* [RFC PATCH 1/5] Bluetooth: af_bluetooth: Add minimal context analysis annotations
From: Pauli Virtanen @ 2026-05-16 11:14 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
In-Reply-To: <cover.1778930064.git.pav@iki.fi>
Add minimal compiler context analysis annotations, required for
compilation to pass.
Signed-off-by: Pauli Virtanen <pav@iki.fi>
---
net/bluetooth/af_bluetooth.c | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/net/bluetooth/af_bluetooth.c b/net/bluetooth/af_bluetooth.c
index 9d68dd86023c..f42467159947 100644
--- a/net/bluetooth/af_bluetooth.c
+++ b/net/bluetooth/af_bluetooth.c
@@ -212,6 +212,7 @@ bool bt_sock_linked(struct bt_sock_list *l, struct sock *s)
EXPORT_SYMBOL(bt_sock_linked);
void bt_accept_enqueue(struct sock *parent, struct sock *sk, bool bh)
+ __context_unsafe(/* conditional locking */)
{
const struct cred *old_cred;
struct pid *old_pid;
@@ -819,7 +820,8 @@ EXPORT_SYMBOL(bt_sock_wait_ready);
#ifdef CONFIG_PROC_FS
static void *bt_seq_start(struct seq_file *seq, loff_t *pos)
- __acquires(seq->private->l->lock)
+ __acquires_shared(&((struct bt_sock_list *)
+ pde_data(file_inode(seq->file)))->lock)
{
struct bt_sock_list *l = pde_data(file_inode(seq->file));
@@ -835,7 +837,8 @@ static void *bt_seq_next(struct seq_file *seq, void *v, loff_t *pos)
}
static void bt_seq_stop(struct seq_file *seq, void *v)
- __releases(seq->private->l->lock)
+ __releases_shared(&((struct bt_sock_list *)
+ pde_data(file_inode(seq->file)))->lock)
{
struct bt_sock_list *l = pde_data(file_inode(seq->file));
--
2.54.0
^ permalink raw reply related
* [RFC PATCH 2/5] Bluetooth: hci_core: Add minimal context analysis annotations
From: Pauli Virtanen @ 2026-05-16 11:14 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
In-Reply-To: <cover.1778930064.git.pav@iki.fi>
Add minimal compiler context analysis annotations, required for
compilation to pass.
compiler-context-analysis.h doesn't have tools to deal with the
conditional SRCU locking on return value used here, so just disable the
analysis in places.
Signed-off-by: Pauli Virtanen <pav@iki.fi>
---
net/bluetooth/hci_core.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/net/bluetooth/hci_core.c b/net/bluetooth/hci_core.c
index c46c1236ebfa..fa87cb0bcf7b 100644
--- a/net/bluetooth/hci_core.c
+++ b/net/bluetooth/hci_core.c
@@ -65,6 +65,7 @@ static DEFINE_IDA(hci_index_ida);
/* Get HCI device by index.
* Device is held on return. */
static struct hci_dev *__hci_dev_get(int index, int *srcu_index)
+ __context_unsafe(/* conditional locking */)
{
struct hci_dev *hdev = NULL, *d;
@@ -92,11 +93,13 @@ struct hci_dev *hci_dev_get(int index)
}
static struct hci_dev *hci_dev_get_srcu(int index, int *srcu_index)
+ __context_unsafe(/* conditional locking vs return */)
{
return __hci_dev_get(index, srcu_index);
}
static void hci_dev_put_srcu(struct hci_dev *hdev, int srcu_index)
+ __context_unsafe(/* conditional locking vs return */)
{
srcu_read_unlock(&hdev->srcu, srcu_index);
hci_dev_put(hdev);
--
2.54.0
^ permalink raw reply related
* [RFC PATCH 0/5] Bluetooth: enable context analysis
From: Pauli Virtanen @ 2026-05-16 11:14 UTC (permalink / raw)
To: linux-bluetooth; +Cc: Pauli Virtanen
Set up compiler context analysis that generate compiler warnings on
problems that Clang -Wthread-safety can detect:
https://docs.kernel.org/dev-tools/context-analysis.html
Clang 22, and probably Clang 23 [1] will be required. Sparse locking
analysis support was removed in commit
5b63d0ae94ccfd64dcbdb693d88eb3650eb3c64c, this is its successor.
This series enables the analysis and adds minimal annotations to silence
some false positives.
Also, one patch to fix what looks like a legitimate locking issue in
iso.c.
In future, it probably is a good idea to make more use of it and add
__must_hold, __guarded_by etc annotations.
Kernel test robot appears to be checking for these, but not sure in what
trees [2]
BlueZ testbot doesn't check these currently but it's possible to add
https://github.com/bluez/action-ci/pull/4
[1] https://lore.kernel.org/all/CANpmjNN4O=W70sAc5gaVkTAFdrGGOW+XBMyuehfz3_QMiT=uCw@mail.gmail.com/
[2] https://lore.kernel.org/all/202605060005.JYWpZXr2-lkp@intel.com/
Pauli Virtanen (5):
Bluetooth: af_bluetooth: Add minimal context analysis annotations
Bluetooth: hci_core: Add minimal context analysis annotations
Bluetooth: ISO: lock same hdev as what is released
Bluetooth: L2CAP: Add minimal context analysis annotations
Bluetooth: enable context analysis
drivers/bluetooth/Makefile | 2 ++
net/bluetooth/Makefile | 2 ++
net/bluetooth/af_bluetooth.c | 7 +++++--
net/bluetooth/hci_core.c | 3 +++
net/bluetooth/iso.c | 14 ++++++++------
net/bluetooth/l2cap_sock.c | 1 +
6 files changed, 21 insertions(+), 8 deletions(-)
--
2.54.0
^ permalink raw reply
* RE: [v3] Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
From: bluez.test.bot @ 2026-05-16 10:18 UTC (permalink / raw)
To: linux-bluetooth, safa.karakus
In-Reply-To: <20260516092139.2618159-1-safa.karakus@secunnix.com>
[-- Attachment #1: Type: text/plain, Size: 558 bytes --]
This is an automated email and please do not reply to this email.
Dear Submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
While preparing the CI tests, the patches you submitted couldn't be applied to the current HEAD of the repository.
----- Output -----
error: patch failed: net/bluetooth/af_bluetooth.c:309
error: net/bluetooth/af_bluetooth.c: patch does not apply
hint: Use 'git am --show-current-patch' to see the failed patch
Please resolve the issue and submit the patches again.
---
Regards,
Linux Bluetooth
^ permalink raw reply
* Re: [PATCH BlueZ v5 00/16] Functional/integration testing
From: Pauli Virtanen @ 2026-05-16 9:50 UTC (permalink / raw)
To: Luiz Augusto von Dentz; +Cc: linux-bluetooth
In-Reply-To: <CABBYNZKaLPxRvMUDsTSByV64=iZKZCbtNZ6FTrjVohefY1+1bg@mail.gmail.com>
Hi,
to, 2026-05-14 kello 15:11 -0400, Luiz Augusto von Dentz kirjoitti:
> On Thu, May 14, 2026 at 1:51 PM <patchwork-bot+bluetooth@kernel.org> wrote:
> >
> > Hello:
> >
> > This series was applied to bluetooth/bluez.git (master)
> > by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:
> >
> > On Wed, 13 May 2026 19:17:17 +0300 you wrote:
> > > Add framework for writing tests simulating "real" environments where
> > > BlueZ and other parts of the stack run on different virtual machine
> > > hosts that communicate with each other.
> > >
> > > *** v5 ***
> > >
> > > https://github.com/pv/bluez/compare/func-test-v4-r..func-test-v5
> > >
> > > [...]
> >
> > Here is the summary with links:
> > - [BlueZ,v5,01/16] emulator: btvirt: check pkt lengths, don't get stuck on malformed
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=e19c771841e9
> > - [BlueZ,v5,02/16] emulator: btvirt: allow specifying where server unix sockets are made
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=5ee43f9993dd
> > - [BlueZ,v5,03/16] emulator: btvirt: support SCO data packets
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=cc077e4a12dd
> > - [BlueZ,v5,04/16] emulator: btdev: clear more state on Reset
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=f1a303e1d07a
> > - [BlueZ,v5,05/16] test-runner: enable path argument for --unix
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=ff2ecb82e4c3
> > - [BlueZ,v5,06/16] test-runner: Add -o/--option option
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=82c635c879bf
> > - [BlueZ,v5,07/16] test-runner: allow source tree root for -k
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=1929b3a99d2f
> > - [BlueZ,v5,08/16] test-runner: use virtio-serial for implementing -u device forwarding
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=908c14fc3abb
> > - [BlueZ,v5,09/16] doc: enable CONFIG_VIRTIO_CONSOLE in tester config
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=7856de4d69d6
> > - [BlueZ,v5,10/16] doc: enable KVM paravirtualization & clock support in tester kernel config
> > https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=48cb22a572c7
>
> Push the ones that didn't introduce new functionality, there were some
> complaints from the likes of checkpatch regarding scripts with execute
> permission,
This checkpatch warning I don't get, the repository already has a large
number of executable scripts, and isn't that more convenient?
IIUC the warning is about +x bits on random source files, which is not
the case here.
> and Id like to go more in detail about how to write tests
> and what is the RPC message protocol since we could in teory use the
> same protocol used for autopts for example.
Generally the idea in the design here is that the plugins add arbitrary
test-specific capabilities to the lower tester / IUTs, and the 'test_*'
functions are the upper tester which uses the plugins to orchestrate
the test and obtain data to verify the outcome.
It's straightforward to write test-specific plugins, so you are not
required to write something like a separate monolithic BTP client. You
can reuse btpclient etc. of course if useful.
There are several examples of full-stack BlueZ<->BlueZ integration
tests in the series.
Examples of PTS-style unit tests where lower tester probes specific
parts should still be figured out are missing though.
The main issue here is the lower tester BT stack, it will need to have
controlled mock functionality. Maybe this could be still BlueZ, but
with plugins disabled and we do raw ATT / GATT, or through BlueZ GATT
DBus API. Or, use something like https://google.github.io/bumble/ to
talk to the btvirt controller directly.
For reusing autopts, I would just add a plugin that launches the client
in the upper tester / IUT, and talks to it in their XML-RPC protocol,
encapsulating any protocols used. The autopts protocols appear somewhat
tied to details of the PTS implementation, doesn't seem like a good
idea to use it natively as it's more complex and I don't see what would
be really gained from it.
AFAIK it's not possible to use the full PTS infrastructure here, the
important parts are closed source and not license compatible.
>
> > - [BlueZ,v5,11/16] doc: add functional/integration testing documentation
> > (no matching commit)
> > - [BlueZ,v5,12/16] test: add functional/integration testing framework
> > (no matching commit)
> > - [BlueZ,v5,13/16] build: add functional testing target
> > (no matching commit)
> > - [BlueZ,v5,14/16] test: functional: impose Python code formatting
> > (no matching commit)
> > - [BlueZ,v5,15/16] test: functional: add some Agent1 interface tests
> > (no matching commit)
> > - [BlueZ,v5,16/16] test: functional: add basic obex file transfer tests
> > (no matching commit)
> >
> > You are awesome, thank you!
> > --
> > Deet-doot-dot, I am a bot.
> > https://korg.docs.kernel.org/patchwork/pwbot.html
> >
> >
> >
>
--
Pauli Virtanen
^ permalink raw reply
* RE: [v7] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
From: bluez.test.bot @ 2026-05-16 9:24 UTC (permalink / raw)
To: linux-bluetooth, w15303746062
In-Reply-To: <20260516084727.420032-1-w15303746062@163.com>
[-- Attachment #1: Type: text/plain, Size: 3215 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1095781
---Test result---
Test Summary:
CheckPatch PASS 0.73 seconds
GitLint FAIL 0.31 seconds
SubjectPrefix PASS 0.12 seconds
BuildKernel PASS 25.28 seconds
CheckAllWarning PASS 27.92 seconds
CheckSparse PASS 26.77 seconds
BuildKernel32 PASS 24.49 seconds
TestRunnerSetup PASS 525.15 seconds
IncrementalBuild PASS 24.75 seconds
Details
##############################
Test: GitLint - FAIL
Desc: Run gitlint
Output:
[v7] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
WARNING: I3 - ignore-body-lines: gitlint will be switching from using Python regex 'match' (match beginning) to 'search' (match anywhere) semantics. Please review your ignore-body-lines.regex option accordingly. To remove this warning, set general.regex-style-search=True. More details: https://jorisroovers.github.io/gitlint/configuration/#regex-style-search
41: B1 Line exceeds max length (223>80): "- Reverted disable_work_sync() back to cancel_work_sync() across all error and close paths to preserve user-space retry capabilities, addressing the regression introduced in v4/v6 where work items were permanently disabled."
42: B1 Line exceeds max length (184>80): "- Synchronized workqueue teardown safely by atomically clearing PROTO_READY / PROTO_INIT under proto_lock prior to calling cancel_work_sync(), preventing any concurrent work requeuing."
43: B1 Line exceeds max length (230>80): "- Fixed a Use-After-Free (UAF) vulnerability in the teardown sequence by relocating hu->proto->close(hu) strictly prior to hci_free_dev(hdev) in all close and error paths, ensuring vendor specific callbacks safely access hu->hdev."
44: B1 Line exceeds max length (190>80): "- Added cancel_work_sync(&hu->init_ready) at the very beginning of hci_uart_tty_close() to serialize teardown against active asynchronous registration, eliminating race-induced double-frees."
47: B1 Line exceeds max length (130>80): "- Fixed missing `hu->proto_lock` write lock in hci_uart_init_work() error path to prevent race with readers (reported by Sashiko)."
48: B1 Line exceeds max length (239>80): "- Added disable_work_sync() instead of cancel_work_sync() for `hu->write_work` in hci_uart_init_work() and hci_uart_register_dev() error paths to completely block any concurrent re-queuing window before hdev is freed (reported by Sashiko)."
51: B2 Line has trailing whitespace: "- Relocated disable_work_sync() to the very top of hci_uart_tty_close(), "
52: B1 Line exceeds max length (85>80): " before hci_uart_close(), to ensure no new work is submitted during device teardown."
55: B2 Line has trailing whitespace: "- Adopted Luiz's suggestion to use disable_work_sync() instead of "
https://github.com/bluez/bluetooth-next/pull/201
---
Regards,
Linux Bluetooth
^ permalink raw reply
* [PATCH v3] Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
From: Safa Karakuş @ 2026-05-16 9:21 UTC (permalink / raw)
To: linux-bluetooth
Cc: Luiz Augusto von Dentz, Marcel Holtmann, stable, linux-kernel,
Safa Karakuş
In-Reply-To: <CABBYNZL4P1HkA_FMFkBu0Ou-qi1a6Atv3ae-U32r2U1JgkOe1A@mail.gmail.com>
bt_accept_dequeue() unlinks a not-yet-accepted child from the parent
accept queue and release_sock()s it before returning, so the returned
sk has no caller reference and is unlocked.
l2cap_sock_cleanup_listen() walks these children on listening-socket
close. A concurrent HCI disconnect drives hci_rx_work ->
l2cap_conn_del() which runs l2cap_chan_del() + l2cap_sock_kill() and
frees the child sk and its l2cap_chan; cleanup_listen() then uses both:
BUG: KASAN: slab-use-after-free in l2cap_sock_kill
l2cap_sock_kill / l2cap_sock_cleanup_listen / __x64_sys_close
Freed by: l2cap_conn_del -> l2cap_sock_close_cb -> l2cap_sock_kill
CVE-2025-39860 only serialised the two userspace threads racing
bt_accept_dequeue() (cleanup_listen() under lock_sock() in
l2cap_sock_release()); it does not cover l2cap_conn_del() from
hci_rx_work, so this still reproduces on v7.0-rc5.
Take the reference at the source: bt_accept_dequeue() does sock_hold()
while sk is still locked, before release_sock(); callers sock_put().
cleanup_listen() pins the chan with l2cap_chan_hold_unless_zero() under
a brief child sk lock (serialising vs l2cap_sock_teardown_cb()), drops
it before l2cap_chan_lock(), and skips a duplicate l2cap_sock_kill() on
SOCK_DEAD. conn->lock is not taken here: cleanup_listen() runs under
the parent sk lock and that would invert
conn->lock -> chan->lock -> sk_lock (lockdep).
KASAN/SMP: 12 use-after-free per run before, 0 and no lockdep over
1400+ raced iterations after.
Fixes: 15f02b910562 ("Bluetooth: L2CAP: Add initial code for Enhanced Credit Based Mode")
Cc: stable@vger.kernel.org
Signed-off-by: Safa Karakuş <safa.karakus@secunnix.com>
---
Hi Luiz,
v3 - addresses the sashiko findings on v1. An interim approach using
conn->lock closed the UAF but hit a lockdep inversion, so this pins the
chan via a brief child sk lock instead.
Changes since v2:
- Take the ref inside bt_accept_dequeue() (v1/v2 added sock_hold()
after it, racing the free); also fix the chan lifetime; no
conn->lock (lockdep). Reproduced on v7.0-rc5 post CVE-2025-39860:
12 UAF/run -> 0.
Changes since v1: consistent From/Signed-off-by.
net/bluetooth/af_bluetooth.c | 10 +++++++
net/bluetooth/iso.c | 9 ++++++-
net/bluetooth/l2cap_sock.c | 51 +++++++++++++++++++++++++++++++-----
net/bluetooth/rfcomm/sock.c | 9 ++++++-
net/bluetooth/sco.c | 9 ++++++-
5 files changed, 78 insertions(+), 10 deletions(-)
diff --git a/net/bluetooth/af_bluetooth.c b/net/bluetooth/af_bluetooth.c
index 2b94e2077..10eafe7c1 100644
--- a/net/bluetooth/af_bluetooth.c
+++ b/net/bluetooth/af_bluetooth.c
@@ -309,6 +309,16 @@ struct sock *bt_accept_dequeue(struct sock *parent, struct socket *newsock)
if (newsock)
sock_graft(sk, newsock);
+ /* Hand the caller a reference taken while sk is still
+ * locked. bt_accept_unlink() just dropped the
+ * accept-queue reference; without this hold a
+ * concurrent teardown (e.g. l2cap_conn_del() ->
+ * l2cap_sock_kill()) could free sk between
+ * release_sock() and the caller using it. Every
+ * caller drops this with sock_put() when done.
+ */
+ sock_hold(sk);
+
release_sock(sk);
return sk;
}
diff --git a/net/bluetooth/iso.c b/net/bluetooth/iso.c
index be145e273..94732563d 100644
--- a/net/bluetooth/iso.c
+++ b/net/bluetooth/iso.c
@@ -759,6 +759,8 @@ static void iso_sock_cleanup_listen(struct sock *parent)
while ((sk = bt_accept_dequeue(parent, NULL))) {
iso_sock_close(sk);
iso_sock_kill(sk);
+ /* Drop the reference handed back by bt_accept_dequeue(). */
+ sock_put(sk);
}
/* If listening socket has a hcon, properly disconnect it */
@@ -1364,8 +1366,13 @@ static int iso_sock_accept(struct socket *sock, struct socket *newsock,
}
ch = bt_accept_dequeue(sk, newsock);
- if (ch)
+ if (ch) {
+ /* Drop the bridging ref from bt_accept_dequeue();
+ * the grafted socket keeps ch alive from here.
+ */
+ sock_put(ch);
break;
+ }
if (!timeo) {
err = -EAGAIN;
diff --git a/net/bluetooth/l2cap_sock.c b/net/bluetooth/l2cap_sock.c
index 71e8c1b45..61f2b20a7 100644
--- a/net/bluetooth/l2cap_sock.c
+++ b/net/bluetooth/l2cap_sock.c
@@ -349,8 +349,13 @@ static int l2cap_sock_accept(struct socket *sock, struct socket *newsock,
}
nsk = bt_accept_dequeue(sk, newsock);
- if (nsk)
+ if (nsk) {
+ /* Drop the bridging ref from bt_accept_dequeue();
+ * the grafted socket keeps nsk alive from here.
+ */
+ sock_put(nsk);
break;
+ }
if (!timeo) {
err = -EAGAIN;
@@ -1475,22 +1480,54 @@ static void l2cap_sock_cleanup_listen(struct sock *parent)
BT_DBG("parent %p state %s", parent,
state_to_string(parent->sk_state));
- /* Close not yet accepted channels */
+ /* Close not yet accepted channels.
+ *
+ * bt_accept_dequeue() now returns sk with an extra reference held
+ * (taken while sk was still locked) so a concurrent l2cap_conn_del()
+ * -> l2cap_sock_kill() cannot free sk under us.
+ *
+ * cleanup_listen() runs under the parent sk lock, so unlike
+ * l2cap_sock_shutdown() we must NOT take conn->lock here: that would
+ * establish sk_lock -> conn->lock and invert the established
+ * conn->lock -> chan->lock -> sk_lock order (lockdep deadlock).
+ *
+ * Instead, briefly take the child sk lock to fetch and pin its chan.
+ * l2cap_conn_del() reaches the chan free only via
+ * l2cap_chan_del() -> l2cap_sock_teardown_cb(), which itself takes
+ * the child sk lock; holding it across l2cap_chan_hold_unless_zero()
+ * therefore guarantees the chan cannot be freed while we read and
+ * pin it (hold_unless_zero() additionally skips a chan already past
+ * its last reference). We then drop the sk lock before taking
+ * chan->lock, so sk and chan locks are never held together.
+ */
while ((sk = bt_accept_dequeue(parent, NULL))) {
- struct l2cap_chan *chan = l2cap_pi(sk)->chan;
+ struct l2cap_chan *chan;
+
+ lock_sock_nested(sk, L2CAP_NESTING_NORMAL);
+ chan = l2cap_chan_hold_unless_zero(l2cap_pi(sk)->chan);
+ release_sock(sk);
+ if (!chan) {
+ /* l2cap_conn_del() already tearing this child down */
+ sock_put(sk);
+ continue;
+ }
BT_DBG("child chan %p state %s", chan,
state_to_string(chan->state));
- l2cap_chan_hold(chan);
l2cap_chan_lock(chan);
-
__clear_chan_timer(chan);
l2cap_chan_close(chan, ECONNRESET);
- l2cap_sock_kill(sk);
-
+ /* l2cap_conn_del() may already have killed this socket
+ * (it sets SOCK_DEAD); skip the duplicate to avoid a
+ * double sock_put()/l2cap_chan_put().
+ */
+ if (!sock_flag(sk, SOCK_DEAD))
+ l2cap_sock_kill(sk);
l2cap_chan_unlock(chan);
+
l2cap_chan_put(chan);
+ sock_put(sk);
}
}
diff --git a/net/bluetooth/rfcomm/sock.c b/net/bluetooth/rfcomm/sock.c
index be6639cd6..bd7d959c6 100644
--- a/net/bluetooth/rfcomm/sock.c
+++ b/net/bluetooth/rfcomm/sock.c
@@ -180,6 +180,8 @@ static void rfcomm_sock_cleanup_listen(struct sock *parent)
while ((sk = bt_accept_dequeue(parent, NULL))) {
rfcomm_sock_close(sk);
rfcomm_sock_kill(sk);
+ /* Drop the reference handed back by bt_accept_dequeue(). */
+ sock_put(sk);
}
parent->sk_state = BT_CLOSED;
@@ -497,8 +499,13 @@ static int rfcomm_sock_accept(struct socket *sock, struct socket *newsock,
}
nsk = bt_accept_dequeue(sk, newsock);
- if (nsk)
+ if (nsk) {
+ /* Drop the bridging ref from bt_accept_dequeue();
+ * the grafted socket keeps nsk alive from here.
+ */
+ sock_put(nsk);
break;
+ }
if (!timeo) {
err = -EAGAIN;
diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 584e059de..72bcbf1da 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -487,6 +487,8 @@ static void sco_sock_cleanup_listen(struct sock *parent)
while ((sk = bt_accept_dequeue(parent, NULL))) {
sco_sock_close(sk);
sco_sock_kill(sk);
+ /* Drop the reference handed back by bt_accept_dequeue(). */
+ sock_put(sk);
}
parent->sk_state = BT_CLOSED;
@@ -743,8 +745,13 @@ static int sco_sock_accept(struct socket *sock, struct socket *newsock,
}
ch = bt_accept_dequeue(sk, newsock);
- if (ch)
+ if (ch) {
+ /* Drop the bridging ref from bt_accept_dequeue();
+ * the grafted socket keeps ch alive from here.
+ */
+ sock_put(ch);
break;
+ }
if (!timeo) {
err = -EAGAIN;
--
2.34.1
^ permalink raw reply related
* [PATCH v7] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
From: w15303746062 @ 2026-05-16 8:47 UTC (permalink / raw)
To: luiz.dentz, pmenzel, marcel, linux-bluetooth
Cc: linux-serial, linux-kernel, greg, stable, Mingyu Wang
In-Reply-To: <CABBYNZ+r3gm37FW5WqE79bRp+x9UZsaCtyvfz_FdixqEucAxGw@mail.gmail.com>
From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
Vulnerabilities leading to Use-After-Free (UAF) and Null Pointer
Dereference (NPD) conditions were observed in the lifecycle management
of hci_uart.
