE feature 0x800: 'Control-flow User registers'
[ 0.089210] x86/fpu: Supporting XSAVE feature 0x1000: 'Control-flow Kernel registers (KVM only)'
[ 0.089211] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256
[ 0.089211] x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64
[ 0.089212] x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512
[ 0.089212] x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024
[ 0.089213] x86/fpu: xstate_offset[9]: 2432, xstate_sizes[9]: 8
[ 0.089213] x86/fpu: xstate_offset[11]: 2440, xstate_sizes[11]: 16
[ 0.089214] x86/fpu: xstate_offset[12]: 2456, xstate_sizes[12]: 24
[ 0.089214] x86/fpu: Enabled xstate features 0x1ae7, context size is 2480 bytes, using 'compacted' format.
[ 0.110883] Freeing SMP alternatives memory: 56K
[ 0.110885] pid_max: default: 32768 minimum: 301
[ 0.110917] LSM: initializing lsm=capability,landlock,lockdown,yama,bpf
[ 0.110975] landlock: Up and running.
[ 0.110978] Yama: becoming mindful.
[ 0.111153] LSM support for eBPF active
[ 0.111183] Mount-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.111200] Mountpoint-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.219784] smpboot: CPU0: AMD Ryzen 7 7800X3D 8-Core Processor (family: 0x19, model: 0x61, stepping: 0x2)
[ 0.219923] Performance Events: Fam17h+ 16-deep LBR, core perfctr, AMD PMU driver.
[ 0.219946] ... version: 2
[ 0.219946] ... bit width: 48
[ 0.219947] ... generic counters: 6
[ 0.219948] ... generic bitmap: 000000000000003f
[ 0.219949] ... fixed-purpose counters: 0
[ 0.219949] ... fixed-purpose bitmap: 0000000000000000
[ 0.219950] ... value mask: 0000ffffffffffff
[ 0.219951] ... max period: 00007fffffffffff
[ 0.219952] ... global_ctrl mask: 000000000000003f
[ 0.220030] signal: max sigframe size: 3376
[ 0.220050] rcu: Hierarchical SRCU implementation.
[ 0.220051] rcu: Max phase no-delay instances is 1000.
[ 0.220095] Timer migration: 2 hierarchy levels; 8 children per group; 2 crossnode level
[ 0.222580] MCE: In-kernel MCE decoding enabled.
[ 0.222606] NMI watchdog: Enabled. Permanently consumes one hw-PMU counter.
[ 0.222682] smp: Bringing up secondary CPUs ...
[ 0.222754] smpboot: x86: Booting SMP configuration:
[ 0.222755] .... node #0, CPUs: #1 #2 #3 #4 #5 #6 #7 #8 #9 #10 #11 #12 #13 #14 #15
[ 0.242441] Spectre V2 : Update user space SMT mitigation: STIBP always-on
[ 0.257674] smp: Brought up 1 node, 16 CPUs
[ 0.257674] smpboot: Total of 16 processors activated (134454.46 BogoMIPS)
[ 0.259148] Memory: 31751172K/32614388K available (21363K kernel code, 2940K rwdata, 16360K rodata, 4752K init, 5592K bss, 839676K reserved, 0K cma-reserved)
[ 0.259503] devtmpfs: initialized
[ 0.259503] x86/mm: Memory block size: 128MB
[ 0.262748] ACPI: PM: Registering ACPI NVS region [mem 0x0a200000-0x0a20ffff] (65536 bytes)
[ 0.262748] ACPI: PM: Registering ACPI NVS region [mem 0x8d47f000-0x8f47efff] (33554432 bytes)
[ 0.262748] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6370867519511994 ns
[ 0.262748] posixtimers hash table entries: 8192 (order: 5, 131072 bytes, linear)
[ 0.262748] futex hash table entries: 4096 (262144 bytes on 1 NUMA nodes, total 256 KiB, linear).
[ 0.262748] pinctrl core: initialized pinctrl subsystem
[ 0.262748] PM: RTC time: 20:55:50, date: 2026-05-15
[ 0.262748] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.262774] DMA: preallocated 4096 KiB GFP_KERNEL pool for atomic allocations
[ 0.262859] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.262943] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.262949] audit: initializing netlink subsys (disabled)
[ 0.262956] audit: type=2000 audit(1778878550.000:1): state=initialized audit_enabled=0 res=1
[ 0.262956] thermal_sys: Registered thermal governor 'fair_share'
[ 0.262956] thermal_sys: Registered thermal governor 'bang_bang'
[ 0.262956] thermal_sys: Registered thermal governor 'step_wise'
[ 0.262956] thermal_sys: Registered thermal governor 'user_space'
[ 0.262956] thermal_sys: Registered thermal governor 'power_allocator'
[ 0.262956] cpuidle: using governor ladder
[ 0.262956] cpuidle: using governor menu
[ 0.266269] efi: Freeing EFI boot services memory: 101268K
[ 0.266272] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
[ 0.266353] PCI: ECAM [mem 0xe0000000-0xefffffff] (base 0xe0000000) for domain 0000 [bus 00-ff]
[ 0.266365] PCI: Using configuration type 1 for base access
[ 0.266435] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible.
[ 0.266435] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
[ 0.266435] HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page
[ 0.266435] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
[ 0.266435] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page
[ 0.266435] raid6: skipped pq benchmark and selected avx512x4
[ 0.266435] raid6: using avx512x2 recovery algorithm
[ 0.266435] ACPI: Added _OSI(Module Device)
[ 0.266435] ACPI: Added _OSI(Processor Device)
[ 0.266435] ACPI: Added _OSI(Processor Aggregator Device)
[ 0.292341] ACPI: 17 ACPI AML tables successfully acquired and loaded
[ 0.329987] ACPI: USB4 _OSC: OS supports USB3+ DisplayPort+ PCIe+ XDomain+
[ 0.329987] ACPI: USB4 _OSC: OS controls USB3+ DisplayPort+ PCIe+ XDomain+
[ 0.330888] ACPI: Interpreter enabled
[ 0.330904] ACPI: PM: (supports S0 S3 S4 S5)
[ 0.330905] ACPI: Using IOAPIC for interrupt routing
[ 0.334126] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[ 0.334127] PCI: Ignoring E820 reservations for host bridge windows
[ 0.334569] ACPI: Enabled 12 GPEs in block 00 to 1F
[ 0.337142] ACPI: \_SB_.PCI0.GP17.XHC0.P0U0: New power resource
[ 0.338964] ACPI: \_SB_.PCI0.GP17.XHC1.P0U1: New power resource
[ 0.342125] ACPI: \_SB_.PCI0.GP19.XHC2.P0U2: New power resource
[ 0.342862] ACPI: \_SB_.PCI0.GPP0.M237: New power resource
[ 0.342922] ACPI: \_SB_.PCI0.GPP0.SWUS.M237: New power resource
[ 0.342992] ACPI: \_SB_.PCI0.GPP0.SWUS.SWDS.M237: New power resource
[ 0.343318] ACPI: \_SB_.PCI0.GPP1.P0NV: New power resource
[ 0.344258] ACPI: \_SB_.PCI0.GPP7.PWRS: New power resource
[ 0.344631] ACPI: \_SB_.PCI0.GPP7.UP00.PWRS: New power resource
[ 0.344975] ACPI: \_SB_.PCI0.GPP7.UP00.DP00.PWRS: New power resource
[ 0.345481] ACPI: \_SB_.PCI0.GPP7.UP00.DP00.NV00.PWRS: New power resource
[ 0.345848] ACPI: \_SB_.PCI0.GPP7.UP00.DP08.PWRS: New power resource
[ 0.346101] ACPI: \_SB_.PCI0.GPP7.UP00.DP08.EP00.PWRS: New power resource
[ 0.346378] ACPI: \_SB_.PCI0.GPP7.UP00.DP10.PWRS: New power resource
[ 0.346624] ACPI: \_SB_.PCI0.GPP7.UP00.DP10.WN00.PWRS: New power resource
[ 0.346905] ACPI: \_SB_.PCI0.GPP7.UP00.DP18.PWRS: New power resource
[ 0.347151] ACPI: \_SB_.PCI0.GPP7.UP00.DP18.LN00.PWRS: New power resource
[ 0.347429] ACPI: \_SB_.PCI0.GPP7.UP00.DP20.PWRS: New power resource
[ 0.347931] ACPI: \_SB_.PCI0.GPP7.UP00.DP20.NV00.PWRS: New power resource
[ 0.348237] ACPI: \_SB_.PCI0.GPP7.UP00.DP28.PWRS: New power resource
[ 0.348544] ACPI: \_SB_.PCI0.GPP7.UP00.DP30.PWRS: New power resource
[ 0.349037] ACPI: \_SB_.PCI0.GPP7.UP00.DP30.EP00.PWRS: New power resource
[ 0.349339] ACPI: \_SB_.PCI0.GPP7.UP00.DP38.PWRS: New power resource
[ 0.349830] ACPI: \_SB_.PCI0.GPP7.UP00.DP38.EP00.PWRS: New power resource
[ 0.350200] ACPI: \_SB_.PCI0.GPP7.UP00.DP40.PWRS: New power resource
[ 0.350424] ACPI: \_SB_.PCI0.GPP7.UP00.DP48.PWRS: New power resource
[ 0.350916] ACPI: \_SB_.PCI0.GPP7.UP00.DP48.EP00.PWRS: New power resource
[ 0.351223] ACPI: \_SB_.PCI0.GPP7.UP00.DP50.PWRS: New power resource
[ 0.351566] ACPI: \_SB_.PCI0.GPP7.UP00.DP50.EP00.PWRS: New power resource
[ 0.351909] ACPI: \_SB_.PCI0.GPP7.UP00.DP58.PWRS: New power resource
[ 0.352248] ACPI: \_SB_.PCI0.GPP7.UP00.DP58.EP00.PWRS: New power resource
[ 0.352594] ACPI: \_SB_.PCI0.GPP7.UP00.DP60.PWRS: New power resource
[ 0.352933] ACPI: \_SB_.PCI0.GPP7.UP00.DP60.XH00.PWRS: New power resource
[ 0.353853] ACPI: \_SB_.PCI0.GPP7.UP00.DP68.PWRS: New power resource
[ 0.354146] ACPI: \_SB_.PCI0.GPP7.UP00.DP68.SA00.PWRS: New power resource
[ 0.354200] ACPI: \_SB_.PCI0.GPP8.PWR1: New power resource
[ 0.359457] ACPI: \_SB_.PRWL: New power resource
[ 0.359484] ACPI: \_SB_.PRWB: New power resource
[ 0.360298] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.360303] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI EDR HPX-Type3]
[ 0.360463] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug SHPCHotplug PME AER PCIeCapability LTR DPC]
[ 0.361013] PCI host bridge to bus 0000:00
[ 0.361016] pci_bus 0000:00: root bus resource [io 0x0000-0x03af window]
[ 0.361018] pci_bus 0000:00: root bus resource [io 0x03e0-0x0cf7 window]
[ 0.361019] pci_bus 0000:00: root bus resource [io 0x03b0-0x03df window]
[ 0.361021] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
[ 0.361022] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000dffff window]
[ 0.361023] pci_bus 0000:00: root bus resource [mem 0xa0000000-0xf6ffffff window]
[ 0.361024] pci_bus 0000:00: root bus resource [mem 0x860000000-0xffffffffff window]
[ 0.361026] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.361038] pci 0000:00:00.0: [1022:14d8] type 00 class 0x060000 conventional PCI endpoint
[ 0.361131] pci 0000:00:00.2: [1022:14d9] type 00 class 0x080600 conventional PCI endpoint
[ 0.361216] pci 0000:00:01.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.361290] pci 0000:00:01.1: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.361303] pci 0000:00:01.1: PCI bridge to [bus 01-03]
[ 0.361306] pci 0000:00:01.1: bridge window [io 0xf000-0xffff]
[ 0.361309] pci 0000:00:01.1: bridge window [mem 0xf6a00000-0xf6cfffff]
[ 0.361314] pci 0000:00:01.1: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.361367] pci 0000:00:01.1: PME# supported from D0 D3hot D3cold
[ 0.361493] pci 0000:00:01.2: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.361505] pci 0000:00:01.2: PCI bridge to [bus 04]
[ 0.361509] pci 0000:00:01.2: bridge window [mem 0xf6f00000-0xf6ffffff]
[ 0.361520] pci 0000:00:01.2: enabling Extended Tags
[ 0.361566] pci 0000:00:01.2: PME# supported from D0 D3hot D3cold
[ 0.361686] pci 0000:00:02.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.361760] pci 0000:00:02.1: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.361772] pci 0000:00:02.1: PCI bridge to [bus 05-11]
[ 0.361775] pci 0000:00:02.1: bridge window [io 0xc000-0xdfff]
[ 0.361778] pci 0000:00:02.1: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.361783] pci 0000:00:02.1: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.361789] pci 0000:00:02.1: enabling Extended Tags
[ 0.361835] pci 0000:00:02.1: PME# supported from D0 D3hot D3cold
[ 0.362978] pci 0000:00:02.2: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.362991] pci 0000:00:02.2: PCI bridge to [bus 12]
[ 0.362995] pci 0000:00:02.2: bridge window [mem 0xf6e00000-0xf6efffff]
[ 0.363005] pci 0000:00:02.2: enabling Extended Tags
[ 0.363052] pci 0000:00:02.2: PME# supported from D0 D3hot D3cold
[ 0.363174] pci 0000:00:03.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.363253] pci 0000:00:04.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.363334] pci 0000:00:08.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.363409] pci 0000:00:08.1: [1022:14dd] type 01 class 0x060400 PCIe Root Port
[ 0.363419] pci 0000:00:08.1: PCI bridge to [bus 13]
[ 0.363421] pci 0000:00:08.1: bridge window [io 0xe000-0xefff]
[ 0.363423] pci 0000:00:08.1: bridge window [mem 0xf6600000-0xf69fffff]
[ 0.363427] pci 0000:00:08.1: bridge window [mem 0xfc20000000-0xfc301fffff 64bit pref]
[ 0.363432] pci 0000:00:08.1: enabling Extended Tags
[ 0.363459] pci 0000:00:08.1: PME# supported from D0 D3hot D3cold
[ 0.363566] pci 0000:00:08.3: [1022:14dd] type 01 class 0x060400 PCIe Root Port
[ 0.363576] pci 0000:00:08.3: PCI bridge to [bus 14]
[ 0.363579] pci 0000:00:08.3: bridge window [mem 0xf6d00000-0xf6dfffff]
[ 0.363587] pci 0000:00:08.3: enabling Extended Tags
[ 0.363613] pci 0000:00:08.3: PME# supported from D0 D3hot D3cold
[ 0.363713] pci 0000:00:14.0: [1022:790b] type 00 class 0x0c0500 conventional PCI endpoint
[ 0.363816] pci 0000:00:14.3: [1022:790e] type 00 class 0x060100 conventional PCI endpoint
[ 0.363930] pci 0000:00:18.0: [1022:14e0] type 00 class 0x060000 conventional PCI endpoint
[ 0.363967] pci 0000:00:18.1: [1022:14e1] type 00 class 0x060000 conventional PCI endpoint
[ 0.364002] pci 0000:00:18.2: [1022:14e2] type 00 class 0x060000 conventional PCI endpoint
[ 0.364037] pci 0000:00:18.3: [1022:14e3] type 00 class 0x060000 conventional PCI endpoint
[ 0.364072] pci 0000:00:18.4: [1022:14e4] type 00 class 0x060000 conventional PCI endpoint
[ 0.364106] pci 0000:00:18.5: [1022:14e5] type 00 class 0x060000 conventional PCI endpoint
[ 0.364141] pci 0000:00:18.6: [1022:14e6] type 00 class 0x060000 conventional PCI endpoint
[ 0.364176] pci 0000:00:18.7: [1022:14e7] type 00 class 0x060000 conventional PCI endpoint
[ 0.364278] pci 0000:01:00.0: [1002:1478] type 01 class 0x060400 PCIe Switch Upstream Port
[ 0.364295] pci 0000:01:00.0: BAR 0 [mem 0xf6c00000-0xf6c03fff]
[ 0.364298] pci 0000:01:00.0: PCI bridge to [bus 02-03]
[ 0.364303] pci 0000:01:00.0: bridge window [io 0xf000-0xffff]
[ 0.364305] pci 0000:01:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.364313] pci 0000:01:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.364380] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[ 0.364545] pci 0000:00:01.1: PCI bridge to [bus 01-03]
[ 0.364601] pci 0000:02:00.0: [1002:1479] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.364620] pci 0000:02:00.0: PCI bridge to [bus 03]
[ 0.364624] pci 0000:02:00.0: bridge window [io 0xf000-0xffff]
[ 0.364627] pci 0000:02:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.364634] pci 0000:02:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.364701] pci 0000:02:00.0: PME# supported from D0 D3hot D3cold
[ 0.365270] pci 0000:01:00.0: PCI bridge to [bus 02-03]
[ 0.365334] pci 0000:03:00.0: [1002:747e] type 00 class 0x030000 PCIe Legacy Endpoint
[ 0.365362] pci 0000:03:00.0: BAR 0 [mem 0xf800000000-0xfbffffffff 64bit pref]
[ 0.365365] pci 0000:03:00.0: BAR 2 [mem 0xfc00000000-0xfc0fffffff 64bit pref]
[ 0.365367] pci 0000:03:00.0: BAR 4 [io 0xf000-0xf0ff]
[ 0.365369] pci 0000:03:00.0: BAR 5 [mem 0xf6a00000-0xf6afffff]
[ 0.365371] pci 0000:03:00.0: ROM [mem 0xf6b00000-0xf6b1ffff pref]
[ 0.365446] pci 0000:03:00.0: PME# supported from D1 D2 D3hot D3cold
[ 0.365612] pci 0000:03:00.1: [1002:ab30] type 00 class 0x040300 PCIe Legacy Endpoint
[ 0.365639] pci 0000:03:00.1: BAR 0 [mem 0xf6b20000-0xf6b23fff]
[ 0.365703] pci 0000:03:00.1: PME# supported from D1 D2 D3hot D3cold
[ 0.365824] pci 0000:02:00.0: PCI bridge to [bus 03]
[ 0.365905] pci 0000:04:00.0: [1d97:1602] type 00 class 0x010802 PCIe Endpoint
[ 0.365928] pci 0000:04:00.0: BAR 0 [mem 0xf6f00000-0xf6f03fff 64bit]
[ 0.366131] pci 0000:00:01.2: PCI bridge to [bus 04]
[ 0.366201] pci 0000:05:00.0: [1022:43f4] type 01 class 0x060400 PCIe Switch Upstream Port
[ 0.366218] pci 0000:05:00.0: PCI bridge to [bus 06-11]
[ 0.366223] pci 0000:05:00.0: bridge window [io 0xc000-0xdfff]
[ 0.366225] pci 0000:05:00.0: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.366232] pci 0000:05:00.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.366241] pci 0000:05:00.0: enabling Extended Tags
[ 0.366288] pci 0000:05:00.0: PME# supported from D0 D3hot D3cold
[ 0.367896] pci 0000:00:02.1: PCI bridge to [bus 05-11]
[ 0.368035] pci 0000:06:00.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368052] pci 0000:06:00.0: PCI bridge to [bus 07]
[ 0.368071] pci 0000:06:00.0: enabling Extended Tags
[ 0.368123] pci 0000:06:00.0: PME# supported from D0 D3hot D3cold
[ 0.368275] pci 0000:06:04.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368293] pci 0000:06:04.0: PCI bridge to [bus 08]
[ 0.368312] pci 0000:06:04.0: enabling Extended Tags
[ 0.368363] pci 0000:06:04.0: PME# supported from D0 D3hot D3cold
[ 0.368502] pci 0000:06:05.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368519] pci 0000:06:05.0: PCI bridge to [bus 09]
[ 0.368539] pci 0000:06:05.0: enabling Extended Tags
[ 0.368589] pci 0000:06:05.0: PME# supported from D0 D3hot D3cold
[ 0.368729] pci 0000:06:06.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368746] pci 0000:06:06.0: PCI bridge to [bus 0a]
[ 0.368765] pci 0000:06:06.0: enabling Extended Tags
[ 0.368816] pci 0000:06:06.0: PME# supported from D0 D3hot D3cold
[ 0.368957] pci 0000:06:07.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368974] pci 0000:06:07.0: PCI bridge to [bus 0b]
[ 0.368994] pci 0000:06:07.0: enabling Extended Tags
[ 0.369047] pci 0000:06:07.0: PME# supported from D0 D3hot D3cold
[ 0.369188] pci 0000:06:08.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.369205] pci 0000:06:08.0: PCI bridge to [bus 0c]
[ 0.369209] pci 0000:06:08.0: bridge window [io 0xd000-0xdfff]
[ 0.369212] pci 0000:06:08.0: bridge window [mem 0xf6500000-0xf65fffff]
[ 0.369227] pci 0000:06:08.0: enabling Extended Tags
[ 0.369276] pci 0000:06:08.0: PME# supported from D0 D3hot D3cold
[ 0.370479] pci 0000:06:09.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.370496] pci 0000:06:09.0: PCI bridge to [bus 0d]
[ 0.370516] pci 0000:06:09.0: enabling Extended Tags
[ 0.370567] pci 0000:06:09.0: PME# supported from D0 D3hot D3cold
[ 0.370709] pci 0000:06:0a.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.370726] pci 0000:06:0a.0: PCI bridge to [bus 0e]