The primary issue arises because the workqueues (init_ready and
write_work) are only flushed/cancelled if the HCI_UART_PROTO_READY
flag is set during TTY close. If a hangup occurs before setup completes,
hci_uart_tty_close() skips the teardown of these workqueues and
proceeds to free the `hu` struct. When the scheduled work executes
later, it blindly dereferences the freed `hu` struct.
Furthermore, several data races and UAFs were identified in the teardown
sequence:
1. Calling hci_uart_close(hdev) before cancel_work_sync(&hu->write_work)
causes a race condition where hci_uart_flush() and write_work
can concurrently double-free hu->tx_skb.
2. Calling hci_free_dev(hdev) before hu->proto->close(hu) causes a UAF
when vendor specific protocol close callbacks dereference hu->hdev.
3. In the initialization error paths, failing to take the proto_lock
write lock before clearing PROTO_READY leads to races with active
readers (e.g., hci_uart_tty_receive).
Fix these synchronization and lifecycle issues by:
1. Re-ordering hci_uart_tty_close() to unconditionally cancel init_ready
first, then atomically clear PROTO_READY under proto_lock, and safely
cancel write_work before touching hdev.
2. Relocating hu->proto->close(hu) strictly prior to hci_free_dev(hdev)
across all close and error paths to prevent vendor-level UAFs.
3. Utilizing cancel_work_sync() instead of disable_work_sync() after
flags are cleared to safely flush workqueues without permanently
breaking user-space retry capabilities.
Fixes: 3b799254cf6f ("Bluetooth: hci_uart: Cancel init work before unregistering")
Cc: stable@vger.kernel.org
Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
---
Changes in v7:
- Reverted disable_work_sync() back to cancel_work_sync() across all error and close paths to preserve user-space retry capabilities, addressing the regression introduced in v4/v6 where work items were permanently disabled.
- Synchronized workqueue teardown safely by atomically clearing PROTO_READY / PROTO_INIT under proto_lock prior to calling cancel_work_sync(), preventing any concurrent work requeuing.
- Fixed a Use-After-Free (UAF) vulnerability in the teardown sequence by relocating hu->proto->close(hu) strictly prior to hci_free_dev(hdev) in all close and error paths, ensuring vendor specific callbacks safely access hu->hdev.
- Added cancel_work_sync(&hu->init_ready) at the very beginning of hci_uart_tty_close() to serialize teardown against active asynchronous registration, eliminating race-induced double-frees.
Changes in v6:
- Fixed missing `hu->proto_lock` write lock in hci_uart_init_work() error path to prevent race with readers (reported by Sashiko).
- Added disable_work_sync() instead of cancel_work_sync() for `hu->write_work` in hci_uart_init_work() and hci_uart_register_dev() error paths to completely block any concurrent re-queuing window before hdev is freed (reported by Sashiko).
Changes in v5:
- Relocated disable_work_sync() to the very top of hci_uart_tty_close(),
before hci_uart_close(), to ensure no new work is submitted during device teardown.
Changes in v4:
- Adopted Luiz's suggestion to use disable_work_sync() instead of
cancel_work_sync() in close path to prevent new work submissions.
Changes in v3:
- Added 'Cc: stable' tag as requested by the stable bot.
Changes in v2:
- Added KASAN/ODEBUG crash trace.
drivers/bluetooth/hci_ldisc.c | 35 ++++++++++++++++++++++++++++-------
1 file changed, 28 insertions(+), 7 deletions(-)
diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
index 275ea865bc29..46a080f77cb1 100644
--- a/drivers/bluetooth/hci_ldisc.c
+++ b/drivers/bluetooth/hci_ldisc.c
@@ -194,7 +194,15 @@ void hci_uart_init_work(struct work_struct *work)
err = hci_register_dev(hu->hdev);
if (err < 0) {
BT_ERR("Can't register HCI device");
+
+ percpu_down_write(&hu->proto_lock);
clear_bit(HCI_UART_PROTO_READY, &hu->flags);
+ percpu_up_write(&hu->proto_lock);
+
+ /* Safely cancel work after clearing flags */
+ cancel_work_sync(&hu->write_work);
+
+ /* Close protocol before freeing hdev */
hu->proto->close(hu);
hdev = hu->hdev;
hu->hdev = NULL;
@@ -531,6 +539,7 @@ static void hci_uart_tty_close(struct tty_struct *tty)
{
struct hci_uart *hu = tty->disc_data;
struct hci_dev *hdev;
+ bool proto_ready;
BT_DBG("tty %p", tty);
@@ -540,24 +549,32 @@ static void hci_uart_tty_close(struct tty_struct *tty)
if (!hu)
return;
- hdev = hu->hdev;
- if (hdev)
- hci_uart_close(hdev);
+ /* Wait for init_ready to finish to prevent registration races */
+ cancel_work_sync(&hu->init_ready);
- if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
+ proto_ready = test_bit(HCI_UART_PROTO_READY, &hu->flags);
+ if (proto_ready) {
percpu_down_write(&hu->proto_lock);
clear_bit(HCI_UART_PROTO_READY, &hu->flags);
percpu_up_write(&hu->proto_lock);
+ }
+ /* Unconditionally cancel write_work after clearing flags */
+ cancel_work_sync(&hu->write_work);
- cancel_work_sync(&hu->init_ready);
- cancel_work_sync(&hu->write_work);
+ hdev = hu->hdev;
+ if (hdev)
+ hci_uart_close(hdev);
+ if (proto_ready) {
if (hdev) {
if (test_bit(HCI_UART_REGISTERED, &hu->flags))
hci_unregister_dev(hdev);
- hci_free_dev(hdev);
}
+ /* Close protocol before freeing hdev */
hu->proto->close(hu);
+
+ if (hdev)
+ hci_free_dev(hdev);
}
clear_bit(HCI_UART_PROTO_SET, &hu->flags);
@@ -695,6 +712,10 @@ static int hci_uart_register_dev(struct hci_uart *hu)
percpu_down_write(&hu->proto_lock);
clear_bit(HCI_UART_PROTO_INIT, &hu->flags);
percpu_up_write(&hu->proto_lock);
+ /* Cancel work after clearing flags */
+ cancel_work_sync(&hu->write_work);
+
+ /* Close protocol before freeing hdev */
hu->proto->close(hu);
hu->hdev = NULL;
hci_free_dev(hdev);
--
2.34.1
^ permalink raw reply related
* [Bug 221521] Bluetooth: btusb/mt7921 - Failed to send wmt func ctrl (-22) on MediaTek MT7921 combo adapter
From: bugzilla-daemon @ 2026-05-16 7:48 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221521-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221521
Artem S. Tashkinov (aros@gmx.com) changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |autofire372@gmail.com
--- Comment #8 from Artem S. Tashkinov (aros@gmx.com) ---
*** Bug 221529 has been marked as a duplicate of this bug. ***
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* [Bug 221529] mt7922: Kernel 7.0.7 breaks Bluetooth
From: bugzilla-daemon @ 2026-05-16 7:48 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221529-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221529
Artem S. Tashkinov (aros@gmx.com) changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |DUPLICATE
--- Comment #2 from Artem S. Tashkinov (aros@gmx.com) ---
*** This bug has been marked as a duplicate of bug 221521 ***
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* RE: [v6] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
From: bluez.test.bot @ 2026-05-16 7:33 UTC (permalink / raw)
To: linux-bluetooth, w15303746062
In-Reply-To: <20260516053036.399005-1-w15303746062@163.com>
[-- Attachment #1: Type: text/plain, Size: 3295 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1095757
---Test result---
Test Summary:
CheckPatch FAIL 0.63 seconds
GitLint FAIL 0.25 seconds
SubjectPrefix PASS 0.08 seconds
BuildKernel PASS 25.41 seconds
CheckAllWarning PASS 28.73 seconds
CheckSparse PASS 27.21 seconds
BuildKernel32 PASS 25.63 seconds
TestRunnerSetup PASS 541.24 seconds
IncrementalBuild PASS 24.60 seconds
Details
##############################
Test: CheckPatch - FAIL
Desc: Run checkpatch.pl script
Output:
[v6] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
WARNING: Prefer a maximum 75 chars per line (possible unwrapped commit description?)
#85:
skips the teardown of these workqueues and proceeds to free the `hu` struct.
total: 0 errors, 1 warnings, 60 lines checked
NOTE: For some of the reported defects, checkpatch may be able to
mechanically convert to the typical style using --fix or --fix-inplace.
/github/workspace/src/patch/14576250.patch has style problems, please review.
NOTE: Ignored message types: UNKNOWN_COMMIT_ID
NOTE: If any of the errors are false positives, please report
them to the maintainer, see CHECKPATCH in MAINTAINERS.
##############################
Test: GitLint - FAIL
Desc: Run gitlint
Output:
[v6] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
WARNING: I3 - ignore-body-lines: gitlint will be switching from using Python regex 'match' (match beginning) to 'search' (match anywhere) semantics. Please review your ignore-body-lines.regex option accordingly. To remove this warning, set general.regex-style-search=True. More details: https://jorisroovers.github.io/gitlint/configuration/#regex-style-search
18: B1 Line exceeds max length (124>80): " ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940"
19: B1 Line exceeds max length (86>80): " WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0"
65: B1 Line exceeds max length (130>80): "- Fixed missing `hu->proto_lock` write lock in hci_uart_init_work() error path to prevent race with readers (reported by Sashiko)."
66: B1 Line exceeds max length (239>80): "- Added disable_work_sync() instead of cancel_work_sync() for `hu->write_work` in hci_uart_init_work() and hci_uart_register_dev() error paths to completely block any concurrent re-queuing window before hdev is freed (reported by Sashiko)."
69: B2 Line has trailing whitespace: "- Relocated disable_work_sync() to the very top of hci_uart_tty_close(), "
70: B1 Line exceeds max length (85>80): " before hci_uart_close(), to ensure no new work is submitted during device teardown."
73: B2 Line has trailing whitespace: "- Adopted Luiz's suggestion to use disable_work_sync() instead of "
https://github.com/bluez/bluetooth-next/pull/200
---
Regards,
Linux Bluetooth
^ permalink raw reply
* Re: Bluetooth: btmtk: regression in 634a4408c breaks MT7922 FUNC_CTRL handshake
From: Thorsten Leemhuis @ 2026-05-16 5:51 UTC (permalink / raw)
To: Sergey Kasmy, linux-bluetooth
Cc: tristan, marcel, Luiz Augusto von Dentz,
Linux kernel regressions list
In-Reply-To: <CAJ8Bt0iC5bVgCRw28YXB1mo+-p_sTM_cp6fF+qVNapyL-Hsayg@mail.gmail.com>
On 5/15/26 23:02, Sergey Kasmy wrote:
>
> Commit 634a4408c0615c523cf7531790f4f14a422b9206 ("Bluetooth: btmtk:
> validate WMT event SKB length before struct access") introduced a
> regression that breaks my MediaTek MT7922 Bluetooth adapter (USB ID
> 0e8d:0616).
Thx for the report, this is a known problem, the fix in heading towards
mainline:
https://lore.kernel.org/all/CABBYNZ+FfhYtU2=J-V4pjKf_vKV=Y5LhVhxS_epKe-qaUUt8_g@mail.gmail.com/
Ciao, Thorsten
^ permalink raw reply
* [PATCH v6] Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
From: w15303746062 @ 2026-05-16 5:30 UTC (permalink / raw)
To: luiz.dentz, pmenzel, marcel, linux-bluetooth
Cc: linux-serial, linux-kernel, greg, stable, Mingyu Wang
In-Reply-To: <CABBYNZ+r3gm37FW5WqE79bRp+x9UZsaCtyvfz_FdixqEucAxGw@mail.gmail.com>
From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
Vulnerabilities leading to Use-After-Free (UAF) and Null Pointer
Dereference (NPD) conditions were observed in the lifecycle management
of hci_uart.
The primary issue arises because the workqueues (init_ready and write_work)
are only flushed/cancelled if the HCI_UART_PROTO_READY flag is set during
TTY close. If a hangup occurs before setup completes, hci_uart_tty_close()
skips the teardown of these workqueues and proceeds to free the `hu` struct.
When the scheduled work executes later, it blindly dereferences the freed
`hu` struct. This issue was triggered by our custom device emulation and
fuzzing framework (DevGen) on the v6.18 kernel.
The crash trace is as follows:
ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940
WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
...
Call Trace:
<TASK>
debug_check_no_obj_freed+0x3ec/0x520
kfree+0x3f0/0x6c0
hci_uart_tty_close+0x127/0x2a0
k_ldisc_close+0x113/0x1a0
tty_ldisc_kill+0x8e/0x150
tty_ldisc_hangup+0x3c1/0x730
__tty_hangup.part.0+0x3fd/0x8a0
tty_ioctl+0x120f/0x1690
__x64_sys_ioctl+0x18f/0x210
do_syscall_64+0xcb/0xfa0
entry_SYSCALL_64_after_hwframe+0x77/0x7f
</TASK>
Additionally, sister bugs exist in the device registration error paths
within hci_uart_init_work() and hci_uart_register_dev(). If
hci_register_dev() fails, the code frees hdev and sets hu->hdev to NULL,
but leaves hu->write_work active if it was already scheduled during early
protocol setup phase. When the work executes later, it blindly fetches and
dereferences the NULL hu->hdev pointer, triggering an unconditioned kernel
panic.
Furthermore, the error path in hci_uart_init_work() clears the
HCI_UART_PROTO_READY flag and invokes hu->proto->close(hu) without
acquiring the hu->proto_lock write lock. Since concurrent callbacks like
hci_uart_tty_receive() execute under the read lock, this missing
synchronization allows the protocol state to be destroyed while active
readers are accessing it.
Fix these synchronization and lifecycle issues by:
1. Moving the workqueue teardown to the very beginning of
hci_uart_tty_close() and using disable_work_sync() to unconditionally
prevent new work submissions.
2. Wrapping the clearance of HCI_UART_PROTO_READY in hci_uart_init_work()
with percpu_down_write/percpu_up_write of hu->proto_lock.
3. Explicitly invoking disable_work_sync(&hu->write_work) before resetting
hu->hdev to NULL in both initialization error paths to safely prevent
any concurrent re-queuing issues.
Fixes: 3b799254cf6f ("Bluetooth: hci_uart: Cancel init work before unregistering")
Cc: stable@vger.kernel.org
Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
---
Changes in v6:
- Fixed missing `hu->proto_lock` write lock in hci_uart_init_work() error path to prevent race with readers (reported by Sashiko).
- Added disable_work_sync() instead of cancel_work_sync() for `hu->write_work` in hci_uart_init_work() and hci_uart_register_dev() error paths to completely block any concurrent re-queuing window before hdev is freed (reported by Sashiko).
Changes in v5:
- Relocated disable_work_sync() to the very top of hci_uart_tty_close(),
before hci_uart_close(), to ensure no new work is submitted during device teardown.
Changes in v4:
- Adopted Luiz's suggestion to use disable_work_sync() instead of
cancel_work_sync() in close path to prevent new work submissions.
Changes in v3:
- Added 'Cc: stable' tag as requested by the stable bot.
Changes in v2:
- Added KASAN/ODEBUG crash trace.
drivers/bluetooth/hci_ldisc.c | 35 ++++++++++++++++++++++++++++++++---
1 file changed, 32 insertions(+), 3 deletions(-)
diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
index 275ea865bc29..612fa2890cec 100644
--- a/drivers/bluetooth/hci_ldisc.c
+++ b/drivers/bluetooth/hci_ldisc.c
@@ -194,7 +194,22 @@ void hci_uart_init_work(struct work_struct *work)
err = hci_register_dev(hu->hdev);
if (err < 0) {
BT_ERR("Can't register HCI device");
+
+ /*
+ * Acquire proto_lock before clearing PROTO_READY and closing
+ * the protocol to synchronize with active readers.
+ */
+ percpu_down_write(&hu->proto_lock);
clear_bit(HCI_UART_PROTO_READY, &hu->flags);
+ percpu_up_write(&hu->proto_lock);
+
+ /*
+ * Disable any pending write_work that may have been queued
+ * during the PROTO_INIT phase to prevent UAF/NPD when hdev
+ * is freed.
+ */
+ disable_work_sync(&hu->write_work);
+
hu->proto->close(hu);
hdev = hu->hdev;
hu->hdev = NULL;
@@ -540,6 +555,15 @@ static void hci_uart_tty_close(struct tty_struct *tty)
if (!hu)
return;
+ /*
+ * Disable workqueues unconditionally before tearing down the
+ * connection, as they might be active during the PROTO_INIT phase.
+ * Using disable_work_sync() ensures no new submissions can occur
+ * during or after hci_uart_close().
+ */
+ disable_work_sync(&hu->init_ready);
+ disable_work_sync(&hu->write_work);
+
hdev = hu->hdev;
if (hdev)
hci_uart_close(hdev);
@@ -549,9 +573,6 @@ static void hci_uart_tty_close(struct tty_struct *tty)
clear_bit(HCI_UART_PROTO_READY, &hu->flags);
percpu_up_write(&hu->proto_lock);
- cancel_work_sync(&hu->init_ready);
- cancel_work_sync(&hu->write_work);
-
if (hdev) {
if (test_bit(HCI_UART_REGISTERED, &hu->flags))
hci_unregister_dev(hdev);
@@ -692,6 +713,14 @@ static int hci_uart_register_dev(struct hci_uart *hu)
if (hci_register_dev(hdev) < 0) {
BT_ERR("Can't register HCI device");
+
+ /*
+ * Disable any pending write_work that may have been queued
+ * during the proto->open() phase to prevent UAF/NPD when
+ * hdev is freed.
+ */
+ disable_work_sync(&hu->write_work);
+
percpu_down_write(&hu->proto_lock);
clear_bit(HCI_UART_PROTO_INIT, &hu->flags);
percpu_up_write(&hu->proto_lock);
--
2.34.1
^ permalink raw reply related
* RE: [v5] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: bluez.test.bot @ 2026-05-16 5:11 UTC (permalink / raw)
To: linux-bluetooth, w15303746062
In-Reply-To: <20260516022200.396369-1-w15303746062@163.com>
[-- Attachment #1: Type: text/plain, Size: 2816 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1095737
---Test result---
Test Summary:
CheckPatch FAIL 1.88 seconds
GitLint FAIL 0.33 seconds
SubjectPrefix PASS 0.13 seconds
BuildKernel PASS 27.45 seconds
CheckAllWarning PASS 29.64 seconds
CheckSparse PASS 27.83 seconds
BuildKernel32 PASS 26.56 seconds
TestRunnerSetup PASS 586.79 seconds
IncrementalBuild PASS 25.50 seconds
Details
##############################
Test: CheckPatch - FAIL
Desc: Run checkpatch.pl script
Output:
[v5] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
WARNING: Prefer a maximum 75 chars per line (possible unwrapped commit description?)
#88:
ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940
total: 0 errors, 1 warnings, 24 lines checked
NOTE: For some of the reported defects, checkpatch may be able to
mechanically convert to the typical style using --fix or --fix-inplace.
/github/workspace/src/patch/14576205.patch has style problems, please review.
NOTE: Ignored message types: UNKNOWN_COMMIT_ID
NOTE: If any of the errors are false positives, please report
them to the maintainer, see CHECKPATCH in MAINTAINERS.
##############################
Test: GitLint - FAIL
Desc: Run gitlint
Output:
[v5] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
WARNING: I3 - ignore-body-lines: gitlint will be switching from using Python regex 'match' (match beginning) to 'search' (match anywhere) semantics. Please review your ignore-body-lines.regex option accordingly. To remove this warning, set general.regex-style-search=True. More details: https://jorisroovers.github.io/gitlint/configuration/#regex-style-search
16: B1 Line exceeds max length (124>80): " ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940"
17: B1 Line exceeds max length (86>80): " WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0"
57: B2 Line has trailing whitespace: "- Moved disable_work_sync() to the very top of hci_uart_tty_close(), "
58: B2 Line has trailing whitespace: " before hci_uart_close(), to prevent any concurrent re-queuing "
62: B2 Line has trailing whitespace: "- Adopted Luiz's suggestion to use disable_work_sync() instead of "
https://github.com/bluez/bluetooth-next/pull/199
---
Regards,
Linux Bluetooth
^ permalink raw reply
* Re: Bluetooth: btmtk: MT7925 fails "wmt func ctrl" (-EINVAL) since 634a4408c061
From: Thorsten Leemhuis @ 2026-05-16 5:00 UTC (permalink / raw)
To: Bernie Innocenti, linux-bluetooth; +Cc: regressions
In-Reply-To: <9f6967e5-c37f-4e21-b0d2-8eea4a0b5809@codewiz.org>
On 5/16/26 04:27, Bernie Innocenti wrote:
>
> Since commit 634a4408c061 ("Bluetooth: btmtk: validate WMT event SKB
> length before struct access") my MediaTek MT7925 Bluetooth adapter no
> longer initializes. The controller never registers and is absent from
> userspace.
Thx for the report, this is a known problem, the fix in heading towards
mainline:
https://lore.kernel.org/all/CABBYNZ+FfhYtU2=J-V4pjKf_vKV=Y5LhVhxS_epKe-qaUUt8_g@mail.gmail.com/
Ciao, Thorsten
^ permalink raw reply
* RE: [v2] Bluetooth: btintel: Use skb_pull_data return for bounds check
From: bluez.test.bot @ 2026-05-16 4:46 UTC (permalink / raw)
To: linux-bluetooth, 2022090917019
In-Reply-To: <7dc0dfd1-7e23-43d5-a855-d1c73943d40c@std.uestc.edu.cn>
[-- Attachment #1: Type: text/plain, Size: 557 bytes --]
This is an automated email and please do not reply to this email.
Dear Submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
While preparing the CI tests, the patches you submitted couldn't be applied to the current HEAD of the repository.
----- Output -----
error: patch failed: drivers/bluetooth/btintel.c:3356
error: drivers/bluetooth/btintel.c: patch does not apply
hint: Use 'git am --show-current-patch' to see the failed patch
Please resolve the issue and submit the patches again.
---
Regards,
Linux Bluetooth
^ permalink raw reply
* [PATCH v2] Bluetooth: btintel: Use skb_pull_data return for bounds check
From: Quan Sun @ 2026-05-16 3:51 UTC (permalink / raw)
To: linux-bluetooth, kiran.k, marcel,
luiz.dentz@gmail.com >> Luiz Augusto von Dentz
Cc: 2022090917019
The length check at the top of btintel_print_fseq_info() verifies
that the skb has at least 66 bytes (sizeof(u32) * 16 + 2), but the
function actually consumes 74 bytes:
2 calls to skb_pull_data(skb, 1) = 2 bytes
18 calls to skb_pull_data(skb, 4) = 72 bytes
When the firmware returns a packet of exactly 66 bytes, the last two
skb_pull_data(skb, 4) calls return NULL, which is then passed directly
to get_unaligned_le32(), resulting in a NULL pointer dereference.
This patch refactors the function to check the return value of
`skb_pull_data` instead. This ensures that every time data is pulled
from the `skb`, we explicitly verify that it didn't return NULL,
guaranteeing safe access. A `malformed` label is added to handle
early termination in case the `skb` is too short, preserving the
original `bt_dev_dbg` logging behavior.
Fixes: a7ba218a44aa ("Bluetooth: btintel: Print Firmware Sequencer
information")
Signed-off-by: Quan Sun <2022090917019@std.uestc.edu.cn>
---
v2:
- Remove manual length check and validate every skb_pull_data() return.
- Add 'malformed' label for unified error handling.
- Fix GitLint title length warning.
drivers/bluetooth/btintel.c | 108 +++++++++++++++++++++++++++---------
1 file changed, 81 insertions(+), 27 deletions(-)
diff --git a/drivers/bluetooth/btintel.c b/drivers/bluetooth/btintel.c
index dcaaa4ca02b99..053be9f88f7c3 100644
--- a/drivers/bluetooth/btintel.c
+++ b/drivers/bluetooth/btintel.c
@@ -3356,14 +3356,10 @@ void btintel_print_fseq_info(struct hci_dev *hdev)
return;
}
- if (skb->len < (sizeof(u32) * 16 + 2)) {
- bt_dev_dbg(hdev, "Malformed packet of length %u received",
- skb->len);
- kfree_skb(skb);
- return;
- }
-
p = skb_pull_data(skb, 1);
+ if (!p)
+ goto malformed;
+
if (*p) {
bt_dev_dbg(hdev, "Failed to get fseq status (0x%2.2x)", *p);
kfree_skb(skb);
@@ -3371,6 +3367,9 @@ void btintel_print_fseq_info(struct hci_dev *hdev)
}
p = skb_pull_data(skb, 1);
+ if (!p)
+ goto malformed;
+
switch (*p) {
case 0:
str = "Success";
@@ -3394,65 +3393,120 @@ void btintel_print_fseq_info(struct hci_dev *hdev)
bt_dev_info(hdev, "Fseq status: %s (0x%2.2x)", str, *p);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Reason: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Global version: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Installed version: 0x%8.8x", val);
- p = skb->data;
- skb_pull_data(skb, 4);
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
bt_dev_info(hdev, "Fseq executed: %2.2u.%2.2u.%2.2u.%2.2u", p[0], p[1],
p[2], p[3]);
- p = skb->data;
- skb_pull_data(skb, 4);
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
bt_dev_info(hdev, "Fseq BT Top: %2.2u.%2.2u.%2.2u.%2.2u", p[0], p[1],
p[2], p[3]);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq Top init version: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq Cnvio init version: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq MBX Wifi file version: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq BT version: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq Top reset address: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq MBX timeout: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq MBX ack: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq CNVi id: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq CNVr id: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq Error handle: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq Magic noalive indication: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq OTP version: 0x%8.8x", val);
- val = get_unaligned_le32(skb_pull_data(skb, 4));
+ p = skb_pull_data(skb, 4);
+ if (!p)
+ goto malformed;
+ val = get_unaligned_le32(p);
bt_dev_dbg(hdev, "Fseq MBX otp version: 0x%8.8x", val);
kfree_skb(skb);
+ return;
+
+malformed:
+ bt_dev_dbg(hdev, "Malformed packet received");
+ kfree_skb(skb);
}
EXPORT_SYMBOL_GPL(btintel_print_fseq_info);
--
2.43.0
^ permalink raw reply related
* Bluetooth: btmtk: MT7925 fails "wmt func ctrl" (-EINVAL) since 634a4408c061
From: Bernie Innocenti @ 2026-05-16 2:27 UTC (permalink / raw)
To: linux-bluetooth; +Cc: regressions
Hi,
Since commit 634a4408c061 ("Bluetooth: btmtk: validate WMT event SKB
length before struct access") my MediaTek MT7925 Bluetooth adapter no
longer initializes. The controller never registers and is absent from
userspace.