[ 0.370730] pci 0000:06:0a.0: bridge window [io 0xc000-0xcfff]
[ 0.370733] pci 0000:06:0a.0: bridge window [mem 0xf6400000-0xf64fffff]
[ 0.370748] pci 0000:06:0a.0: enabling Extended Tags
[ 0.370797] pci 0000:06:0a.0: PME# supported from D0 D3hot D3cold
[ 0.371992] pci 0000:06:0b.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.372009] pci 0000:06:0b.0: PCI bridge to [bus 0f]
[ 0.372015] pci 0000:06:0b.0: bridge window [mem 0xf6300000-0xf63fffff]
[ 0.372022] pci 0000:06:0b.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.372031] pci 0000:06:0b.0: enabling Extended Tags
[ 0.372080] pci 0000:06:0b.0: PME# supported from D0 D3hot D3cold
[ 0.373289] pci 0000:06:0c.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.373307] pci 0000:06:0c.0: PCI bridge to [bus 10]
[ 0.373311] pci 0000:06:0c.0: bridge window [mem 0xf6200000-0xf62fffff]
[ 0.373326] pci 0000:06:0c.0: enabling Extended Tags
[ 0.373360] pci 0000:06:0c.0: PME# supported from D0 D3hot D3cold
[ 0.374552] pci 0000:06:0d.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.374569] pci 0000:06:0d.0: PCI bridge to [bus 11]
[ 0.374573] pci 0000:06:0d.0: bridge window [mem 0xf6100000-0xf61fffff]
[ 0.374588] pci 0000:06:0d.0: enabling Extended Tags
[ 0.374623] pci 0000:06:0d.0: PME# supported from D0 D3hot D3cold
[ 0.375810] pci 0000:05:00.0: PCI bridge to [bus 06-11]
[ 0.375859] pci 0000:06:00.0: PCI bridge to [bus 07]
[ 0.375904] pci 0000:06:04.0: PCI bridge to [bus 08]
[ 0.375939] pci 0000:06:05.0: PCI bridge to [bus 09]
[ 0.375985] pci 0000:06:06.0: PCI bridge to [bus 0a]
[ 0.376030] pci 0000:06:07.0: PCI bridge to [bus 0b]
[ 0.376087] pci 0000:0c:00.0: [1b21:0612] type 00 class 0x010601 PCIe Legacy Endpoint
[ 0.376141] pci 0000:0c:00.0: BAR 0 [io 0xd050-0xd057]
[ 0.376143] pci 0000:0c:00.0: BAR 1 [io 0xd040-0xd043]
[ 0.376146] pci 0000:0c:00.0: BAR 2 [io 0xd030-0xd037]
[ 0.376148] pci 0000:0c:00.0: BAR 3 [io 0xd020-0xd023]
[ 0.376151] pci 0000:0c:00.0: BAR 4 [io 0xd000-0xd01f]
[ 0.376153] pci 0000:0c:00.0: BAR 5 [mem 0xf6500000-0xf65001ff]
[ 0.376299] pci 0000:06:08.0: PCI bridge to [bus 0c]
[ 0.376345] pci 0000:06:09.0: PCI bridge to [bus 0d]
[ 0.376415] pci 0000:0e:00.0: [10ec:8125] type 00 class 0x020000 PCIe Endpoint
[ 0.376468] pci 0000:0e:00.0: BAR 0 [io 0xc000-0xc0ff]
[ 0.376474] pci 0000:0e:00.0: BAR 2 [mem 0xf6400000-0xf640ffff 64bit]
[ 0.376478] pci 0000:0e:00.0: BAR 4 [mem 0xf6410000-0xf6413fff 64bit]
[ 0.376603] pci 0000:0e:00.0: supports D1 D2
[ 0.376604] pci 0000:0e:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.377566] pci 0000:06:0a.0: PCI bridge to [bus 0e]
[ 0.377635] pci 0000:0f:00.0: [14c3:0616] type 00 class 0x028000 PCIe Endpoint
[ 0.377693] pci 0000:0f:00.0: BAR 0 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.377697] pci 0000:0f:00.0: BAR 2 [mem 0xf6300000-0xf6307fff 64bit]
[ 0.377711] pci 0000:0f:00.0: enabling Extended Tags
[ 0.377804] pci 0000:0f:00.0: PME# supported from D0 D3hot D3cold
[ 0.378819] pci 0000:06:0b.0: PCI bridge to [bus 0f]
[ 0.378873] pci 0000:10:00.0: [1022:43f7] type 00 class 0x0c0330 PCIe Legacy Endpoint
[ 0.378898] pci 0000:10:00.0: BAR 0 [mem 0xf6200000-0xf6207fff 64bit]
[ 0.378907] pci 0000:10:00.0: enabling Extended Tags
[ 0.378946] pci 0000:10:00.0: PME# supported from D0 D3hot D3cold
[ 0.379757] pci 0000:06:0c.0: PCI bridge to [bus 10]
[ 0.379813] pci 0000:11:00.0: [1022:43f6] type 00 class 0x010601 PCIe Legacy Endpoint
[ 0.379842] pci 0000:11:00.0: BAR 5 [mem 0xf6180000-0xf61803ff]
[ 0.379843] pci 0000:11:00.0: ROM [mem 0xf6100000-0xf617ffff pref]
[ 0.379849] pci 0000:11:00.0: enabling Extended Tags
[ 0.379882] pci 0000:11:00.0: PME# supported from D0 D3hot D3cold
[ 0.380669] pci 0000:06:0d.0: PCI bridge to [bus 11]
[ 0.380935] pci 0000:12:00.0: [144d:a808] type 00 class 0x010802 PCIe Endpoint
[ 0.380965] pci 0000:12:00.0: BAR 0 [mem 0xf6e00000-0xf6e03fff 64bit]
[ 0.381138] pci 0000:00:02.2: PCI bridge to [bus 12]
[ 0.381222] pci 0000:13:00.0: [1002:164e] type 00 class 0x030000 PCIe Legacy Endpoint
[ 0.381239] pci 0000:13:00.0: BAR 0 [mem 0xfc20000000-0xfc2fffffff 64bit pref]
[ 0.381241] pci 0000:13:00.0: BAR 2 [mem 0xfc30000000-0xfc301fffff 64bit pref]
[ 0.381242] pci 0000:13:00.0: BAR 4 [io 0xe000-0xe0ff]
[ 0.381244] pci 0000:13:00.0: BAR 5 [mem 0xf6900000-0xf697ffff]
[ 0.381248] pci 0000:13:00.0: enabling Extended Tags
[ 0.381285] pci 0000:13:00.0: PME# supported from D1 D2 D3hot D3cold
[ 0.381384] pci 0000:13:00.1: [1002:1640] type 00 class 0x040300 PCIe Legacy Endpoint
[ 0.381399] pci 0000:13:00.1: BAR 0 [mem 0xf6988000-0xf698bfff]
[ 0.381405] pci 0000:13:00.1: enabling Extended Tags
[ 0.381429] pci 0000:13:00.1: PME# supported from D1 D2 D3hot D3cold
[ 0.381510] pci 0000:13:00.2: [1022:1649] type 00 class 0x108000 PCIe Endpoint
[ 0.381546] pci 0000:13:00.2: BAR 2 [mem 0xf6800000-0xf68fffff]
[ 0.381548] pci 0000:13:00.2: BAR 5 [mem 0xf698c000-0xf698dfff]
[ 0.381552] pci 0000:13:00.2: enabling Extended Tags
[ 0.381650] pci 0000:13:00.3: [1022:15b6] type 00 class 0x0c0330 PCIe Endpoint
[ 0.381667] pci 0000:13:00.3: BAR 0 [mem 0xf6700000-0xf67fffff 64bit]
[ 0.381673] pci 0000:13:00.3: enabling Extended Tags
[ 0.381698] pci 0000:13:00.3: PME# supported from D0 D3hot D3cold
[ 0.381779] pci 0000:13:00.4: [1022:15b7] type 00 class 0x0c0330 PCIe Endpoint
[ 0.381795] pci 0000:13:00.4: BAR 0 [mem 0xf6600000-0xf66fffff 64bit]
[ 0.381801] pci 0000:13:00.4: enabling Extended Tags
[ 0.381826] pci 0000:13:00.4: PME# supported from D0 D3hot D3cold
[ 0.381906] pci 0000:13:00.6: [1022:15e3] type 00 class 0x040300 PCIe Endpoint
[ 0.381921] pci 0000:13:00.6: BAR 0 [mem 0xf6980000-0xf6987fff]
[ 0.381927] pci 0000:13:00.6: enabling Extended Tags
[ 0.381951] pci 0000:13:00.6: PME# supported from D0 D3hot D3cold
[ 0.382039] pci 0000:00:08.1: PCI bridge to [bus 13]
[ 0.382080] pci 0000:14:00.0: [1022:15b8] type 00 class 0x0c0330 PCIe Endpoint
[ 0.382100] pci 0000:14:00.0: BAR 0 [mem 0xf6d00000-0xf6dfffff 64bit]
[ 0.382106] pci 0000:14:00.0: enabling Extended Tags
[ 0.382137] pci 0000:14:00.0: PME# supported from D0 D3hot D3cold
[ 0.382224] pci 0000:00:08.3: PCI bridge to [bus 14]
[ 0.388552] ACPI: PCI: Interrupt link LNKA configured for IRQ 0
[ 0.388604] ACPI: PCI: Interrupt link LNKB configured for IRQ 0
[ 0.388650] ACPI: PCI: Interrupt link LNKC configured for IRQ 0
[ 0.388705] ACPI: PCI: Interrupt link LNKD configured for IRQ 0
[ 0.388755] ACPI: PCI: Interrupt link LNKE configured for IRQ 0
[ 0.388797] ACPI: PCI: Interrupt link LNKF configured for IRQ 0
[ 0.388839] ACPI: PCI: Interrupt link LNKG configured for IRQ 0
[ 0.388881] ACPI: PCI: Interrupt link LNKH configured for IRQ 0
[ 0.390150] iommu: Default domain type: Translated
[ 0.390150] iommu: DMA domain TLB invalidation policy: lazy mode
[ 0.390150] SCSI subsystem initialized
[ 0.390150] libata version 3.00 loaded.
[ 0.390150] ACPI: bus type USB registered
[ 0.390150] usbcore: registered new interface driver usbfs
[ 0.390150] usbcore: registered new interface driver hub
[ 0.390150] usbcore: registered new device driver usb
[ 0.398954] EDAC MC: Ver: 3.0.0
[ 0.399228] efivars: Registered efivars operations
[ 0.399228] NetLabel: Initializing
[ 0.399228] NetLabel: domain hash size = 128
[ 0.399228] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
[ 0.399228] NetLabel: unlabeled traffic allowed by default
[ 0.399228] mctp: management component transport protocol core
[ 0.399228] NET: Registered PF_MCTP protocol family
[ 0.399228] PCI: Using ACPI for IRQ routing
[ 0.405394] PCI: pci_cache_line_size set to 64 bytes
[ 0.405687] e820: reserve RAM buffer [mem 0x09e02000-0x0bffffff]
[ 0.405689] e820: reserve RAM buffer [mem 0x0a200000-0x0bffffff]
[ 0.405690] e820: reserve RAM buffer [mem 0x0b000000-0x0bffffff]
[ 0.405691] e820: reserve RAM buffer [mem 0x80a87000-0x83ffffff]
[ 0.405692] e820: reserve RAM buffer [mem 0x81a63000-0x83ffffff]
[ 0.405693] e820: reserve RAM buffer [mem 0x8738f000-0x87ffffff]
[ 0.405694] e820: reserve RAM buffer [mem 0x99ff9000-0x9bffffff]
[ 0.405695] e820: reserve RAM buffer [mem 0x9a000000-0x9bffffff]
[ 0.405695] e820: reserve RAM buffer [mem 0x83df00000-0x83fffffff]
[ 0.405741] pci 0000:03:00.0: vgaarb: setting as boot VGA device
[ 0.405741] pci 0000:03:00.0: vgaarb: bridge control possible
[ 0.405741] pci 0000:03:00.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[ 0.405741] pci 0000:13:00.0: vgaarb: bridge control possible
[ 0.405741] pci 0000:13:00.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[ 0.405741] vgaarb: loaded
[ 0.405741] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 0.405741] hpet0: 3 comparators, 32-bit 14.318180 MHz counter
[ 0.407771] clocksource: Switched to clocksource tsc-early
[ 0.407869] VFS: Disk quotas dquot_6.6.0
[ 0.407876] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[ 0.407884] pnp: PnP ACPI init
[ 0.407884] system 00:00: [mem 0xe0000000-0xefffffff] has been reserved
[ 0.407884] system 00:01: [mem 0x840000000-0x85fffffff window] has been reserved
[ 0.407884] system 00:03: [io 0x0a00-0x0a0f] has been reserved
[ 0.407884] system 00:03: [io 0x0a10-0x0a1f] has been reserved
[ 0.407884] system 00:03: [io 0x0a20-0x0a2f] has been reserved
[ 0.407884] system 00:04: [io 0x04d0-0x04d1] has been reserved
[ 0.407884] system 00:04: [io 0x040b] has been reserved
[ 0.407884] system 00:04: [io 0x04d6] has been reserved
[ 0.407884] system 00:04: [io 0x0c00-0x0c01] has been reserved
[ 0.407884] system 00:04: [io 0x0c14] has been reserved
[ 0.407884] system 00:04: [io 0x0c50-0x0c51] has been reserved
[ 0.407884] system 00:04: [io 0x0c52] has been reserved
[ 0.407884] system 00:04: [io 0x0c6c] has been reserved
[ 0.407884] system 00:04: [io 0x0c6f] has been reserved
[ 0.407884] system 00:04: [io 0x0cd8-0x0cdf] has been reserved
[ 0.407884] system 00:04: [io 0x0800-0x089f] has been reserved
[ 0.407884] system 00:04: [io 0x0b00-0x0b0f] has been reserved
[ 0.407884] system 00:04: [io 0x0b20-0x0b3f] has been reserved
[ 0.407884] system 00:04: [io 0x0900-0x090f] has been reserved
[ 0.407884] system 00:04: [io 0x0910-0x091f] has been reserved
[ 0.407884] system 00:04: [mem 0xfedc0000-0xfedc0fff] has been reserved
[ 0.407884] system 00:04: [mem 0xfee00000-0xfee00fff] has been reserved
[ 0.407884] system 00:04: [mem 0xfec10000-0xfec10fff] has been reserved
[ 0.407884] system 00:04: [mem 0xfeb00000-0xfeb00fff] has been reserved
[ 0.407884] system 00:04: [mem 0xff000000-0xffffffff] has been reserved
[ 0.410022] pnp: PnP ACPI: found 5 devices
[ 0.415713] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[ 0.415755] NET: Registered PF_INET protocol family
[ 0.415807] IP idents hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[ 0.425658] tcp_listen_portaddr_hash hash table entries: 16384 (order: 6, 262144 bytes, linear)
[ 0.425673] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.425710] TCP established hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[ 0.425862] TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear)
[ 0.425922] TCP: Hash tables configured (established 262144 bind 65536)
[ 0.425979] MPTCP token hash table entries: 32768 (order: 8, 786432 bytes, linear)
[ 0.426031] UDP hash table entries: 16384 (order: 8, 1048576 bytes, linear)
[ 0.426096] UDP-Lite hash table entries: 16384 (order: 8, 1048576 bytes, linear)
[ 0.426165] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.426170] NET: Registered PF_XDP protocol family
[ 0.426181] pci 0000:02:00.0: PCI bridge to [bus 03]
[ 0.426188] pci 0000:02:00.0: bridge window [io 0xf000-0xffff]
[ 0.426192] pci 0000:02:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.426194] pci 0000:02:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426198] pci 0000:01:00.0: PCI bridge to [bus 02-03]
[ 0.426200] pci 0000:01:00.0: bridge window [io 0xf000-0xffff]
[ 0.426204] pci 0000:01:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.426206] pci 0000:01:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426210] pci 0000:00:01.1: PCI bridge to [bus 01-03]
[ 0.426212] pci 0000:00:01.1: bridge window [io 0xf000-0xffff]
[ 0.426214] pci 0000:00:01.1: bridge window [mem 0xf6a00000-0xf6cfffff]
[ 0.426216] pci 0000:00:01.1: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426226] pci 0000:00:01.2: PCI bridge to [bus 04]
[ 0.426229] pci 0000:00:01.2: bridge window [mem 0xf6f00000-0xf6ffffff]
[ 0.426241] pci 0000:06:00.0: PCI bridge to [bus 07]
[ 0.426252] pci 0000:06:04.0: PCI bridge to [bus 08]
[ 0.426259] pci 0000:06:05.0: PCI bridge to [bus 09]
[ 0.426265] pci 0000:06:06.0: PCI bridge to [bus 0a]
[ 0.426272] pci 0000:06:07.0: PCI bridge to [bus 0b]
[ 0.426279] pci 0000:06:08.0: PCI bridge to [bus 0c]
[ 0.426281] pci 0000:06:08.0: bridge window [io 0xd000-0xdfff]
[ 0.426284] pci 0000:06:08.0: bridge window [mem 0xf6500000-0xf65fffff]
[ 0.426289] pci 0000:06:09.0: PCI bridge to [bus 0d]
[ 0.426295] pci 0000:06:0a.0: PCI bridge to [bus 0e]
[ 0.426297] pci 0000:06:0a.0: bridge window [io 0xc000-0xcfff]
[ 0.426300] pci 0000:06:0a.0: bridge window [mem 0xf6400000-0xf64fffff]
[ 0.426305] pci 0000:06:0b.0: PCI bridge to [bus 0f]
[ 0.426308] pci 0000:06:0b.0: bridge window [mem 0xf6300000-0xf63fffff]
[ 0.426311] pci 0000:06:0b.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426314] pci 0000:06:0c.0: PCI bridge to [bus 10]
[ 0.426317] pci 0000:06:0c.0: bridge window [mem 0xf6200000-0xf62fffff]
[ 0.426322] pci 0000:06:0d.0: PCI bridge to [bus 11]
[ 0.426325] pci 0000:06:0d.0: bridge window [mem 0xf6100000-0xf61fffff]
[ 0.426330] pci 0000:05:00.0: PCI bridge to [bus 06-11]
[ 0.426332] pci 0000:05:00.0: bridge window [io 0xc000-0xdfff]
[ 0.426335] pci 0000:05:00.0: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.426337] pci 0000:05:00.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426341] pci 0000:00:02.1: PCI bridge to [bus 05-11]
[ 0.426343] pci 0000:00:02.1: bridge window [io 0xc000-0xdfff]
[ 0.426345] pci 0000:00:02.1: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.426347] pci 0000:00:02.1: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426357] pci 0000:00:02.2: PCI bridge to [bus 12]
[ 0.426359] pci 0000:00:02.2: bridge window [mem 0xf6e00000-0xf6efffff]
[ 0.426370] pci 0000:00:08.1: PCI bridge to [bus 13]
[ 0.426376] pci 0000:00:08.1: bridge window [io 0xe000-0xefff]
[ 0.426378] pci 0000:00:08.1: bridge window [mem 0xf6600000-0xf69fffff]
[ 0.426380] pci 0000:00:08.1: bridge window [mem 0xfc20000000-0xfc301fffff 64bit pref]
[ 0.426383] pci 0000:00:08.3: PCI bridge to [bus 14]
[ 0.426385] pci 0000:00:08.3: bridge window [mem 0xf6d00000-0xf6dfffff]
[ 0.426388] pci_bus 0000:00: resource 4 [io 0x0000-0x03af window]
[ 0.426390] pci_bus 0000:00: resource 5 [io 0x03e0-0x0cf7 window]
[ 0.426391] pci_bus 0000:00: resource 6 [io 0x03b0-0x03df window]
[ 0.426392] pci_bus 0000:00: resource 7 [io 0x0d00-0xffff window]
[ 0.426393] pci_bus 0000:00: resource 8 [mem 0x000a0000-0x000dffff window]
[ 0.426394] pci_bus 0000:00: resource 9 [mem 0xa0000000-0xf6ffffff window]
[ 0.426396] pci_bus 0000:00: resource 10 [mem 0x860000000-0xffffffffff window]
[ 0.426397] pci_bus 0000:01: resource 0 [io 0xf000-0xffff]
[ 0.426398] pci_bus 0000:01: resource 1 [mem 0xf6a00000-0xf6cfffff]
[ 0.426399] pci_bus 0000:01: resource 2 [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426401] pci_bus 0000:02: resource 0 [io 0xf000-0xffff]
[ 0.426402] pci_bus 0000:02: resource 1 [mem 0xf6a00000-0xf6bfffff]
[ 0.426403] pci_bus 0000:02: resource 2 [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426404] pci_bus 0000:03: resource 0 [io 0xf000-0xffff]
[ 0.426405] pci_bus 0000:03: resource 1 [mem 0xf6a00000-0xf6bfffff]
[ 0.426406] pci_bus 0000:03: resource 2 [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426407] pci_bus 0000:04: resource 1 [mem 0xf6f00000-0xf6ffffff]
[ 0.426409] pci_bus 0000:05: resource 0 [io 0xc000-0xdfff]
[ 0.426410] pci_bus 0000:05: resource 1 [mem 0xf6100000-0xf65fffff]
[ 0.426411] pci_bus 0000:05: resource 2 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426412] pci_bus 0000:06: resource 0 [io 0xc000-0xdfff]
[ 0.426413] pci_bus 0000:06: resource 1 [mem 0xf6100000-0xf65fffff]
[ 0.426414] pci_bus 0000:06: resource 2 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426416] pci_bus 0000:0c: resource 0 [io 0xd000-0xdfff]
[ 0.426417] pci_bus 0000:0c: resource 1 [mem 0xf6500000-0xf65fffff]
[ 0.426418] pci_bus 0000:0e: resource 0 [io 0xc000-0xcfff]
[ 0.426419] pci_bus 0000:0e: resource 1 [mem 0xf6400000-0xf64fffff]
[ 0.426420] pci_bus 0000:0f: resource 1 [mem 0xf6300000-0xf63fffff]
[ 0.426421] pci_bus 0000:0f: resource 2 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426422] pci_bus 0000:10: resource 1 [mem 0xf6200000-0xf62fffff]
[ 0.426424] pci_bus 0000:11: resource 1 [mem 0xf6100000-0xf61fffff]
[ 0.426425] pci_bus 0000:12: resource 1 [mem 0xf6e00000-0xf6efffff]
[ 0.426426] pci_bus 0000:13: resource 0 [io 0xe000-0xefff]
[ 0.426427] pci_bus 0000:13: resource 1 [mem 0xf6600000-0xf69fffff]
[ 0.426428] pci_bus 0000:13: resource 2 [mem 0xfc20000000-0xfc301fffff 64bit pref]
[ 0.426429] pci_bus 0000:14: resource 1 [mem 0xf6d00000-0xf6dfffff]
[ 0.426563] pci 0000:03:00.1: D0 power state depends on 0000:03:00.0
[ 0.426943] pci 0000:13:00.1: D0 power state depends on 0000:13:00.0
[ 0.427185] PCI: CLS 64 bytes, default 64
[ 0.427203] pci 0000:00:00.2: AMD-Vi: IOMMU performance counters supported
[ 0.427224] Trying to unpack rootfs image as initramfs...