I'm seeing this on a Framework 16 (AMD Ryzen AI 9) with a MediaTek
MT7925 (USB ID 0e8d:0717) running Fedora Rawhide.
Firmware is BT_RAM_CODE_MT7925_1_1_hdr.bin and loads fine in both, so
this is not a firmware or kconfig issue.
Bad kernel (7.1.0-0.rc3.260515g70eda68668d1.27.fc45.x86_64):
Bluetooth: hci0: HW/SW Version: 0x00000000, Build Time: 20260106153314
Bluetooth: hci0: Failed to send wmt func ctrl (-22)
Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is
advertised, but not supported.
Good kernel (7.0.0-62.fc45.x86_64):
Bluetooth: hci0: HW/SW Version: 0x00000000, Build Time: 20260106153314
Bluetooth: hci0: Device setup in 296567 usecs
Bluetooth: hci0: AOSP extensions version v1.00
Bug analysis courtesy of Claude Opus, I haven't verified:
The failure (-22 = -EINVAL) comes from the new length guard in the
BTMTK_WMT_FUNC_CTRL branch of btmtk_usb_hci_wmt_sync():
case BTMTK_WMT_FUNC_CTRL:
if (!skb_pull_data(data->evt_skb, sizeof(wmt_evt_funcc->status))) {
err = -EINVAL;
goto err_free_skb;
}
The first skb_pull_data() (base 7-byte WMT event) succeeds — neither
"WMT event too short" nor "Wrong op" is logged — so it is specifically
this second 2-byte status pull that returns NULL. The MT7925 FUNC_CTRL
response is shorter than the full 9-byte struct
btmtk_hci_wmt_evt_funcc the check assumes, so a valid response is now
rejected. The pre-commit code tolerated this, hence the regression.
The commit's bounds-check intent is sound, but the trailing status
field should be treated as optional for devices that return a short
event, rather than hard failing.
The commit was isolated by code inspection: it is the only post-7.0
btmtk change introducing an -EINVAL in this path.
The commit is Cc: stable, so affected stable trees likely regress too.
Happy to test patches or provide full dmesg / btmon traces.
#regzbot introduced: 634a4408c061
--
_ // Bernie Innocenti
\X/ https://codewiz.org/
^ permalink raw reply
* [PATCH v5] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: w15303746062 @ 2026-05-16 2:22 UTC (permalink / raw)
To: luiz.dentz, pmenzel, marcel, linux-bluetooth
Cc: linux-serial, linux-kernel, greg, stable, Mingyu Wang
In-Reply-To: <CABBYNZ+r3gm37FW5WqE79bRp+x9UZsaCtyvfz_FdixqEucAxGw@mail.gmail.com>
From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
A Use-After-Free (UAF) vulnerability and a subsequent kernel panic were
observed in hci_uart_write_work() due to a race condition between the
initialization of the HCI UART line discipline and concurrent TTY hangup.
This issue was triggered by our custom device emulation and fuzzing
framework (DevGen) on the v6.18 kernel. Due to the highly timing-dependent
nature of this race condition (requiring a precise interleaving of
TIOCVHANGUP and protocol setup), Syzkaller failed to extract a reliable
standalone C reproducer (reproducer is too unreliable: 0.00).
The crash trace is as follows:
ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940
WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
...
Call Trace:
<TASK>
debug_check_no_obj_freed+0x3ec/0x520
kfree+0x3f0/0x6c0
hci_uart_tty_close+0x127/0x2a0
k_ldisc_close+0x113/0x1a0
tty_ldisc_kill+0x8e/0x150
tty_ldisc_hangup+0x3c1/0x730
__tty_hangup.part.0+0x3fd/0x8a0
tty_ioctl+0x120f/0x1690
__x64_sys_ioctl+0x18f/0x210
do_syscall_64+0xcb/0xfa0
entry_SYSCALL_64_after_hwframe+0x77/0x7f
</TASK>
The issue arises because the workqueues (init_ready and write_work) are
only flushed/cancelled if the HCI_UART_PROTO_READY flag is set. However,
during the protocol initialization phase (HCI_UART_PROTO_INIT), the
underlying protocol may schedule work. If a hangup occurs before the setup
completes and the READY flag is set, hci_uart_tty_close() skips the
teardown of these workqueues and proceeds to free the `hu` struct. When
the scheduled work executes later, it blindly dereferences the freed `hu`
struct.
Fix this by moving the workqueue teardown to the very beginning of
hci_uart_tty_close(), outside the HCI_UART_PROTO_READY check and prior to
calling hci_uart_close(). Furthermore, use disable_work_sync() instead of
cancel_work_sync() to unconditionally disable the works. This ensures that
any pending works are cancelled and no new submissions can occur before or
during the teardown of the device connection. Note that hu->init_ready and
hu->write_work are initialized in hci_uart_tty_open(), so it is always safe
to call disable_work_sync() on them in hci_uart_tty_close(), even if the
protocol was never fully attached.
Fixes: 3b799254cf6f ("Bluetooth: hci_uart: Cancel init work before unregistering")
Cc: stable@vger.kernel.org
Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
---
Changes in v5:
- Moved disable_work_sync() to the very top of hci_uart_tty_close(),
before hci_uart_close(), to prevent any concurrent re-queuing
during device shutdown and resolve Sashiko static analysis warnings.
Changes in v4:
- Adopted Luiz's suggestion to use disable_work_sync() instead of
cancel_work_sync() to prevent new work submissions during teardown.
Changes in v3:
- Added 'Cc: stable' tag as requested by the stable bot.
Changes in v2:
- Added KASAN/ODEBUG crash trace.
drivers/bluetooth/hci_ldisc.c | 12 +++++++++---
1 file changed, 9 insertions(+), 3 deletions(-)
diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
index 275ea865bc29..ebdbcd567cd2 100644
--- a/drivers/bluetooth/hci_ldisc.c
+++ b/drivers/bluetooth/hci_ldisc.c
@@ -540,6 +540,15 @@ static void hci_uart_tty_close(struct tty_struct *tty)
if (!hu)
return;
+ /*
+ * Disable workqueues unconditionally before tearing down the
+ * connection, as they might be active during the PROTO_INIT phase.
+ * Using disable_work_sync() ensures no new submissions can occur
+ * during or after hci_uart_close().
+ */
+ disable_work_sync(&hu->init_ready);
+ disable_work_sync(&hu->write_work);
+
hdev = hu->hdev;
if (hdev)
hci_uart_close(hdev);
@@ -549,9 +558,6 @@ static void hci_uart_tty_close(struct tty_struct *tty)
clear_bit(HCI_UART_PROTO_READY, &hu->flags);
percpu_up_write(&hu->proto_lock);
- cancel_work_sync(&hu->init_ready);
- cancel_work_sync(&hu->write_work);
-
if (hdev) {
if (test_bit(HCI_UART_REGISTERED, &hu->flags))
hci_unregister_dev(hdev);
--
2.34.1
^ permalink raw reply related
* [Bug 221529] mt7922: Kernel 7.0.7 breaks Bluetooth
From: bugzilla-daemon @ 2026-05-16 2:15 UTC (permalink / raw)
To: linux-bluetooth
In-Reply-To: <bug-221529-62941@https.bugzilla.kernel.org/>
https://bugzilla.kernel.org/show_bug.cgi?id=221529
Donald Labaj (donald.labaj@gmail.com) changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |donald.labaj@gmail.com
--- Comment #1 from Donald Labaj (donald.labaj@gmail.com) ---
Seeing the same thing in 7.0.7. Used GRUB to run the 7.0.6 and the mediatek
bluetooth module works.
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* RE: [v2] Bluetooth: bnep: reject short frames before parsing
From: bluez.test.bot @ 2026-05-16 1:48 UTC (permalink / raw)
To: linux-bluetooth, rollkingzzc
In-Reply-To: <20260516004433.3199522-1-rollkingzzc@gmail.com>
[-- Attachment #1: Type: text/plain, Size: 936 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1095732
---Test result---
Test Summary:
CheckPatch PASS 0.75 seconds
GitLint PASS 0.35 seconds
SubjectPrefix PASS 0.13 seconds
BuildKernel PASS 25.11 seconds
CheckAllWarning PASS 27.77 seconds
CheckSparse PASS 26.53 seconds
BuildKernel32 PASS 24.79 seconds
TestRunnerSetup PASS 522.12 seconds
TestRunner_bnep-tester PASS 18.54 seconds
IncrementalBuild PASS 24.94 seconds
https://github.com/bluez/bluetooth-next/pull/198
---
Regards,
Linux Bluetooth
^ permalink raw reply
* Re:Re: [PATCH v4] Bluetooth: hci_uart: fix UAF in hci_uart_tty_close()
From: w15303746062 @ 2026-05-16 1:41 UTC (permalink / raw)
To: Luiz Augusto von Dentz
Cc: pmenzel, marcel, linux-bluetooth, linux-serial, linux-kernel,
greg, stable, Mingyu Wang
In-Reply-To: <CABBYNZ+r3gm37FW5WqE79bRp+x9UZsaCtyvfz_FdixqEucAxGw@mail.gmail.com>
Hi Luiz,
Thank you for checking it with Sashiko.
At 2026-05-16 00:08:05, "Luiz Augusto von Dentz" <luiz.dentz@gmail.com> wrote:
>Hi,
>
>On Fri, May 15, 2026 at 10:06 AM <w15303746062@163.com> wrote:
>>
>> From: Mingyu Wang <25181214217@stu.xidian.edu.cn>
>>
>> A Use-After-Free (UAF) vulnerability and a subsequent kernel panic were
>> observed in hci_uart_write_work() due to a race condition between the
>> initialization of the HCI UART line discipline and concurrent TTY hangup.
>>
>> This issue was triggered by our custom device emulation and fuzzing
>> framework (DevGen) on the v6.18 kernel. Due to the highly timing-dependent
>> nature of this race condition (requiring a precise interleaving of
>> TIOCVHANGUP and protocol setup), Syzkaller failed to extract a reliable
>> standalone C reproducer (reproducer is too unreliable: 0.00).
>>
>> The crash trace is as follows:
>> ODEBUG: free active (active state 0) object: ffff88804024e870 object type: work_struct hint: hci_uart_write_work+0x0/0x940
>> WARNING: CPU: 0 PID: 338273 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
>> ...
>> Call Trace:
>> <TASK>
>> debug_check_no_obj_freed+0x3ec/0x520
>> kfree+0x3f0/0x6c0
>> hci_uart_tty_close+0x127/0x2a0
>> tty_ldisc_close+0x113/0x1a0
>> tty_ldisc_kill+0x8e/0x150
>> tty_ldisc_hangup+0x3c1/0x730
>> __tty_hangup.part.0+0x3fd/0x8a0
>> tty_ioctl+0x120f/0x1690
>> __x64_sys_ioctl+0x18f/0x210
>> do_syscall_64+0xcb/0xfa0
>> entry_SYSCALL_64_after_hwframe+0x77/0x7f
>> </TASK>
>>
>> The issue arises because the workqueues (init_ready and write_work) are
>> only flushed/cancelled if the HCI_UART_PROTO_READY flag is set. However,
>> during the protocol initialization phase (HCI_UART_PROTO_INIT), the
>> underlying protocol may schedule work. If a hangup occurs before the setup
>> completes and the READY flag is set, hci_uart_tty_close() skips the
>> teardown of these workqueues and proceeds to free the `hu` struct. When
>> the scheduled work executes later, it blindly dereferences the freed `hu`
>> struct.
>>
>> Fix this by moving the workqueue teardown outside the HCI_UART_PROTO_READY
>> check. Furthermore, use disable_work_sync() instead of cancel_work_sync()
>> to unconditionally disable the works. This ensures that any pending works
>> are cancelled and no new submissions can occur before the hci_uart
>> structure is freed. Note that hu->init_ready and hu->write_work are
>> initialized in hci_uart_tty_open(), so it is always safe to call
>> disable_work_sync() on them in hci_uart_tty_close(), even if the protocol
>> was never fully attached.
>>
>> Fixes: 3b799254cf6f ("Bluetooth: hci_uart: Cancel init work before unregistering")
>> Cc: stable@vger.kernel.org
>> Signed-off-by: Mingyu Wang <25181214217@stu.xidian.edu.cn>
>> ---
>> Changes in v4:
>> - Adopted Luiz's suggestion to use disable_work_sync() instead of
>> cancel_work_sync() to prevent new work submissions during teardown.
>>
>> Changes in v3:
>> - Added 'Cc: stable' tag as requested by the stable bot.
>>
>> Changes in v2:
>> - Added KASAN/ODEBUG crash trace.
>>
>> drivers/bluetooth/hci_ldisc.c | 12 +++++++++---
>> 1 file changed, 9 insertions(+), 3 deletions(-)
>>
>> diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c
>> index 275ea865bc29..333c1e1503e8 100644
>> --- a/drivers/bluetooth/hci_ldisc.c
>> +++ b/drivers/bluetooth/hci_ldisc.c
>> @@ -544,14 +544,20 @@ static void hci_uart_tty_close(struct tty_struct *tty)
>> if (hdev)
>> hci_uart_close(hdev);
>>
>> + /*
>> + * Disable workqueues unconditionally before freeing the hu
>> + * struct, as they might be active during the PROTO_INIT phase.
>> + * Using disable_work_sync() instead of cancel_work_sync()
>> + * ensures no new submissions can occur.
>> + */
>> + disable_work_sync(&hu->init_ready);
>> + disable_work_sync(&hu->write_work);
>
>Looks like sashiko has a problem with these being after hci_uart_close:
I see the issue now. Placing `disable_work_sync()` after `hci_uart_close()`
could still leave a tiny window where the workqueues might race with the
teardown of the `hdev` structure.
The safest and most logical approach is to pull the `disable_work_sync()`
calls to the very top of `hci_uart_tty_close()`, before `hci_uart_close()`
or any other teardown logic begins. This will completely choke off any
asynchronous operations before we touch the connection state or hardware.
I will update the patch and send out v5 immediately.
>
>https://sashiko.dev/#/patchset/20260515140548.393865-1-w15303746062%40163.com
>
>> if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
>> percpu_down_write(&hu->proto_lock);
>> clear_bit(HCI_UART_PROTO_READY, &hu->flags);
>> percpu_up_write(&hu->proto_lock);
>>
>> - cancel_work_sync(&hu->init_ready);
>> - cancel_work_sync(&hu->write_work);
>> -
>> if (hdev) {
>> if (test_bit(HCI_UART_REGISTERED, &hu->flags))
>> hci_unregister_dev(hdev);
>> --
>> 2.34.1
>>
>
>
>--
>Luiz Augusto von Dentz
Best regards,
Mingyu
^ permalink raw reply
* [Bug 221529] New: mt7922: Kernel 7.0.7 breaks Bluetooth
From: bugzilla-daemon @ 2026-05-16 1:21 UTC (permalink / raw)
To: linux-bluetooth
https://bugzilla.kernel.org/show_bug.cgi?id=221529
Bug ID: 221529
Summary: mt7922: Kernel 7.0.7 breaks Bluetooth
Product: Drivers
Version: 2.5
Hardware: AMD
OS: Linux
Status: NEW
Severity: normal
Priority: P3
Component: Bluetooth
Assignee: linux-bluetooth@vger.kernel.org
Reporter: autofire372@gmail.com
Regression: No
Created attachment 310137
--> https://bugzilla.kernel.org/attachment.cgi?id=310137&action=edit
Output of "sudo dmesg | grep Bluetooth", piped into a logfile
Starting with kernel 7.0.7, my laptop's Mediatek mt7922 Bluetooth module
(VID:0489, PID:e0f6) has stopped working. The hardware itself is functional if
I boot on an older kernel, and the actual Bluetooth software stack seems fully
functional, but on 7.0.7 any attempt to connect an already paired device fails,
with bluetoothctl reporting "No default controller available".
I have attached the output of "sudo dmesg | grep Bluetooth" from a boot on
7.0.7.
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply
* [PATCH v2] Bluetooth: bnep: reject short frames before parsing
From: Zhang Cen @ 2026-05-16 0:44 UTC (permalink / raw)
To: Marcel Holtmann, Luiz Augusto von Dentz
Cc: linux-bluetooth, linux-kernel, zerocling0077, 2045gemini,
Zhang Cen
An L2CAP peer can deliver an empty BNEP payload or a payload that contains
only the outer type byte. bnep_rx_frame() currently reads the BNEP type
byte and, for control packets, the control opcode before it proves that
the skb contains those bytes. The BNEP_SETUP_CONN_REQ path can also read
the setup size byte before that byte is present, and bnep_rx_control()
dereferences the control opcode before checking that its control payload
is non-empty.
Reject empty skbs before reading the outer type byte, require a control
opcode before parsing BNEP_CONTROL, require the setup size byte before
using it, and make bnep_rx_control() fail zero-length control payloads.
Validation reproduced this kernel report:
KASAN slab-out-of-bounds in bnep_rx_frame()
Read of size 1
Call trace:
dump_stack_lvl() (?:?)
print_address_description() (mm/kasan/report.c:373)
bnep_rx_frame() (net/bluetooth/bnep/core.c:306)
print_report() (?:?)
__virt_addr_valid() (?:?)
srso_alias_return_thunk() (arch/x86/include/asm/nospec-branch.h:375)
kasan_addr_to_slab() (mm/kasan/common.c:45)
kasan_report() (?:?)
process_one_work() (kernel/workqueue.c:3200)
worker_thread() (?:?)
__kthread_parkme() (kernel/kthread.c:259)
kthread() (?:?)
_raw_spin_unlock_irq() (kernel/locking/spinlock.c:204)
ret_from_fork() (?:?)
__switch_to() (?:?)
ret_from_fork_asm() (?:?)
kasan_save_stack() (mm/kasan/common.c:52)
kasan_save_track() (mm/kasan/common.c:74)
__kasan_kmalloc() (?:?)
vpanic() (kernel/panic.c:576)
panic() (?:?)
preempt_schedule_common() (kernel/sched/core.c:7352)
preempt_schedule_thunk() (?:?)
end_report() (mm/kasan/report.c:219)
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Zhang Cen <rollkingzzc@gmail.com>
---
diff --git a/net/bluetooth/bnep/core.c b/net/bluetooth/bnep/core.c
index d44987d4515c..f5070bbd6b57 100644
--- a/net/bluetooth/bnep/core.c
+++ b/net/bluetooth/bnep/core.c
@@ -208,9 +208,14 @@ static int bnep_ctrl_set_mcfilter(struct bnep_session *s, u8 *data, int len)
static int bnep_rx_control(struct bnep_session *s, void *data, int len)
{
- u8 cmd = *(u8 *)data;
+ u8 cmd;
int err = 0;
+ if (len < 1)
+ return -EILSEQ;
+
+ cmd = *(u8 *)data;
+
data++;
len--;
@@ -303,14 +308,21 @@ static int bnep_rx_frame(struct bnep_session *s, struct sk_buff *skb)
dev->stats.rx_bytes += skb->len;
+ if (skb->len < 1)
+ goto badframe;
+
type = *(u8 *) skb->data;
skb_pull(skb, 1);
- ctrl_type = *(u8 *)skb->data;
if ((type & BNEP_TYPE_MASK) >= sizeof(__bnep_rx_hlen))
goto badframe;
if ((type & BNEP_TYPE_MASK) == BNEP_CONTROL) {
+ if (skb->len < 1)
+ goto badframe;
+
+ ctrl_type = *(u8 *)skb->data;
+
if (bnep_rx_control(s, skb->data, skb->len) < 0) {
dev->stats.tx_errors++;
kfree_skb(skb);
@@ -326,6 +338,9 @@ static int bnep_rx_frame(struct bnep_session *s, struct sk_buff *skb)
switch (ctrl_type) {
case BNEP_SETUP_CONN_REQ:
/* Pull: ctrl type (1 b), len (1 b), data (len bytes) */
+ if (skb->len < 2)
+ goto badframe;
+
if (!skb_pull(skb, 2 + *(u8 *)(skb->data + 1) * 2))
goto badframe;
break;
^ permalink raw reply related
* Bluetooth: btmtk: regression in 634a4408c breaks MT7922 FUNC_CTRL handshake
From: Sergey Kasmy @ 2026-05-15 21:02 UTC (permalink / raw)
To: linux-bluetooth; +Cc: tristan, marcel, Luiz Augusto von Dentz
[-- Attachment #1: Type: text/plain, Size: 1169 bytes --]
Hi,
Commit 634a4408c0615c523cf7531790f4f14a422b9206 ("Bluetooth: btmtk:
validate WMT event SKB length before struct access") introduced a
regression that breaks my MediaTek MT7922 Bluetooth adapter (USB ID
0e8d:0616).
The device enumerates correctly and the version is read successfully,
but initialization fails at the FUNC_CTRL step:
Bluetooth: hci0: HW/SW Version: 0x008a008a, Build Time: 20260224103448
Bluetooth: hci0: Failed to send wmt func ctrl (-22)
Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is
advertised, but not supported.
Full dmesg is attached to this email.
Reverting the commit fixes the issue on my machine. The issue is
present in both Linux 7.0.8 stable and 6.18.31 LTS. The same hardware
works correctly on Linux 7.0.6, under Windows, as well as in 7.0.8
with this commit reversed.
Hardware:
Adapter: MediaTek MT7922 (0e8d:0616)
Motherboard: MSI MAG B650 TOMAHAWK WIFI (MS-7D75)
CPU: AMD Ryzen 7 7800X3D
To reproduce: boot Linux 7.0.7 or 6.18.31 with the correct adapter and
observe `bluetoothctl show` showing "no default controller available",
as well as the EINVAL error in dmesg.
Regards,
Serghei Casminin
[-- Attachment #2: dmesg-broken-bluetooth.log --]
[-- Type: text/x-log, Size: 117406 bytes --]
[ 0.000000] Linux version 6.18.31-1-lts (linux-lts@archlinux) (gcc (GCC) 16.1.1 20260430, GNU ld (GNU Binutils) 2.46.0) #1 SMP PREEMPT_DYNAMIC Fri, 15 May 2026 15:01:51 +0000
[ 0.000000] Command line: initrd=\initramfs-linux-lts.img root=PARTLABEL=zeus-linux-root rootflags=subvol=/@ ro
[ 0.000000] BIOS-provided physical RAM map:
[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable
[ 0.000000] BIOS-e820: [mem 0x00000000000a0000-0x00000000000fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x0000000009e01fff] usable
[ 0.000000] BIOS-e820: [mem 0x0000000009e02000-0x0000000009ffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000000a000000-0x000000000a1fffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000a200000-0x000000000a20ffff] ACPI NVS
[ 0.000000] BIOS-e820: [mem 0x000000000a210000-0x000000000affffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000b000000-0x000000000b020fff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000000b021000-0x000000008738efff] usable
[ 0.000000] BIOS-e820: [mem 0x000000008738f000-0x000000008d38efff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000008d38f000-0x000000008d47efff] ACPI data
[ 0.000000] BIOS-e820: [mem 0x000000008d47f000-0x000000008f47efff] ACPI NVS
[ 0.000000] BIOS-e820: [mem 0x000000008f47f000-0x00000000985fefff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000985ff000-0x0000000099ff8fff] usable
[ 0.000000] BIOS-e820: [mem 0x0000000099ff9000-0x0000000099ffbfff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000099ffc000-0x0000000099ffffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000009a000000-0x000000009bffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000009d7f3000-0x000000009fffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000f7000000-0x00000000ffffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000083defffff] usable
[ 0.000000] BIOS-e820: [mem 0x000000083ef40000-0x00000008801fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved
[ 0.000000] NX (Execute Disable) protection: active
[ 0.000000] APIC: Static calls initialized
[ 0.000000] efi: EFI v2.9 by American Megatrends
[ 0.000000] efi: ACPI=0x8f466000 ACPI 2.0=0x8f466014 TPMFinalLog=0x8f433000 SMBIOS=0x95ac4000 SMBIOS 3.0=0x95ac3000 MEMATTR=0x821b3018 ESRT=0x81a63418 RNG=0x8d3c0f18 INITRD=0x7e07d318 TPMEventLog=0x8d3b6018
[ 0.000000] random: crng init done
[ 0.000000] efi: Remove mem67: MMIO range=[0xe0000000-0xefffffff] (256MB) from e820 map
[ 0.000000] e820: remove [mem 0xe0000000-0xefffffff] reserved
[ 0.000000] efi: Remove mem68: MMIO range=[0xf7000000-0xfedfffff] (126MB) from e820 map
[ 0.000000] e820: remove [mem 0xf7000000-0xfedfffff] reserved
[ 0.000000] efi: Not removing mem69: MMIO range=[0xfee00000-0xfee00fff] (4KB) from e820 map
[ 0.000000] efi: Remove mem70: MMIO range=[0xfee01000-0xffffffff] (17MB) from e820 map
[ 0.000000] e820: remove [mem 0xfee01000-0xffffffff] reserved
[ 0.000000] efi: Remove mem72: MMIO range=[0x860000000-0x8801fffff] (514MB) from e820 map
[ 0.000000] e820: remove [mem 0x860000000-0x8801fffff] reserved
[ 0.000000] SMBIOS 3.7.0 present.