[ 0.427260] pci 0000:00:01.0: Adding to iommu group 0
[ 0.427275] pci 0000:00:01.1: Adding to iommu group 1
[ 0.427289] pci 0000:00:01.2: Adding to iommu group 2
[ 0.427323] pci 0000:00:02.0: Adding to iommu group 3
[ 0.427337] pci 0000:00:02.1: Adding to iommu group 4
[ 0.427351] pci 0000:00:02.2: Adding to iommu group 5
[ 0.427370] pci 0000:00:03.0: Adding to iommu group 6
[ 0.427389] pci 0000:00:04.0: Adding to iommu group 7
[ 0.427426] pci 0000:00:08.0: Adding to iommu group 8
[ 0.427440] pci 0000:00:08.1: Adding to iommu group 9
[ 0.427454] pci 0000:00:08.3: Adding to iommu group 10
[ 0.427479] pci 0000:00:14.0: Adding to iommu group 11
[ 0.427491] pci 0000:00:14.3: Adding to iommu group 11
[ 0.427556] pci 0000:00:18.0: Adding to iommu group 12
[ 0.427569] pci 0000:00:18.1: Adding to iommu group 12
[ 0.427582] pci 0000:00:18.2: Adding to iommu group 12
[ 0.427594] pci 0000:00:18.3: Adding to iommu group 12
[ 0.427606] pci 0000:00:18.4: Adding to iommu group 12
[ 0.427620] pci 0000:00:18.5: Adding to iommu group 12
[ 0.427632] pci 0000:00:18.6: Adding to iommu group 12
[ 0.427645] pci 0000:00:18.7: Adding to iommu group 12
[ 0.427658] pci 0000:01:00.0: Adding to iommu group 13
[ 0.427680] pci 0000:02:00.0: Adding to iommu group 14
[ 0.427699] pci 0000:03:00.0: Adding to iommu group 15
[ 0.427716] pci 0000:03:00.1: Adding to iommu group 16
[ 0.427731] pci 0000:04:00.0: Adding to iommu group 17
[ 0.427744] pci 0000:05:00.0: Adding to iommu group 18
[ 0.427757] pci 0000:06:00.0: Adding to iommu group 19
[ 0.427771] pci 0000:06:04.0: Adding to iommu group 20
[ 0.427785] pci 0000:06:05.0: Adding to iommu group 21
[ 0.427799] pci 0000:06:06.0: Adding to iommu group 22
[ 0.427812] pci 0000:06:07.0: Adding to iommu group 23
[ 0.427825] pci 0000:06:08.0: Adding to iommu group 24
[ 0.427839] pci 0000:06:09.0: Adding to iommu group 25
[ 0.427852] pci 0000:06:0a.0: Adding to iommu group 26
[ 0.427867] pci 0000:06:0b.0: Adding to iommu group 27
[ 0.427880] pci 0000:06:0c.0: Adding to iommu group 28
[ 0.427894] pci 0000:06:0d.0: Adding to iommu group 29
[ 0.427898] pci 0000:0c:00.0: Adding to iommu group 24
[ 0.427903] pci 0000:0e:00.0: Adding to iommu group 26
[ 0.427907] pci 0000:0f:00.0: Adding to iommu group 27
[ 0.427910] pci 0000:10:00.0: Adding to iommu group 28
[ 0.427914] pci 0000:11:00.0: Adding to iommu group 29
[ 0.427928] pci 0000:12:00.0: Adding to iommu group 30
[ 0.427957] pci 0000:13:00.0: Adding to iommu group 31
[ 0.427971] pci 0000:13:00.1: Adding to iommu group 32
[ 0.427986] pci 0000:13:00.2: Adding to iommu group 33
[ 0.428000] pci 0000:13:00.3: Adding to iommu group 34
[ 0.428015] pci 0000:13:00.4: Adding to iommu group 35
[ 0.428029] pci 0000:13:00.6: Adding to iommu group 36
[ 0.428043] pci 0000:14:00.0: Adding to iommu group 37
[ 0.430192] AMD-Vi: Extended features (0x246577efa2254afa, 0x0): PPR NX GT [5] IA GA PC GA_vAPIC
[ 0.430199] AMD-Vi: Interrupt remapping enabled
[ 0.474861] AMD-Vi: Virtual APIC enabled
[ 0.474871] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
[ 0.474872] software IO TLB: mapped [mem 0x0000000082233000-0x0000000086233000] (64MB)
[ 0.474905] LVT offset 0 assigned for vector 0x400
[ 0.478013] Freeing initrd memory: 45672K
[ 0.478064] perf: AMD IBS detected (0x00000bff)
[ 0.478070] perf/amd_iommu: Detected AMD IOMMU #0 (2 banks, 4 counters/bank).
[ 0.494088] Initialise system trusted keyrings
[ 0.494095] Key type blacklist registered
[ 0.494119] workingset: timestamp_bits=36 max_order=23 bucket_order=0
[ 0.494338] fuse: init (API version 7.45)
[ 0.494396] integrity: Platform Keyring initialized
[ 0.494398] integrity: Machine keyring initialized
[ 0.501302] xor: automatically using best checksumming function avx
[ 0.501304] Key type asymmetric registered
[ 0.501305] Asymmetric key parser 'x509' registered
[ 0.501316] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245)
[ 0.501352] io scheduler mq-deadline registered
[ 0.501353] io scheduler kyber registered
[ 0.501361] io scheduler bfq registered
[ 0.502367] ledtrig-cpu: registered to indicate activity on CPUs
[ 0.502469] pcieport 0000:00:01.1: PME: Signaling with IRQ 30
[ 0.502599] pcieport 0000:00:01.2: PME: Signaling with IRQ 31
[ 0.502724] pcieport 0000:00:02.1: PME: Signaling with IRQ 32
[ 0.502853] pcieport 0000:00:02.2: PME: Signaling with IRQ 33
[ 0.502975] pcieport 0000:00:08.1: PME: Signaling with IRQ 34
[ 0.503086] pcieport 0000:00:08.3: PME: Signaling with IRQ 35
[ 0.504853] input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
[ 0.504874] ACPI: button: Power Button [PWRB]
[ 0.504902] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input1
[ 0.504941] ACPI: button: Power Button [PWRF]
[ 0.505247] Monitor-Mwait will be used to enter C-1 state
[ 0.506765] Estimated ratio of average max frequency by base frequency (times 1024): 1127
[ 0.506979] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
[ 0.508686] Non-volatile memory driver v1.3
[ 0.508688] Linux agpgart interface v0.103
[ 0.572969] tpm_crb MSFT0101:00: Disabling hwrng
[ 0.573226] ACPI: bus type drm_connector registered
[ 0.575017] ahci 0000:0c:00.0: SSS flag set, parallel bus scan disabled
[ 0.575052] ahci 0000:0c:00.0: AHCI vers 0001.0200, 32 command slots, 6 Gbps, SATA mode
[ 0.575054] ahci 0000:0c:00.0: 2/2 ports implemented (port mask 0x3)
[ 0.575056] ahci 0000:0c:00.0: flags: 64bit ncq sntf stag led clo pmp pio slum part ccc
[ 0.575259] scsi host0: ahci
[ 0.575346] scsi host1: ahci
[ 0.575384] ata1: SATA max UDMA/133 abar m512@0xf6500000 port 0xf6500100 irq 50 lpm-pol 3
[ 0.575387] ata2: SATA max UDMA/133 abar m512@0xf6500000 port 0xf6500180 irq 50 lpm-pol 3
[ 0.575489] ahci 0000:11:00.0: SSS flag set, parallel bus scan disabled
[ 0.575512] ahci 0000:11:00.0: AHCI vers 0001.0301, 32 command slots, 6 Gbps, SATA mode
[ 0.575514] ahci 0000:11:00.0: 4/6 ports implemented (port mask 0xf)
[ 0.575515] ahci 0000:11:00.0: flags: 64bit ncq sntf stag pm led clo only pmp pio slum part sxs deso sadm sds apst
[ 0.575854] scsi host2: ahci
[ 0.575920] scsi host3: ahci
[ 0.575985] scsi host4: ahci
[ 0.576050] scsi host5: ahci
[ 0.576116] scsi host6: ahci
[ 0.576181] scsi host7: ahci
[ 0.576217] ata3: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180100 irq 51 lpm-pol 3
[ 0.576219] ata4: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180180 irq 51 lpm-pol 3
[ 0.576221] ata5: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180200 irq 51 lpm-pol 3
[ 0.576222] ata6: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180280 irq 51 lpm-pol 3
[ 0.576223] ata7: DUMMY
[ 0.576224] ata8: DUMMY
[ 0.576353] xhci_hcd 0000:10:00.0: xHCI Host Controller
[ 0.576359] xhci_hcd 0000:10:00.0: new USB bus registered, assigned bus number 1
[ 0.632457] xhci_hcd 0000:10:00.0: hcc params 0x0200ef81 hci version 0x110 quirks 0x0000000200000010
[ 0.632726] xhci_hcd 0000:10:00.0: xHCI Host Controller
[ 0.632729] xhci_hcd 0000:10:00.0: new USB bus registered, assigned bus number 2
[ 0.632731] xhci_hcd 0000:10:00.0: Host supports USB 3.2 Enhanced SuperSpeed
[ 0.633427] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.633429] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.633430] usb usb1: Product: xHCI Host Controller
[ 0.633431] usb usb1: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.633432] usb usb1: SerialNumber: 0000:10:00.0
[ 0.633540] hub 1-0:1.0: USB hub found
[ 0.633556] hub 1-0:1.0: 12 ports detected
[ 0.633930] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 0.633946] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.18
[ 0.633948] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.633949] usb usb2: Product: xHCI Host Controller
[ 0.633950] usb usb2: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.633952] usb usb2: SerialNumber: 0000:10:00.0
[ 0.634025] hub 2-0:1.0: USB hub found
[ 0.634032] hub 2-0:1.0: 5 ports detected
[ 0.634274] xhci_hcd 0000:13:00.3: xHCI Host Controller
[ 0.634278] xhci_hcd 0000:13:00.3: new USB bus registered, assigned bus number 3
[ 0.634630] xhci_hcd 0000:13:00.3: hcc params 0x0120ffc5 hci version 0x120 quirks 0x0000000200000010
[ 0.635027] xhci_hcd 0000:13:00.3: xHCI Host Controller
[ 0.635030] xhci_hcd 0000:13:00.3: new USB bus registered, assigned bus number 4
[ 0.635032] xhci_hcd 0000:13:00.3: Host supports USB 3.1 Enhanced SuperSpeed
[ 0.635057] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.635059] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.635060] usb usb3: Product: xHCI Host Controller
[ 0.635061] usb usb3: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.635062] usb usb3: SerialNumber: 0000:13:00.3
[ 0.635148] hub 3-0:1.0: USB hub found
[ 0.635158] hub 3-0:1.0: 2 ports detected
[ 0.636497] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[ 0.636512] usb usb4: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.18
[ 0.636514] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.636515] usb usb4: Product: xHCI Host Controller
[ 0.636516] usb usb4: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.636517] usb usb4: SerialNumber: 0000:13:00.3
[ 0.636597] hub 4-0:1.0: USB hub found
[ 0.636602] hub 4-0:1.0: 2 ports detected
[ 0.638119] xhci_hcd 0000:13:00.4: xHCI Host Controller
[ 0.638122] xhci_hcd 0000:13:00.4: new USB bus registered, assigned bus number 5
[ 0.638469] xhci_hcd 0000:13:00.4: hcc params 0x0120ffc5 hci version 0x120 quirks 0x0000000200000010
[ 0.638850] xhci_hcd 0000:13:00.4: xHCI Host Controller
[ 0.638852] xhci_hcd 0000:13:00.4: new USB bus registered, assigned bus number 6
[ 0.638854] xhci_hcd 0000:13:00.4: Host supports USB 3.1 Enhanced SuperSpeed
[ 0.638877] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.638878] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.638880] usb usb5: Product: xHCI Host Controller
[ 0.638881] usb usb5: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.638882] usb usb5: SerialNumber: 0000:13:00.4
[ 0.638966] hub 5-0:1.0: USB hub found
[ 0.638970] hub 5-0:1.0: 2 ports detected
[ 0.640319] usb usb6: We don't know the algorithms for LPM for this host, disabling LPM.
[ 0.640334] usb usb6: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.18
[ 0.640336] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.640337] usb usb6: Product: xHCI Host Controller
[ 0.640338] usb usb6: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.640339] usb usb6: SerialNumber: 0000:13:00.4
[ 0.640416] hub 6-0:1.0: USB hub found
[ 0.640420] hub 6-0:1.0: 2 ports detected
[ 0.641924] xhci_hcd 0000:14:00.0: xHCI Host Controller
[ 0.641928] xhci_hcd 0000:14:00.0: new USB bus registered, assigned bus number 7
[ 0.643193] xhci_hcd 0000:14:00.0: USB3 root hub has no ports
[ 0.643208] xhci_hcd 0000:14:00.0: hcc params 0x0110ffc5 hci version 0x120 quirks 0x0000000200000010
[ 0.643434] usb usb7: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.643435] usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.643437] usb usb7: Product: xHCI Host Controller
[ 0.643438] usb usb7: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.643439] usb usb7: SerialNumber: 0000:14:00.0
[ 0.643516] hub 7-0:1.0: USB hub found
[ 0.643521] hub 7-0:1.0: 1 port detected
[ 0.644585] usbcore: registered new interface driver usbserial_generic
[ 0.644590] usbserial: USB Serial support registered for generic
[ 0.644628] i8042: PNP: No PS/2 controller found.
[ 0.644701] rtc_cmos 00:02: RTC can wake from S4
[ 0.644884] rtc_cmos 00:02: registered as rtc0
[ 0.644903] rtc_cmos 00:02: setting system clock to 2026-05-15T20:55:51 UTC (1778878551)
[ 0.644924] rtc_cmos 00:02: alarms up to one month, y3k, 114 bytes nvram
[ 0.645973] simple-framebuffer simple-framebuffer.0: [drm] Registered 1 planes with drm panic
[ 0.645975] [drm] Initialized simpledrm 1.0.0 for simple-framebuffer.0 on minor 0
[ 0.646506] fbcon: Deferring console take-over
[ 0.646508] simple-framebuffer simple-framebuffer.0: [drm] fb0: simpledrmdrmfb frame buffer device
[ 0.646535] hid: raw HID events driver (C) Jiri Kosina
[ 0.646553] usbcore: registered new interface driver usbhid
[ 0.646554] usbhid: USB HID core driver
[ 0.646584] rust_binder: Loaded Rust Binder.
[ 0.646594] drop_monitor: Initializing network drop monitor service
[ 0.646664] NET: Registered PF_INET6 protocol family
[ 0.646822] Segment Routing with IPv6
[ 0.646823] RPL Segment Routing with IPv6
[ 0.646828] In-situ OAM (IOAM) with IPv6
[ 0.646841] NET: Registered PF_PACKET protocol family
[ 0.647923] x86/amd: Previous system reset reason [0x01000800]: system failed to boot before failed boot timer expired
[ 0.647930] microcode: Current revision: 0x0a60120c
[ 0.648125] resctrl: L3 allocation detected
[ 0.648126] resctrl: MB allocation detected
[ 0.648127] resctrl: SMBA allocation detected
[ 0.648127] resctrl: L3 monitoring detected
[ 0.648143] IPI shorthand broadcast: enabled
[ 0.650443] sched_clock: Marking stable (649178518, 395348)->(653163872, -3590006)
[ 0.650569] registered taskstats version 1
[ 0.650977] Loading compiled-in X.509 certificates
[ 0.655266] Loaded X.509 cert 'Build time autogenerated kernel key: b5d7334e6d11bcb0199831025514ae4585aeaa8a'
[ 0.657869] zswap: loaded using pool zstd
[ 0.657902] Demotion targets for Node 0: null
[ 0.657993] Key type .fscrypt registered
[ 0.657994] Key type fscrypt-provisioning registered
[ 0.658206] Btrfs loaded, zoned=yes, fsverity=yes
[ 0.658228] Key type big_key registered
[ 0.658291] integrity: Loading X.509 certificate: UEFI:db
[ 0.658302] integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53'
[ 0.658303] integrity: Loading X.509 certificate: UEFI:db
[ 0.658310] integrity: Loaded X.509 cert 'Microsoft UEFI CA 2023: 81aa6b3244c935bce0d6628af39827421e32497d'
[ 0.658311] integrity: Loading X.509 certificate: UEFI:db
[ 0.658318] integrity: Loaded X.509 cert 'Microsoft Corporation: Windows UEFI CA 2023: aefc5fbbbe055d8f8daa585473499417ab5a5272'
[ 0.658319] integrity: Loading X.509 certificate: UEFI:db
[ 0.658325] integrity: Loaded X.509 cert 'Microsoft Option ROM UEFI CA 2023: 514fbf937fa46fb57bf07af8bed84b3b864b1711'
[ 0.658326] integrity: Loading X.509 certificate: UEFI:db
[ 0.658334] integrity: Loaded X.509 cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4'
[ 0.658335] integrity: Loading X.509 certificate: UEFI:db
[ 0.658339] integrity: Loaded X.509 cert 'MSI SHIP DB: ebc30d5be5f35f8041c1c2d9e613eee2'
[ 0.659289] PM: Magic number: 10:135:953
[ 0.659297] cpuid cpu8: hash matches
[ 0.659329] processor cpu8: hash matches
[ 0.659351] memory memory6: hash matches
[ 0.659952] RAS: Correctable Errors collector initialized.