[ 0.000000] DMI: Micro-Star International Co., Ltd. MS-7D75/MAG B650 TOMAHAWK WIFI (MS-7D75), BIOS 1.O0 06/24/2025
[ 0.000000] DMI: Memory slots populated: 2/4
[ 0.000000] tsc: Fast TSC calibration using PIT
[ 0.000000] tsc: Detected 4200.014 MHz processor
[ 0.000112] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
[ 0.000113] e820: remove [mem 0x000a0000-0x000fffff] usable
[ 0.000117] last_pfn = 0x83df00 max_arch_pfn = 0x400000000
[ 0.000122] MTRR map: 5 entries (3 fixed + 2 variable; max 20), built from 9 variable MTRRs
[ 0.000123] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT
[ 0.000251] e820: update [mem 0xa0000000-0xffffffff] usable ==> reserved
[ 0.000256] last_pfn = 0x9a000 max_arch_pfn = 0x400000000
[ 0.002790] esrt: Reserving ESRT space from 0x0000000081a63418 to 0x0000000081a63450.
[ 0.002794] e820: update [mem 0x81a63000-0x81a63fff] usable ==> reserved
[ 0.002804] Using GB pages for direct mapping
[ 0.003181] Secure boot disabled
[ 0.003181] RAMDISK: [mem 0x76790000-0x79429fff]
[ 0.003292] ACPI: Early table checksum verification disabled
[ 0.003294] ACPI: RSDP 0x000000008F466014 000024 (v02 ALASKA)
[ 0.003296] ACPI: XSDT 0x000000008F465728 00010C (v01 ALASKA A M I 01072009 AMI 01000013)
[ 0.003299] ACPI: FACP 0x000000008D474000 000114 (v06 ALASKA A M I 01072009 AMI 00010013)
[ 0.003302] ACPI: DSDT 0x000000008D3FB000 06DF4A (v199 ALASKA A M I 01072009 INTL 20221020)
[ 0.003303] ACPI: FACS 0x000000008F463000 000040
[ 0.003305] ACPI: SSDT 0x000000008D476000 00816C (v02 AMD Splinter 00000002 MSFT 05000000)
[ 0.003306] ACPI: SSDT 0x000000008D475000 000221 (v02 ALASKA CPUSSDT 01072009 AMI 01072009)
[ 0.003307] ACPI: FIDT 0x000000008D46D000 00009C (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.003308] ACPI: MCFG 0x000000008D46C000 00003C (v01 ALASKA A M I 01072009 MSFT 00010013)
[ 0.003309] ACPI: HPET 0x000000008D46B000 000038 (v01 ALASKA A M I 01072009 AMI 00000005)
[ 0.003310] ACPI: WDRT 0x000000008D46A000 000047 (v01 ALASKA A M I 01072009 AMI 00000005)
[ 0.003311] ACPI: UEFI 0x000000008EE20000 000048 (v01 ALASKA A M I 01072009 AMI 01000013)
[ 0.003312] ACPI: FPDT 0x000000008D469000 000044 (v01 ALASKA A M I 01072009 AMI 01000013)
[ 0.003313] ACPI: VFCT 0x000000008D3E1000 0190A0 (v01 ALASKA A M I 00000001 AMD 33504F47)
[ 0.003314] ACPI: SSDT 0x000000008D46F000 004DEE (v02 AMD AMD CPU 00000001 AMD 00000001)
[ 0.003315] ACPI: SSDT 0x000000008D46E000 000041 (v01 AMD AppCompD 00000001 INTL 20221020)
[ 0.003316] ACPI: TPM2 0x000000008D3DF000 00004C (v04 ALASKA A M I 00000001 AMI 00000000)
[ 0.003317] ACPI: SSDT 0x000000008D3DE000 0006D4 (v02 AMD CPMWLRC 00000001 INTL 20221020)
[ 0.003318] ACPI: SSDT 0x000000008D3DC000 00169E (v02 AMD CPMDFIG2 00000001 INTL 20221020)
[ 0.003319] ACPI: SSDT 0x000000008D3D9000 002AA6 (v02 AMD CDFAAIG2 00000001 INTL 20221020)
[ 0.003320] ACPI: SSDT 0x000000008D3D8000 0008BA (v02 AMD CPMDFDG2 00000001 INTL 20221020)
[ 0.003321] ACPI: SSDT 0x000000008D3CE000 009A9E (v02 AMD CPMCMN 00000001 INTL 20221020)
[ 0.003322] ACPI: SSDT 0x000000008D3CB000 0027FE (v02 AMD AOD 00000001 INTL 20221020)
[ 0.003323] ACPI: WSMT 0x000000008D3CA000 000028 (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.003324] ACPI: APIC 0x000000008D3C9000 00015E (v06 ALASKA A M I 01072009 AMI 00010013)
[ 0.003325] ACPI: IVRS 0x000000008D3C8000 0000C8 (v02 AMD AmdTable 00000001 AMD 00000001)
[ 0.003326] ACPI: SSDT 0x000000008D3C7000 000500 (v02 AMD MEMTOOL0 00000002 INTL 20221020)
[ 0.003327] ACPI: SSDT 0x000000008D3C6000 0009D0 (v02 AMD CPMMSOSC 00000001 INTL 20221020)
[ 0.003328] ACPI: SSDT 0x000000008D3C5000 00047C (v02 AMD AMDWOV 00000001 INTL 20221020)
[ 0.003329] ACPI: SSDT 0x000000008D3C3000 001046 (v02 AMD CPMACPV4 00000001 INTL 20221020)
[ 0.003330] ACPI: SSDT 0x000000008D3C2000 00053E (v01 AMD CPMAPMFD 00000001 INTL 20221020)
[ 0.003331] ACPI: SSDT 0x000000008D3C1000 00044E (v02 AMD AmdTable 00000001 INTL 20221020)
[ 0.003332] ACPI: BGRT 0x000000008D3E0000 000038 (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.003333] ACPI: Reserving FACP table memory at [mem 0x8d474000-0x8d474113]
[ 0.003334] ACPI: Reserving DSDT table memory at [mem 0x8d3fb000-0x8d468f49]
[ 0.003334] ACPI: Reserving FACS table memory at [mem 0x8f463000-0x8f46303f]
[ 0.003335] ACPI: Reserving SSDT table memory at [mem 0x8d476000-0x8d47e16b]
[ 0.003335] ACPI: Reserving SSDT table memory at [mem 0x8d475000-0x8d475220]
[ 0.003335] ACPI: Reserving FIDT table memory at [mem 0x8d46d000-0x8d46d09b]
[ 0.003335] ACPI: Reserving MCFG table memory at [mem 0x8d46c000-0x8d46c03b]
[ 0.003336] ACPI: Reserving HPET table memory at [mem 0x8d46b000-0x8d46b037]
[ 0.003336] ACPI: Reserving WDRT table memory at [mem 0x8d46a000-0x8d46a046]
[ 0.003336] ACPI: Reserving UEFI table memory at [mem 0x8ee20000-0x8ee20047]
[ 0.003337] ACPI: Reserving FPDT table memory at [mem 0x8d469000-0x8d469043]
[ 0.003337] ACPI: Reserving VFCT table memory at [mem 0x8d3e1000-0x8d3fa09f]
[ 0.003337] ACPI: Reserving SSDT table memory at [mem 0x8d46f000-0x8d473ded]
[ 0.003338] ACPI: Reserving SSDT table memory at [mem 0x8d46e000-0x8d46e040]
[ 0.003338] ACPI: Reserving TPM2 table memory at [mem 0x8d3df000-0x8d3df04b]
[ 0.003338] ACPI: Reserving SSDT table memory at [mem 0x8d3de000-0x8d3de6d3]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3dc000-0x8d3dd69d]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3d9000-0x8d3dbaa5]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3d8000-0x8d3d88b9]
[ 0.003339] ACPI: Reserving SSDT table memory at [mem 0x8d3ce000-0x8d3d7a9d]
[ 0.003340] ACPI: Reserving SSDT table memory at [mem 0x8d3cb000-0x8d3cd7fd]
[ 0.003340] ACPI: Reserving WSMT table memory at [mem 0x8d3ca000-0x8d3ca027]
[ 0.003340] ACPI: Reserving APIC table memory at [mem 0x8d3c9000-0x8d3c915d]
[ 0.003341] ACPI: Reserving IVRS table memory at [mem 0x8d3c8000-0x8d3c80c7]
[ 0.003341] ACPI: Reserving SSDT table memory at [mem 0x8d3c7000-0x8d3c74ff]
[ 0.003341] ACPI: Reserving SSDT table memory at [mem 0x8d3c6000-0x8d3c69cf]
[ 0.003342] ACPI: Reserving SSDT table memory at [mem 0x8d3c5000-0x8d3c547b]
[ 0.003342] ACPI: Reserving SSDT table memory at [mem 0x8d3c3000-0x8d3c4045]
[ 0.003342] ACPI: Reserving SSDT table memory at [mem 0x8d3c2000-0x8d3c253d]
[ 0.003343] ACPI: Reserving SSDT table memory at [mem 0x8d3c1000-0x8d3c144d]
[ 0.003343] ACPI: Reserving BGRT table memory at [mem 0x8d3e0000-0x8d3e0037]
[ 0.003386] No NUMA configuration found
[ 0.003386] Faking a node at [mem 0x0000000000000000-0x000000083defffff]
[ 0.003391] NODE_DATA(0) allocated [mem 0x83ded5280-0x83defffff]
[ 0.003506] Zone ranges:
[ 0.003506] DMA [mem 0x0000000000001000-0x0000000000ffffff]
[ 0.003507] DMA32 [mem 0x0000000001000000-0x00000000ffffffff]
[ 0.003508] Normal [mem 0x0000000100000000-0x000000083defffff]
[ 0.003508] Device empty
[ 0.003509] Movable zone start for each node
[ 0.003509] Early memory node ranges
[ 0.003510] node 0: [mem 0x0000000000001000-0x000000000009ffff]
[ 0.003510] node 0: [mem 0x0000000000100000-0x0000000009e01fff]
[ 0.003511] node 0: [mem 0x000000000a000000-0x000000000a1fffff]
[ 0.003511] node 0: [mem 0x000000000a210000-0x000000000affffff]
[ 0.003511] node 0: [mem 0x000000000b021000-0x000000008738efff]
[ 0.003512] node 0: [mem 0x00000000985ff000-0x0000000099ff8fff]
[ 0.003512] node 0: [mem 0x0000000099ffc000-0x0000000099ffffff]
[ 0.003512] node 0: [mem 0x0000000100000000-0x000000083defffff]
[ 0.003514] Initmem setup node 0 [mem 0x0000000000001000-0x000000083defffff]
[ 0.003518] On node 0, zone DMA: 1 pages in unavailable ranges
[ 0.003528] On node 0, zone DMA: 96 pages in unavailable ranges
[ 0.003608] On node 0, zone DMA32: 510 pages in unavailable ranges
[ 0.003617] On node 0, zone DMA32: 16 pages in unavailable ranges
[ 0.004711] On node 0, zone DMA32: 33 pages in unavailable ranges
[ 0.004734] On node 0, zone DMA32: 4720 pages in unavailable ranges
[ 0.004734] On node 0, zone DMA32: 3 pages in unavailable ranges
[ 0.021815] On node 0, zone Normal: 24576 pages in unavailable ranges
[ 0.021838] On node 0, zone Normal: 8448 pages in unavailable ranges
[ 0.022509] ACPI: PM-Timer IO Port: 0x808
[ 0.022516] ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1])
[ 0.022526] IOAPIC[0]: apic_id 32, version 33, address 0xfec00000, GSI 0-23
[ 0.022529] IOAPIC[1]: apic_id 33, version 33, address 0xfec01000, GSI 24-55
[ 0.022530] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[ 0.022531] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 low level)
[ 0.022533] ACPI: Using ACPI (MADT) for SMP configuration information
[ 0.022534] ACPI: HPET id: 0x10228201 base: 0xfed00000
[ 0.022540] e820: update [mem 0x80a87000-0x80ae3fff] usable ==> reserved
[ 0.022550] CPU topo: Max. logical packages: 1
[ 0.022551] CPU topo: Max. logical dies: 1
[ 0.022551] CPU topo: Max. dies per package: 1
[ 0.022553] CPU topo: Max. threads per core: 2
[ 0.022554] CPU topo: Num. cores per package: 8
[ 0.022554] CPU topo: Num. threads per package: 16
[ 0.022554] CPU topo: Allowing 16 present CPUs plus 0 hotplug CPUs
[ 0.022566] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff]
[ 0.022567] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000fffff]
[ 0.022568] PM: hibernation: Registered nosave memory: [mem 0x09e02000-0x09ffffff]
[ 0.022568] PM: hibernation: Registered nosave memory: [mem 0x0a200000-0x0a20ffff]
[ 0.022569] PM: hibernation: Registered nosave memory: [mem 0x0b000000-0x0b020fff]
[ 0.022570] PM: hibernation: Registered nosave memory: [mem 0x80a87000-0x80ae3fff]
[ 0.022570] PM: hibernation: Registered nosave memory: [mem 0x81a63000-0x81a63fff]
[ 0.022571] PM: hibernation: Registered nosave memory: [mem 0x8738f000-0x985fefff]
[ 0.022572] PM: hibernation: Registered nosave memory: [mem 0x99ff9000-0x99ffbfff]
[ 0.022572] PM: hibernation: Registered nosave memory: [mem 0x9a000000-0xffffffff]
[ 0.022574] [mem 0xa0000000-0xfedfffff] available for PCI devices
[ 0.022575] Booting paravirtualized kernel on bare hardware
[ 0.022576] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6370452778343963 ns
[ 0.025990] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:16 nr_cpu_ids:16 nr_node_ids:1
[ 0.026223] percpu: Embedded 63 pages/cpu s221184 r8192 d28672 u262144
[ 0.026226] pcpu-alloc: s221184 r8192 d28672 u262144 alloc=1*2097152
[ 0.026227] pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 12 13 14 15
[ 0.026241] Kernel command line: initrd=\initramfs-linux-lts.img root=PARTLABEL=zeus-linux-root rootflags=subvol=/@ ro
[ 0.026451] printk: log buffer data + meta data: 131072 + 458752 = 589824 bytes
[ 0.027642] Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes, linear)
[ 0.028243] Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear)
[ 0.028327] software IO TLB: area num 16.
[ 0.031793] Fallback order for Node 0: 0
[ 0.031795] Built 1 zonelists, mobility grouping on. Total pages: 8153597
[ 0.031795] Policy zone: Normal
[ 0.031870] mem auto-init: stack:all(zero), heap alloc:on, heap free:off
[ 0.061481] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=16, Nodes=1
[ 0.068569] ftrace: allocating 57128 entries in 224 pages
[ 0.068570] ftrace: allocated 224 pages with 3 groups
[ 0.069201] Dynamic Preempt: voluntary
[ 0.069238] rcu: Preemptible hierarchical RCU implementation.
[ 0.069238] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=16.
[ 0.069239] rcu: RCU priority boosting: priority 1 delay 500 ms.
[ 0.069240] Trampoline variant of Tasks RCU enabled.
[ 0.069240] Rude variant of Tasks RCU enabled.
[ 0.069240] Tracing variant of Tasks RCU enabled.
[ 0.069241] rcu: RCU calculated value of scheduler-enlistment delay is 30 jiffies.
[ 0.069241] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=16
[ 0.069249] RCU Tasks: Setting shift to 4 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=16.
[ 0.069250] RCU Tasks Rude: Setting shift to 4 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=16.
[ 0.069251] RCU Tasks Trace: Setting shift to 4 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=16.
[ 0.071750] NR_IRQS: 524544, nr_irqs: 1096, preallocated irqs: 16
[ 0.071925] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[ 0.072066] kfence: initialized - using 2097152 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____)
[ 0.072090] Console: colour dummy device 80x25
[ 0.072091] printk: legacy console [tty0] enabled
[ 0.072114] ACPI: Core revision 20250807
[ 0.072322] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484873504 ns
[ 0.072333] APIC: Switch to symmetric I/O mode setup
[ 0.072546] AMD-Vi: Using global IVHD EFR:0x246577efa2254afa, EFR2:0x0
[ 0.073323] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[ 0.089005] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x3c8a6ebf4fa, max_idle_ns: 440795385315 ns
[ 0.089007] Calibrating delay loop (skipped), value calculated using timer frequency.. 8403.02 BogoMIPS (lpj=14000046)
[ 0.089018] x86/cpu: User Mode Instruction Prevention (UMIP) activated
[ 0.089043] LVT offset 1 assigned for vector 0xf9
[ 0.089141] LVT offset 2 assigned for vector 0xf4
[ 0.089190] Last level iTLB entries: 4KB 512, 2MB 512, 4MB 256
[ 0.089190] Last level dTLB entries: 4KB 3072, 2MB 3072, 4MB 1536, 1GB 0
[ 0.089193] process: using mwait in idle threads
[ 0.089194] mitigations: Enabled attack vectors: user_kernel, user_user, guest_host, guest_guest, SMT mitigations: auto
[ 0.089196] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl
[ 0.089197] Transient Scheduler Attacks: Mitigation: Clear CPU buffers
[ 0.089197] Spectre V2 : Mitigation: Enhanced / Automatic IBRS
[ 0.089198] Spectre V2 : User space: Mitigation: STIBP always-on protection
[ 0.089198] Speculative Return Stack Overflow: Mitigation: Safe RET
[ 0.089199] VMSCAPE: Mitigation: IBPB before exit to userspace
[ 0.089199] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
[ 0.089200] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier
[ 0.089201] active return thunk: srso_alias_return_thunk
[ 0.089206] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
[ 0.089206] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
[ 0.089207] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
[ 0.089207] x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask'
[ 0.089208] x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256'
[ 0.089208] x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256'
[ 0.089209] x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers'
[ 0.089209] x86/fpu: Supporting XSAVE feature 0x800: 'Control-flow User registers'
[ 0.089210] x86/fpu: Supporting XSAVE feature 0x1000: 'Control-flow Kernel registers (KVM only)'
[ 0.089211] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256
[ 0.089211] x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64
[ 0.089212] x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512
[ 0.089212] x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024
[ 0.089213] x86/fpu: xstate_offset[9]: 2432, xstate_sizes[9]: 8
[ 0.089213] x86/fpu: xstate_offset[11]: 2440, xstate_sizes[11]: 16
[ 0.089214] x86/fpu: xstate_offset[12]: 2456, xstate_sizes[12]: 24
[ 0.089214] x86/fpu: Enabled xstate features 0x1ae7, context size is 2480 bytes, using 'compacted' format.
[ 0.110883] Freeing SMP alternatives memory: 56K
[ 0.110885] pid_max: default: 32768 minimum: 301
[ 0.110917] LSM: initializing lsm=capability,landlock,lockdown,yama,bpf
[ 0.110975] landlock: Up and running.
[ 0.110978] Yama: becoming mindful.
[ 0.111153] LSM support for eBPF active
[ 0.111183] Mount-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.111200] Mountpoint-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.219784] smpboot: CPU0: AMD Ryzen 7 7800X3D 8-Core Processor (family: 0x19, model: 0x61, stepping: 0x2)
[ 0.219923] Performance Events: Fam17h+ 16-deep LBR, core perfctr, AMD PMU driver.
[ 0.219946] ... version: 2
[ 0.219946] ... bit width: 48
[ 0.219947] ... generic counters: 6
[ 0.219948] ... generic bitmap: 000000000000003f
[ 0.219949] ... fixed-purpose counters: 0
[ 0.219949] ... fixed-purpose bitmap: 0000000000000000
[ 0.219950] ... value mask: 0000ffffffffffff
[ 0.219951] ... max period: 00007fffffffffff
[ 0.219952] ... global_ctrl mask: 000000000000003f
[ 0.220030] signal: max sigframe size: 3376
[ 0.220050] rcu: Hierarchical SRCU implementation.
[ 0.220051] rcu: Max phase no-delay instances is 1000.
[ 0.220095] Timer migration: 2 hierarchy levels; 8 children per group; 2 crossnode level
[ 0.222580] MCE: In-kernel MCE decoding enabled.
[ 0.222606] NMI watchdog: Enabled. Permanently consumes one hw-PMU counter.
[ 0.222682] smp: Bringing up secondary CPUs ...
[ 0.222754] smpboot: x86: Booting SMP configuration:
[ 0.222755] .... node #0, CPUs: #1 #2 #3 #4 #5 #6 #7 #8 #9 #10 #11 #12 #13 #14 #15
[ 0.242441] Spectre V2 : Update user space SMT mitigation: STIBP always-on
[ 0.257674] smp: Brought up 1 node, 16 CPUs
[ 0.257674] smpboot: Total of 16 processors activated (134454.46 BogoMIPS)
[ 0.259148] Memory: 31751172K/32614388K available (21363K kernel code, 2940K rwdata, 16360K rodata, 4752K init, 5592K bss, 839676K reserved, 0K cma-reserved)
[ 0.259503] devtmpfs: initialized
[ 0.259503] x86/mm: Memory block size: 128MB
[ 0.262748] ACPI: PM: Registering ACPI NVS region [mem 0x0a200000-0x0a20ffff] (65536 bytes)
[ 0.262748] ACPI: PM: Registering ACPI NVS region [mem 0x8d47f000-0x8f47efff] (33554432 bytes)
[ 0.262748] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6370867519511994 ns
[ 0.262748] posixtimers hash table entries: 8192 (order: 5, 131072 bytes, linear)
[ 0.262748] futex hash table entries: 4096 (262144 bytes on 1 NUMA nodes, total 256 KiB, linear).
[ 0.262748] pinctrl core: initialized pinctrl subsystem
[ 0.262748] PM: RTC time: 20:55:50, date: 2026-05-15
[ 0.262748] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.262774] DMA: preallocated 4096 KiB GFP_KERNEL pool for atomic allocations
[ 0.262859] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.262943] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.262949] audit: initializing netlink subsys (disabled)
[ 0.262956] audit: type=2000 audit(1778878550.000:1): state=initialized audit_enabled=0 res=1
[ 0.262956] thermal_sys: Registered thermal governor 'fair_share'
[ 0.262956] thermal_sys: Registered thermal governor 'bang_bang'
[ 0.262956] thermal_sys: Registered thermal governor 'step_wise'
[ 0.262956] thermal_sys: Registered thermal governor 'user_space'
[ 0.262956] thermal_sys: Registered thermal governor 'power_allocator'
[ 0.262956] cpuidle: using governor ladder
[ 0.262956] cpuidle: using governor menu
[ 0.266269] efi: Freeing EFI boot services memory: 101268K
[ 0.266272] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
[ 0.266353] PCI: ECAM [mem 0xe0000000-0xefffffff] (base 0xe0000000) for domain 0000 [bus 00-ff]
[ 0.266365] PCI: Using configuration type 1 for base access
[ 0.266435] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible.