[ 0.662962] clk: Disabling unused clocks
[ 0.662964] PM: genpd: Disabling unused power domains
[ 0.880623] usb 3-2: new high-speed USB device number 2 using xhci_hcd
[ 0.887859] ata1: SATA link down (SStatus 0 SControl 300)
[ 0.889479] ata3: SATA link down (SStatus 0 SControl 300)
[ 0.943970] usb 1-5: new high-speed USB device number 2 using xhci_hcd
[ 1.015719] usb 3-2: New USB device found, idVendor=05e3, idProduct=0610, bcdDevice= 6.56
[ 1.015721] usb 3-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.015723] usb 3-2: Product: USB2.1 Hub
[ 1.015724] usb 3-2: Manufacturer: GenesysLogic
[ 1.051549] hub 3-2:1.0: USB hub found
[ 1.051979] hub 3-2:1.0: 4 ports detected
[ 1.127208] usb 4-2: new SuperSpeed USB device number 2 using xhci_hcd
[ 1.143416] usb 4-2: New USB device found, idVendor=05e3, idProduct=0626, bcdDevice= 6.56
[ 1.143420] usb 4-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.143422] usb 4-2: Product: USB3.1 Hub
[ 1.143423] usb 4-2: Manufacturer: GenesysLogic
[ 1.163796] hub 4-2:1.0: USB hub found
[ 1.164084] hub 4-2:1.0: 4 ports detected
[ 1.200293] ata2: SATA link down (SStatus 0 SControl 300)
[ 1.200297] usb 1-5: New USB device found, idVendor=174c, idProduct=2074, bcdDevice= 0.01
[ 1.200301] usb 1-5: New USB device strings: Mfr=2, Product=3, SerialNumber=0
[ 1.200303] usb 1-5: Product: ASM107x
[ 1.200305] usb 1-5: Manufacturer: Asmedia
[ 1.209745] hub 1-5:1.0: USB hub found
[ 1.214299] hub 1-5:1.0: 4 ports detected
[ 1.293827] usb 2-1: new SuperSpeed Plus Gen 2x1 USB device number 2 using xhci_hcd
[ 1.316252] usb 2-1: New USB device found, idVendor=0bda, idProduct=9210, bcdDevice=20.01
[ 1.316254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1.316256] usb 2-1: Product: Sabrent
[ 1.316257] usb 2-1: Manufacturer: Sabrent
[ 1.316258] usb 2-1: SerialNumber: 012345678930
[ 1.353779] usb 3-2.1: new full-speed USB device number 3 using xhci_hcd
[ 1.477037] usb 3-2.1: New USB device found, idVendor=3434, idProduct=0281, bcdDevice= 1.01
[ 1.477042] usb 3-2.1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.477045] usb 3-2.1: Product: Keychron K8 Pro
[ 1.477047] usb 3-2.1: Manufacturer: Keychron
[ 1.483760] tsc: Refined TSC clocksource calibration: 4199.999 MHz
[ 1.483771] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x3c8a606e244, max_idle_ns: 440795282550 ns
[ 1.483805] clocksource: Switched to clocksource tsc
[ 1.490701] usb 1-6: new high-speed USB device number 3 using xhci_hcd
[ 1.508707] ata4: SATA link down (SStatus 0 SControl 300)
[ 1.633618] input: Keychron Keychron K8 Pro as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.0/0003:3434:0281.0001/input/input2
[ 1.684222] hid-generic 0003:3434:0281.0001: input,hidraw0: USB HID v1.11 Keyboard [Keychron Keychron K8 Pro] on usb-0000:13:00.3-2.1/input0
[ 1.688119] hid-generic 0003:3434:0281.0002: hiddev96,hidraw1: USB HID v1.11 Device [Keychron Keychron K8 Pro] on usb-0000:13:00.3-2.1/input1
[ 1.693175] input: Keychron Keychron K8 Pro System Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.2/0003:3434:0281.0003/input/input3
[ 1.744109] input: Keychron Keychron K8 Pro Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.2/0003:3434:0281.0003/input/input4
[ 1.744199] input: Keychron Keychron K8 Pro Keyboard as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.2/0003:3434:0281.0003/input/input5
[ 1.744438] hid-generic 0003:3434:0281.0003: input,hidraw2: USB HID v1.11 Keyboard [Keychron Keychron K8 Pro] on usb-0000:13:00.3-2.1/input2
[ 1.807918] usb 2-5: new SuperSpeed USB device number 3 using xhci_hcd
[ 1.816720] ata5: SATA link down (SStatus 0 SControl 300)
[ 1.824061] usb 2-5: New USB device found, idVendor=174c, idProduct=3074, bcdDevice= 0.01
[ 1.824065] usb 2-5: New USB device strings: Mfr=2, Product=3, SerialNumber=0
[ 1.824067] usb 2-5: Product: ASM107x
[ 1.824069] usb 2-5: Manufacturer: Asmedia
[ 1.831749] hub 2-5:1.0: USB hub found
[ 1.831895] hub 2-5:1.0: 4 ports detected
[ 1.833751] usb 3-2.2: new full-speed USB device number 4 using xhci_hcd
[ 1.957022] usb 3-2.2: New USB device found, idVendor=1ea7, idProduct=6a22, bcdDevice= 1.00
[ 1.957028] usb 3-2.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.957030] usb 3-2.2: Product: GK21 BL V1.0.0
[ 1.957032] usb 3-2.2: Manufacturer: skyloong
[ 2.113225] input: skyloong GK21 BL V1.0.0 as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.0/0003:1EA7:6A22.0004/input/input6
[ 2.164253] hid-generic 0003:1EA7:6A22.0004: input,hidraw3: USB HID v1.11 Keyboard [skyloong GK21 BL V1.0.0] on usb-0000:13:00.3-2.2/input0
[ 2.168126] hid-generic 0003:1EA7:6A22.0005: hiddev97,hidraw4: USB HID v1.11 Device [skyloong GK21 BL V1.0.0] on usb-0000:13:00.3-2.2/input1
[ 2.173200] input: skyloong GK21 BL V1.0.0 Mouse as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input7
[ 2.173271] input: skyloong GK21 BL V1.0.0 System Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input8
[ 2.224125] input: skyloong GK21 BL V1.0.0 Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input9
[ 2.224216] input: skyloong GK21 BL V1.0.0 Keyboard as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input10
[ 2.224462] hid-generic 0003:1EA7:6A22.0006: input,hidraw5: USB HID v1.11 Mouse [skyloong GK21 BL V1.0.0] on usb-0000:13:00.3-2.2/input2
[ 2.280653] ata6: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[ 2.282436] ata6.00: Model 'Samsung SSD 750 EVO 250GB', rev 'MAT01B6Q', applying quirks: zeroaftertrim
[ 2.282501] ata6.00: supports DRM functions and may not be fully accessible
[ 2.282502] ata6.00: ATA-9: Samsung SSD 750 EVO 250GB, MAT01B6Q, max UDMA/133
[ 2.283028] ata6.00: 488397168 sectors, multi 1: LBA48 NCQ (depth 32), AA
[ 2.284286] ata6.00: Features: Trust Dev-Sleep DIPM NCQ-sndrcv
[ 2.284590] ata6.00: supports DRM functions and may not be fully accessible
[ 2.286474] ata6.00: configured for UDMA/133
[ 2.296572] ahci 0000:11:00.0: port does not support device sleep
[ 2.296729] scsi 5:0:0:0: Direct-Access ATA Samsung SSD 750 1B6Q PQ: 0 ANSI: 5
[ 2.297032] sd 5:0:0:0: [sda] 488397168 512-byte logical blocks: (250 GB/233 GiB)
[ 2.297041] sd 5:0:0:0: [sda] Write Protect is off
[ 2.297044] sd 5:0:0:0: [sda] Mode Sense: 00 3a 00 00
[ 2.297054] sd 5:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 2.297110] sd 5:0:0:0: [sda] Preferred minimum I/O size 512 bytes
[ 2.313999] usb 3-2.3: new full-speed USB device number 5 using xhci_hcd
[ 2.341922] sda: sda1
[ 2.342274] sd 5:0:0:0: [sda] supports TCG Opal
[ 2.342276] sd 5:0:0:0: [sda] Attached SCSI disk
[ 2.343525] Freeing unused decrypted memory: 2028K
[ 2.343857] Freeing unused kernel image (initmem) memory: 4752K
[ 2.343866] Write protecting the kernel read-only data: 38912k
[ 2.344206] Freeing unused kernel image (text/rodata gap) memory: 1164K
[ 2.344252] Freeing unused kernel image (rodata/data gap) memory: 24K
[ 2.380037] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 2.380041] rodata_test: all tests were successful
[ 2.380054] Run /init as init process
[ 2.380056] with arguments:
[ 2.380057] /init
[ 2.380058] with environment:
[ 2.380060] HOME=/
[ 2.380064] TERM=linux
[ 2.425110] systemd[1]: Successfully made /usr/ read-only.
[ 2.584042] usb 3-2.3: New USB device found, idVendor=046d, idProduct=0aba, bcdDevice= 1.00
[ 2.584048] usb 3-2.3: New USB device strings: Mfr=3, Product=4, SerialNumber=0
[ 2.584050] usb 3-2.3: Product: PRO X Wireless Gaming Headset
[ 2.584052] usb 3-2.3: Manufacturer: Logitech
[ 2.635303] input: Logitech PRO X Wireless Gaming Headset Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.3/3-2.3:1.3/0003:046D:0ABA.0007/input/input11
[ 2.687550] input: Logitech PRO X Wireless Gaming Headset as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.3/3-2.3:1.3/0003:046D:0ABA.0007/input/input13
[ 2.687656] hid-generic 0003:046D:0ABA.0007: input,hiddev98,hidraw6: USB HID v1.11 Device [Logitech PRO X Wireless Gaming Headset] on usb-0000:13:00.3-2.3/input3
[ 2.758979] systemd[1]: systemd 260.1-2-arch running in system mode (+PAM +AUDIT -SELINUX +APPARMOR -IMA +IPE +SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF +XKBCOMMON +UTMP +LIBARCHIVE)
[ 2.758987] systemd[1]: Detected architecture x86-64.
[ 2.758990] systemd[1]: Running in initrd.
[ 2.759224] fbcon: Taking over console
[ 2.759299] systemd[1]: Initializing machine ID from random generator.
[ 2.760230] Console: switching to colour frame buffer device 128x48
[ 2.777448] usb 3-2.4: new full-speed USB device number 6 using xhci_hcd
[ 2.792221] systemd[1]: Queued start job for default target Initrd Default Target.
[ 2.860525] systemd[1]: Expecting device /dev/disk/by-partlabel/zeus-linux-root...
[ 2.860669] systemd[1]: Reached target Path Units.
[ 2.860732] systemd[1]: Reached target Slice Units.
[ 2.860771] systemd[1]: Reached target Swaps.
[ 2.860797] systemd[1]: Reached target Timer Units.
[ 2.860886] systemd[1]: Listening on Journal Socket (/dev/log).
[ 2.860959] systemd[1]: Listening on Journal Sockets.
[ 2.861023] systemd[1]: Listening on udev Control Socket.
[ 2.861069] systemd[1]: Listening on udev Kernel Socket.
[ 2.861095] systemd[1]: Reached target Socket Units.
[ 2.861131] systemd[1]: Create List of Static Device Nodes skipped, unmet condition check ConditionFileNotEmpty=/lib/modules/6.18.31-1-lts/modules.devname
[ 2.861167] systemd[1]: Early Battery Level Check skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/class/power_supply
[ 2.864209] systemd[1]: Started Display Boot-Time Emergency Messages In Full Screen.
[ 2.866655] systemd[1]: Starting Journal Service...
[ 2.868976] systemd[1]: Starting Load Kernel Modules...
[ 2.869147] systemd[1]: TPM PCR Barrier (initrd) skipped, unmet condition check ConditionSecurity=measured-uki
[ 2.870936] systemd[1]: Starting Create Static Device Nodes in /dev...
[ 2.872681] systemd[1]: Starting Coldplug All udev Devices...
[ 2.876722] systemd[1]: Finished Load Kernel Modules.
[ 2.876771] systemd-journald[254]: Collecting audit messages is disabled.
[ 2.878173] systemd[1]: Finished Create Static Device Nodes in /dev.
[ 2.878437] systemd[1]: Reached target Preparation for Local File Systems.
[ 2.878528] systemd[1]: Reached target Local File Systems.
[ 2.880296] systemd[1]: Starting Rule-based Manager for Device Events and Files...
[ 2.896233] systemd[1]: Started Rule-based Manager for Device Events and Files.
[ 2.917002] usb 3-2.4: New USB device found, idVendor=046d, idProduct=c539, bcdDevice=39.06
[ 2.917006] usb 3-2.4: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 2.917009] usb 3-2.4: Product: USB Receiver
[ 2.917010] usb 3-2.4: Manufacturer: Logitech
[ 2.959770] systemd[1]: Started Journal Service.
[ 3.044172] input: Logitech USB Receiver as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.0/0003:046D:C539.0008/input/input14
[ 3.195135] ACPI: video: Video Device [VGA] (multi-head: yes rom: no post: no)
[ 3.195491] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:20/LNXVIDEO:00/input/input15
[ 3.203940] Key type psk registered
[ 3.207435] usbcore: registered new interface driver usb-storage
[ 3.213786] nvme 0000:04:00.0: platform quirk: setting simple suspend
[ 3.213820] hid-generic 0003:046D:C539.0008: input,hidraw7: USB HID v1.11 Keyboard [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input0
[ 3.213861] nvme nvme1: pci function 0000:04:00.0
[ 3.213861] nvme nvme0: pci function 0000:12:00.0
[ 3.216414] nvme nvme1: bad crto:0 cap:8202020ff0103ff
[ 3.218167] input: Logitech USB Receiver Mouse as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.1/0003:046D:C539.0009/input/input16
[ 3.218232] input: Logitech USB Receiver Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.1/0003:046D:C539.0009/input/input17
[ 3.220765] nvme nvme0: missing or invalid SUBNQN field.
[ 3.220917] nvme nvme0: D3 entry latency set to 8 seconds
[ 3.227021] nvme nvme1: allocated 40 MiB host memory buffer (1 segment).
[ 3.238269] nvme nvme0: 16/0/0 default/read/poll queues
[ 3.241942] nvme0n1: p1 p2 p3 p4
[ 3.268635] nvme nvme1: 16/0/0 default/read/poll queues
[ 3.273798] input: Logitech USB Receiver System Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.1/0003:046D:C539.0009/input/input18
[ 3.273880] hid-generic 0003:046D:C539.0009: input,hiddev99,hidraw8: USB HID v1.11 Mouse [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input1
[ 3.277103] hid-generic 0003:046D:C539.000A: hiddev100,hidraw9: USB HID v1.11 Device [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input2
[ 3.308019] nvme1n1: p1 p2
[ 3.350273] usb 1-6: New USB device found, idVendor=0db0, idProduct=422d, bcdDevice= 0.01
[ 3.350277] usb 1-6: New USB device strings: Mfr=3, Product=1, SerialNumber=0
[ 3.350279] usb 1-6: Product: USB Audio
[ 3.350281] usb 1-6: Manufacturer: Generic
[ 3.697077] scsi host8: uas
[ 3.697182] usbcore: registered new interface driver uas
[ 3.701641] scsi 8:0:0:0: Direct-Access Sabrent 1.00 PQ: 0 ANSI: 6
[ 3.717552] hid-generic 0003:0DB0:422D.000B: hiddev101,hidraw10: USB HID v1.11 Device [Generic USB Audio] on usb-0000:10:00.0-6/input7
[ 3.754740] sd 8:0:0:0: [sdb] 500118192 512-byte logical blocks: (256 GB/238 GiB)
[ 3.756681] sd 8:0:0:0: [sdb] Write Protect is off
[ 3.756684] sd 8:0:0:0: [sdb] Mode Sense: 37 00 00 08
[ 3.761405] sd 8:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 3.811879] sd 8:0:0:0: [sdb] Preferred minimum I/O size 512 bytes
[ 3.811883] sd 8:0:0:0: [sdb] Optimal transfer size 33553920 bytes
[ 3.897081] usb 1-7: new high-speed USB device number 4 using xhci_hcd
[ 3.955590] BTRFS: device label Linux Root devid 1 transid 570329 /dev/nvme1n1p2 (259:7) scanned by mount (358)
[ 3.955833] BTRFS info (device nvme1n1p2): first mount of filesystem 75333424-c18c-46ba-80ea-4b5688bfff7d
[ 3.955836] BTRFS info (device nvme1n1p2): using crc32c (crc32c-lib) checksum algorithm
[ 4.064022] logitech-djreceiver 0003:046D:C539.0008: hidraw7: USB HID v1.11 Keyboard [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input0
[ 4.120273] usb 1-7: New USB device found, idVendor=0e8d, idProduct=0616, bcdDevice= 1.00
[ 4.120276] usb 1-7: New USB device strings: Mfr=5, Product=6, SerialNumber=7
[ 4.120278] usb 1-7: Product: Wireless_Device
[ 4.120279] usb 1-7: Manufacturer: MediaTek Inc.
[ 4.120281] usb 1-7: SerialNumber: 000000000
[ 4.176499] sdb: sdb1 sdb2
[ 4.176586] sd 8:0:0:0: [sdb] Attached SCSI disk
[ 4.343735] usb 1-10: new full-speed USB device number 5 using xhci_hcd
[ 4.369569] BTRFS info (device nvme1n1p2): enabling ssd optimizations
[ 4.369572] BTRFS info (device nvme1n1p2): turning on async discard
[ 4.369573] BTRFS info (device nvme1n1p2): enabling free space tree
[ 4.611076] amdgpu: vga_switcheroo: detected switching method \_SB_.PCI0.GP17.VGA_.ATPX handle
[ 4.611222] amdgpu: ATPX version 1, functions 0x00000000
[ 4.620400] amdgpu: Virtual CRAT table created for CPU
[ 4.620411] amdgpu: Topology: Add CPU node
[ 4.620482] amdgpu 0000:03:00.0: enabling device (0006 -> 0007)
[ 4.620513] amdgpu 0000:03:00.0: amdgpu: initializing kernel modesetting (IP DISCOVERY 0x1002:0x747E 0x1DA2:0x475D 0xC8).
[ 4.620522] amdgpu 0000:03:00.0: amdgpu: register mmio base: 0xF6A00000
[ 4.620523] amdgpu 0000:03:00.0: amdgpu: register mmio size: 1048576
[ 4.625547] amdgpu 0000:03:00.0: amdgpu: detected ip block number 0 <common_v1_0_0> (soc21_common)
[ 4.625549] amdgpu 0000:03:00.0: amdgpu: detected ip block number 1 <gmc_v11_0_0> (gmc_v11_0)
[ 4.625551] amdgpu 0000:03:00.0: amdgpu: detected ip block number 2 <ih_v6_0_0> (ih_v6_0)
[ 4.625552] amdgpu 0000:03:00.0: amdgpu: detected ip block number 3 <psp_v13_0_0> (psp)
[ 4.625554] amdgpu 0000:03:00.0: amdgpu: detected ip block number 4 <smu_v13_0_0> (smu)
[ 4.625556] amdgpu 0000:03:00.0: amdgpu: detected ip block number 5 <dce_v1_0_0> (dm)
[ 4.625557] amdgpu 0000:03:00.0: amdgpu: detected ip block number 6 <gfx_v11_0_0> (gfx_v11_0)
[ 4.625559] amdgpu 0000:03:00.0: amdgpu: detected ip block number 7 <sdma_v6_0_0> (sdma_v6_0)
[ 4.625561] amdgpu 0000:03:00.0: amdgpu: detected ip block number 8 <vcn_v4_0_0> (vcn_v4_0)
[ 4.625562] amdgpu 0000:03:00.0: amdgpu: detected ip block number 9 <jpeg_v4_0_0> (jpeg_v4_0)
[ 4.625563] amdgpu 0000:03:00.0: amdgpu: detected ip block number 10 <mes_v11_0_0> (mes_v11_0)
[ 4.625576] amdgpu 0000:03:00.0: amdgpu: Fetched VBIOS from VFCT
[ 4.625577] amdgpu: ATOM BIOS: 113-D7120201-S01
[ 4.627524] amdgpu 0000:03:00.0: amdgpu: CP RS64 enable
[ 4.636035] usb 1-10: New USB device found, idVendor=1462, idProduct=7d75, bcdDevice= 0.01
[ 4.636039] usb 1-10: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 4.636041] usb 1-10: Product: MYSTIC LIGHT
[ 4.636042] usb 1-10: Manufacturer: MSI
[ 4.636044] usb 1-10: SerialNumber: 7D7522120106
[ 4.663001] input: MSI MYSTIC LIGHT as /devices/pci0000:00/0000:00:02.1/0000:05:00.0/0000:06:0c.0/0000:10:00.0/usb1/1-10/1-10:1.0/0003:1462:7D75.000C/input/input20
[ 4.674082] Console: switching to colour dummy device 80x25
[ 4.694192] hid-generic 0003:1462:7D75.000C: input,hiddev102,hidraw11: USB HID v1.10 Device [MSI MYSTIC LIGHT ] on usb-0000:10:00.0-10/input0
[ 4.694352] logitech-djreceiver 0003:046D:C539.0009: hiddev99,hidraw8: USB HID v1.11 Mouse [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input1
[ 4.707358] amdgpu 0000:03:00.0: vgaarb: deactivate vga console
[ 4.707364] amdgpu 0000:03:00.0: amdgpu: Trusted Memory Zone (TMZ) feature not supported
[ 4.707395] amdgpu 0000:03:00.0: amdgpu: MEM ECC is not presented.
[ 4.707397] amdgpu 0000:03:00.0: amdgpu: SRAM ECC is not presented.
[ 4.707403] amdgpu 0000:03:00.0: amdgpu: DF poison setting is inconsistent(1:0:0:0)!
[ 4.707405] amdgpu 0000:03:00.0: amdgpu: Poison setting is inconsistent in DF/UMC(0:1)!
[ 4.707441] amdgpu 0000:03:00.0: amdgpu: vm size is 262144 GB, 4 levels, block size is 9-bit, fragment size is 9-bit
[ 4.707448] amdgpu 0000:03:00.0: amdgpu: VRAM: 16368M 0x0000008000000000 - 0x00000083FEFFFFFF (16368M used)
[ 4.707450] amdgpu 0000:03:00.0: amdgpu: GART: 512M 0x00007FFF00000000 - 0x00007FFF1FFFFFFF
[ 4.707461] [drm] Detected VRAM RAM=16368M, BAR=16384M
[ 4.707463] [drm] RAM width 256bits GDDR6
[ 4.707592] amdgpu 0000:03:00.0: amdgpu: amdgpu: 16368M of VRAM memory ready
[ 4.707595] amdgpu 0000:03:00.0: amdgpu: amdgpu: 15590M of GTT memory ready.
[ 4.707612] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 4.707673] [drm] PCIE GART of 512M enabled (table at 0x0000008000300000).
[ 4.708063] amdgpu 0000:03:00.0: amdgpu: [drm] Loading DMUB firmware via PSP: version=0x07002F00
[ 4.708239] amdgpu 0000:03:00.0: amdgpu: [VCN instance 0] Found VCN firmware Version ENC: 1.24 DEC: 9 VEP: 0 Revision: 16
[ 4.708326] amdgpu 0000:03:00.0: amdgpu: [VCN instance 1] Found VCN firmware Version ENC: 1.24 DEC: 9 VEP: 0 Revision: 16
[ 4.747315] logitech-djreceiver 0003:046D:C539.000A: hiddev100,hidraw9: USB HID v1.11 Device [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input2
[ 4.786117] amdgpu 0000:03:00.0: amdgpu: reserve 0xa700000 from 0x83e0000000 for PSP TMR
[ 4.802236] logitech-djreceiver 0003:046D:C539.000A: device of type eQUAD Lightspeed 1 (0x0c) connected on slot 1
[ 4.802415] input: Logitech Wireless Mouse PID:4087 Keyboard as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.2/0003:046D:C539.000A/0003:046D:4087.000D/input/input21
[ 4.877070] usb 1-12: new high-speed USB device number 6 using xhci_hcd
[ 4.933790] input: Logitech Wireless Mouse PID:4087 Mouse as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.2/0003:046D:C539.000A/0003:046D:4087.000D/input/input22
[ 4.933833] hid-generic 0003:046D:4087.000D: input,hidraw12: USB HID v1.11 Keyboard [Logitech Wireless Mouse PID:4087] on usb-0000:13:00.3-2.4/input2:1
[ 5.032200] amdgpu 0000:03:00.0: amdgpu: RAP: optional rap ta ucode is not available
[ 5.032202] amdgpu 0000:03:00.0: amdgpu: SECUREDISPLAY: optional securedisplay ta ucode is not available
[ 5.032229] amdgpu 0000:03:00.0: amdgpu: smu driver if version = 0x0000003d, smu fw if version = 0x00000040, smu fw program = 0, smu fw version = 0x00505600 (80.86.0)
[ 5.032232] amdgpu 0000:03:00.0: amdgpu: SMU driver if version not matched
[ 5.093283] usb 1-12: New USB device found, idVendor=05e3, idProduct=0608, bcdDevice=60.70
[ 5.093287] usb 1-12: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 5.093290] usb 1-12: Product: USB2.0 Hub
[ 5.105324] hub 1-12:1.0: USB hub found
[ 5.109278] hub 1-12:1.0: 4 ports detected
[ 5.124545] amdgpu 0000:03:00.0: amdgpu: SMU is initialized successfully!
[ 5.124790] amdgpu 0000:03:00.0: amdgpu: [drm] Display Core v3.2.351 initialized on DCN 3.2
[ 5.124792] amdgpu 0000:03:00.0: amdgpu: [drm] DP-HDMI FRL PCON supported
[ 5.126846] amdgpu 0000:03:00.0: amdgpu: [drm] DMUB hardware initialized: version=0x07002F00
[ 5.339959] amdgpu 0000:03:00.0: amdgpu: [drm] DP-1: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.340102] amdgpu 0000:03:00.0: amdgpu: [drm] DP-2: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.369352] amdgpu 0000:03:00.0: amdgpu: [drm] HDMI-A-1: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.399317] amdgpu 0000:03:00.0: amdgpu: [drm] HDMI-A-2: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.482555] amdgpu: HMM registered 16368MB device memory
[ 5.483565] kfd kfd: amdgpu: Allocated 3969056 bytes on gart
[ 5.483579] kfd kfd: amdgpu: Total number of KFD nodes to be created: 1
[ 5.483612] amdgpu: Virtual CRAT table created for GPU
[ 5.483808] amdgpu: Topology: Add dGPU node [0x747e:0x1002]
[ 5.483811] kfd kfd: amdgpu: added device 1002:747e
[ 5.483823] amdgpu 0000:03:00.0: amdgpu: SE 3, SH per SE 2, CU per SH 10, active_cu_number 60
[ 5.483828] amdgpu 0000:03:00.0: amdgpu: ring gfx_0.0.0 uses VM inv eng 0 on hub 0
[ 5.483830] amdgpu 0000:03:00.0: amdgpu: ring comp_1.0.0 uses VM inv eng 1 on hub 0
[ 5.483831] amdgpu 0000:03:00.0: amdgpu: ring comp_1.1.0 uses VM inv eng 4 on hub 0
[ 5.483833] amdgpu 0000:03:00.0: amdgpu: ring comp_1.2.0 uses VM inv eng 6 on hub 0
[ 5.483835] amdgpu 0000:03:00.0: amdgpu: ring comp_1.3.0 uses VM inv eng 7 on hub 0
[ 5.483836] amdgpu 0000:03:00.0: amdgpu: ring comp_1.0.1 uses VM inv eng 8 on hub 0
[ 5.483838] amdgpu 0000:03:00.0: amdgpu: ring comp_1.1.1 uses VM inv eng 9 on hub 0
[ 5.483839] amdgpu 0000:03:00.0: amdgpu: ring comp_1.2.1 uses VM inv eng 10 on hub 0
[ 5.483841] amdgpu 0000:03:00.0: amdgpu: ring comp_1.3.1 uses VM inv eng 11 on hub 0
[ 5.483842] amdgpu 0000:03:00.0: amdgpu: ring sdma0 uses VM inv eng 12 on hub 0
[ 5.483843] amdgpu 0000:03:00.0: amdgpu: ring sdma1 uses VM inv eng 13 on hub 0
[ 5.483845] amdgpu 0000:03:00.0: amdgpu: ring vcn_unified_0 uses VM inv eng 0 on hub 8
[ 5.483846] amdgpu 0000:03:00.0: amdgpu: ring vcn_unified_1 uses VM inv eng 1 on hub 8
[ 5.483848] amdgpu 0000:03:00.0: amdgpu: ring jpeg_dec uses VM inv eng 4 on hub 8
[ 5.483849] amdgpu 0000:03:00.0: amdgpu: ring mes_kiq_3.1.0 uses VM inv eng 14 on hub 0
[ 5.485195] amdgpu 0000:03:00.0: amdgpu: Using BACO for runtime pm
[ 5.485748] amdgpu 0000:03:00.0: [drm] Registered 4 planes with drm panic
[ 5.485751] [drm] Initialized amdgpu 3.64.0 for 0000:03:00.0 on minor 1
[ 5.493314] amdgpu 0000:03:00.0: amdgpu: [drm] Failed to setup vendor infoframe on connector HDMI-A-1: -22
[ 5.500610] fbcon: amdgpudrmfb (fb0) is primary device
[ 5.500825] [drm] pre_validate_dsc:1667 MST_DSC dsc precompute is not needed
[ 5.745712] Console: switching to colour frame buffer device 240x67
[ 5.813640] amdgpu 0000:03:00.0: [drm] fb0: amdgpudrmfb frame buffer device
[ 5.821276] amdgpu 0000:13:00.0: enabling device (0006 -> 0007)
[ 5.821352] amdgpu 0000:13:00.0: amdgpu: initializing kernel modesetting (IP DISCOVERY 0x1002:0x164E 0x1462:0x7D75 0xCB).
[ 5.821378] amdgpu 0000:13:00.0: amdgpu: register mmio base: 0xF6900000
[ 5.821379] amdgpu 0000:13:00.0: amdgpu: register mmio size: 524288
[ 5.822939] amdgpu 0000:13:00.0: amdgpu: detected ip block number 0 <common_v1_0_0> (nv_common)
[ 5.822942] amdgpu 0000:13:00.0: amdgpu: detected ip block number 1 <gmc_v10_0_0> (gmc_v10_0)
[ 5.822944] amdgpu 0000:13:00.0: amdgpu: detected ip block number 2 <ih_v5_0_0> (navi10_ih)
[ 5.822945] amdgpu 0000:13:00.0: amdgpu: detected ip block number 3 <psp_v13_0_0> (psp)
[ 5.822947] amdgpu 0000:13:00.0: amdgpu: detected ip block number 4 <smu_v13_0_0> (smu)
[ 5.822948] amdgpu 0000:13:00.0: amdgpu: detected ip block number 5 <dce_v1_0_0> (dm)
[ 5.822950] amdgpu 0000:13:00.0: amdgpu: detected ip block number 6 <gfx_v10_0_0> (gfx_v10_0)
[ 5.822951] amdgpu 0000:13:00.0: amdgpu: detected ip block number 7 <sdma_v5_2_0> (sdma_v5_2)
[ 5.822953] amdgpu 0000:13:00.0: amdgpu: detected ip block number 8 <vcn_v3_0_0> (vcn_v3_0)
[ 5.822955] amdgpu 0000:13:00.0: amdgpu: detected ip block number 9 <jpeg_v3_0_0> (jpeg_v3_0)
[ 5.822970] amdgpu 0000:13:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.822972] amdgpu: ATOM BIOS: 102-RAPHAEL-008
[ 5.826463] amdgpu 0000:13:00.0: amdgpu: Trusted Memory Zone (TMZ) feature disabled as experimental (default)
[ 5.826490] amdgpu 0000:13:00.0: amdgpu: vm size is 262144 GB, 4 levels, block size is 9-bit, fragment size is 9-bit
[ 5.826495] amdgpu 0000:13:00.0: amdgpu: VRAM: 512M 0x000000F400000000 - 0x000000F41FFFFFFF (512M used)
[ 5.826497] amdgpu 0000:13:00.0: amdgpu: GART: 1024M 0x0000000000000000 - 0x000000003FFFFFFF
[ 5.826502] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.826503] [drm] RAM width 128bits DDR5
[ 5.826581] amdgpu 0000:13:00.0: amdgpu: amdgpu: 512M of VRAM memory ready
[ 5.826583] amdgpu 0000:13:00.0: amdgpu: amdgpu: 15590M of GTT memory ready.
[ 5.826596] [drm] GART: num cpu pages 262144, num gpu pages 262144
[ 5.826693] [drm] PCIE GART of 1024M enabled (table at 0x000000F41FC00000).
[ 5.826944] amdgpu 0000:13:00.0: amdgpu: [drm] Loading DMUB firmware via PSP: version=0x05002F00
[ 5.827215] [drm] use_doorbell being set to: [true]
[ 5.827229] amdgpu 0000:13:00.0: amdgpu: [VCN instance 0] Found VCN firmware Version ENC: 1.33 DEC: 4 VEP: 0 Revision: 14
[ 5.849240] amdgpu 0000:13:00.0: amdgpu: reserve 0xa00000 from 0xf41e000000 for PSP TMR
[ 5.913461] amdgpu 0000:13:00.0: amdgpu: RAS: optional ras ta ucode is not available
[ 5.919110] amdgpu 0000:13:00.0: amdgpu: RAP: optional rap ta ucode is not available
[ 5.919111] amdgpu 0000:13:00.0: amdgpu: SECUREDISPLAY: optional securedisplay ta ucode is not available
[ 5.920605] amdgpu 0000:13:00.0: amdgpu: SMU is initialized successfully!
[ 5.920875] amdgpu 0000:13:00.0: amdgpu: [drm] Display Core v3.2.351 initialized on DCN 3.1.5
[ 5.920877] amdgpu 0000:13:00.0: amdgpu: [drm] DP-HDMI FRL PCON supported
[ 5.921527] amdgpu 0000:13:00.0: amdgpu: [drm] DMUB hardware initialized: version=0x05002F00
[ 5.924265] amdgpu 0000:13:00.0: amdgpu: [drm] HDMI-A-3: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924304] amdgpu 0000:13:00.0: amdgpu: [drm] DP-3: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924354] amdgpu 0000:13:00.0: amdgpu: [drm] DP-4: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924605] amdgpu 0000:13:00.0: amdgpu: [drm] DP-5: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924899] amdgpu 0000:13:00.0: amdgpu: kiq ring mec 2 pipe 1 q 0
[ 5.927770] kfd kfd: amdgpu: Allocated 3969056 bytes on gart
[ 5.927776] kfd kfd: amdgpu: Total number of KFD nodes to be created: 1
[ 5.927907] amdgpu: Virtual CRAT table created for GPU
[ 5.928563] amdgpu: Topology: Add dGPU node [0x164e:0x1002]
[ 5.928565] kfd kfd: amdgpu: added device 1002:164e
[ 5.928573] amdgpu 0000:13:00.0: amdgpu: SE 1, SH per SE 1, CU per SH 2, active_cu_number 2
[ 5.928576] amdgpu 0000:13:00.0: amdgpu: ring gfx_0.0.0 uses VM inv eng 0 on hub 0
[ 5.928577] amdgpu 0000:13:00.0: amdgpu: ring gfx_0.1.0 uses VM inv eng 1 on hub 0
[ 5.928578] amdgpu 0000:13:00.0: amdgpu: ring comp_1.0.0 uses VM inv eng 4 on hub 0
[ 5.928580] amdgpu 0000:13:00.0: amdgpu: ring comp_1.1.0 uses VM inv eng 5 on hub 0
[ 5.928581] amdgpu 0000:13:00.0: amdgpu: ring comp_1.2.0 uses VM inv eng 6 on hub 0
[ 5.928582] amdgpu 0000:13:00.0: amdgpu: ring comp_1.3.0 uses VM inv eng 7 on hub 0
[ 5.928583] amdgpu 0000:13:00.0: amdgpu: ring comp_1.0.1 uses VM inv eng 8 on hub 0
[ 5.928584] amdgpu 0000:13:00.0: amdgpu: ring comp_1.1.1 uses VM inv eng 9 on hub 0
[ 5.928585] amdgpu 0000:13:00.0: amdgpu: ring comp_1.2.1 uses VM inv eng 10 on hub 0
[ 5.928586] amdgpu 0000:13:00.0: amdgpu: ring comp_1.3.1 uses VM inv eng 11 on hub 0
[ 5.928587] amdgpu 0000:13:00.0: amdgpu: ring kiq_0.2.1.0 uses VM inv eng 12 on hub 0
[ 5.928588] amdgpu 0000:13:00.0: amdgpu: ring sdma0 uses VM inv eng 13 on hub 0
[ 5.928589] amdgpu 0000:13:00.0: amdgpu: ring vcn_dec_0 uses VM inv eng 0 on hub 8
[ 5.928591] amdgpu 0000:13:00.0: amdgpu: ring vcn_enc_0.0 uses VM inv eng 1 on hub 8
[ 5.928592] amdgpu 0000:13:00.0: amdgpu: ring vcn_enc_0.1 uses VM inv eng 4 on hub 8
[ 5.928593] amdgpu 0000:13:00.0: amdgpu: ring jpeg_dec uses VM inv eng 5 on hub 8
[ 5.928841] amdgpu 0000:13:00.0: amdgpu: Runtime PM not available
[ 5.929201] amdgpu 0000:13:00.0: [drm] Registered 4 planes with drm panic
[ 5.929203] [drm] Initialized amdgpu 3.64.0 for 0000:13:00.0 on minor 0
[ 5.931297] amdgpu 0000:13:00.0: [drm] Cannot find any crtc or sizes
[ 6.167707] systemd-journald[254]: Received SIGTERM from PID 1 (systemd).
[ 6.535689] systemd[1]: systemd 260.1-2-arch running in system mode (+PAM +AUDIT -SELINUX +APPARMOR -IMA +IPE +SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF +XKBCOMMON +UTMP +LIBARCHIVE)
[ 6.535697] systemd[1]: Detected architecture x86-64.
[ 6.545850] systemd[1]: Hostname set to <zeus>.
[ 6.706381] systemd[1]: bpf-restrict-fs: LSM BPF program attached
[ 6.807934] zram: Added device: zram0
[ 6.961878] systemd[1]: initrd-switch-root.service: Deactivated successfully.
[ 6.962021] systemd[1]: Stopped Switch Root.
[ 6.962693] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1.
[ 6.963168] systemd[1]: Created slice Slice /system/dirmngr.
[ 6.963568] systemd[1]: Created slice Slice /system/getty.
[ 6.963980] systemd[1]: Created slice Slice /system/gpg-agent.
[ 6.964368] systemd[1]: Created slice Slice /system/gpg-agent-browser.
[ 6.964751] systemd[1]: Created slice Slice /system/gpg-agent-extra.
[ 6.965137] systemd[1]: Created slice Slice /system/gpg-agent-ssh.
[ 6.965523] systemd[1]: Created slice Slice /system/keyboxd.
[ 6.965906] systemd[1]: Created slice Slice /system/kmsconvt.
[ 6.966286] systemd[1]: Created slice Slice /system/modprobe.
[ 6.966674] systemd[1]: Created slice Slice /system/systemd-fsck.
[ 6.967493] systemd[1]: Created slice Slice /system/systemd-zram-setup.
[ 6.967846] systemd[1]: Created slice User and Session Slice.
[ 6.967918] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
[ 6.967974] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
[ 6.968176] systemd[1]: Set up automount Arbitrary Executable File Formats File System Automount Point.
[ 6.968227] systemd[1]: Expecting device /dev/disk/by-partlabel/zeus-linux-boot...
[ 6.968256] systemd[1]: Expecting device /dev/disk/by-partlabel/zeus-linux-root...
[ 6.968286] systemd[1]: Expecting device /dev/zram0...
[ 6.968318] systemd[1]: Reached target Image Downloads.
[ 6.968352] systemd[1]: Stopped target Switch Root.
[ 6.968383] systemd[1]: Stopped target Initrd File Systems.
[ 6.968412] systemd[1]: Stopped target Initrd Root File System.
[ 6.968442] systemd[1]: Reached target Local Integrity Protected Volumes.
[ 6.968482] systemd[1]: Reached target Path Units.
[ 6.968511] systemd[1]: Reached target Remote File Systems.
[ 6.968542] systemd[1]: Reached target Slice Units.
[ 6.968580] systemd[1]: Reached target Local Verity Protected Volumes.
[ 6.968659] systemd[1]: Listening on Device-mapper event daemon FIFOs.
[ 6.969195] systemd[1]: Listening on Query the User Interactively for a Password.
[ 6.970474] systemd[1]: Listening on Process Core Dump Socket.
[ 6.970838] systemd[1]: Listening on Credential Encryption/Decryption.
[ 6.971325] systemd[1]: Listening on Factory Reset Management.
[ 6.972091] systemd[1]: Listening on Console Output Muting Service Socket.
[ 6.972440] systemd[1]: Listening on Network Management Resolve Hook Socket.
[ 6.972765] systemd[1]: Listening on Network Management Metrics Varlink Socket.
[ 6.973100] systemd[1]: Listening on Network Management Varlink Socket.
[ 6.973412] systemd[1]: Listening on Network Management Netlink Socket.
[ 6.973782] systemd[1]: TPM PCR Measurements skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.973794] systemd[1]: Make TPM PCR Policy skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.974153] systemd[1]: Listening on Disk Repartitioning Service Socket.
[ 6.974443] systemd[1]: Listening on Resolve Monitor Varlink Socket.
[ 6.974713] systemd[1]: Listening on Resolve Service Varlink Socket.
[ 6.974983] systemd[1]: Listening on udev Control Socket.
[ 6.975256] systemd[1]: Listening on udev Varlink Socket.
[ 6.975529] systemd[1]: Listening on User Database Manager Socket.