[ 0.266435] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
[ 0.266435] HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page
[ 0.266435] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
[ 0.266435] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page
[ 0.266435] raid6: skipped pq benchmark and selected avx512x4
[ 0.266435] raid6: using avx512x2 recovery algorithm
[ 0.266435] ACPI: Added _OSI(Module Device)
[ 0.266435] ACPI: Added _OSI(Processor Device)
[ 0.266435] ACPI: Added _OSI(Processor Aggregator Device)
[ 0.292341] ACPI: 17 ACPI AML tables successfully acquired and loaded
[ 0.329987] ACPI: USB4 _OSC: OS supports USB3+ DisplayPort+ PCIe+ XDomain+
[ 0.329987] ACPI: USB4 _OSC: OS controls USB3+ DisplayPort+ PCIe+ XDomain+
[ 0.330888] ACPI: Interpreter enabled
[ 0.330904] ACPI: PM: (supports S0 S3 S4 S5)
[ 0.330905] ACPI: Using IOAPIC for interrupt routing
[ 0.334126] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[ 0.334127] PCI: Ignoring E820 reservations for host bridge windows
[ 0.334569] ACPI: Enabled 12 GPEs in block 00 to 1F
[ 0.337142] ACPI: \_SB_.PCI0.GP17.XHC0.P0U0: New power resource
[ 0.338964] ACPI: \_SB_.PCI0.GP17.XHC1.P0U1: New power resource
[ 0.342125] ACPI: \_SB_.PCI0.GP19.XHC2.P0U2: New power resource
[ 0.342862] ACPI: \_SB_.PCI0.GPP0.M237: New power resource
[ 0.342922] ACPI: \_SB_.PCI0.GPP0.SWUS.M237: New power resource
[ 0.342992] ACPI: \_SB_.PCI0.GPP0.SWUS.SWDS.M237: New power resource
[ 0.343318] ACPI: \_SB_.PCI0.GPP1.P0NV: New power resource
[ 0.344258] ACPI: \_SB_.PCI0.GPP7.PWRS: New power resource
[ 0.344631] ACPI: \_SB_.PCI0.GPP7.UP00.PWRS: New power resource
[ 0.344975] ACPI: \_SB_.PCI0.GPP7.UP00.DP00.PWRS: New power resource
[ 0.345481] ACPI: \_SB_.PCI0.GPP7.UP00.DP00.NV00.PWRS: New power resource
[ 0.345848] ACPI: \_SB_.PCI0.GPP7.UP00.DP08.PWRS: New power resource
[ 0.346101] ACPI: \_SB_.PCI0.GPP7.UP00.DP08.EP00.PWRS: New power resource
[ 0.346378] ACPI: \_SB_.PCI0.GPP7.UP00.DP10.PWRS: New power resource
[ 0.346624] ACPI: \_SB_.PCI0.GPP7.UP00.DP10.WN00.PWRS: New power resource
[ 0.346905] ACPI: \_SB_.PCI0.GPP7.UP00.DP18.PWRS: New power resource
[ 0.347151] ACPI: \_SB_.PCI0.GPP7.UP00.DP18.LN00.PWRS: New power resource
[ 0.347429] ACPI: \_SB_.PCI0.GPP7.UP00.DP20.PWRS: New power resource
[ 0.347931] ACPI: \_SB_.PCI0.GPP7.UP00.DP20.NV00.PWRS: New power resource
[ 0.348237] ACPI: \_SB_.PCI0.GPP7.UP00.DP28.PWRS: New power resource
[ 0.348544] ACPI: \_SB_.PCI0.GPP7.UP00.DP30.PWRS: New power resource
[ 0.349037] ACPI: \_SB_.PCI0.GPP7.UP00.DP30.EP00.PWRS: New power resource
[ 0.349339] ACPI: \_SB_.PCI0.GPP7.UP00.DP38.PWRS: New power resource
[ 0.349830] ACPI: \_SB_.PCI0.GPP7.UP00.DP38.EP00.PWRS: New power resource
[ 0.350200] ACPI: \_SB_.PCI0.GPP7.UP00.DP40.PWRS: New power resource
[ 0.350424] ACPI: \_SB_.PCI0.GPP7.UP00.DP48.PWRS: New power resource
[ 0.350916] ACPI: \_SB_.PCI0.GPP7.UP00.DP48.EP00.PWRS: New power resource
[ 0.351223] ACPI: \_SB_.PCI0.GPP7.UP00.DP50.PWRS: New power resource
[ 0.351566] ACPI: \_SB_.PCI0.GPP7.UP00.DP50.EP00.PWRS: New power resource
[ 0.351909] ACPI: \_SB_.PCI0.GPP7.UP00.DP58.PWRS: New power resource
[ 0.352248] ACPI: \_SB_.PCI0.GPP7.UP00.DP58.EP00.PWRS: New power resource
[ 0.352594] ACPI: \_SB_.PCI0.GPP7.UP00.DP60.PWRS: New power resource
[ 0.352933] ACPI: \_SB_.PCI0.GPP7.UP00.DP60.XH00.PWRS: New power resource
[ 0.353853] ACPI: \_SB_.PCI0.GPP7.UP00.DP68.PWRS: New power resource
[ 0.354146] ACPI: \_SB_.PCI0.GPP7.UP00.DP68.SA00.PWRS: New power resource
[ 0.354200] ACPI: \_SB_.PCI0.GPP8.PWR1: New power resource
[ 0.359457] ACPI: \_SB_.PRWL: New power resource
[ 0.359484] ACPI: \_SB_.PRWB: New power resource
[ 0.360298] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.360303] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI EDR HPX-Type3]
[ 0.360463] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug SHPCHotplug PME AER PCIeCapability LTR DPC]
[ 0.361013] PCI host bridge to bus 0000:00
[ 0.361016] pci_bus 0000:00: root bus resource [io 0x0000-0x03af window]
[ 0.361018] pci_bus 0000:00: root bus resource [io 0x03e0-0x0cf7 window]
[ 0.361019] pci_bus 0000:00: root bus resource [io 0x03b0-0x03df window]
[ 0.361021] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
[ 0.361022] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000dffff window]
[ 0.361023] pci_bus 0000:00: root bus resource [mem 0xa0000000-0xf6ffffff window]
[ 0.361024] pci_bus 0000:00: root bus resource [mem 0x860000000-0xffffffffff window]
[ 0.361026] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.361038] pci 0000:00:00.0: [1022:14d8] type 00 class 0x060000 conventional PCI endpoint
[ 0.361131] pci 0000:00:00.2: [1022:14d9] type 00 class 0x080600 conventional PCI endpoint
[ 0.361216] pci 0000:00:01.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.361290] pci 0000:00:01.1: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.361303] pci 0000:00:01.1: PCI bridge to [bus 01-03]
[ 0.361306] pci 0000:00:01.1: bridge window [io 0xf000-0xffff]
[ 0.361309] pci 0000:00:01.1: bridge window [mem 0xf6a00000-0xf6cfffff]
[ 0.361314] pci 0000:00:01.1: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.361367] pci 0000:00:01.1: PME# supported from D0 D3hot D3cold
[ 0.361493] pci 0000:00:01.2: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.361505] pci 0000:00:01.2: PCI bridge to [bus 04]
[ 0.361509] pci 0000:00:01.2: bridge window [mem 0xf6f00000-0xf6ffffff]
[ 0.361520] pci 0000:00:01.2: enabling Extended Tags
[ 0.361566] pci 0000:00:01.2: PME# supported from D0 D3hot D3cold
[ 0.361686] pci 0000:00:02.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.361760] pci 0000:00:02.1: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.361772] pci 0000:00:02.1: PCI bridge to [bus 05-11]
[ 0.361775] pci 0000:00:02.1: bridge window [io 0xc000-0xdfff]
[ 0.361778] pci 0000:00:02.1: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.361783] pci 0000:00:02.1: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.361789] pci 0000:00:02.1: enabling Extended Tags
[ 0.361835] pci 0000:00:02.1: PME# supported from D0 D3hot D3cold
[ 0.362978] pci 0000:00:02.2: [1022:14db] type 01 class 0x060400 PCIe Root Port
[ 0.362991] pci 0000:00:02.2: PCI bridge to [bus 12]
[ 0.362995] pci 0000:00:02.2: bridge window [mem 0xf6e00000-0xf6efffff]
[ 0.363005] pci 0000:00:02.2: enabling Extended Tags
[ 0.363052] pci 0000:00:02.2: PME# supported from D0 D3hot D3cold
[ 0.363174] pci 0000:00:03.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.363253] pci 0000:00:04.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.363334] pci 0000:00:08.0: [1022:14da] type 00 class 0x060000 conventional PCI endpoint
[ 0.363409] pci 0000:00:08.1: [1022:14dd] type 01 class 0x060400 PCIe Root Port
[ 0.363419] pci 0000:00:08.1: PCI bridge to [bus 13]
[ 0.363421] pci 0000:00:08.1: bridge window [io 0xe000-0xefff]
[ 0.363423] pci 0000:00:08.1: bridge window [mem 0xf6600000-0xf69fffff]
[ 0.363427] pci 0000:00:08.1: bridge window [mem 0xfc20000000-0xfc301fffff 64bit pref]
[ 0.363432] pci 0000:00:08.1: enabling Extended Tags
[ 0.363459] pci 0000:00:08.1: PME# supported from D0 D3hot D3cold
[ 0.363566] pci 0000:00:08.3: [1022:14dd] type 01 class 0x060400 PCIe Root Port
[ 0.363576] pci 0000:00:08.3: PCI bridge to [bus 14]
[ 0.363579] pci 0000:00:08.3: bridge window [mem 0xf6d00000-0xf6dfffff]
[ 0.363587] pci 0000:00:08.3: enabling Extended Tags
[ 0.363613] pci 0000:00:08.3: PME# supported from D0 D3hot D3cold
[ 0.363713] pci 0000:00:14.0: [1022:790b] type 00 class 0x0c0500 conventional PCI endpoint
[ 0.363816] pci 0000:00:14.3: [1022:790e] type 00 class 0x060100 conventional PCI endpoint
[ 0.363930] pci 0000:00:18.0: [1022:14e0] type 00 class 0x060000 conventional PCI endpoint
[ 0.363967] pci 0000:00:18.1: [1022:14e1] type 00 class 0x060000 conventional PCI endpoint
[ 0.364002] pci 0000:00:18.2: [1022:14e2] type 00 class 0x060000 conventional PCI endpoint
[ 0.364037] pci 0000:00:18.3: [1022:14e3] type 00 class 0x060000 conventional PCI endpoint
[ 0.364072] pci 0000:00:18.4: [1022:14e4] type 00 class 0x060000 conventional PCI endpoint
[ 0.364106] pci 0000:00:18.5: [1022:14e5] type 00 class 0x060000 conventional PCI endpoint
[ 0.364141] pci 0000:00:18.6: [1022:14e6] type 00 class 0x060000 conventional PCI endpoint
[ 0.364176] pci 0000:00:18.7: [1022:14e7] type 00 class 0x060000 conventional PCI endpoint
[ 0.364278] pci 0000:01:00.0: [1002:1478] type 01 class 0x060400 PCIe Switch Upstream Port
[ 0.364295] pci 0000:01:00.0: BAR 0 [mem 0xf6c00000-0xf6c03fff]
[ 0.364298] pci 0000:01:00.0: PCI bridge to [bus 02-03]
[ 0.364303] pci 0000:01:00.0: bridge window [io 0xf000-0xffff]
[ 0.364305] pci 0000:01:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.364313] pci 0000:01:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.364380] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[ 0.364545] pci 0000:00:01.1: PCI bridge to [bus 01-03]
[ 0.364601] pci 0000:02:00.0: [1002:1479] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.364620] pci 0000:02:00.0: PCI bridge to [bus 03]
[ 0.364624] pci 0000:02:00.0: bridge window [io 0xf000-0xffff]
[ 0.364627] pci 0000:02:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.364634] pci 0000:02:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.364701] pci 0000:02:00.0: PME# supported from D0 D3hot D3cold
[ 0.365270] pci 0000:01:00.0: PCI bridge to [bus 02-03]
[ 0.365334] pci 0000:03:00.0: [1002:747e] type 00 class 0x030000 PCIe Legacy Endpoint
[ 0.365362] pci 0000:03:00.0: BAR 0 [mem 0xf800000000-0xfbffffffff 64bit pref]
[ 0.365365] pci 0000:03:00.0: BAR 2 [mem 0xfc00000000-0xfc0fffffff 64bit pref]
[ 0.365367] pci 0000:03:00.0: BAR 4 [io 0xf000-0xf0ff]
[ 0.365369] pci 0000:03:00.0: BAR 5 [mem 0xf6a00000-0xf6afffff]
[ 0.365371] pci 0000:03:00.0: ROM [mem 0xf6b00000-0xf6b1ffff pref]
[ 0.365446] pci 0000:03:00.0: PME# supported from D1 D2 D3hot D3cold
[ 0.365612] pci 0000:03:00.1: [1002:ab30] type 00 class 0x040300 PCIe Legacy Endpoint
[ 0.365639] pci 0000:03:00.1: BAR 0 [mem 0xf6b20000-0xf6b23fff]
[ 0.365703] pci 0000:03:00.1: PME# supported from D1 D2 D3hot D3cold
[ 0.365824] pci 0000:02:00.0: PCI bridge to [bus 03]
[ 0.365905] pci 0000:04:00.0: [1d97:1602] type 00 class 0x010802 PCIe Endpoint
[ 0.365928] pci 0000:04:00.0: BAR 0 [mem 0xf6f00000-0xf6f03fff 64bit]
[ 0.366131] pci 0000:00:01.2: PCI bridge to [bus 04]
[ 0.366201] pci 0000:05:00.0: [1022:43f4] type 01 class 0x060400 PCIe Switch Upstream Port
[ 0.366218] pci 0000:05:00.0: PCI bridge to [bus 06-11]
[ 0.366223] pci 0000:05:00.0: bridge window [io 0xc000-0xdfff]
[ 0.366225] pci 0000:05:00.0: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.366232] pci 0000:05:00.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.366241] pci 0000:05:00.0: enabling Extended Tags
[ 0.366288] pci 0000:05:00.0: PME# supported from D0 D3hot D3cold
[ 0.367896] pci 0000:00:02.1: PCI bridge to [bus 05-11]
[ 0.368035] pci 0000:06:00.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368052] pci 0000:06:00.0: PCI bridge to [bus 07]
[ 0.368071] pci 0000:06:00.0: enabling Extended Tags
[ 0.368123] pci 0000:06:00.0: PME# supported from D0 D3hot D3cold
[ 0.368275] pci 0000:06:04.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368293] pci 0000:06:04.0: PCI bridge to [bus 08]
[ 0.368312] pci 0000:06:04.0: enabling Extended Tags
[ 0.368363] pci 0000:06:04.0: PME# supported from D0 D3hot D3cold
[ 0.368502] pci 0000:06:05.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368519] pci 0000:06:05.0: PCI bridge to [bus 09]
[ 0.368539] pci 0000:06:05.0: enabling Extended Tags
[ 0.368589] pci 0000:06:05.0: PME# supported from D0 D3hot D3cold
[ 0.368729] pci 0000:06:06.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368746] pci 0000:06:06.0: PCI bridge to [bus 0a]
[ 0.368765] pci 0000:06:06.0: enabling Extended Tags
[ 0.368816] pci 0000:06:06.0: PME# supported from D0 D3hot D3cold
[ 0.368957] pci 0000:06:07.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.368974] pci 0000:06:07.0: PCI bridge to [bus 0b]
[ 0.368994] pci 0000:06:07.0: enabling Extended Tags
[ 0.369047] pci 0000:06:07.0: PME# supported from D0 D3hot D3cold
[ 0.369188] pci 0000:06:08.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.369205] pci 0000:06:08.0: PCI bridge to [bus 0c]
[ 0.369209] pci 0000:06:08.0: bridge window [io 0xd000-0xdfff]
[ 0.369212] pci 0000:06:08.0: bridge window [mem 0xf6500000-0xf65fffff]
[ 0.369227] pci 0000:06:08.0: enabling Extended Tags
[ 0.369276] pci 0000:06:08.0: PME# supported from D0 D3hot D3cold
[ 0.370479] pci 0000:06:09.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.370496] pci 0000:06:09.0: PCI bridge to [bus 0d]
[ 0.370516] pci 0000:06:09.0: enabling Extended Tags
[ 0.370567] pci 0000:06:09.0: PME# supported from D0 D3hot D3cold
[ 0.370709] pci 0000:06:0a.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.370726] pci 0000:06:0a.0: PCI bridge to [bus 0e]
[ 0.370730] pci 0000:06:0a.0: bridge window [io 0xc000-0xcfff]
[ 0.370733] pci 0000:06:0a.0: bridge window [mem 0xf6400000-0xf64fffff]
[ 0.370748] pci 0000:06:0a.0: enabling Extended Tags
[ 0.370797] pci 0000:06:0a.0: PME# supported from D0 D3hot D3cold
[ 0.371992] pci 0000:06:0b.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.372009] pci 0000:06:0b.0: PCI bridge to [bus 0f]
[ 0.372015] pci 0000:06:0b.0: bridge window [mem 0xf6300000-0xf63fffff]
[ 0.372022] pci 0000:06:0b.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.372031] pci 0000:06:0b.0: enabling Extended Tags
[ 0.372080] pci 0000:06:0b.0: PME# supported from D0 D3hot D3cold
[ 0.373289] pci 0000:06:0c.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.373307] pci 0000:06:0c.0: PCI bridge to [bus 10]
[ 0.373311] pci 0000:06:0c.0: bridge window [mem 0xf6200000-0xf62fffff]
[ 0.373326] pci 0000:06:0c.0: enabling Extended Tags
[ 0.373360] pci 0000:06:0c.0: PME# supported from D0 D3hot D3cold
[ 0.374552] pci 0000:06:0d.0: [1022:43f5] type 01 class 0x060400 PCIe Switch Downstream Port
[ 0.374569] pci 0000:06:0d.0: PCI bridge to [bus 11]
[ 0.374573] pci 0000:06:0d.0: bridge window [mem 0xf6100000-0xf61fffff]
[ 0.374588] pci 0000:06:0d.0: enabling Extended Tags
[ 0.374623] pci 0000:06:0d.0: PME# supported from D0 D3hot D3cold
[ 0.375810] pci 0000:05:00.0: PCI bridge to [bus 06-11]
[ 0.375859] pci 0000:06:00.0: PCI bridge to [bus 07]
[ 0.375904] pci 0000:06:04.0: PCI bridge to [bus 08]
[ 0.375939] pci 0000:06:05.0: PCI bridge to [bus 09]
[ 0.375985] pci 0000:06:06.0: PCI bridge to [bus 0a]
[ 0.376030] pci 0000:06:07.0: PCI bridge to [bus 0b]
[ 0.376087] pci 0000:0c:00.0: [1b21:0612] type 00 class 0x010601 PCIe Legacy Endpoint
[ 0.376141] pci 0000:0c:00.0: BAR 0 [io 0xd050-0xd057]
[ 0.376143] pci 0000:0c:00.0: BAR 1 [io 0xd040-0xd043]
[ 0.376146] pci 0000:0c:00.0: BAR 2 [io 0xd030-0xd037]
[ 0.376148] pci 0000:0c:00.0: BAR 3 [io 0xd020-0xd023]
[ 0.376151] pci 0000:0c:00.0: BAR 4 [io 0xd000-0xd01f]
[ 0.376153] pci 0000:0c:00.0: BAR 5 [mem 0xf6500000-0xf65001ff]
[ 0.376299] pci 0000:06:08.0: PCI bridge to [bus 0c]
[ 0.376345] pci 0000:06:09.0: PCI bridge to [bus 0d]
[ 0.376415] pci 0000:0e:00.0: [10ec:8125] type 00 class 0x020000 PCIe Endpoint
[ 0.376468] pci 0000:0e:00.0: BAR 0 [io 0xc000-0xc0ff]
[ 0.376474] pci 0000:0e:00.0: BAR 2 [mem 0xf6400000-0xf640ffff 64bit]
[ 0.376478] pci 0000:0e:00.0: BAR 4 [mem 0xf6410000-0xf6413fff 64bit]
[ 0.376603] pci 0000:0e:00.0: supports D1 D2
[ 0.376604] pci 0000:0e:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.377566] pci 0000:06:0a.0: PCI bridge to [bus 0e]
[ 0.377635] pci 0000:0f:00.0: [14c3:0616] type 00 class 0x028000 PCIe Endpoint
[ 0.377693] pci 0000:0f:00.0: BAR 0 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.377697] pci 0000:0f:00.0: BAR 2 [mem 0xf6300000-0xf6307fff 64bit]
[ 0.377711] pci 0000:0f:00.0: enabling Extended Tags
[ 0.377804] pci 0000:0f:00.0: PME# supported from D0 D3hot D3cold
[ 0.378819] pci 0000:06:0b.0: PCI bridge to [bus 0f]
[ 0.378873] pci 0000:10:00.0: [1022:43f7] type 00 class 0x0c0330 PCIe Legacy Endpoint
[ 0.378898] pci 0000:10:00.0: BAR 0 [mem 0xf6200000-0xf6207fff 64bit]
[ 0.378907] pci 0000:10:00.0: enabling Extended Tags
[ 0.378946] pci 0000:10:00.0: PME# supported from D0 D3hot D3cold
[ 0.379757] pci 0000:06:0c.0: PCI bridge to [bus 10]
[ 0.379813] pci 0000:11:00.0: [1022:43f6] type 00 class 0x010601 PCIe Legacy Endpoint
[ 0.379842] pci 0000:11:00.0: BAR 5 [mem 0xf6180000-0xf61803ff]
[ 0.379843] pci 0000:11:00.0: ROM [mem 0xf6100000-0xf617ffff pref]
[ 0.379849] pci 0000:11:00.0: enabling Extended Tags
[ 0.379882] pci 0000:11:00.0: PME# supported from D0 D3hot D3cold
[ 0.380669] pci 0000:06:0d.0: PCI bridge to [bus 11]
[ 0.380935] pci 0000:12:00.0: [144d:a808] type 00 class 0x010802 PCIe Endpoint
[ 0.380965] pci 0000:12:00.0: BAR 0 [mem 0xf6e00000-0xf6e03fff 64bit]
[ 0.381138] pci 0000:00:02.2: PCI bridge to [bus 12]
[ 0.381222] pci 0000:13:00.0: [1002:164e] type 00 class 0x030000 PCIe Legacy Endpoint
[ 0.381239] pci 0000:13:00.0: BAR 0 [mem 0xfc20000000-0xfc2fffffff 64bit pref]
[ 0.381241] pci 0000:13:00.0: BAR 2 [mem 0xfc30000000-0xfc301fffff 64bit pref]
[ 0.381242] pci 0000:13:00.0: BAR 4 [io 0xe000-0xe0ff]
[ 0.381244] pci 0000:13:00.0: BAR 5 [mem 0xf6900000-0xf697ffff]
[ 0.381248] pci 0000:13:00.0: enabling Extended Tags
[ 0.381285] pci 0000:13:00.0: PME# supported from D1 D2 D3hot D3cold
[ 0.381384] pci 0000:13:00.1: [1002:1640] type 00 class 0x040300 PCIe Legacy Endpoint
[ 0.381399] pci 0000:13:00.1: BAR 0 [mem 0xf6988000-0xf698bfff]
[ 0.381405] pci 0000:13:00.1: enabling Extended Tags
[ 0.381429] pci 0000:13:00.1: PME# supported from D1 D2 D3hot D3cold
[ 0.381510] pci 0000:13:00.2: [1022:1649] type 00 class 0x108000 PCIe Endpoint
[ 0.381546] pci 0000:13:00.2: BAR 2 [mem 0xf6800000-0xf68fffff]
[ 0.381548] pci 0000:13:00.2: BAR 5 [mem 0xf698c000-0xf698dfff]
[ 0.381552] pci 0000:13:00.2: enabling Extended Tags
[ 0.381650] pci 0000:13:00.3: [1022:15b6] type 00 class 0x0c0330 PCIe Endpoint
[ 0.381667] pci 0000:13:00.3: BAR 0 [mem 0xf6700000-0xf67fffff 64bit]
[ 0.381673] pci 0000:13:00.3: enabling Extended Tags
[ 0.381698] pci 0000:13:00.3: PME# supported from D0 D3hot D3cold
[ 0.381779] pci 0000:13:00.4: [1022:15b7] type 00 class 0x0c0330 PCIe Endpoint
[ 0.381795] pci 0000:13:00.4: BAR 0 [mem 0xf6600000-0xf66fffff 64bit]
[ 0.381801] pci 0000:13:00.4: enabling Extended Tags
[ 0.381826] pci 0000:13:00.4: PME# supported from D0 D3hot D3cold
[ 0.381906] pci 0000:13:00.6: [1022:15e3] type 00 class 0x040300 PCIe Endpoint
[ 0.381921] pci 0000:13:00.6: BAR 0 [mem 0xf6980000-0xf6987fff]
[ 0.381927] pci 0000:13:00.6: enabling Extended Tags
[ 0.381951] pci 0000:13:00.6: PME# supported from D0 D3hot D3cold
[ 0.382039] pci 0000:00:08.1: PCI bridge to [bus 13]
[ 0.382080] pci 0000:14:00.0: [1022:15b8] type 00 class 0x0c0330 PCIe Endpoint
[ 0.382100] pci 0000:14:00.0: BAR 0 [mem 0xf6d00000-0xf6dfffff 64bit]
[ 0.382106] pci 0000:14:00.0: enabling Extended Tags
[ 0.382137] pci 0000:14:00.0: PME# supported from D0 D3hot D3cold
[ 0.382224] pci 0000:00:08.3: PCI bridge to [bus 14]
[ 0.388552] ACPI: PCI: Interrupt link LNKA configured for IRQ 0
[ 0.388604] ACPI: PCI: Interrupt link LNKB configured for IRQ 0
[ 0.388650] ACPI: PCI: Interrupt link LNKC configured for IRQ 0
[ 0.388705] ACPI: PCI: Interrupt link LNKD configured for IRQ 0
[ 0.388755] ACPI: PCI: Interrupt link LNKE configured for IRQ 0
[ 0.388797] ACPI: PCI: Interrupt link LNKF configured for IRQ 0
[ 0.388839] ACPI: PCI: Interrupt link LNKG configured for IRQ 0
[ 0.388881] ACPI: PCI: Interrupt link LNKH configured for IRQ 0
[ 0.390150] iommu: Default domain type: Translated
[ 0.390150] iommu: DMA domain TLB invalidation policy: lazy mode
[ 0.390150] SCSI subsystem initialized
[ 0.390150] libata version 3.00 loaded.