[ 6.976679] systemd[1]: Mounting Huge Pages File System...
[ 6.977496] systemd[1]: Mounting POSIX Message Queue File System...
[ 6.978299] systemd[1]: Mounting Kernel Debug File System...
[ 6.979103] systemd[1]: Mounting Kernel Trace File System...
[ 6.980130] systemd[1]: Starting Create List of Static Device Nodes...
[ 6.980415] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
[ 6.980988] systemd[1]: Mounting Kernel Configuration File System...
[ 6.981237] systemd[1]: Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm
[ 6.981256] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse
[ 6.981836] systemd[1]: Mounting FUSE Control File System...
[ 6.982700] systemd[1]: Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67
[ 6.984143] systemd[1]: Starting Journal Service...
[ 6.985472] systemd[1]: Starting Load Kernel Modules...
[ 6.986331] systemd[1]: Starting Generate Network Units from Kernel Command Line...
[ 6.986577] systemd[1]: TPM PCR Machine ID Measurement skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.987188] systemd[1]: Starting Remount Root and Kernel File Systems...
[ 6.987448] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.988005] systemd[1]: Starting Load udev Rules from Credentials...
[ 6.988772] systemd[1]: Starting Coldplug All udev Devices...
[ 6.990573] systemd[1]: Mounted Huge Pages File System.
[ 6.990876] systemd[1]: Mounted POSIX Message Queue File System.
[ 6.991168] systemd[1]: Mounted Kernel Debug File System.
[ 6.991470] systemd[1]: Mounted Kernel Trace File System.
[ 6.991877] systemd[1]: Finished Create List of Static Device Nodes.
[ 6.992231] systemd[1]: Mounted Kernel Configuration File System.
[ 6.992568] systemd[1]: Mounted FUSE Control File System.
[ 6.993063] systemd[1]: Finished Generate Network Units from Kernel Command Line.
[ 6.994358] systemd[1]: Starting Create Static Device Nodes in /dev gracefully...
[ 6.994894] systemd-journald[599]: Collecting audit messages is disabled.
[ 6.995079] systemd[1]: Finished Load udev Rules from Credentials.
[ 6.996005] systemd[1]: Finished Remount Root and Kernel File Systems.
[ 6.996159] sd 5:0:0:0: Attached scsi generic sg0 type 0
[ 6.996188] sd 8:0:0:0: Attached scsi generic sg1 type 0
[ 6.996319] i2c_dev: i2c /dev entries driver
[ 6.996541] systemd[1]: Rebuild Hardware Database skipped, unmet condition check ConditionNeedsUpdate=/etc
[ 6.997049] Asymmetric key parser 'pkcs8' registered
[ 6.997181] systemd[1]: Starting Load/Save OS Random Seed...
[ 6.997529] systemd[1]: TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.997542] systemd[1]: TPM PCR NvPCR Initialization Separator skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.997550] systemd[1]: Reached target Local Encrypted Volumes.
[ 6.997792] systemd[1]: TPM NvPCR Product ID Measurement skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.998031] systemd[1]: Finished Load Kernel Modules.
[ 6.998961] systemd[1]: Starting Apply Kernel Variables...
[ 6.999990] systemd[1]: Started Journal Service.
[ 8.226164] ccp 0000:13:00.2: enabling device (0000 -> 0002)
[ 8.227534] ccp 0000:13:00.2: tee enabled
[ 8.228953] ccp 0000:13:00.2: psp enabled
[ 8.244553] zram0: detected capacity change from 0 to 33554432
[ 8.250600] mc: Linux media interface: v0.10
[ 8.278570] mousedev: PS/2 mouse device common for all mice
[ 8.291679] VFIO - User Level meta-driver version: 0.3
[ 8.332611] snd_hda_intel 0000:03:00.1: enabling device (0000 -> 0002)
[ 8.333879] snd_hda_intel 0000:03:00.1: Handle vga_switcheroo audio client
[ 8.333882] snd_hda_intel 0000:03:00.1: Force to non-snoop mode
[ 8.335199] snd_hda_intel 0000:13:00.1: enabling device (0000 -> 0002)
[ 8.336254] snd_hda_intel 0000:13:00.1: Handle vga_switcheroo audio client
[ 8.336754] snd_hda_intel 0000:13:00.6: enabling device (0000 -> 0002)
[ 8.341175] snd_hda_intel 0000:13:00.6: no codecs found!
[ 8.341929] Adding 16777212k swap on /dev/zram0. Priority:100 extents:1 across:16777212k SSDsc
[ 8.362100] snd_hda_intel 0000:03:00.1: bound 0000:03:00.0 (ops amdgpu_dm_audio_component_bind_ops [amdgpu])
[ 8.364350] snd_hda_intel 0000:13:00.1: bound 0000:13:00.0 (ops amdgpu_dm_audio_component_bind_ops [amdgpu])
[ 8.447583] input: HD-Audio Generic HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input30
[ 8.447651] input: HD-Audio Generic HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input31
[ 8.447694] input: HD-Audio Generic HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input32
[ 8.447757] input: HD-Audio Generic HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input33
[ 8.447762] input: HDA ATI HDMI HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input26
[ 8.447970] input: HDA ATI HDMI HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input27
[ 8.448012] input: HDA ATI HDMI HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input28
[ 8.448056] input: HDA ATI HDMI HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input29
[ 8.448309] input: PC Speaker as /devices/platform/pcspkr/input/input34
[ 8.448920] RAPL PMU: API unit is 2^-32 Joules, 2 fixed counters, 163840 ms ovfl timer
[ 8.448923] RAPL PMU: hw unit of domain package 2^-16 Joules
[ 8.448924] RAPL PMU: hw unit of domain core 2^-16 Joules
[ 8.455008] piix4_smbus 0000:00:14.0: SMBus Host Controller at 0xb00, revision 0
[ 8.455011] piix4_smbus 0000:00:14.0: Using register 0x02 for SMBus port selection
[ 8.456345] i2c i2c-16: Successfully instantiated SPD at 0x51
[ 8.457584] i2c i2c-16: Successfully instantiated SPD at 0x53
[ 8.457650] piix4_smbus 0000:00:14.0: Auxiliary SMBus Host Controller at 0xb20
[ 8.465419] Bluetooth: Core ver 2.22
[ 8.465461] NET: Registered PF_BLUETOOTH protocol family
[ 8.465463] Bluetooth: HCI device and connection manager initialized
[ 8.465467] Bluetooth: HCI socket layer initialized
[ 8.465469] Bluetooth: L2CAP socket layer initialized
[ 8.465472] Bluetooth: SCO socket layer initialized
[ 8.467857] sp5100_tco: SP5100/SB800 TCO WatchDog Timer Driver
[ 8.467906] sp5100-tco sp5100-tco: Using 0xfeb00000 for watchdog MMIO address
[ 8.467961] sp5100-tco sp5100-tco: initialized. heartbeat=60 sec (nowayout=0)
[ 8.476928] spd5118 16-0051: DDR5 temperature sensor: vendor 0x00:0xb3 revision 2.2
[ 8.478524] usbcore: registered new interface driver btusb
[ 8.482242] spd5118 16-0053: DDR5 temperature sensor: vendor 0x00:0xb3 revision 2.2
[ 8.491685] Bluetooth: hci0: HW/SW Version: 0x008a008a, Build Time: 20260224103448
[ 8.606984] kvm_amd: TSC scaling supported
[ 8.606986] kvm_amd: Nested Virtualization enabled
[ 8.606987] kvm_amd: Nested Paging enabled
[ 8.606988] kvm_amd: LBR virtualization supported
[ 8.606990] kvm_amd: AVIC enabled
[ 8.606990] kvm_amd: x2AVIC enabled
[ 8.606991] kvm_amd: Virtual GIF supported
[ 8.606992] kvm_amd: Virtual NMI enabled
[ 8.653287] Bluetooth: hci0: Failed to send wmt func ctrl (-22)
[ 8.653647] Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported.
[ 8.739122] amd_atl: AMD Address Translation Library initialized
[ 8.739432] intel_rapl_common: Found RAPL domain package
[ 8.739434] intel_rapl_common: Found RAPL domain core
[ 8.819378] input: Logitech G903 LS as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.2/0003:046D:C539.000A/0003:046D:4087.000D/input/input35
[ 8.963934] logitech-hidpp-device 0003:046D:4087.000D: input,hidraw12: USB HID v1.11 Keyboard [Logitech G903 LS] on usb-0000:13:00.3-2.4/input2:1
[ 9.023960] systemd-journald[599]: Received client request to flush runtime journal.
[ 9.024730] Adding 67108860k swap on /swap/swapfile. Priority:-2 extents:125 across:3515892744k SS
[ 10.157938] nct6683: Found NCT6687D or compatible chip at 0x4e:0xa20
[ 10.161846] nct6683 nct6683.2592: NCT6687D EC firmware version 0.0 build 09/27/22
[ 10.218454] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 10.221106] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 10.221196] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
[ 10.221649] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 10.221652] cfg80211: failed to load regulatory.db
[ 13.967795] usbcore: registered new interface driver snd-usb-audio
[ 14.077230] r8169 0000:0e:00.0: enabling device (0000 -> 0003)
[ 14.085969] r8169 0000:0e:00.0 eth0: RTL8125B, d8:43:ae:4d:f6:19, XID 641, IRQ 87
[ 14.085973] r8169 0000:0e:00.0 eth0: jumbo features [frames: 16362 bytes, tx checksumming: ko]
[ 14.087267] mt7921e 0000:0f:00.0: enabling device (0000 -> 0002)
[ 14.089510] r8169 0000:0e:00.0 enp14s0: renamed from eth0
[ 14.092317] mt7921e 0000:0f:00.0: ASIC revision: 79220010
[ 14.120402] Realtek Internal NBASE-T PHY r8169-0-e00:00: attached PHY driver (mii_bus:phy_addr=r8169-0-e00:00, irq=MAC)
[ 14.166884] mt7921e 0000:0f:00.0: HW/SW Version: 0x8a108a10, Build Time: 20260224103145a
[ 14.181633] mt7921e 0000:0f:00.0: WM Firmware Version: ____000000, Build Time: 20260224103233
[ 14.227869] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 14.227871] Bluetooth: BNEP filters: protocol multicast
[ 14.227874] Bluetooth: BNEP socket layer initialized
[ 14.300844] r8169 0000:0e:00.0 enp14s0: Link is Down
[ 17.677636] r8169 0000:0e:00.0 enp14s0: Link is Up - 2.5Gbps/Full - flow control off
[ 39.622247] logitech-hidpp-device 0003:046D:4087.000D: HID++ 4.2 device connected.
^ permalink raw reply
* [Bug 221521] Bluetooth: btusb/mt7921 - Failed to send wmt func ctrl (-22) on MediaTek MT7921 combo adapter
From: bugzilla-daemon @ 2026-05-15 18:58 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221521-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221521
--- Comment #7 from erpumper@gmail.com ---
Hello I say kernel 7.1 rc error panel
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* Re: [PATCH v2 2/2] Bluetooth: MGMT: Add SCI setting bit(25)
From: kernel test robot @ 2026-05-15 18:08 UTC (permalink / raw)
To: Luiz Augusto von Dentz, linux-bluetooth; +Cc: llvm, oe-kbuild-all
In-Reply-To: <20260506160651.1585012-2-luiz.dentz@gmail.com>
Hi Luiz,
kernel test robot noticed the following build warnings:
[auto build test WARNING on bluetooth-next/master]
[also build test WARNING on bluetooth/master linus/master v7.1-rc3 next-20260508]
[If your patch is applied to the wrong git tree, kindly drop us a note.
And when submitting patch, we suggest to use '--base' as documented in
https://git-scm.com/docs/git-format-patch#_base_tree_information]
url: https://github.com/intel-lab-lkp/linux/commits/Luiz-Augusto-von-Dentz/Bluetooth-MGMT-Add-SCI-setting-bit-25/20260515-083218
base: https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git master
patch link: https://lore.kernel.org/r/20260506160651.1585012-2-luiz.dentz%40gmail.com
patch subject: [PATCH v2 2/2] Bluetooth: MGMT: Add SCI setting bit(25)
config: x86_64-rhel-9.4-rust (https://download.01.org/0day-ci/archive/20260515/202605152004.a78xmK2S-lkp@intel.com/config)
compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261)
rustc: rustc 1.88.0 (6b00bc388 2025-06-23)
reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20260515/202605152004.a78xmK2S-lkp@intel.com/reproduce)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <lkp@intel.com>
| Closes: https://lore.kernel.org/oe-kbuild-all/202605152004.a78xmK2S-lkp@intel.com/
All warnings (new ones prefixed by >>):
>> net/bluetooth/hci_sync.c:4942:7: warning: logical not is only applied to the left hand side of this comparison [-Wlogical-not-parentheses]
4942 | if (!min == 0 || grp->min < min)
| ^ ~~
net/bluetooth/hci_sync.c:4942:7: note: add parentheses after the '!' to evaluate the comparison first
4942 | if (!min == 0 || grp->min < min)
| ^
| ( )
net/bluetooth/hci_sync.c:4942:7: note: add parentheses around left hand side expression to silence this warning
4942 | if (!min == 0 || grp->min < min)
| ^
| ( )
net/bluetooth/hci_sync.c:4945:7: warning: logical not is only applied to the left hand side of this comparison [-Wlogical-not-parentheses]
4945 | if (!max == 0 || grp->max > max)
| ^ ~~
net/bluetooth/hci_sync.c:4945:7: note: add parentheses after the '!' to evaluate the comparison first
4945 | if (!max == 0 || grp->max > max)
| ^
| ( )
net/bluetooth/hci_sync.c:4945:7: note: add parentheses around left hand side expression to silence this warning
4945 | if (!max == 0 || grp->max > max)
| ^
| ( )
2 warnings generated.
vim +4942 net/bluetooth/hci_sync.c
4921
4922 /* Set Default Connection Rate Parameters if command is supported, SCI feature
4923 * bit is marked as supported and at least one of the supported SCI groups
4924 * exists.
4925 */
4926 static int hci_le_set_def_rate_sync(struct hci_dev *hdev)
4927 {
4928 struct hci_cp_le_set_def_rate cp;
4929 struct sci_group *grp, *tmp;
4930 __u16 min = 0, max = 0;
4931
4932 if (!(hdev->commands[48] & BIT(6)) || !le_sci_capable(hdev) ||
4933 list_empty(&hdev->sci_groups))
4934 return 0;
4935
4936 memset(&cp, 0, sizeof(cp));
4937
4938 /* Iterate over the SCI groups and find the widest supported connection
4939 * interval range to maximize compatibility with peer devices.
4940 */
4941 list_for_each_entry_safe(grp, tmp, &hdev->sci_groups, list) {
> 4942 if (!min == 0 || grp->min < min)
4943 min = grp->min;
4944
4945 if (!max == 0 || grp->max > max)
4946 max = grp->max;
4947 }
4948
4949 cp.interval_min = cpu_to_le16(min);
4950 cp.interval_max = cpu_to_le16(max);
4951
4952 /* HOG 1.2 Table 7.4. Modes with recommended parameter values suggests
4953 * subrate 1-4 for all modes so use that as default.
4954 */
4955 cp.subrate_min = cpu_to_le16(0x0001);
4956 cp.subrate_max = cpu_to_le16(0x0004);
4957
4958 /* HIP 1.2 Table 7.5. Modes with recommended parameter values suggests
4959 * max latency of 0 for all modes expect low power.
4960 */
4961 cp.max_latency = 0x0000;
4962
4963 /* HIP 1.2 Table 7.5. Modes with recommended parameter values suggests
4964 * continuation number 1 for full range.
4965 */
4966 cp.cont_num = cpu_to_le16(0x0001);
4967
4968 /* HOG 1.2 Table 7.4. Modes with recommended parameter values states
4969 * that link supervision timeout should be: Greater than or equal to
4970 * (1 + Peripheral Latency) x Subrate max x Connection Interval max x 2.
4971 */
4972 cp.supv_timeout = cpu_to_le16((1 + 0) * 0x0004 * max * 2 / 10);
4973
4974 cp.min_ce_len = cpu_to_le16(min);
4975 cp.max_ce_len = cpu_to_le16(max);
4976
4977 return __hci_cmd_sync_status(hdev, HCI_OP_LE_SET_DEF_RATE,
4978 sizeof(cp), &cp, HCI_CMD_TIMEOUT);
4979 }
4980
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
^ permalink raw reply
* [bluez/bluez]
From: BluezTestBot @ 2026-05-15 17:55 UTC (permalink / raw)
To: linux-bluetooth
Branch: refs/heads/1081668
Home: https://github.com/bluez/bluez
To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications
^ permalink raw reply
* Re: [PATCH net] Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
From: patchwork-bot+bluetooth @ 2026-05-15 17:40 UTC (permalink / raw)
To: David Carlier
Cc: netdev, linux-bluetooth, stable, marcel, luiz.dentz, linux-kernel
In-Reply-To: <20260515062525.57603-1-devnexen@gmail.com>
Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
On Fri, 15 May 2026 07:25:25 +0100 you wrote:
> ISO data PDUs carry a packet-boundary flag indicating START, CONT, END
> or SINGLE. The ISO_CONT branch of iso_recv() guards against a missing
> ISO_START by checking conn->rx_len before touching conn->rx_skb, but
> ISO_END does not.
>
> If a peer sends an ISO_END as the first packet on a fresh ISO
> connection, conn->rx_skb is still NULL and conn->rx_len is zero, so
> skb_put(conn->rx_skb, ...) dereferences NULL and oopses. For BIS,
> where receivers sync to a broadcaster without pairing, any broadcaster
> on the air can trigger this.
>
> [...]
Here is the summary with links:
- [net] Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
https://git.kernel.org/bluetooth/bluetooth-next/c/6aba94a49bc9
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply
* [bluez/bluez] 4f4dba: test-rap: Fix gatt_ccc_read_cb on big-endian
From: Luiz Augusto von Dentz @ 2026-05-15 16:18 UTC (permalink / raw)
To: linux-bluetooth
Branch: refs/heads/master
Home: https://github.com/bluez/bluez
Commit: 4f4dba4a7863d4a4a338dd4c1a36a55de9da96a8
https://github.com/bluez/bluez/commit/4f4dba4a7863d4a4a338dd4c1a36a55de9da96a8
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: 2026-05-14 (Thu, 14 May 2026)
Changed paths:
M unit/test-rap.c
Log Message:
-----------
test-rap: Fix gatt_ccc_read_cb on big-endian
Reading CCC values shall return little-endian 16 bits, not native
format.
To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications
^ permalink raw reply
* Re: [PATCH v4] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: Luiz Augusto von Dentz @ 2026-05-15 16:08 UTC (permalink / raw)
To: w15303746062
Cc: pmenzel, marcel, linux-bluetooth, linux-serial, linux-kernel,
greg, stable, Mingyu Wang
In-Reply-To: <20260515140548.393865-1-w15303746062@163.com>
Hi,
On Fri, May 15, 2026 at 10:06 AM <w15303746062@163.com> wrote:
>
> From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
>
> A Use-After-Free (UAF) vulnerability and a subsequent kernel panic were
> observed in hci_uart_write_work() due to a race condition between the
> initialization of the HCI UART line discipline and concurrent TTY hangup.
>
> This issue was triggered by our custom device emulation and fuzzing
> framework (DevGen) on the v6.18 kernel. Due to the highly timing-dependent
> nature of this race condition (requiring a precise interleaving of
> TIOCVHANGUP and protocol setup), Syzkaller failed to extract a reliable
> standalone C reproducer (reproducer is too unreliable: 0.00).
>
> The crash trace is as follows:
> ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940
> WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
> ...
> Call Trace:
> <TASK>
> debug_check_no_obj_freed+0x3ec/0x520
> kfree+0x3f0/0x6c0
> hci_uart_tty_close+0x127/0x2a0
> tty_ldisc_close+0x113/0x1a0
> tty_ldisc_kill+0x8e/0x150
> tty_ldisc_hangup+0x3c1/0x730
> __tty_hangup.part.0+0x3fd/0x8a0
> tty_ioctl+0x120f/0x1690
> __x64_sys_ioctl+0x18f/0x210
> do_syscall_64+0xcb/0xfa0
> entry_SYSCALL_64_after_hwframe+0x77/0x7f
> </TASK>
>
> The issue arises because the workqueues (init_ready and write_work) are
> only flushed/cancelled if the HCI_UART_PROTO_READY flag is set. However,
> during the protocol initialization phase (HCI_UART_PROTO_INIT), the
> underlying protocol may schedule work. If a hangup occurs before the setup
> completes and the READY flag is set, hci_uart_tty_close() skips the
> teardown of these workqueues and proceeds to free the `hu` struct. When
> the scheduled work executes later, it blindly dereferences the freed `hu`
> struct.