[ 0.390150] ACPI: bus type USB registered
[ 0.390150] usbcore: registered new interface driver usbfs
[ 0.390150] usbcore: registered new interface driver hub
[ 0.390150] usbcore: registered new device driver usb
[ 0.398954] EDAC MC: Ver: 3.0.0
[ 0.399228] efivars: Registered efivars operations
[ 0.399228] NetLabel: Initializing
[ 0.399228] NetLabel: domain hash size = 128
[ 0.399228] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
[ 0.399228] NetLabel: unlabeled traffic allowed by default
[ 0.399228] mctp: management component transport protocol core
[ 0.399228] NET: Registered PF_MCTP protocol family
[ 0.399228] PCI: Using ACPI for IRQ routing
[ 0.405394] PCI: pci_cache_line_size set to 64 bytes
[ 0.405687] e820: reserve RAM buffer [mem 0x09e02000-0x0bffffff]
[ 0.405689] e820: reserve RAM buffer [mem 0x0a200000-0x0bffffff]
[ 0.405690] e820: reserve RAM buffer [mem 0x0b000000-0x0bffffff]
[ 0.405691] e820: reserve RAM buffer [mem 0x80a87000-0x83ffffff]
[ 0.405692] e820: reserve RAM buffer [mem 0x81a63000-0x83ffffff]
[ 0.405693] e820: reserve RAM buffer [mem 0x8738f000-0x87ffffff]
[ 0.405694] e820: reserve RAM buffer [mem 0x99ff9000-0x9bffffff]
[ 0.405695] e820: reserve RAM buffer [mem 0x9a000000-0x9bffffff]
[ 0.405695] e820: reserve RAM buffer [mem 0x83df00000-0x83fffffff]
[ 0.405741] pci 0000:03:00.0: vgaarb: setting as boot VGA device
[ 0.405741] pci 0000:03:00.0: vgaarb: bridge control possible
[ 0.405741] pci 0000:03:00.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[ 0.405741] pci 0000:13:00.0: vgaarb: bridge control possible
[ 0.405741] pci 0000:13:00.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[ 0.405741] vgaarb: loaded
[ 0.405741] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 0.405741] hpet0: 3 comparators, 32-bit 14.318180 MHz counter
[ 0.407771] clocksource: Switched to clocksource tsc-early
[ 0.407869] VFS: Disk quotas dquot_6.6.0
[ 0.407876] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[ 0.407884] pnp: PnP ACPI init
[ 0.407884] system 00:00: [mem 0xe0000000-0xefffffff] has been reserved
[ 0.407884] system 00:01: [mem 0x840000000-0x85fffffff window] has been reserved
[ 0.407884] system 00:03: [io 0x0a00-0x0a0f] has been reserved
[ 0.407884] system 00:03: [io 0x0a10-0x0a1f] has been reserved
[ 0.407884] system 00:03: [io 0x0a20-0x0a2f] has been reserved
[ 0.407884] system 00:04: [io 0x04d0-0x04d1] has been reserved
[ 0.407884] system 00:04: [io 0x040b] has been reserved
[ 0.407884] system 00:04: [io 0x04d6] has been reserved
[ 0.407884] system 00:04: [io 0x0c00-0x0c01] has been reserved
[ 0.407884] system 00:04: [io 0x0c14] has been reserved
[ 0.407884] system 00:04: [io 0x0c50-0x0c51] has been reserved
[ 0.407884] system 00:04: [io 0x0c52] has been reserved
[ 0.407884] system 00:04: [io 0x0c6c] has been reserved
[ 0.407884] system 00:04: [io 0x0c6f] has been reserved
[ 0.407884] system 00:04: [io 0x0cd8-0x0cdf] has been reserved
[ 0.407884] system 00:04: [io 0x0800-0x089f] has been reserved
[ 0.407884] system 00:04: [io 0x0b00-0x0b0f] has been reserved
[ 0.407884] system 00:04: [io 0x0b20-0x0b3f] has been reserved
[ 0.407884] system 00:04: [io 0x0900-0x090f] has been reserved
[ 0.407884] system 00:04: [io 0x0910-0x091f] has been reserved
[ 0.407884] system 00:04: [mem 0xfedc0000-0xfedc0fff] has been reserved
[ 0.407884] system 00:04: [mem 0xfee00000-0xfee00fff] has been reserved
[ 0.407884] system 00:04: [mem 0xfec10000-0xfec10fff] has been reserved
[ 0.407884] system 00:04: [mem 0xfeb00000-0xfeb00fff] has been reserved
[ 0.407884] system 00:04: [mem 0xff000000-0xffffffff] has been reserved
[ 0.410022] pnp: PnP ACPI: found 5 devices
[ 0.415713] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[ 0.415755] NET: Registered PF_INET protocol family
[ 0.415807] IP idents hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[ 0.425658] tcp_listen_portaddr_hash hash table entries: 16384 (order: 6, 262144 bytes, linear)
[ 0.425673] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.425710] TCP established hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[ 0.425862] TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear)
[ 0.425922] TCP: Hash tables configured (established 262144 bind 65536)
[ 0.425979] MPTCP token hash table entries: 32768 (order: 8, 786432 bytes, linear)
[ 0.426031] UDP hash table entries: 16384 (order: 8, 1048576 bytes, linear)
[ 0.426096] UDP-Lite hash table entries: 16384 (order: 8, 1048576 bytes, linear)
[ 0.426165] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.426170] NET: Registered PF_XDP protocol family
[ 0.426181] pci 0000:02:00.0: PCI bridge to [bus 03]
[ 0.426188] pci 0000:02:00.0: bridge window [io 0xf000-0xffff]
[ 0.426192] pci 0000:02:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.426194] pci 0000:02:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426198] pci 0000:01:00.0: PCI bridge to [bus 02-03]
[ 0.426200] pci 0000:01:00.0: bridge window [io 0xf000-0xffff]
[ 0.426204] pci 0000:01:00.0: bridge window [mem 0xf6a00000-0xf6bfffff]
[ 0.426206] pci 0000:01:00.0: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426210] pci 0000:00:01.1: PCI bridge to [bus 01-03]
[ 0.426212] pci 0000:00:01.1: bridge window [io 0xf000-0xffff]
[ 0.426214] pci 0000:00:01.1: bridge window [mem 0xf6a00000-0xf6cfffff]
[ 0.426216] pci 0000:00:01.1: bridge window [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426226] pci 0000:00:01.2: PCI bridge to [bus 04]
[ 0.426229] pci 0000:00:01.2: bridge window [mem 0xf6f00000-0xf6ffffff]
[ 0.426241] pci 0000:06:00.0: PCI bridge to [bus 07]
[ 0.426252] pci 0000:06:04.0: PCI bridge to [bus 08]
[ 0.426259] pci 0000:06:05.0: PCI bridge to [bus 09]
[ 0.426265] pci 0000:06:06.0: PCI bridge to [bus 0a]
[ 0.426272] pci 0000:06:07.0: PCI bridge to [bus 0b]
[ 0.426279] pci 0000:06:08.0: PCI bridge to [bus 0c]
[ 0.426281] pci 0000:06:08.0: bridge window [io 0xd000-0xdfff]
[ 0.426284] pci 0000:06:08.0: bridge window [mem 0xf6500000-0xf65fffff]
[ 0.426289] pci 0000:06:09.0: PCI bridge to [bus 0d]
[ 0.426295] pci 0000:06:0a.0: PCI bridge to [bus 0e]
[ 0.426297] pci 0000:06:0a.0: bridge window [io 0xc000-0xcfff]
[ 0.426300] pci 0000:06:0a.0: bridge window [mem 0xf6400000-0xf64fffff]
[ 0.426305] pci 0000:06:0b.0: PCI bridge to [bus 0f]
[ 0.426308] pci 0000:06:0b.0: bridge window [mem 0xf6300000-0xf63fffff]
[ 0.426311] pci 0000:06:0b.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426314] pci 0000:06:0c.0: PCI bridge to [bus 10]
[ 0.426317] pci 0000:06:0c.0: bridge window [mem 0xf6200000-0xf62fffff]
[ 0.426322] pci 0000:06:0d.0: PCI bridge to [bus 11]
[ 0.426325] pci 0000:06:0d.0: bridge window [mem 0xf6100000-0xf61fffff]
[ 0.426330] pci 0000:05:00.0: PCI bridge to [bus 06-11]
[ 0.426332] pci 0000:05:00.0: bridge window [io 0xc000-0xdfff]
[ 0.426335] pci 0000:05:00.0: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.426337] pci 0000:05:00.0: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426341] pci 0000:00:02.1: PCI bridge to [bus 05-11]
[ 0.426343] pci 0000:00:02.1: bridge window [io 0xc000-0xdfff]
[ 0.426345] pci 0000:00:02.1: bridge window [mem 0xf6100000-0xf65fffff]
[ 0.426347] pci 0000:00:02.1: bridge window [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426357] pci 0000:00:02.2: PCI bridge to [bus 12]
[ 0.426359] pci 0000:00:02.2: bridge window [mem 0xf6e00000-0xf6efffff]
[ 0.426370] pci 0000:00:08.1: PCI bridge to [bus 13]
[ 0.426376] pci 0000:00:08.1: bridge window [io 0xe000-0xefff]
[ 0.426378] pci 0000:00:08.1: bridge window [mem 0xf6600000-0xf69fffff]
[ 0.426380] pci 0000:00:08.1: bridge window [mem 0xfc20000000-0xfc301fffff 64bit pref]
[ 0.426383] pci 0000:00:08.3: PCI bridge to [bus 14]
[ 0.426385] pci 0000:00:08.3: bridge window [mem 0xf6d00000-0xf6dfffff]
[ 0.426388] pci_bus 0000:00: resource 4 [io 0x0000-0x03af window]
[ 0.426390] pci_bus 0000:00: resource 5 [io 0x03e0-0x0cf7 window]
[ 0.426391] pci_bus 0000:00: resource 6 [io 0x03b0-0x03df window]
[ 0.426392] pci_bus 0000:00: resource 7 [io 0x0d00-0xffff window]
[ 0.426393] pci_bus 0000:00: resource 8 [mem 0x000a0000-0x000dffff window]
[ 0.426394] pci_bus 0000:00: resource 9 [mem 0xa0000000-0xf6ffffff window]
[ 0.426396] pci_bus 0000:00: resource 10 [mem 0x860000000-0xffffffffff window]
[ 0.426397] pci_bus 0000:01: resource 0 [io 0xf000-0xffff]
[ 0.426398] pci_bus 0000:01: resource 1 [mem 0xf6a00000-0xf6cfffff]
[ 0.426399] pci_bus 0000:01: resource 2 [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426401] pci_bus 0000:02: resource 0 [io 0xf000-0xffff]
[ 0.426402] pci_bus 0000:02: resource 1 [mem 0xf6a00000-0xf6bfffff]
[ 0.426403] pci_bus 0000:02: resource 2 [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426404] pci_bus 0000:03: resource 0 [io 0xf000-0xffff]
[ 0.426405] pci_bus 0000:03: resource 1 [mem 0xf6a00000-0xf6bfffff]
[ 0.426406] pci_bus 0000:03: resource 2 [mem 0xf800000000-0xfc0fffffff 64bit pref]
[ 0.426407] pci_bus 0000:04: resource 1 [mem 0xf6f00000-0xf6ffffff]
[ 0.426409] pci_bus 0000:05: resource 0 [io 0xc000-0xdfff]
[ 0.426410] pci_bus 0000:05: resource 1 [mem 0xf6100000-0xf65fffff]
[ 0.426411] pci_bus 0000:05: resource 2 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426412] pci_bus 0000:06: resource 0 [io 0xc000-0xdfff]
[ 0.426413] pci_bus 0000:06: resource 1 [mem 0xf6100000-0xf65fffff]
[ 0.426414] pci_bus 0000:06: resource 2 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426416] pci_bus 0000:0c: resource 0 [io 0xd000-0xdfff]
[ 0.426417] pci_bus 0000:0c: resource 1 [mem 0xf6500000-0xf65fffff]
[ 0.426418] pci_bus 0000:0e: resource 0 [io 0xc000-0xcfff]
[ 0.426419] pci_bus 0000:0e: resource 1 [mem 0xf6400000-0xf64fffff]
[ 0.426420] pci_bus 0000:0f: resource 1 [mem 0xf6300000-0xf63fffff]
[ 0.426421] pci_bus 0000:0f: resource 2 [mem 0xfc30300000-0xfc303fffff 64bit pref]
[ 0.426422] pci_bus 0000:10: resource 1 [mem 0xf6200000-0xf62fffff]
[ 0.426424] pci_bus 0000:11: resource 1 [mem 0xf6100000-0xf61fffff]
[ 0.426425] pci_bus 0000:12: resource 1 [mem 0xf6e00000-0xf6efffff]
[ 0.426426] pci_bus 0000:13: resource 0 [io 0xe000-0xefff]
[ 0.426427] pci_bus 0000:13: resource 1 [mem 0xf6600000-0xf69fffff]
[ 0.426428] pci_bus 0000:13: resource 2 [mem 0xfc20000000-0xfc301fffff 64bit pref]
[ 0.426429] pci_bus 0000:14: resource 1 [mem 0xf6d00000-0xf6dfffff]
[ 0.426563] pci 0000:03:00.1: D0 power state depends on 0000:03:00.0
[ 0.426943] pci 0000:13:00.1: D0 power state depends on 0000:13:00.0
[ 0.427185] PCI: CLS 64 bytes, default 64
[ 0.427203] pci 0000:00:00.2: AMD-Vi: IOMMU performance counters supported
[ 0.427224] Trying to unpack rootfs image as initramfs...
[ 0.427260] pci 0000:00:01.0: Adding to iommu group 0
[ 0.427275] pci 0000:00:01.1: Adding to iommu group 1
[ 0.427289] pci 0000:00:01.2: Adding to iommu group 2
[ 0.427323] pci 0000:00:02.0: Adding to iommu group 3
[ 0.427337] pci 0000:00:02.1: Adding to iommu group 4
[ 0.427351] pci 0000:00:02.2: Adding to iommu group 5
[ 0.427370] pci 0000:00:03.0: Adding to iommu group 6
[ 0.427389] pci 0000:00:04.0: Adding to iommu group 7
[ 0.427426] pci 0000:00:08.0: Adding to iommu group 8
[ 0.427440] pci 0000:00:08.1: Adding to iommu group 9
[ 0.427454] pci 0000:00:08.3: Adding to iommu group 10
[ 0.427479] pci 0000:00:14.0: Adding to iommu group 11
[ 0.427491] pci 0000:00:14.3: Adding to iommu group 11
[ 0.427556] pci 0000:00:18.0: Adding to iommu group 12
[ 0.427569] pci 0000:00:18.1: Adding to iommu group 12
[ 0.427582] pci 0000:00:18.2: Adding to iommu group 12
[ 0.427594] pci 0000:00:18.3: Adding to iommu group 12
[ 0.427606] pci 0000:00:18.4: Adding to iommu group 12
[ 0.427620] pci 0000:00:18.5: Adding to iommu group 12
[ 0.427632] pci 0000:00:18.6: Adding to iommu group 12
[ 0.427645] pci 0000:00:18.7: Adding to iommu group 12
[ 0.427658] pci 0000:01:00.0: Adding to iommu group 13
[ 0.427680] pci 0000:02:00.0: Adding to iommu group 14
[ 0.427699] pci 0000:03:00.0: Adding to iommu group 15
[ 0.427716] pci 0000:03:00.1: Adding to iommu group 16
[ 0.427731] pci 0000:04:00.0: Adding to iommu group 17
[ 0.427744] pci 0000:05:00.0: Adding to iommu group 18
[ 0.427757] pci 0000:06:00.0: Adding to iommu group 19
[ 0.427771] pci 0000:06:04.0: Adding to iommu group 20
[ 0.427785] pci 0000:06:05.0: Adding to iommu group 21
[ 0.427799] pci 0000:06:06.0: Adding to iommu group 22
[ 0.427812] pci 0000:06:07.0: Adding to iommu group 23
[ 0.427825] pci 0000:06:08.0: Adding to iommu group 24
[ 0.427839] pci 0000:06:09.0: Adding to iommu group 25
[ 0.427852] pci 0000:06:0a.0: Adding to iommu group 26
[ 0.427867] pci 0000:06:0b.0: Adding to iommu group 27
[ 0.427880] pci 0000:06:0c.0: Adding to iommu group 28
[ 0.427894] pci 0000:06:0d.0: Adding to iommu group 29
[ 0.427898] pci 0000:0c:00.0: Adding to iommu group 24
[ 0.427903] pci 0000:0e:00.0: Adding to iommu group 26
[ 0.427907] pci 0000:0f:00.0: Adding to iommu group 27
[ 0.427910] pci 0000:10:00.0: Adding to iommu group 28
[ 0.427914] pci 0000:11:00.0: Adding to iommu group 29
[ 0.427928] pci 0000:12:00.0: Adding to iommu group 30
[ 0.427957] pci 0000:13:00.0: Adding to iommu group 31
[ 0.427971] pci 0000:13:00.1: Adding to iommu group 32
[ 0.427986] pci 0000:13:00.2: Adding to iommu group 33
[ 0.428000] pci 0000:13:00.3: Adding to iommu group 34
[ 0.428015] pci 0000:13:00.4: Adding to iommu group 35
[ 0.428029] pci 0000:13:00.6: Adding to iommu group 36
[ 0.428043] pci 0000:14:00.0: Adding to iommu group 37
[ 0.430192] AMD-Vi: Extended features (0x246577efa2254afa, 0x0): PPR NX GT [5] IA GA PC GA_vAPIC
[ 0.430199] AMD-Vi: Interrupt remapping enabled
[ 0.474861] AMD-Vi: Virtual APIC enabled
[ 0.474871] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
[ 0.474872] software IO TLB: mapped [mem 0x0000000082233000-0x0000000086233000] (64MB)
[ 0.474905] LVT offset 0 assigned for vector 0x400
[ 0.478013] Freeing initrd memory: 45672K
[ 0.478064] perf: AMD IBS detected (0x00000bff)
[ 0.478070] perf/amd_iommu: Detected AMD IOMMU #0 (2 banks, 4 counters/bank).
[ 0.494088] Initialise system trusted keyrings
[ 0.494095] Key type blacklist registered
[ 0.494119] workingset: timestamp_bits=36 max_order=23 bucket_order=0
[ 0.494338] fuse: init (API version 7.45)
[ 0.494396] integrity: Platform Keyring initialized
[ 0.494398] integrity: Machine keyring initialized
[ 0.501302] xor: automatically using best checksumming function avx
[ 0.501304] Key type asymmetric registered
[ 0.501305] Asymmetric key parser 'x509' registered
[ 0.501316] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245)
[ 0.501352] io scheduler mq-deadline registered
[ 0.501353] io scheduler kyber registered
[ 0.501361] io scheduler bfq registered
[ 0.502367] ledtrig-cpu: registered to indicate activity on CPUs
[ 0.502469] pcieport 0000:00:01.1: PME: Signaling with IRQ 30
[ 0.502599] pcieport 0000:00:01.2: PME: Signaling with IRQ 31
[ 0.502724] pcieport 0000:00:02.1: PME: Signaling with IRQ 32
[ 0.502853] pcieport 0000:00:02.2: PME: Signaling with IRQ 33
[ 0.502975] pcieport 0000:00:08.1: PME: Signaling with IRQ 34
[ 0.503086] pcieport 0000:00:08.3: PME: Signaling with IRQ 35
[ 0.504853] input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
[ 0.504874] ACPI: button: Power Button [PWRB]
[ 0.504902] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input1
[ 0.504941] ACPI: button: Power Button [PWRF]
[ 0.505247] Monitor-Mwait will be used to enter C-1 state
[ 0.506765] Estimated ratio of average max frequency by base frequency (times 1024): 1127
[ 0.506979] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
[ 0.508686] Non-volatile memory driver v1.3
[ 0.508688] Linux agpgart interface v0.103
[ 0.572969] tpm_crb MSFT0101:00: Disabling hwrng
[ 0.573226] ACPI: bus type drm_connector registered
[ 0.575017] ahci 0000:0c:00.0: SSS flag set, parallel bus scan disabled
[ 0.575052] ahci 0000:0c:00.0: AHCI vers 0001.0200, 32 command slots, 6 Gbps, SATA mode
[ 0.575054] ahci 0000:0c:00.0: 2/2 ports implemented (port mask 0x3)
[ 0.575056] ahci 0000:0c:00.0: flags: 64bit ncq sntf stag led clo pmp pio slum part ccc
[ 0.575259] scsi host0: ahci
[ 0.575346] scsi host1: ahci
[ 0.575384] ata1: SATA max UDMA/133 abar m512@0xf6500000 port 0xf6500100 irq 50 lpm-pol 3
[ 0.575387] ata2: SATA max UDMA/133 abar m512@0xf6500000 port 0xf6500180 irq 50 lpm-pol 3
[ 0.575489] ahci 0000:11:00.0: SSS flag set, parallel bus scan disabled
[ 0.575512] ahci 0000:11:00.0: AHCI vers 0001.0301, 32 command slots, 6 Gbps, SATA mode
[ 0.575514] ahci 0000:11:00.0: 4/6 ports implemented (port mask 0xf)
[ 0.575515] ahci 0000:11:00.0: flags: 64bit ncq sntf stag pm led clo only pmp pio slum part sxs deso sadm sds apst
[ 0.575854] scsi host2: ahci
[ 0.575920] scsi host3: ahci
[ 0.575985] scsi host4: ahci
[ 0.576050] scsi host5: ahci
[ 0.576116] scsi host6: ahci
[ 0.576181] scsi host7: ahci
[ 0.576217] ata3: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180100 irq 51 lpm-pol 3
[ 0.576219] ata4: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180180 irq 51 lpm-pol 3
[ 0.576221] ata5: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180200 irq 51 lpm-pol 3
[ 0.576222] ata6: SATA max UDMA/133 abar m1024@0xf6180000 port 0xf6180280 irq 51 lpm-pol 3
[ 0.576223] ata7: DUMMY
[ 0.576224] ata8: DUMMY
[ 0.576353] xhci_hcd 0000:10:00.0: xHCI Host Controller
[ 0.576359] xhci_hcd 0000:10:00.0: new USB bus registered, assigned bus number 1
[ 0.632457] xhci_hcd 0000:10:00.0: hcc params 0x0200ef81 hci version 0x110 quirks 0x0000000200000010
[ 0.632726] xhci_hcd 0000:10:00.0: xHCI Host Controller
[ 0.632729] xhci_hcd 0000:10:00.0: new USB bus registered, assigned bus number 2
[ 0.632731] xhci_hcd 0000:10:00.0: Host supports USB 3.2 Enhanced SuperSpeed
[ 0.633427] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.633429] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.633430] usb usb1: Product: xHCI Host Controller
[ 0.633431] usb usb1: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.633432] usb usb1: SerialNumber: 0000:10:00.0
[ 0.633540] hub 1-0:1.0: USB hub found
[ 0.633556] hub 1-0:1.0: 12 ports detected
[ 0.633930] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[ 0.633946] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.18
[ 0.633948] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.633949] usb usb2: Product: xHCI Host Controller
[ 0.633950] usb usb2: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.633952] usb usb2: SerialNumber: 0000:10:00.0
[ 0.634025] hub 2-0:1.0: USB hub found
[ 0.634032] hub 2-0:1.0: 5 ports detected
[ 0.634274] xhci_hcd 0000:13:00.3: xHCI Host Controller
[ 0.634278] xhci_hcd 0000:13:00.3: new USB bus registered, assigned bus number 3
[ 0.634630] xhci_hcd 0000:13:00.3: hcc params 0x0120ffc5 hci version 0x120 quirks 0x0000000200000010
[ 0.635027] xhci_hcd 0000:13:00.3: xHCI Host Controller
[ 0.635030] xhci_hcd 0000:13:00.3: new USB bus registered, assigned bus number 4
[ 0.635032] xhci_hcd 0000:13:00.3: Host supports USB 3.1 Enhanced SuperSpeed
[ 0.635057] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.635059] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.635060] usb usb3: Product: xHCI Host Controller
[ 0.635061] usb usb3: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.635062] usb usb3: SerialNumber: 0000:13:00.3
[ 0.635148] hub 3-0:1.0: USB hub found
[ 0.635158] hub 3-0:1.0: 2 ports detected
[ 0.636497] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[ 0.636512] usb usb4: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.18
[ 0.636514] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.636515] usb usb4: Product: xHCI Host Controller
[ 0.636516] usb usb4: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.636517] usb usb4: SerialNumber: 0000:13:00.3
[ 0.636597] hub 4-0:1.0: USB hub found
[ 0.636602] hub 4-0:1.0: 2 ports detected
[ 0.638119] xhci_hcd 0000:13:00.4: xHCI Host Controller
[ 0.638122] xhci_hcd 0000:13:00.4: new USB bus registered, assigned bus number 5
[ 0.638469] xhci_hcd 0000:13:00.4: hcc params 0x0120ffc5 hci version 0x120 quirks 0x0000000200000010
[ 0.638850] xhci_hcd 0000:13:00.4: xHCI Host Controller
[ 0.638852] xhci_hcd 0000:13:00.4: new USB bus registered, assigned bus number 6
[ 0.638854] xhci_hcd 0000:13:00.4: Host supports USB 3.1 Enhanced SuperSpeed
[ 0.638877] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.638878] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.638880] usb usb5: Product: xHCI Host Controller
[ 0.638881] usb usb5: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.638882] usb usb5: SerialNumber: 0000:13:00.4
[ 0.638966] hub 5-0:1.0: USB hub found
[ 0.638970] hub 5-0:1.0: 2 ports detected
[ 0.640319] usb usb6: We don't know the algorithms for LPM for this host, disabling LPM.