>
> Fix this by moving the workqueue teardown outside the HCI_UART_PROTO_READY
> check. Furthermore, use disable_work_sync() instead of cancel_work_sync()
> to unconditionally disable the works. This ensures that any pending works
> are cancelled and no new submissions can occur before the hci_uart
> structure is freed. Note that hu->init_ready and hu->write_work are
> initialized in hci_uart_tty_open(), so it is always safe to call
> disable_work_sync() on them in hci_uart_tty_close(), even if the protocol
> was never fully attached.
>
> Fixes: 3b799254cf6f ("Bluetooth: hci_uart: Cancel init work before unregistering")
> Cc: stable@vger.kernel.org
> Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
> ---
> Changes in v4:
> - Adopted Luiz's suggestion to use disable_work_sync() instead of
> cancel_work_sync() to prevent new work submissions during teardown.
>
> Changes in v3:
> - Added 'Cc: stable' tag as requested by the stable bot.
>
> Changes in v2:
> - Added KASAN/ODEBUG crash trace.
>
> drivers/bluetooth/hci_ldisc.c | 12 +++++++++---
> 1 file changed, 9 insertions(+), 3 deletions(-)
>
> diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
> index 275ea865bc29..333c1e1503e8 100644
> --- a/drivers/bluetooth/hci_ldisc.c
> +++ b/drivers/bluetooth/hci_ldisc.c
> @@ -544,14 +544,20 @@ static void hci_uart_tty_close(struct tty_struct *tty)
> if (hdev)
> hci_uart_close(hdev);
>
> + /*
> + * Disable workqueues unconditionally before freeing the hu
> + * struct, as they might be active during the PROTO_INIT phase.
> + * Using disable_work_sync() instead of cancel_work_sync()
> + * ensures no new submissions can occur.
> + */
> + disable_work_sync(&hu->init_ready);
> + disable_work_sync(&hu->write_work);
Looks like sashiko has a problem with these being after hci_uart_close:
https://sashiko.dev/#/patchset/20260515140548.393865-1-w15303746062%40163.com
> if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
> percpu_down_write(&hu->proto_lock);
> clear_bit(HCI_UART_PROTO_READY, &hu->flags);
> percpu_up_write(&hu->proto_lock);
>
> - cancel_work_sync(&hu->init_ready);
> - cancel_work_sync(&hu->write_work);
> -
> if (hdev) {
> if (test_bit(HCI_UART_REGISTERED, &hu->flags))
> hci_unregister_dev(hdev);
> --
> 2.34.1
>
--
Luiz Augusto von Dentz
^ permalink raw reply
* Re: [PATCH] Bluetooth: bnep: Fix UAF read of dev->name
From: patchwork-bot+bluetooth @ 2026-05-15 15:50 UTC (permalink / raw)
To: Jann Horn; +Cc: marcel, luiz.dentz, linux-bluetooth, linux-kernel, stable
In-Reply-To: <20260512-bnep-add-uaf-v1-1-f62ff8f61d50@google.com>
Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
On Tue, 12 May 2026 22:15:39 +0200 you wrote:
> bnep_add_connection() needs to keep holding the bnep_session_sem while
> reading dev->name (just like bnep_get_connlist() does); otherwise the
> bnep_session() thread can concurrently free the net_device, which can for
> example be triggered by a concurrent bnep_del_connection().
>
> (This UAF is fairly uninteresting from a security perspective;
> calling bnep_add_connection() requires passing a capable(CAP_NET_ADMIN)
> check. It also requires completely tearing down a netdev during a fairly
> tight race window.)
>
> [...]
Here is the summary with links:
- Bluetooth: bnep: Fix UAF read of dev->name
https://git.kernel.org/bluetooth/bluetooth-next/c/ffeee619a13b
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply
* Re: [PATCH v2] Bluetooth: btintel_pcie: Fix incorrect MAC access programming
From: patchwork-bot+bluetooth @ 2026-05-15 15:50 UTC (permalink / raw)
To: Kiran K; +Cc: linux-bluetooth, ravishankar.srivatsa, chethan.tumkur.narayan
In-Reply-To: <20260514190248.1275299-1-kiran.k@intel.com>
Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
On Fri, 15 May 2026 00:32:48 +0530 you wrote:
> btintel_pcie_get_mac_access() and btintel_pcie_release_mac_access()
> were programming STOP_MAC_ACCESS_DIS and XTAL_CLK_REQ in addition to
> the MAC_ACCESS_REQ handshake. These bits are not part of the host
> MAC-access handshake on the supported parts; the driver was
> programming them incorrectly. Drop the writes so the register update
> contains only the bits the controller actually consumes.
>
> [...]
Here is the summary with links:
- [v2] Bluetooth: btintel_pcie: Fix incorrect MAC access programming
https://git.kernel.org/bluetooth/bluetooth-next/c/663fc68494ce
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply
* Re: [PATCH v1] Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE
From: patchwork-bot+bluetooth @ 2026-05-15 15:50 UTC (permalink / raw)
To: Luiz Augusto von Dentz; +Cc: linux-bluetooth
In-Reply-To: <20260514134224.1396820-1-luiz.dentz@gmail.com>
Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
On Thu, 14 May 2026 09:42:24 -0400 you wrote:
> From: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
>
> This fixes not setting the bit for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE
> when extended features bit is set otherwise the controller may not
> generate HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE causing
> hci_le_read_all_remote_features_sync to timeout waiting for it.
>
> [...]
Here is the summary with links:
- [v1] Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE
https://git.kernel.org/bluetooth/bluetooth-next/c/085d13bf8612
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply
* RE: Bluetooth: MGMT: validate Add Extended Advertising Data length
From: bluez.test.bot @ 2026-05-15 15:46 UTC (permalink / raw)
To: linux-bluetooth, michael.bommarito
In-Reply-To: <20260515143819.1157807-1-michael.bommarito@gmail.com>
[-- Attachment #1: Type: text/plain, Size: 992 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1095484
---Test result---
Test Summary:
CheckPatch PASS 0.53 seconds
GitLint PASS 0.22 seconds
SubjectPrefix PASS 0.08 seconds
BuildKernel PASS 24.24 seconds
CheckAllWarning PASS 26.60 seconds
CheckSparse PASS 25.46 seconds
BuildKernel32 PASS 23.27 seconds
TestRunnerSetup PASS 519.32 seconds
TestRunner_mgmt-tester PASS 2022.40 seconds
TestRunner_mesh-tester PASS 59.05 seconds
IncrementalBuild PASS 22.61 seconds
https://github.com/bluez/bluetooth-next/pull/197
---
Regards,
Linux Bluetooth
^ permalink raw reply
* Re: [v4] Bluetooth: Add Synaptics 4384 Chip Support
From: Luiz Augusto von Dentz @ 2026-05-15 15:42 UTC (permalink / raw)
To: linux-bluetooth; +Cc: kaihsin.chung
In-Reply-To: <6a0400bf.0c0a0220.340460.a21a@mx.google.com>
Hi,
On Wed, May 13, 2026 at 12:40 AM <bluez.test.bot@gmail.com> wrote:
>
> This is automated email and please do not reply to this email!
>
> Dear submitter,
>
> Thank you for submitting the patches to the linux bluetooth mailing list.
> This is a CI test results with your patch series:
> PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1093859
>
> ---Test result---
>
> Test Summary:
> CheckPatch FAIL 1.05 seconds
> GitLint PASS 0.33 seconds
> SubjectPrefix PASS 0.35 seconds
> BuildKernel PASS 25.97 seconds
> CheckAllWarning PASS 29.42 seconds
> CheckSparse PASS 27.85 seconds
> BuildKernel32 PASS 25.96 seconds
> TestRunnerSetup PASS 537.07 seconds
> IncrementalBuild PASS 25.45 seconds
>
> Details
> ##############################
> Test: CheckPatch - FAIL
> Desc: Run checkpatch.pl script
> Output:
> [v4] Bluetooth: Add Synaptics 4384 Chip Support
> WARNING: DT compatible string "brcm,bcm4384-bt" appears un-documented -- check ./Documentation/devicetree/bindings/
> #160: FILE: drivers/bluetooth/hci_bcm.c:1612:
> + { .compatible = "brcm,bcm4384-bt" },
Hmm, is this warning something we need to take into consideradion, or
perhaps the compatibility is string is really wrong since it doesn't
match any existing chip?
> WARNING: From:/Signed-off-by: email name mismatch: 'From: Kaihsin Chung <kaihsin.chung@synaptics.com>' != 'Signed-off-by: kaihsin Chung <kaihsin.chung@synaptics.com>'
>
> total: 0 errors, 2 warnings, 31 lines checked
>
> NOTE: For some of the reported defects, checkpatch may be able to
> mechanically convert to the typical style using --fix or --fix-inplace.
>
> /github/workspace/src/patch/14570021.patch has style problems, please review.
>
> NOTE: Ignored message types: UNKNOWN_COMMIT_ID
>
> NOTE: If any of the errors are false positives, please report
> them to the maintainer, see CHECKPATCH in MAINTAINERS.
>
>
>
>
> https://github.com/bluez/bluetooth-next/pull/180
>
> ---
> Regards,
> Linux Bluetooth
>
--
Luiz Augusto von Dentz
^ permalink raw reply
* RE: [v4] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: bluez.test.bot @ 2026-05-15 15:12 UTC (permalink / raw)
To: linux-bluetooth, w15303746062
In-Reply-To: <20260515140548.393865-1-w15303746062@163.com>
[-- Attachment #1: Type: text/plain, Size: 2603 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1095463
---Test result---
Test Summary:
CheckPatch FAIL 0.78 seconds
GitLint FAIL 0.32 seconds
SubjectPrefix PASS 0.13 seconds
BuildKernel PASS 26.60 seconds
CheckAllWarning PASS 29.40 seconds
CheckSparse PASS 27.88 seconds
BuildKernel32 PASS 26.18 seconds
TestRunnerSetup PASS 590.38 seconds
IncrementalBuild PASS 25.47 seconds
Details
##############################
Test: CheckPatch - FAIL
Desc: Run checkpatch.pl script
Output:
[v4] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
WARNING: Prefer a maximum 75 chars per line (possible unwrapped commit description?)
#88:
ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940
total: 0 errors, 1 warnings, 23 lines checked
NOTE: For some of the reported defects, checkpatch may be able to
mechanically convert to the typical style using --fix or --fix-inplace.
/github/workspace/src/patch/14575010.patch has style problems, please review.
NOTE: Ignored message types: UNKNOWN_COMMIT_ID
NOTE: If any of the errors are false positives, please report
them to the maintainer, see CHECKPATCH in MAINTAINERS.
##############################
Test: GitLint - FAIL
Desc: Run gitlint
Output:
[v4] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
WARNING: I3 - ignore-body-lines: gitlint will be switching from using Python regex 'match' (match beginning) to 'search' (match anywhere) semantics. Please review your ignore-body-lines.regex option accordingly. To remove this warning, set general.regex-style-search=True. More details: https://jorisroovers.github.io/gitlint/configuration/#regex-style-search
16: B1 Line exceeds max length (124>80): " ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940"
17: B1 Line exceeds max length (86>80): " WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0"
56: B2 Line has trailing whitespace: "- Adopted Luiz's suggestion to use disable_work_sync() instead of "
https://github.com/bluez/bluetooth-next/pull/196
---
Regards,
Linux Bluetooth
^ permalink raw reply
* Re: [GIT PULL] bluetooth 2026-05-14
From: Thorsten Leemhuis @ 2026-05-15 15:10 UTC (permalink / raw)
To: davem, kuba
Cc: linux-bluetooth, netdev, Luiz Augusto von Dentz,
Linux kernel regressions list, Linus Torvalds, Greg KH
In-Reply-To: <20260514172340.1515042-1-luiz.dentz@gmail.com>
[+Linus +Greg]
On 5/14/26 19:23, Luiz Augusto von Dentz wrote:
> The following changes since commit c78bdba7b9666020c0832150a4fc4c0aebc7c6ac:
>
> net: phy: DP83TC811: add reading of abilities (2026-05-14 15:17:12 +0200)
>
> are available in the Git repository at:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2026-05-14
>
> for you to fetch changes up to 375ba7484132662a4a8c7547d088fb6275c00282:
>
> Bluetooth: hci_qca: Convert timeout from jiffies to ms (2026-05-14 09:58:08 -0400)
It seems this PR sadly came too late for this week's net PR to mainline
that was merged yesterday.
TWIMC, from my point of view, it would be great if we somehow could
still get the changes from this PR or at least the btmtk fix it
contains[1] to mainline this week before -rc4, as it is fixing a
regression known since 2026-04-24 that at least five people encountered
with mainline since -rc3 due to 634a4408c0615c ("Bluetooth: btmtk:
validate WMT event SKB length before struct access") [006b9943b982 in
-next].
Another reason: Greg a few hours ago backported the culprit for the
regression to v7.0.7, v6.18.30, and v6.12.88, which led to a bunch of
other reports coming in[3]. Greg could, of course, revert it, but
usually he prefers to just merge the fix. But of course the fix must
first hit mainline (or at least -next) -- and that might only happen
next Thursday, as there usually is only one net PR per week. Luiz even
wanted to "expedite a PR to have it fixed asap"[4], but that didn't work
out afaics, hence this mail.
Ciao, Thorsten
[1] btmtk: accept too short WMT FUNC_CTRL events – also available here:
https://lore.kernel.org/all/770d36b07311bf88210c187923f243fb9f126f04.1777058551.git.pav@iki.fi/
[2]
https://lore.kernel.org/lkml/20260508173121.27526-1-mikhail.v.gavrilov@gmail.com/
https://lore.kernel.org/lkml/f652d5d9841a9b7c100dd19ee97c86099f580724.camel@gmail.com/
https://bugzilla.kernel.org/show_bug.cgi?id=221511
https://lore.kernel.org/lkml/20260514-bluetooh-fix-mt7922-v1-1-499c878af1e5@zohomail.in/
https://lore.kernel.org/lkml/20260514-bluetooh-fix-mt7922-v1-1-499c878af1e5@zohomail.in/
(+ one more report in a Fedora kernel chatroom)
[3]
https://bugzilla.kernel.org/show_bug.cgi?id=221521
https://lore.kernel.org/lkml/51b55b97-615b-4f5e-b454-df646f4058b7@augustwikerfors.se/
+ a four more people in
https://bodhi.fedoraproject.org/updates/FEDORA-2026-6b173ffc2a#comment-4646633
[4]
https://lore.kernel.org/all/CABBYNZ+FfhYtU2=J-V4pjKf_vKV=Y5LhVhxS_epKe-qaUUt8_g@mail.gmail.com/
> ----------------------------------------------------------------
> bluetooth pull request for net:
>
> - af_bluetooth: serialize accept_q access
> - L2CAP: ecred_reconfigure: send packed pdu, not stack pointer
> - btmtk: accept too short WMT FUNC_CTRL events
> - hci_qca: Convert timeout from jiffies to ms
>
> ----------------------------------------------------------------
> Jiexun Wang (1):
> Bluetooth: serialize accept_q access
>
> Michael Bommarito (1):
> Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer
>
> Pauli Virtanen (1):
> Bluetooth: btmtk: accept too short WMT FUNC_CTRL events
>
> Shuai Zhang (1):
> Bluetooth: hci_qca: Convert timeout from jiffies to ms
>
> drivers/bluetooth/btmtk.c | 4 +-
> drivers/bluetooth/hci_qca.c | 33 +++++++--------
> include/net/bluetooth/bluetooth.h | 1 +
> net/bluetooth/af_bluetooth.c | 87 +++++++++++++++++++++++++++++----------
> net/bluetooth/l2cap_core.c | 2 +-
> 5 files changed, 85 insertions(+), 42 deletions(-)
>
^ permalink raw reply
* [PATCH] Bluetooth: MGMT: validate Add Extended Advertising Data length
From: Michael Bommarito @ 2026-05-15 14:38 UTC (permalink / raw)
To: Marcel Holtmann, Luiz Augusto von Dentz
Cc: Daniel Winkler, linux-bluetooth, linux-kernel
MGMT_OP_ADD_EXT_ADV_DATA is registered as a variable-length command,
with MGMT_ADD_EXT_ADV_DATA_SIZE as the fixed header size. The handler
then uses cp->adv_data_len and cp->scan_rsp_len to validate and copy
cp->data, but it never checks that those bytes are part of the mgmt
command payload.
A short command can therefore make add_ext_adv_data() pass an
out-of-bounds pointer into tlv_data_is_valid(). If the bytes beyond
the command buffer are addressable, they can also be copied into the
advertising instance as scan response data, where the caller can read
them back via MGMT_OP_GET_ADV_INSTANCE. The trigger requires
CAP_NET_ADMIN in the initial user namespace; KASAN reports an 8-byte
slab-out-of-bounds read.
Reject commands whose length does not match the fixed header plus both
advertising data lengths before parsing cp->data.
Fixes: 12410572833a ("Bluetooth: Break add adv into two mgmt commands")
Cc: stable@vger.kernel.org
Assisted-by: Claude:claude-opus-4-7
Signed-off-by: Michael Bommarito <michael.bommarito@gmail.com>
---
net/bluetooth/mgmt.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/net/bluetooth/mgmt.c b/net/bluetooth/mgmt.c
index b05bb380e5f8..de5bd6b637b2 100644
--- a/net/bluetooth/mgmt.c
+++ b/net/bluetooth/mgmt.c
@@ -9110,9 +9110,15 @@ static int add_ext_adv_data(struct sock *sk, struct hci_dev *hdev, void *data,
struct adv_info *adv_instance;
int err = 0;
struct mgmt_pending_cmd *cmd;
+ u16 expected_len;
BT_DBG("%s", hdev->name);
+ expected_len = struct_size(cp, data, cp->adv_data_len + cp->scan_rsp_len);
+ if (expected_len != data_len)
+ return mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_EXT_ADV_DATA,
+ MGMT_STATUS_INVALID_PARAMS);
+
hci_dev_lock(hdev);
adv_instance = hci_find_adv_instance(hdev, cp->instance);
--
2.53.0
^ permalink raw reply related
* [PATCH v4] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: w15303746062 @ 2026-05-15 14:05 UTC (permalink / raw)
To: luiz.dentz, pmenzel, marcel, linux-bluetooth
Cc: linux-serial, linux-kernel, greg, stable, Mingyu Wang
In-Reply-To: <CABBYNZLjreYY_BczAQr2G6L=iJjBYKksFp53CairG-6V0Cb0EA@mail.gmail.com>
From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
A Use-After-Free (UAF) vulnerability and a subsequent kernel panic were
observed in hci_uart_write_work() due to a race condition between the
initialization of the HCI UART line discipline and concurrent TTY hangup.
This issue was triggered by our custom device emulation and fuzzing
framework (DevGen) on the v6.18 kernel. Due to the highly timing-dependent
nature of this race condition (requiring a precise interleaving of
TIOCVHANGUP and protocol setup), Syzkaller failed to extract a reliable
standalone C reproducer (reproducer is too unreliable: 0.00).
The crash trace is as follows:
ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940
WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
...
Call Trace:
<TASK>
debug_check_no_obj_freed+0x3ec/0x520
kfree+0x3f0/0x6c0
hci_uart_tty_close+0x127/0x2a0
tty_ldisc_close+0x113/0x1a0
tty_ldisc_kill+0x8e/0x150
tty_ldisc_hangup+0x3c1/0x730
__tty_hangup.part.0+0x3fd/0x8a0
tty_ioctl+0x120f/0x1690
__x64_sys_ioctl+0x18f/0x210
do_syscall_64+0xcb/0xfa0
entry_SYSCALL_64_after_hwframe+0x77/0x7f
</TASK>
The issue arises because the workqueues (init_ready and write_work) are
only flushed/cancelled if the HCI_UART_PROTO_READY flag is set. However,
during the protocol initialization phase (HCI_UART_PROTO_INIT), the
underlying protocol may schedule work. If a hangup occurs before the setup
completes and the READY flag is set, hci_uart_tty_close() skips the
teardown of these workqueues and proceeds to free the `hu` struct. When
the scheduled work executes later, it blindly dereferences the freed `hu`
struct.
Fix this by moving the workqueue teardown outside the HCI_UART_PROTO_READY
check. Furthermore, use disable_work_sync() instead of cancel_work_sync()
to unconditionally disable the works. This ensures that any pending works
are cancelled and no new submissions can occur before the hci_uart
structure is freed. Note that hu->init_ready and hu->write_work are
initialized in hci_uart_tty_open(), so it is always safe to call
disable_work_sync() on them in hci_uart_tty_close(), even if the protocol
was never fully attached.
Fixes: 3b799254cf6f ("Bluetooth: hci_uart: Cancel init work before unregistering")
Cc: stable@vger.kernel.org
Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
---
Changes in v4:
- Adopted Luiz's suggestion to use disable_work_sync() instead of
cancel_work_sync() to prevent new work submissions during teardown.
Changes in v3:
- Added 'Cc: stable' tag as requested by the stable bot.