[ 0.640334] usb usb6: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.18
[ 0.640336] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.640337] usb usb6: Product: xHCI Host Controller
[ 0.640338] usb usb6: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.640339] usb usb6: SerialNumber: 0000:13:00.4
[ 0.640416] hub 6-0:1.0: USB hub found
[ 0.640420] hub 6-0:1.0: 2 ports detected
[ 0.641924] xhci_hcd 0000:14:00.0: xHCI Host Controller
[ 0.641928] xhci_hcd 0000:14:00.0: new USB bus registered, assigned bus number 7
[ 0.643193] xhci_hcd 0000:14:00.0: USB3 root hub has no ports
[ 0.643208] xhci_hcd 0000:14:00.0: hcc params 0x0110ffc5 hci version 0x120 quirks 0x0000000200000010
[ 0.643434] usb usb7: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.18
[ 0.643435] usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 0.643437] usb usb7: Product: xHCI Host Controller
[ 0.643438] usb usb7: Manufacturer: Linux 6.18.31-1-lts xhci-hcd
[ 0.643439] usb usb7: SerialNumber: 0000:14:00.0
[ 0.643516] hub 7-0:1.0: USB hub found
[ 0.643521] hub 7-0:1.0: 1 port detected
[ 0.644585] usbcore: registered new interface driver usbserial_generic
[ 0.644590] usbserial: USB Serial support registered for generic
[ 0.644628] i8042: PNP: No PS/2 controller found.
[ 0.644701] rtc_cmos 00:02: RTC can wake from S4
[ 0.644884] rtc_cmos 00:02: registered as rtc0
[ 0.644903] rtc_cmos 00:02: setting system clock to 2026-05-15T20:55:51 UTC (1778878551)
[ 0.644924] rtc_cmos 00:02: alarms up to one month, y3k, 114 bytes nvram
[ 0.645973] simple-framebuffer simple-framebuffer.0: [drm] Registered 1 planes with drm panic
[ 0.645975] [drm] Initialized simpledrm 1.0.0 for simple-framebuffer.0 on minor 0
[ 0.646506] fbcon: Deferring console take-over
[ 0.646508] simple-framebuffer simple-framebuffer.0: [drm] fb0: simpledrmdrmfb frame buffer device
[ 0.646535] hid: raw HID events driver (C) Jiri Kosina
[ 0.646553] usbcore: registered new interface driver usbhid
[ 0.646554] usbhid: USB HID core driver
[ 0.646584] rust_binder: Loaded Rust Binder.
[ 0.646594] drop_monitor: Initializing network drop monitor service
[ 0.646664] NET: Registered PF_INET6 protocol family
[ 0.646822] Segment Routing with IPv6
[ 0.646823] RPL Segment Routing with IPv6
[ 0.646828] In-situ OAM (IOAM) with IPv6
[ 0.646841] NET: Registered PF_PACKET protocol family
[ 0.647923] x86/amd: Previous system reset reason [0x01000800]: system failed to boot before failed boot timer expired
[ 0.647930] microcode: Current revision: 0x0a60120c
[ 0.648125] resctrl: L3 allocation detected
[ 0.648126] resctrl: MB allocation detected
[ 0.648127] resctrl: SMBA allocation detected
[ 0.648127] resctrl: L3 monitoring detected
[ 0.648143] IPI shorthand broadcast: enabled
[ 0.650443] sched_clock: Marking stable (649178518, 395348)->(653163872, -3590006)
[ 0.650569] registered taskstats version 1
[ 0.650977] Loading compiled-in X.509 certificates
[ 0.655266] Loaded X.509 cert 'Build time autogenerated kernel key: b5d7334e6d11bcb0199831025514ae4585aeaa8a'
[ 0.657869] zswap: loaded using pool zstd
[ 0.657902] Demotion targets for Node 0: null
[ 0.657993] Key type .fscrypt registered
[ 0.657994] Key type fscrypt-provisioning registered
[ 0.658206] Btrfs loaded, zoned=yes, fsverity=yes
[ 0.658228] Key type big_key registered
[ 0.658291] integrity: Loading X.509 certificate: UEFI:db
[ 0.658302] integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53'
[ 0.658303] integrity: Loading X.509 certificate: UEFI:db
[ 0.658310] integrity: Loaded X.509 cert 'Microsoft UEFI CA 2023: 81aa6b3244c935bce0d6628af39827421e32497d'
[ 0.658311] integrity: Loading X.509 certificate: UEFI:db
[ 0.658318] integrity: Loaded X.509 cert 'Microsoft Corporation: Windows UEFI CA 2023: aefc5fbbbe055d8f8daa585473499417ab5a5272'
[ 0.658319] integrity: Loading X.509 certificate: UEFI:db
[ 0.658325] integrity: Loaded X.509 cert 'Microsoft Option ROM UEFI CA 2023: 514fbf937fa46fb57bf07af8bed84b3b864b1711'
[ 0.658326] integrity: Loading X.509 certificate: UEFI:db
[ 0.658334] integrity: Loaded X.509 cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4'
[ 0.658335] integrity: Loading X.509 certificate: UEFI:db
[ 0.658339] integrity: Loaded X.509 cert 'MSI SHIP DB: ebc30d5be5f35f8041c1c2d9e613eee2'
[ 0.659289] PM: Magic number: 10:135:953
[ 0.659297] cpuid cpu8: hash matches
[ 0.659329] processor cpu8: hash matches
[ 0.659351] memory memory6: hash matches
[ 0.659952] RAS: Correctable Errors collector initialized.
[ 0.662962] clk: Disabling unused clocks
[ 0.662964] PM: genpd: Disabling unused power domains
[ 0.880623] usb 3-2: new high-speed USB device number 2 using xhci_hcd
[ 0.887859] ata1: SATA link down (SStatus 0 SControl 300)
[ 0.889479] ata3: SATA link down (SStatus 0 SControl 300)
[ 0.943970] usb 1-5: new high-speed USB device number 2 using xhci_hcd
[ 1.015719] usb 3-2: New USB device found, idVendor=05e3, idProduct=0610, bcdDevice= 6.56
[ 1.015721] usb 3-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.015723] usb 3-2: Product: USB2.1 Hub
[ 1.015724] usb 3-2: Manufacturer: GenesysLogic
[ 1.051549] hub 3-2:1.0: USB hub found
[ 1.051979] hub 3-2:1.0: 4 ports detected
[ 1.127208] usb 4-2: new SuperSpeed USB device number 2 using xhci_hcd
[ 1.143416] usb 4-2: New USB device found, idVendor=05e3, idProduct=0626, bcdDevice= 6.56
[ 1.143420] usb 4-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.143422] usb 4-2: Product: USB3.1 Hub
[ 1.143423] usb 4-2: Manufacturer: GenesysLogic
[ 1.163796] hub 4-2:1.0: USB hub found
[ 1.164084] hub 4-2:1.0: 4 ports detected
[ 1.200293] ata2: SATA link down (SStatus 0 SControl 300)
[ 1.200297] usb 1-5: New USB device found, idVendor=174c, idProduct=2074, bcdDevice= 0.01
[ 1.200301] usb 1-5: New USB device strings: Mfr=2, Product=3, SerialNumber=0
[ 1.200303] usb 1-5: Product: ASM107x
[ 1.200305] usb 1-5: Manufacturer: Asmedia
[ 1.209745] hub 1-5:1.0: USB hub found
[ 1.214299] hub 1-5:1.0: 4 ports detected
[ 1.293827] usb 2-1: new SuperSpeed Plus Gen 2x1 USB device number 2 using xhci_hcd
[ 1.316252] usb 2-1: New USB device found, idVendor=0bda, idProduct=9210, bcdDevice=20.01
[ 1.316254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1.316256] usb 2-1: Product: Sabrent
[ 1.316257] usb 2-1: Manufacturer: Sabrent
[ 1.316258] usb 2-1: SerialNumber: 012345678930
[ 1.353779] usb 3-2.1: new full-speed USB device number 3 using xhci_hcd
[ 1.477037] usb 3-2.1: New USB device found, idVendor=3434, idProduct=0281, bcdDevice= 1.01
[ 1.477042] usb 3-2.1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.477045] usb 3-2.1: Product: Keychron K8 Pro
[ 1.477047] usb 3-2.1: Manufacturer: Keychron
[ 1.483760] tsc: Refined TSC clocksource calibration: 4199.999 MHz
[ 1.483771] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x3c8a606e244, max_idle_ns: 440795282550 ns
[ 1.483805] clocksource: Switched to clocksource tsc
[ 1.490701] usb 1-6: new high-speed USB device number 3 using xhci_hcd
[ 1.508707] ata4: SATA link down (SStatus 0 SControl 300)
[ 1.633618] input: Keychron Keychron K8 Pro as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.0/0003:3434:0281.0001/input/input2
[ 1.684222] hid-generic 0003:3434:0281.0001: input,hidraw0: USB HID v1.11 Keyboard [Keychron Keychron K8 Pro] on usb-0000:13:00.3-2.1/input0
[ 1.688119] hid-generic 0003:3434:0281.0002: hiddev96,hidraw1: USB HID v1.11 Device [Keychron Keychron K8 Pro] on usb-0000:13:00.3-2.1/input1
[ 1.693175] input: Keychron Keychron K8 Pro System Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.2/0003:3434:0281.0003/input/input3
[ 1.744109] input: Keychron Keychron K8 Pro Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.2/0003:3434:0281.0003/input/input4
[ 1.744199] input: Keychron Keychron K8 Pro Keyboard as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.1/3-2.1:1.2/0003:3434:0281.0003/input/input5
[ 1.744438] hid-generic 0003:3434:0281.0003: input,hidraw2: USB HID v1.11 Keyboard [Keychron Keychron K8 Pro] on usb-0000:13:00.3-2.1/input2
[ 1.807918] usb 2-5: new SuperSpeed USB device number 3 using xhci_hcd
[ 1.816720] ata5: SATA link down (SStatus 0 SControl 300)
[ 1.824061] usb 2-5: New USB device found, idVendor=174c, idProduct=3074, bcdDevice= 0.01
[ 1.824065] usb 2-5: New USB device strings: Mfr=2, Product=3, SerialNumber=0
[ 1.824067] usb 2-5: Product: ASM107x
[ 1.824069] usb 2-5: Manufacturer: Asmedia
[ 1.831749] hub 2-5:1.0: USB hub found
[ 1.831895] hub 2-5:1.0: 4 ports detected
[ 1.833751] usb 3-2.2: new full-speed USB device number 4 using xhci_hcd
[ 1.957022] usb 3-2.2: New USB device found, idVendor=1ea7, idProduct=6a22, bcdDevice= 1.00
[ 1.957028] usb 3-2.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1.957030] usb 3-2.2: Product: GK21 BL V1.0.0
[ 1.957032] usb 3-2.2: Manufacturer: skyloong
[ 2.113225] input: skyloong GK21 BL V1.0.0 as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.0/0003:1EA7:6A22.0004/input/input6
[ 2.164253] hid-generic 0003:1EA7:6A22.0004: input,hidraw3: USB HID v1.11 Keyboard [skyloong GK21 BL V1.0.0] on usb-0000:13:00.3-2.2/input0
[ 2.168126] hid-generic 0003:1EA7:6A22.0005: hiddev97,hidraw4: USB HID v1.11 Device [skyloong GK21 BL V1.0.0] on usb-0000:13:00.3-2.2/input1
[ 2.173200] input: skyloong GK21 BL V1.0.0 Mouse as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input7
[ 2.173271] input: skyloong GK21 BL V1.0.0 System Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input8
[ 2.224125] input: skyloong GK21 BL V1.0.0 Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input9
[ 2.224216] input: skyloong GK21 BL V1.0.0 Keyboard as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.2/3-2.2:1.2/0003:1EA7:6A22.0006/input/input10
[ 2.224462] hid-generic 0003:1EA7:6A22.0006: input,hidraw5: USB HID v1.11 Mouse [skyloong GK21 BL V1.0.0] on usb-0000:13:00.3-2.2/input2
[ 2.280653] ata6: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[ 2.282436] ata6.00: Model 'Samsung SSD 750 EVO 250GB', rev 'MAT01B6Q', applying quirks: zeroaftertrim
[ 2.282501] ata6.00: supports DRM functions and may not be fully accessible
[ 2.282502] ata6.00: ATA-9: Samsung SSD 750 EVO 250GB, MAT01B6Q, max UDMA/133
[ 2.283028] ata6.00: 488397168 sectors, multi 1: LBA48 NCQ (depth 32), AA
[ 2.284286] ata6.00: Features: Trust Dev-Sleep DIPM NCQ-sndrcv
[ 2.284590] ata6.00: supports DRM functions and may not be fully accessible
[ 2.286474] ata6.00: configured for UDMA/133
[ 2.296572] ahci 0000:11:00.0: port does not support device sleep
[ 2.296729] scsi 5:0:0:0: Direct-Access ATA Samsung SSD 750 1B6Q PQ: 0 ANSI: 5
[ 2.297032] sd 5:0:0:0: [sda] 488397168 512-byte logical blocks: (250 GB/233 GiB)
[ 2.297041] sd 5:0:0:0: [sda] Write Protect is off
[ 2.297044] sd 5:0:0:0: [sda] Mode Sense: 00 3a 00 00
[ 2.297054] sd 5:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 2.297110] sd 5:0:0:0: [sda] Preferred minimum I/O size 512 bytes
[ 2.313999] usb 3-2.3: new full-speed USB device number 5 using xhci_hcd
[ 2.341922] sda: sda1
[ 2.342274] sd 5:0:0:0: [sda] supports TCG Opal
[ 2.342276] sd 5:0:0:0: [sda] Attached SCSI disk
[ 2.343525] Freeing unused decrypted memory: 2028K
[ 2.343857] Freeing unused kernel image (initmem) memory: 4752K
[ 2.343866] Write protecting the kernel read-only data: 38912k
[ 2.344206] Freeing unused kernel image (text/rodata gap) memory: 1164K
[ 2.344252] Freeing unused kernel image (rodata/data gap) memory: 24K
[ 2.380037] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 2.380041] rodata_test: all tests were successful
[ 2.380054] Run /init as init process
[ 2.380056] with arguments:
[ 2.380057] /init
[ 2.380058] with environment:
[ 2.380060] HOME=/
[ 2.380064] TERM=linux
[ 2.425110] systemd[1]: Successfully made /usr/ read-only.
[ 2.584042] usb 3-2.3: New USB device found, idVendor=046d, idProduct=0aba, bcdDevice= 1.00
[ 2.584048] usb 3-2.3: New USB device strings: Mfr=3, Product=4, SerialNumber=0
[ 2.584050] usb 3-2.3: Product: PRO X Wireless Gaming Headset
[ 2.584052] usb 3-2.3: Manufacturer: Logitech
[ 2.635303] input: Logitech PRO X Wireless Gaming Headset Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.3/3-2.3:1.3/0003:046D:0ABA.0007/input/input11
[ 2.687550] input: Logitech PRO X Wireless Gaming Headset as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.3/3-2.3:1.3/0003:046D:0ABA.0007/input/input13
[ 2.687656] hid-generic 0003:046D:0ABA.0007: input,hiddev98,hidraw6: USB HID v1.11 Device [Logitech PRO X Wireless Gaming Headset] on usb-0000:13:00.3-2.3/input3
[ 2.758979] systemd[1]: systemd 260.1-2-arch running in system mode (+PAM +AUDIT -SELINUX +APPARMOR -IMA +IPE +SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF +XKBCOMMON +UTMP +LIBARCHIVE)
[ 2.758987] systemd[1]: Detected architecture x86-64.
[ 2.758990] systemd[1]: Running in initrd.
[ 2.759224] fbcon: Taking over console
[ 2.759299] systemd[1]: Initializing machine ID from random generator.
[ 2.760230] Console: switching to colour frame buffer device 128x48
[ 2.777448] usb 3-2.4: new full-speed USB device number 6 using xhci_hcd
[ 2.792221] systemd[1]: Queued start job for default target Initrd Default Target.
[ 2.860525] systemd[1]: Expecting device /dev/disk/by-partlabel/zeus-linux-root...
[ 2.860669] systemd[1]: Reached target Path Units.
[ 2.860732] systemd[1]: Reached target Slice Units.
[ 2.860771] systemd[1]: Reached target Swaps.
[ 2.860797] systemd[1]: Reached target Timer Units.
[ 2.860886] systemd[1]: Listening on Journal Socket (/dev/log).
[ 2.860959] systemd[1]: Listening on Journal Sockets.
[ 2.861023] systemd[1]: Listening on udev Control Socket.
[ 2.861069] systemd[1]: Listening on udev Kernel Socket.
[ 2.861095] systemd[1]: Reached target Socket Units.
[ 2.861131] systemd[1]: Create List of Static Device Nodes skipped, unmet condition check ConditionFileNotEmpty=/lib/modules/6.18.31-1-lts/modules.devname
[ 2.861167] systemd[1]: Early Battery Level Check skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/class/power_supply
[ 2.864209] systemd[1]: Started Display Boot-Time Emergency Messages In Full Screen.
[ 2.866655] systemd[1]: Starting Journal Service...
[ 2.868976] systemd[1]: Starting Load Kernel Modules...
[ 2.869147] systemd[1]: TPM PCR Barrier (initrd) skipped, unmet condition check ConditionSecurity=measured-uki
[ 2.870936] systemd[1]: Starting Create Static Device Nodes in /dev...
[ 2.872681] systemd[1]: Starting Coldplug All udev Devices...
[ 2.876722] systemd[1]: Finished Load Kernel Modules.
[ 2.876771] systemd-journald[254]: Collecting audit messages is disabled.
[ 2.878173] systemd[1]: Finished Create Static Device Nodes in /dev.
[ 2.878437] systemd[1]: Reached target Preparation for Local File Systems.
[ 2.878528] systemd[1]: Reached target Local File Systems.
[ 2.880296] systemd[1]: Starting Rule-based Manager for Device Events and Files...
[ 2.896233] systemd[1]: Started Rule-based Manager for Device Events and Files.
[ 2.917002] usb 3-2.4: New USB device found, idVendor=046d, idProduct=c539, bcdDevice=39.06
[ 2.917006] usb 3-2.4: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 2.917009] usb 3-2.4: Product: USB Receiver
[ 2.917010] usb 3-2.4: Manufacturer: Logitech
[ 2.959770] systemd[1]: Started Journal Service.
[ 3.044172] input: Logitech USB Receiver as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.0/0003:046D:C539.0008/input/input14
[ 3.195135] ACPI: video: Video Device [VGA] (multi-head: yes rom: no post: no)
[ 3.195491] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:20/LNXVIDEO:00/input/input15
[ 3.203940] Key type psk registered
[ 3.207435] usbcore: registered new interface driver usb-storage
[ 3.213786] nvme 0000:04:00.0: platform quirk: setting simple suspend
[ 3.213820] hid-generic 0003:046D:C539.0008: input,hidraw7: USB HID v1.11 Keyboard [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input0
[ 3.213861] nvme nvme1: pci function 0000:04:00.0
[ 3.213861] nvme nvme0: pci function 0000:12:00.0
[ 3.216414] nvme nvme1: bad crto:0 cap:8202020ff0103ff
[ 3.218167] input: Logitech USB Receiver Mouse as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.1/0003:046D:C539.0009/input/input16
[ 3.218232] input: Logitech USB Receiver Consumer Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.1/0003:046D:C539.0009/input/input17
[ 3.220765] nvme nvme0: missing or invalid SUBNQN field.
[ 3.220917] nvme nvme0: D3 entry latency set to 8 seconds
[ 3.227021] nvme nvme1: allocated 40 MiB host memory buffer (1 segment).
[ 3.238269] nvme nvme0: 16/0/0 default/read/poll queues
[ 3.241942] nvme0n1: p1 p2 p3 p4
[ 3.268635] nvme nvme1: 16/0/0 default/read/poll queues
[ 3.273798] input: Logitech USB Receiver System Control as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.1/0003:046D:C539.0009/input/input18
[ 3.273880] hid-generic 0003:046D:C539.0009: input,hiddev99,hidraw8: USB HID v1.11 Mouse [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input1
[ 3.277103] hid-generic 0003:046D:C539.000A: hiddev100,hidraw9: USB HID v1.11 Device [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input2
[ 3.308019] nvme1n1: p1 p2
[ 3.350273] usb 1-6: New USB device found, idVendor=0db0, idProduct=422d, bcdDevice= 0.01
[ 3.350277] usb 1-6: New USB device strings: Mfr=3, Product=1, SerialNumber=0
[ 3.350279] usb 1-6: Product: USB Audio
[ 3.350281] usb 1-6: Manufacturer: Generic
[ 3.697077] scsi host8: uas
[ 3.697182] usbcore: registered new interface driver uas
[ 3.701641] scsi 8:0:0:0: Direct-Access Sabrent 1.00 PQ: 0 ANSI: 6
[ 3.717552] hid-generic 0003:0DB0:422D.000B: hiddev101,hidraw10: USB HID v1.11 Device [Generic USB Audio] on usb-0000:10:00.0-6/input7
[ 3.754740] sd 8:0:0:0: [sdb] 500118192 512-byte logical blocks: (256 GB/238 GiB)
[ 3.756681] sd 8:0:0:0: [sdb] Write Protect is off
[ 3.756684] sd 8:0:0:0: [sdb] Mode Sense: 37 00 00 08
[ 3.761405] sd 8:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 3.811879] sd 8:0:0:0: [sdb] Preferred minimum I/O size 512 bytes
[ 3.811883] sd 8:0:0:0: [sdb] Optimal transfer size 33553920 bytes
[ 3.897081] usb 1-7: new high-speed USB device number 4 using xhci_hcd
[ 3.955590] BTRFS: device label Linux Root devid 1 transid 570329 /dev/nvme1n1p2 (259:7) scanned by mount (358)
[ 3.955833] BTRFS info (device nvme1n1p2): first mount of filesystem 75333424-c18c-46ba-80ea-4b5688bfff7d
[ 3.955836] BTRFS info (device nvme1n1p2): using crc32c (crc32c-lib) checksum algorithm
[ 4.064022] logitech-djreceiver 0003:046D:C539.0008: hidraw7: USB HID v1.11 Keyboard [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input0
[ 4.120273] usb 1-7: New USB device found, idVendor=0e8d, idProduct=0616, bcdDevice= 1.00
[ 4.120276] usb 1-7: New USB device strings: Mfr=5, Product=6, SerialNumber=7
[ 4.120278] usb 1-7: Product: Wireless_Device
[ 4.120279] usb 1-7: Manufacturer: MediaTek Inc.
[ 4.120281] usb 1-7: SerialNumber: 000000000
[ 4.176499] sdb: sdb1 sdb2
[ 4.176586] sd 8:0:0:0: [sdb] Attached SCSI disk
[ 4.343735] usb 1-10: new full-speed USB device number 5 using xhci_hcd
[ 4.369569] BTRFS info (device nvme1n1p2): enabling ssd optimizations
[ 4.369572] BTRFS info (device nvme1n1p2): turning on async discard
[ 4.369573] BTRFS info (device nvme1n1p2): enabling free space tree
[ 4.611076] amdgpu: vga_switcheroo: detected switching method \_SB_.PCI0.GP17.VGA_.ATPX handle
[ 4.611222] amdgpu: ATPX version 1, functions 0x00000000
[ 4.620400] amdgpu: Virtual CRAT table created for CPU
[ 4.620411] amdgpu: Topology: Add CPU node
[ 4.620482] amdgpu 0000:03:00.0: enabling device (0006 -> 0007)
[ 4.620513] amdgpu 0000:03:00.0: amdgpu: initializing kernel modesetting (IP DISCOVERY 0x1002:0x747E 0x1DA2:0x475D 0xC8).
[ 4.620522] amdgpu 0000:03:00.0: amdgpu: register mmio base: 0xF6A00000
[ 4.620523] amdgpu 0000:03:00.0: amdgpu: register mmio size: 1048576
[ 4.625547] amdgpu 0000:03:00.0: amdgpu: detected ip block number 0 <common_v1_0_0> (soc21_common)
[ 4.625549] amdgpu 0000:03:00.0: amdgpu: detected ip block number 1 <gmc_v11_0_0> (gmc_v11_0)
[ 4.625551] amdgpu 0000:03:00.0: amdgpu: detected ip block number 2 <ih_v6_0_0> (ih_v6_0)
[ 4.625552] amdgpu 0000:03:00.0: amdgpu: detected ip block number 3 <psp_v13_0_0> (psp)
[ 4.625554] amdgpu 0000:03:00.0: amdgpu: detected ip block number 4 <smu_v13_0_0> (smu)
[ 4.625556] amdgpu 0000:03:00.0: amdgpu: detected ip block number 5 <dce_v1_0_0> (dm)
[ 4.625557] amdgpu 0000:03:00.0: amdgpu: detected ip block number 6 <gfx_v11_0_0> (gfx_v11_0)
[ 4.625559] amdgpu 0000:03:00.0: amdgpu: detected ip block number 7 <sdma_v6_0_0> (sdma_v6_0)
[ 4.625561] amdgpu 0000:03:00.0: amdgpu: detected ip block number 8 <vcn_v4_0_0> (vcn_v4_0)
[ 4.625562] amdgpu 0000:03:00.0: amdgpu: detected ip block number 9 <jpeg_v4_0_0> (jpeg_v4_0)
[ 4.625563] amdgpu 0000:03:00.0: amdgpu: detected ip block number 10 <mes_v11_0_0> (mes_v11_0)
[ 4.625576] amdgpu 0000:03:00.0: amdgpu: Fetched VBIOS from VFCT
[ 4.625577] amdgpu: ATOM BIOS: 113-D7120201-S01
[ 4.627524] amdgpu 0000:03:00.0: amdgpu: CP RS64 enable
[ 4.636035] usb 1-10: New USB device found, idVendor=1462, idProduct=7d75, bcdDevice= 0.01
[ 4.636039] usb 1-10: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 4.636041] usb 1-10: Product: MYSTIC LIGHT
[ 4.636042] usb 1-10: Manufacturer: MSI
[ 4.636044] usb 1-10: SerialNumber: 7D7522120106
[ 4.663001] input: MSI MYSTIC LIGHT as /devices/pci0000:00/0000:00:02.1/0000:05:00.0/0000:06:0c.0/0000:10:00.0/usb1/1-10/1-10:1.0/0003:1462:7D75.000C/input/input20
[ 4.674082] Console: switching to colour dummy device 80x25
[ 4.694192] hid-generic 0003:1462:7D75.000C: input,hiddev102,hidraw11: USB HID v1.10 Device [MSI MYSTIC LIGHT ] on usb-0000:10:00.0-10/input0
[ 4.694352] logitech-djreceiver 0003:046D:C539.0009: hiddev99,hidraw8: USB HID v1.11 Mouse [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input1
[ 4.707358] amdgpu 0000:03:00.0: vgaarb: deactivate vga console
[ 4.707364] amdgpu 0000:03:00.0: amdgpu: Trusted Memory Zone (TMZ) feature not supported
[ 4.707395] amdgpu 0000:03:00.0: amdgpu: MEM ECC is not presented.
[ 4.707397] amdgpu 0000:03:00.0: amdgpu: SRAM ECC is not presented.
[ 4.707403] amdgpu 0000:03:00.0: amdgpu: DF poison setting is inconsistent(1:0:0:0)!
[ 4.707405] amdgpu 0000:03:00.0: amdgpu: Poison setting is inconsistent in DF/UMC(0:1)!
[ 4.707441] amdgpu 0000:03:00.0: amdgpu: vm size is 262144 GB, 4 levels, block size is 9-bit, fragment size is 9-bit
[ 4.707448] amdgpu 0000:03:00.0: amdgpu: VRAM: 16368M 0x0000008000000000 - 0x00000083FEFFFFFF (16368M used)
[ 4.707450] amdgpu 0000:03:00.0: amdgpu: GART: 512M 0x00007FFF00000000 - 0x00007FFF1FFFFFFF
[ 4.707461] [drm] Detected VRAM RAM=16368M, BAR=16384M
[ 4.707463] [drm] RAM width 256bits GDDR6
[ 4.707592] amdgpu 0000:03:00.0: amdgpu: amdgpu: 16368M of VRAM memory ready
[ 4.707595] amdgpu 0000:03:00.0: amdgpu: amdgpu: 15590M of GTT memory ready.
[ 4.707612] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 4.707673] [drm] PCIE GART of 512M enabled (table at 0x0000008000300000).
[ 4.708063] amdgpu 0000:03:00.0: amdgpu: [drm] Loading DMUB firmware via PSP: version=0x07002F00
[ 4.708239] amdgpu 0000:03:00.0: amdgpu: [VCN instance 0] Found VCN firmware Version ENC: 1.24 DEC: 9 VEP: 0 Revision: 16
[ 4.708326] amdgpu 0000:03:00.0: amdgpu: [VCN instance 1] Found VCN firmware Version ENC: 1.24 DEC: 9 VEP: 0 Revision: 16
[ 4.747315] logitech-djreceiver 0003:046D:C539.000A: hiddev100,hidraw9: USB HID v1.11 Device [Logitech USB Receiver] on usb-0000:13:00.3-2.4/input2
[ 4.786117] amdgpu 0000:03:00.0: amdgpu: reserve 0xa700000 from 0x83e0000000 for PSP TMR
[ 4.802236] logitech-djreceiver 0003:046D:C539.000A: device of type eQUAD Lightspeed 1 (0x0c) connected on slot 1
[ 4.802415] input: Logitech Wireless Mouse PID:4087 Keyboard as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.2/0003:046D:C539.000A/0003:046D:4087.000D/input/input21
[ 4.877070] usb 1-12: new high-speed USB device number 6 using xhci_hcd
[ 4.933790] input: Logitech Wireless Mouse PID:4087 Mouse as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.2/0003:046D:C539.000A/0003:046D:4087.000D/input/input22
[ 4.933833] hid-generic 0003:046D:4087.000D: input,hidraw12: USB HID v1.11 Keyboard [Logitech Wireless Mouse PID:4087] on usb-0000:13:00.3-2.4/input2:1
[ 5.032200] amdgpu 0000:03:00.0: amdgpu: RAP: optional rap ta ucode is not available
[ 5.032202] amdgpu 0000:03:00.0: amdgpu: SECUREDISPLAY: optional securedisplay ta ucode is not available
[ 5.032229] amdgpu 0000:03:00.0: amdgpu: smu driver if version = 0x0000003d, smu fw if version = 0x00000040, smu fw program = 0, smu fw version = 0x00505600 (80.86.0)
[ 5.032232] amdgpu 0000:03:00.0: amdgpu: SMU driver if version not matched
[ 5.093283] usb 1-12: New USB device found, idVendor=05e3, idProduct=0608, bcdDevice=60.70
[ 5.093287] usb 1-12: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 5.093290] usb 1-12: Product: USB2.0 Hub
[ 5.105324] hub 1-12:1.0: USB hub found
[ 5.109278] hub 1-12:1.0: 4 ports detected
[ 5.124545] amdgpu 0000:03:00.0: amdgpu: SMU is initialized successfully!
[ 5.124790] amdgpu 0000:03:00.0: amdgpu: [drm] Display Core v3.2.351 initialized on DCN 3.2
[ 5.124792] amdgpu 0000:03:00.0: amdgpu: [drm] DP-HDMI FRL PCON supported
[ 5.126846] amdgpu 0000:03:00.0: amdgpu: [drm] DMUB hardware initialized: version=0x07002F00
[ 5.339959] amdgpu 0000:03:00.0: amdgpu: [drm] DP-1: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.340102] amdgpu 0000:03:00.0: amdgpu: [drm] DP-2: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.369352] amdgpu 0000:03:00.0: amdgpu: [drm] HDMI-A-1: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.399317] amdgpu 0000:03:00.0: amdgpu: [drm] HDMI-A-2: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.482555] amdgpu: HMM registered 16368MB device memory
[ 5.483565] kfd kfd: amdgpu: Allocated 3969056 bytes on gart
[ 5.483579] kfd kfd: amdgpu: Total number of KFD nodes to be created: 1
[ 5.483612] amdgpu: Virtual CRAT table created for GPU
[ 5.483808] amdgpu: Topology: Add dGPU node [0x747e:0x1002]
[ 5.483811] kfd kfd: amdgpu: added device 1002:747e
[ 5.483823] amdgpu 0000:03:00.0: amdgpu: SE 3, SH per SE 2, CU per SH 10, active_cu_number 60
[ 5.483828] amdgpu 0000:03:00.0: amdgpu: ring gfx_0.0.0 uses VM inv eng 0 on hub 0
[ 5.483830] amdgpu 0000:03:00.0: amdgpu: ring comp_1.0.0 uses VM inv eng 1 on hub 0
[ 5.483831] amdgpu 0000:03:00.0: amdgpu: ring comp_1.1.0 uses VM inv eng 4 on hub 0
[ 5.483833] amdgpu 0000:03:00.0: amdgpu: ring comp_1.2.0 uses VM inv eng 6 on hub 0
[ 5.483835] amdgpu 0000:03:00.0: amdgpu: ring comp_1.3.0 uses VM inv eng 7 on hub 0
[ 5.483836] amdgpu 0000:03:00.0: amdgpu: ring comp_1.0.1 uses VM inv eng 8 on hub 0
[ 5.483838] amdgpu 0000:03:00.0: amdgpu: ring comp_1.1.1 uses VM inv eng 9 on hub 0
[ 5.483839] amdgpu 0000:03:00.0: amdgpu: ring comp_1.2.1 uses VM inv eng 10 on hub 0
[ 5.483841] amdgpu 0000:03:00.0: amdgpu: ring comp_1.3.1 uses VM inv eng 11 on hub 0
[ 5.483842] amdgpu 0000:03:00.0: amdgpu: ring sdma0 uses VM inv eng 12 on hub 0
[ 5.483843] amdgpu 0000:03:00.0: amdgpu: ring sdma1 uses VM inv eng 13 on hub 0
[ 5.483845] amdgpu 0000:03:00.0: amdgpu: ring vcn_unified_0 uses VM inv eng 0 on hub 8
[ 5.483846] amdgpu 0000:03:00.0: amdgpu: ring vcn_unified_1 uses VM inv eng 1 on hub 8
[ 5.483848] amdgpu 0000:03:00.0: amdgpu: ring jpeg_dec uses VM inv eng 4 on hub 8
[ 5.483849] amdgpu 0000:03:00.0: amdgpu: ring mes_kiq_3.1.0 uses VM inv eng 14 on hub 0
[ 5.485195] amdgpu 0000:03:00.0: amdgpu: Using BACO for runtime pm
[ 5.485748] amdgpu 0000:03:00.0: [drm] Registered 4 planes with drm panic
[ 5.485751] [drm] Initialized amdgpu 3.64.0 for 0000:03:00.0 on minor 1
[ 5.493314] amdgpu 0000:03:00.0: amdgpu: [drm] Failed to setup vendor infoframe on connector HDMI-A-1: -22
[ 5.500610] fbcon: amdgpudrmfb (fb0) is primary device
[ 5.500825] [drm] pre_validate_dsc:1667 MST_DSC dsc precompute is not needed
[ 5.745712] Console: switching to colour frame buffer device 240x67
[ 5.813640] amdgpu 0000:03:00.0: [drm] fb0: amdgpudrmfb frame buffer device
[ 5.821276] amdgpu 0000:13:00.0: enabling device (0006 -> 0007)
[ 5.821352] amdgpu 0000:13:00.0: amdgpu: initializing kernel modesetting (IP DISCOVERY 0x1002:0x164E 0x1462:0x7D75 0xCB).
[ 5.821378] amdgpu 0000:13:00.0: amdgpu: register mmio base: 0xF6900000
[ 5.821379] amdgpu 0000:13:00.0: amdgpu: register mmio size: 524288
[ 5.822939] amdgpu 0000:13:00.0: amdgpu: detected ip block number 0 <common_v1_0_0> (nv_common)
[ 5.822942] amdgpu 0000:13:00.0: amdgpu: detected ip block number 1 <gmc_v10_0_0> (gmc_v10_0)
[ 5.822944] amdgpu 0000:13:00.0: amdgpu: detected ip block number 2 <ih_v5_0_0> (navi10_ih)
[ 5.822945] amdgpu 0000:13:00.0: amdgpu: detected ip block number 3 <psp_v13_0_0> (psp)
[ 5.822947] amdgpu 0000:13:00.0: amdgpu: detected ip block number 4 <smu_v13_0_0> (smu)
[ 5.822948] amdgpu 0000:13:00.0: amdgpu: detected ip block number 5 <dce_v1_0_0> (dm)
[ 5.822950] amdgpu 0000:13:00.0: amdgpu: detected ip block number 6 <gfx_v10_0_0> (gfx_v10_0)
[ 5.822951] amdgpu 0000:13:00.0: amdgpu: detected ip block number 7 <sdma_v5_2_0> (sdma_v5_2)
[ 5.822953] amdgpu 0000:13:00.0: amdgpu: detected ip block number 8 <vcn_v3_0_0> (vcn_v3_0)
[ 5.822955] amdgpu 0000:13:00.0: amdgpu: detected ip block number 9 <jpeg_v3_0_0> (jpeg_v3_0)
[ 5.822970] amdgpu 0000:13:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.822972] amdgpu: ATOM BIOS: 102-RAPHAEL-008
[ 5.826463] amdgpu 0000:13:00.0: amdgpu: Trusted Memory Zone (TMZ) feature disabled as experimental (default)
[ 5.826490] amdgpu 0000:13:00.0: amdgpu: vm size is 262144 GB, 4 levels, block size is 9-bit, fragment size is 9-bit
[ 5.826495] amdgpu 0000:13:00.0: amdgpu: VRAM: 512M 0x000000F400000000 - 0x000000F41FFFFFFF (512M used)
[ 5.826497] amdgpu 0000:13:00.0: amdgpu: GART: 1024M 0x0000000000000000 - 0x000000003FFFFFFF
[ 5.826502] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.826503] [drm] RAM width 128bits DDR5
[ 5.826581] amdgpu 0000:13:00.0: amdgpu: amdgpu: 512M of VRAM memory ready
[ 5.826583] amdgpu 0000:13:00.0: amdgpu: amdgpu: 15590M of GTT memory ready.
[ 5.826596] [drm] GART: num cpu pages 262144, num gpu pages 262144
[ 5.826693] [drm] PCIE GART of 1024M enabled (table at 0x000000F41FC00000).
[ 5.826944] amdgpu 0000:13:00.0: amdgpu: [drm] Loading DMUB firmware via PSP: version=0x05002F00
[ 5.827215] [drm] use_doorbell being set to: [true]
[ 5.827229] amdgpu 0000:13:00.0: amdgpu: [VCN instance 0] Found VCN firmware Version ENC: 1.33 DEC: 4 VEP: 0 Revision: 14
[ 5.849240] amdgpu 0000:13:00.0: amdgpu: reserve 0xa00000 from 0xf41e000000 for PSP TMR
[ 5.913461] amdgpu 0000:13:00.0: amdgpu: RAS: optional ras ta ucode is not available
[ 5.919110] amdgpu 0000:13:00.0: amdgpu: RAP: optional rap ta ucode is not available
[ 5.919111] amdgpu 0000:13:00.0: amdgpu: SECUREDISPLAY: optional securedisplay ta ucode is not available
[ 5.920605] amdgpu 0000:13:00.0: amdgpu: SMU is initialized successfully!
[ 5.920875] amdgpu 0000:13:00.0: amdgpu: [drm] Display Core v3.2.351 initialized on DCN 3.1.5
[ 5.920877] amdgpu 0000:13:00.0: amdgpu: [drm] DP-HDMI FRL PCON supported
[ 5.921527] amdgpu 0000:13:00.0: amdgpu: [drm] DMUB hardware initialized: version=0x05002F00
[ 5.924265] amdgpu 0000:13:00.0: amdgpu: [drm] HDMI-A-3: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924304] amdgpu 0000:13:00.0: amdgpu: [drm] DP-3: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924354] amdgpu 0000:13:00.0: amdgpu: [drm] DP-4: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924605] amdgpu 0000:13:00.0: amdgpu: [drm] DP-5: PSR support 0, DC PSR ver -1, sink PSR ver 0 DPCD caps 0x0 su_y_granularity 0
[ 5.924899] amdgpu 0000:13:00.0: amdgpu: kiq ring mec 2 pipe 1 q 0
[ 5.927770] kfd kfd: amdgpu: Allocated 3969056 bytes on gart
[ 5.927776] kfd kfd: amdgpu: Total number of KFD nodes to be created: 1
[ 5.927907] amdgpu: Virtual CRAT table created for GPU
[ 5.928563] amdgpu: Topology: Add dGPU node [0x164e:0x1002]
[ 5.928565] kfd kfd: amdgpu: added device 1002:164e
[ 5.928573] amdgpu 0000:13:00.0: amdgpu: SE 1, SH per SE 1, CU per SH 2, active_cu_number 2
[ 5.928576] amdgpu 0000:13:00.0: amdgpu: ring gfx_0.0.0 uses VM inv eng 0 on hub 0
[ 5.928577] amdgpu 0000:13:00.0: amdgpu: ring gfx_0.1.0 uses VM inv eng 1 on hub 0
[ 5.928578] amdgpu 0000:13:00.0: amdgpu: ring comp_1.0.0 uses VM inv eng 4 on hub 0
[ 5.928580] amdgpu 0000:13:00.0: amdgpu: ring comp_1.1.0 uses VM inv eng 5 on hub 0
[ 5.928581] amdgpu 0000:13:00.0: amdgpu: ring comp_1.2.0 uses VM inv eng 6 on hub 0
[ 5.928582] amdgpu 0000:13:00.0: amdgpu: ring comp_1.3.0 uses VM inv eng 7 on hub 0
[ 5.928583] amdgpu 0000:13:00.0: amdgpu: ring comp_1.0.1 uses VM inv eng 8 on hub 0
[ 5.928584] amdgpu 0000:13:00.0: amdgpu: ring comp_1.1.1 uses VM inv eng 9 on hub 0
[ 5.928585] amdgpu 0000:13:00.0: amdgpu: ring comp_1.2.1 uses VM inv eng 10 on hub 0
[ 5.928586] amdgpu 0000:13:00.0: amdgpu: ring comp_1.3.1 uses VM inv eng 11 on hub 0
[ 5.928587] amdgpu 0000:13:00.0: amdgpu: ring kiq_0.2.1.0 uses VM inv eng 12 on hub 0
[ 5.928588] amdgpu 0000:13:00.0: amdgpu: ring sdma0 uses VM inv eng 13 on hub 0
[ 5.928589] amdgpu 0000:13:00.0: amdgpu: ring vcn_dec_0 uses VM inv eng 0 on hub 8
[ 5.928591] amdgpu 0000:13:00.0: amdgpu: ring vcn_enc_0.0 uses VM inv eng 1 on hub 8
[ 5.928592] amdgpu 0000:13:00.0: amdgpu: ring vcn_enc_0.1 uses VM inv eng 4 on hub 8
[ 5.928593] amdgpu 0000:13:00.0: amdgpu: ring jpeg_dec uses VM inv eng 5 on hub 8
[ 5.928841] amdgpu 0000:13:00.0: amdgpu: Runtime PM not available
[ 5.929201] amdgpu 0000:13:00.0: [drm] Registered 4 planes with drm panic
[ 5.929203] [drm] Initialized amdgpu 3.64.0 for 0000:13:00.0 on minor 0
[ 5.931297] amdgpu 0000:13:00.0: [drm] Cannot find any crtc or sizes
[ 6.167707] systemd-journald[254]: Received SIGTERM from PID 1 (systemd).
[ 6.535689] systemd[1]: systemd 260.1-2-arch running in system mode (+PAM +AUDIT -SELINUX +APPARMOR -IMA +IPE +SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK +BTF +XKBCOMMON +UTMP +LIBARCHIVE)
[ 6.535697] systemd[1]: Detected architecture x86-64.
[ 6.545850] systemd[1]: Hostname set to <zeus>.
[ 6.706381] systemd[1]: bpf-restrict-fs: LSM BPF program attached
[ 6.807934] zram: Added device: zram0
[ 6.961878] systemd[1]: initrd-switch-root.service: Deactivated successfully.
[ 6.962021] systemd[1]: Stopped Switch Root.
[ 6.962693] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1.
[ 6.963168] systemd[1]: Created slice Slice /system/dirmngr.
[ 6.963568] systemd[1]: Created slice Slice /system/getty.
[ 6.963980] systemd[1]: Created slice Slice /system/gpg-agent.
[ 6.964368] systemd[1]: Created slice Slice /system/gpg-agent-browser.
[ 6.964751] systemd[1]: Created slice Slice /system/gpg-agent-extra.
[ 6.965137] systemd[1]: Created slice Slice /system/gpg-agent-ssh.
[ 6.965523] systemd[1]: Created slice Slice /system/keyboxd.
[ 6.965906] systemd[1]: Created slice Slice /system/kmsconvt.
[ 6.966286] systemd[1]: Created slice Slice /system/modprobe.
[ 6.966674] systemd[1]: Created slice Slice /system/systemd-fsck.
[ 6.967493] systemd[1]: Created slice Slice /system/systemd-zram-setup.
[ 6.967846] systemd[1]: Created slice User and Session Slice.
[ 6.967918] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
[ 6.967974] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
[ 6.968176] systemd[1]: Set up automount Arbitrary Executable File Formats File System Automount Point.
[ 6.968227] systemd[1]: Expecting device /dev/disk/by-partlabel/zeus-linux-boot...
[ 6.968256] systemd[1]: Expecting device /dev/disk/by-partlabel/zeus-linux-root...
[ 6.968286] systemd[1]: Expecting device /dev/zram0...
[ 6.968318] systemd[1]: Reached target Image Downloads.
[ 6.968352] systemd[1]: Stopped target Switch Root.
[ 6.968383] systemd[1]: Stopped target Initrd File Systems.
[ 6.968412] systemd[1]: Stopped target Initrd Root File System.
[ 6.968442] systemd[1]: Reached target Local Integrity Protected Volumes.
[ 6.968482] systemd[1]: Reached target Path Units.
[ 6.968511] systemd[1]: Reached target Remote File Systems.
[ 6.968542] systemd[1]: Reached target Slice Units.
[ 6.968580] systemd[1]: Reached target Local Verity Protected Volumes.
[ 6.968659] systemd[1]: Listening on Device-mapper event daemon FIFOs.
[ 6.969195] systemd[1]: Listening on Query the User Interactively for a Password.
[ 6.970474] systemd[1]: Listening on Process Core Dump Socket.
[ 6.970838] systemd[1]: Listening on Credential Encryption/Decryption.
[ 6.971325] systemd[1]: Listening on Factory Reset Management.
[ 6.972091] systemd[1]: Listening on Console Output Muting Service Socket.
[ 6.972440] systemd[1]: Listening on Network Management Resolve Hook Socket.
[ 6.972765] systemd[1]: Listening on Network Management Metrics Varlink Socket.
[ 6.973100] systemd[1]: Listening on Network Management Varlink Socket.
[ 6.973412] systemd[1]: Listening on Network Management Netlink Socket.
[ 6.973782] systemd[1]: TPM PCR Measurements skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.973794] systemd[1]: Make TPM PCR Policy skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.974153] systemd[1]: Listening on Disk Repartitioning Service Socket.
[ 6.974443] systemd[1]: Listening on Resolve Monitor Varlink Socket.
[ 6.974713] systemd[1]: Listening on Resolve Service Varlink Socket.
[ 6.974983] systemd[1]: Listening on udev Control Socket.
[ 6.975256] systemd[1]: Listening on udev Varlink Socket.
[ 6.975529] systemd[1]: Listening on User Database Manager Socket.
[ 6.976679] systemd[1]: Mounting Huge Pages File System...
[ 6.977496] systemd[1]: Mounting POSIX Message Queue File System...
[ 6.978299] systemd[1]: Mounting Kernel Debug File System...
[ 6.979103] systemd[1]: Mounting Kernel Trace File System...
[ 6.980130] systemd[1]: Starting Create List of Static Device Nodes...
[ 6.980415] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
[ 6.980988] systemd[1]: Mounting Kernel Configuration File System...
[ 6.981237] systemd[1]: Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm
[ 6.981256] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse
[ 6.981836] systemd[1]: Mounting FUSE Control File System...
[ 6.982700] systemd[1]: Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67
[ 6.984143] systemd[1]: Starting Journal Service...
[ 6.985472] systemd[1]: Starting Load Kernel Modules...
[ 6.986331] systemd[1]: Starting Generate Network Units from Kernel Command Line...
[ 6.986577] systemd[1]: TPM PCR Machine ID Measurement skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.987188] systemd[1]: Starting Remount Root and Kernel File Systems...
[ 6.987448] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.988005] systemd[1]: Starting Load udev Rules from Credentials...