Changes in v2:
- Added KASAN/ODEBUG crash trace.
drivers/bluetooth/hci_ldisc.c | 12 +++++++++---
1 file changed, 9 insertions(+), 3 deletions(-)
diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
index 275ea865bc29..333c1e1503e8 100644
--- a/drivers/bluetooth/hci_ldisc.c
+++ b/drivers/bluetooth/hci_ldisc.c
@@ -544,14 +544,20 @@ static void hci_uart_tty_close(struct tty_struct *tty)
if (hdev)
hci_uart_close(hdev);
+ /*
+ * Disable workqueues unconditionally before freeing the hu
+ * struct, as they might be active during the PROTO_INIT phase.
+ * Using disable_work_sync() instead of cancel_work_sync()
+ * ensures no new submissions can occur.
+ */
+ disable_work_sync(&hu->init_ready);
+ disable_work_sync(&hu->write_work);
+
if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
percpu_down_write(&hu->proto_lock);
clear_bit(HCI_UART_PROTO_READY, &hu->flags);
percpu_up_write(&hu->proto_lock);
- cancel_work_sync(&hu->init_ready);
- cancel_work_sync(&hu->write_work);
-
if (hdev) {
if (test_bit(HCI_UART_REGISTERED, &hu->flags))
hci_unregister_dev(hdev);
--
2.34.1
^ permalink raw reply related
* Re:Re: [PATCH] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: w15303746062 @ 2026-05-15 13:39 UTC (permalink / raw)
To: Luiz Augusto von Dentz
Cc: marcel, linux-bluetooth, linux-serial, linux-kernel, Mingyu Wang
In-Reply-To: <CABBYNZLjreYY_BczAQr2G6L=iJjBYKksFp53CairG-6V0Cb0EA@mail.gmail.com>
Hi Luiz,
Thank you for the review.
That is an excellent suggestion. You are absolutely right. Since the
`hu` structure is being torn down and freed immediately afterward,
using `disable_work_sync()` provides a much stronger guarantee by
preventing any concurrent threads from re-queuing the works, thus
eliminating the risk of a lingering UAF.
Both `init_ready` and `write_work` are standard `struct work_struct`,
so `disable_work_sync()` applies perfectly here.
I will send out a v4 patch shortly adopting this change.
Thank you for pointing this out!
Best regards,
Mingyu
At 2026-05-15 20:37:57, "Luiz Augusto von Dentz" <luiz.dentz@gmail.com> wrote:
>Hi,
>
>On Wed, May 13, 2026 at 2:46 AM <w15303746062@163.com> wrote:
>>
>> From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
>>
>> A Use-After-Free (UAF) vulnerability and a subsequent General Protection
>> Fault (GPF) were observed in h5_recv() due to a race condition between
>> the initialization of the HCI UART line discipline and concurrent TTY
>> hangup via TIOCVHANGUP.
>>
>> The issue arises because the workqueues (init_ready and write_work) are
>> only cancelled if the HCI_UART_PROTO_READY flag is set. However, during
>> the protocol initialization phase (HCI_UART_PROTO_INIT), the underlying
>> protocol (e.g., H5) may schedule work (such as sending sync/config
>> packets). If a hangup occurs before the setup completes and the READY
>> flag is set, hci_uart_tty_close() skips the cancel_work_sync() calls
>> and proceeds to free the `hu` struct.
>>
>> When the delayed workqueue finally executes, it blindly dereferences
>> the freed `hu` struct, causing ODEBUG warnings and kernel panics.
>>
>> Fix this by moving the cancel_work_sync() calls outside the
>> HCI_UART_PROTO_READY check, ensuring that any pending works are
>> unconditionally cancelled before the hci_uart structure is freed.
>>
>> Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
>> ---
>> drivers/bluetooth/hci_ldisc.c | 10 +++++++---
>> 1 file changed, 7 insertions(+), 3 deletions(-)
>>
>> diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
>> index 275ea865bc29..566e1c525ee2 100644
>> --- a/drivers/bluetooth/hci_ldisc.c
>> +++ b/drivers/bluetooth/hci_ldisc.c
>> @@ -544,14 +544,18 @@ static void hci_uart_tty_close(struct tty_struct *tty)
>> if (hdev)
>> hci_uart_close(hdev);
>>
>> + /*
>> + * Always cancel workqueues unconditionally before freeing the hu
>> + * struct, as they might be active during the PROTO_INIT phase.
>> + */
>> + cancel_work_sync(&hu->init_ready);
>> + cancel_work_sync(&hu->write_work);
>
>Can't we use disable_work_sync? If it frees up at the end, it's
>probably best to disable it so it doesn't allow new submissions.
>
>> if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
>> percpu_down_write(&hu->proto_lock);
>> clear_bit(HCI_UART_PROTO_READY, &hu->flags);
>> percpu_up_write(&hu->proto_lock);
>>
>> - cancel_work_sync(&hu->init_ready);
>> - cancel_work_sync(&hu->write_work);
>> -
>> if (hdev) {
>> if (test_bit(HCI_UART_REGISTERED, &hu->flags))
>> hci_unregister_dev(hdev);
>> --
>> 2.34.1
>>
>>
>
>
>--
>Luiz Augusto von Dentz
^ permalink raw reply
* Re: [PATCH] Bluetooth: hci_core: Don't queue tx_work while draining workqueue
From: Luiz Augusto von Dentz @ 2026-05-15 13:33 UTC (permalink / raw)
To: Heitor Alves de Siqueira
Cc: Hillf Danton, Marcel Holtmann, Gustavo Padovan, linux-bluetooth,
linux-kernel, kernel-dev, syzkaller-bugs,
syzbot+97721dd81f792e838ba0
In-Reply-To: <DIIHHUJM2CZJ.2OKA9PGHEHBRP@igalia.com>
Hi Heitor,
On Thu, May 14, 2026 at 10:54 AM Heitor Alves de Siqueira
<halves@igalia.com> wrote:
>
> On Wed May 13, 2026 at 11:04 PM -03, Hillf Danton wrote:
> > On Wed, 13 May 2026 15:55:23 -0300 Heitor Alves de Siqueira wrote:
> >> Syzbot reported a warning when L2CAP calls queue_work() on the hdev
> >> workqueue while it's being drained. This can happen during device reset or
> >> close paths for hci_send_acl(), hci_send_sco() and hci_send_iso().
> >>
> >> The workqueue is drained in hci_dev_do_reset() and in hci_dev_close_sync():
> >> - hci_dev_close_sync() clears the HCI_UP bit before draining
> >> - hci_dev_do_reset() sets HCI_CMD_DRAIN_WORKQUEUE before draining
> >>
> >> Add these checks before queuing tx_work, and free the SKB if it's not
> >> queued for transmission.
> >>
> >> Fixes: 3eff45eaf817 ("Bluetooth: convert tx_task to workqueue")
> >> Reported-by: syzbot+97721dd81f792e838ba0@syzkaller.appspotmail.com
> >> Closes: https://syzkaller.appspot.com/bug?extid=97721dd81f792e838ba0
> >> Signed-off-by: Heitor Alves de Siqueira <halves@igalia.com>
> >> ---
> >> net/bluetooth/hci_core.c | 18 ++++++++++++++++++
> >> 1 file changed, 18 insertions(+)
> >>
> >> diff --git a/net/bluetooth/hci_core.c b/net/bluetooth/hci_core.c
> >> index c46c1236ebfa..5d5f8ad7d1a8 100644
> >> --- a/net/bluetooth/hci_core.c
> >> +++ b/net/bluetooth/hci_core.c
> >> @@ -3278,6 +3278,12 @@ void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags)
> >>
> >> BT_DBG("%s chan %p flags 0x%4.4x", hdev->name, chan, flags);
> >>
> >> + if (!test_bit(HCI_UP, &hdev->flags) ||
> >> + hci_dev_test_flag(hdev, HCI_CMD_DRAIN_WORKQUEUE)) {
> >> + kfree_skb(skb);
> >> + return;
> >> + }
> >> +
> >> hci_queue_acl(chan, &chan->data_q, skb, flags);
> >>
> >> queue_work(hdev->workqueue, &hdev->tx_work);
> >>
> > What you add is not enough, go and see how HCI_CMD_DRAIN_WORKQUEUE is
> > checked in hci_cmd_work(), and in hci_dev_do_reset() for why.
>
> I see, I missed the RCU guards for the device flags. Sorry about that,
> I'll add them to v2.
> Thanks for the catch!
Actually this whole thing might be because we try to clean the
workqueue without actually closing the hdev, so I suspect that if we
just remove all the code from hci_dev_do_reset with
hci_dev_do_close+hci_dev_do_open, it might work better and align with
how things work over the MGMT interface:
diff --git a/net/bluetooth/hci_core.c b/net/bluetooth/hci_core.c
index c46c1236ebfa..6782bbc9b6a7 100644
--- a/net/bluetooth/hci_core.c
+++ b/net/bluetooth/hci_core.c
@@ -539,47 +539,13 @@ static int hci_dev_do_reset(struct hci_dev *hdev)
hci_req_sync_lock(hdev);
- /* Drop queues */
- skb_queue_purge(&hdev->rx_q);
- skb_queue_purge(&hdev->cmd_q);
-
- /* Cancel these to avoid queueing non-chained pending work */
- hci_dev_set_flag(hdev, HCI_CMD_DRAIN_WORKQUEUE);
- /* Wait for
- *
- * if (!hci_dev_test_flag(hdev, HCI_CMD_DRAIN_WORKQUEUE))
- * queue_delayed_work(&hdev->{cmd,ncmd}_timer)
- *
- * inside RCU section to see the flag or complete scheduling.
- */
- synchronize_rcu();
- /* Explicitly cancel works in case scheduled after setting the flag. */
- cancel_delayed_work(&hdev->cmd_timer);
- cancel_delayed_work(&hdev->ncmd_timer);
-
- /* Avoid potential lockdep warnings from the *_flush() calls by
- * ensuring the workqueue is empty up front.
- */
- drain_workqueue(hdev->workqueue);
-
- hci_dev_lock(hdev);
- hci_inquiry_cache_flush(hdev);
- hci_conn_hash_flush(hdev);
- hci_dev_unlock(hdev);
-
- if (hdev->flush)
- hdev->flush(hdev);
-
- hci_dev_clear_flag(hdev, HCI_CMD_DRAIN_WORKQUEUE);
-
- atomic_set(&hdev->cmd_cnt, 1);
- hdev->acl_cnt = 0;
- hdev->sco_cnt = 0;
- hdev->le_cnt = 0;
- hdev->iso_cnt = 0;
+ ret = hci_dev_close_sync(hdev);
+ if (ret)
+ goto done;
- ret = hci_reset_sync(hdev);
+ ret = hci_dev_open_sync(hdev);
+done:
hci_req_sync_unlock(hdev);
return ret;
}
Seem to work here and as a side effect we get notified over the MGMT
when a user uses hciconfig hci0 reset:
# tools/hciconfig hci0 reset
bluetoothd[34]: src/shared/mgmt.c:can_read_data() [0x0000] event 0x0006
bluetoothd[34]: src/adapter.c:new_settings_callback() Settings: 0x01fc0ac0
bluetoothd[34]: src/adapter.c:settings_changed() Changed settings: 0x00000001
bluetoothd[34]: src/adapter.c:settings_changed() Pending settings: 0x00000000
bluetoothd[34]: src/adapter.c:cancel_passive_scanning()
bluetoothd[34]: src/adapter.c:adapter_stop() adapter /org/bluez/hci0
has been disabled
bluetoothd[34]: src/shared/mgmt.c:can_read_data() [0x0000] event 0x0008
bluetoothd[34]: src/shared/mgmt.c:can_read_data() [0x0000] event 0x0006
bluetoothd[34]: src/adapter.c:new_settings_callback() Settings: 0x01fc0ac1
bluetoothd[34]: src/adapter.c:settings_changed() Changed settings: 0x00000001
bluetoothd[34]: src/adapter.c:settings_changed() Pending settings: 0x00000000
bluetoothd[34]: src/adapter.c:adapter_start() adapter /org/bluez/hci0
has been enabled
bluetoothd[34]: src/adapter.c:trigger_passive_scanning()
bluetoothd[34]: [signal] org.freedesktop.DBus.Properties.PropertiesChanged
> Best,
> Heitor
--
Luiz Augusto von Dentz
^ permalink raw reply related
* [Bug 221524] Intel 8265 Bluetooth regression (BLE hearing aid unusable) in kernel 6.12 vs 6.1
From: bugzilla-daemon @ 2026-05-15 13:26 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221524-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221524
--- Comment #1 from Artem S. Tashkinov (aros@gmx.com) ---
This is a really old kernel.
Could you test 6.18.30 or 7.0.7?
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* [Bug 221521] Bluetooth: btusb/mt7921 - Failed to send wmt func ctrl (-22) on MediaTek MT7921 combo adapter
From: bugzilla-daemon @ 2026-05-15 13:25 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221521-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221521
Artem S. Tashkinov (aros@gmx.com) changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |flavio.caetano@gmail.com
--- Comment #6 from Artem S. Tashkinov (aros@gmx.com) ---
*** Bug 221525 has been marked as a duplicate of this bug. ***
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* [Bug 221525] [REGRESSION] [btmtk] Bluetooth fails with error -22 since kernel 7.0.7
From: bugzilla-daemon @ 2026-05-15 13:25 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221525-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221525
Artem S. Tashkinov (aros@gmx.com) changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |DUPLICATE
--- Comment #1 from Artem S. Tashkinov (aros@gmx.com) ---
*** This bug has been marked as a duplicate of bug 221521 ***
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* [Bug 221525] New: [REGRESSION] [btmtk] Bluetooth fails with error -22 since kernel 7.0.7
From: bugzilla-daemon @ 2026-05-15 13:23 UTC (permalink / raw)
To: linux-bluetooth
https://bugzilla.kernel.org/show_bug.cgi?id=221525
Bug ID: 221525
Summary: [REGRESSION] [btmtk] Bluetooth fails with error -22
since kernel 7.0.7
Product: Drivers
Version: 2.5
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P3
Component: Bluetooth
Assignee: linux-bluetooth@vger.kernel.org
Reporter: flavio.caetano@gmail.com
Regression: No
Created attachment 310133
--> https://bugzilla.kernel.org/attachment.cgi?id=310133&action=edit
lsusb -v output
Description:
Bluetooth worked perfectly on 7.0.6 but stopped being recognized in 7.0.7.
bluetoothctl reports "No default controller available."
Hardware:
Laptop Model: ASUS TUF Gaming A14 FA401WV_FA401WV 1.0
Error in dmesg (7.0.7):
Bluetooth: hci0: Failed to send wmt func ctrl (-22)
Steps taken:
Confirmed rfkill is not blocking the device.
Verified 7.0.6 works, 7.0.7 does not.
Performed a hard power cycle (60s power button hold), which did not resolve the
issue on 7.0.7.
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* Re: [PATCH v3] Bluetooth: btnxpuart: Fix use-after-free in probe error path
From: Luiz Augusto von Dentz @ 2026-05-15 12:57 UTC (permalink / raw)
To: Zhao Dongdong
Cc: amitkumar.karwar, neeraj.sanjaykale, marcel, linux-bluetooth,
Zhao Dongdong
In-Reply-To: <tencent_F2E2AF1B6F510577B10C6897ED768BBBAF07@qq.com>
Hi,
On Thu, May 14, 2026 at 8:54 PM Zhao Dongdong <winter91@foxmail.com> wrote:
>
> From: Zhao Dongdong <zhaodongdong@kylinos.cn>
>
> In nxp_serdev_probe(), if hci_register_dev() succeeds but ps_setup()
> fails, the error path jumps to 'probe_fail' which only calls
> hci_free_dev() and asserts the reset GPIO, but does NOT call
> hci_unregister_dev() first.
>
> This leaves the HCI device registered in the system with its backing
> memory freed, leading to a use-after-free when userspace subsequently
> accesses the device (e.g. via hciconfig or bluetoothd).
>
> Fix by adding a 'probe_fail_unregister' label that calls
> hci_unregister_dev() before falling through to the existing
> 'probe_fail' label. The original 'probe_fail' label is preserved
> for the case where hci_register_dev() itself fails (device was
> never registered, so no unregister is needed).
>
> Signed-off-by: Zhao Dongdong <zhaodongdong@kylinos.cn>
> ---
> v3: fix gitlint WARNING
> v2: fix SubjectPrefix
> ---
> drivers/bluetooth/btnxpuart.c | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/bluetooth/btnxpuart.c b/drivers/bluetooth/btnxpuart.c
> index e7036a48ce48..a4d7747e5be0 100644
> --- a/drivers/bluetooth/btnxpuart.c
> +++ b/drivers/bluetooth/btnxpuart.c
> @@ -1907,13 +1907,15 @@ static int nxp_serdev_probe(struct serdev_device *serdev)
> }
>
> if (ps_setup(hdev))
> - goto probe_fail;
> + goto probe_fail_unregister;
>
> hci_devcd_register(hdev, nxp_coredump, nxp_coredump_hdr,
> nxp_coredump_notify);
>
> return 0;
>
> +probe_fail_unregister:
> + hci_unregister_dev(hdev);
> probe_fail:
> reset_control_assert(nxpdev->pdn);
> hci_free_dev(hdev);
> --
> 2.25.1
https://sashiko.dev/#/patchset/tencent_4A1D33225C74DB33EFAE8A0B6E884567DD09%40qq.com
Not sure if it is valid, but it probably worth checking since we can
perhaps simplify the error path.
--
Luiz Augusto von Dentz
^ permalink raw reply
* Re: [PATCH] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: Luiz Augusto von Dentz @ 2026-05-15 12:37 UTC (permalink / raw)
To: w15303746062
Cc: marcel, linux-bluetooth, linux-serial, linux-kernel, Mingyu Wang
In-Reply-To: <20260513064547.352601-1-w15303746062@163.com>
Hi,
On Wed, May 13, 2026 at 2:46 AM <w15303746062@163.com> wrote:
>
> From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
>
> A Use-After-Free (UAF) vulnerability and a subsequent General Protection
> Fault (GPF) were observed in h5_recv() due to a race condition between
> the initialization of the HCI UART line discipline and concurrent TTY
> hangup via TIOCVHANGUP.
>
> The issue arises because the workqueues (init_ready and write_work) are
> only cancelled if the HCI_UART_PROTO_READY flag is set. However, during
> the protocol initialization phase (HCI_UART_PROTO_INIT), the underlying
> protocol (e.g., H5) may schedule work (such as sending sync/config
> packets). If a hangup occurs before the setup completes and the READY
> flag is set, hci_uart_tty_close() skips the cancel_work_sync() calls
> and proceeds to free the `hu` struct.
>
> When the delayed workqueue finally executes, it blindly dereferences
> the freed `hu` struct, causing ODEBUG warnings and kernel panics.
>
> Fix this by moving the cancel_work_sync() calls outside the
> HCI_UART_PROTO_READY check, ensuring that any pending works are
> unconditionally cancelled before the hci_uart structure is freed.
>
> Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
> ---
> drivers/bluetooth/hci_ldisc.c | 10 +++++++---
> 1 file changed, 7 insertions(+), 3 deletions(-)
>
> diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
> index 275ea865bc29..566e1c525ee2 100644
> --- a/drivers/bluetooth/hci_ldisc.c
> +++ b/drivers/bluetooth/hci_ldisc.c
> @@ -544,14 +544,18 @@ static void hci_uart_tty_close(struct tty_struct *tty)
> if (hdev)
> hci_uart_close(hdev);
>
> + /*
> + * Always cancel workqueues unconditionally before freeing the hu
> + * struct, as they might be active during the PROTO_INIT phase.
> + */
> + cancel_work_sync(&hu->init_ready);
> + cancel_work_sync(&hu->write_work);
Can't we use disable_work_sync? If it frees up at the end, it's
probably best to disable it so it doesn't allow new submissions.
> if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
> percpu_down_write(&hu->proto_lock);
> clear_bit(HCI_UART_PROTO_READY, &hu->flags);
> percpu_up_write(&hu->proto_lock);
>
> - cancel_work_sync(&hu->init_ready);
> - cancel_work_sync(&hu->write_work);
> -
> if (hdev) {
> if (test_bit(HCI_UART_REGISTERED, &hu->flags))
> hci_unregister_dev(hdev);
> --
> 2.34.1
>
>
--
Luiz Augusto von Dentz
^ permalink raw reply
* [Bug 221524] Intel 8265 Bluetooth regression (BLE hearing aid unusable) in kernel 6.12 vs 6.1
From: bugzilla-daemon @ 2026-05-15 12:14 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221524-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221524
Darek (t.darcin10@gmail.com) changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|Intel 8265 Bluetooth |Intel 8265 Bluetooth
|(8087:0a2b) BLE |regression (BLE hearing aid
|connectivity regression |unusable) in kernel 6.12 vs
|observed after kernel |6.1
|upgrade. |
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox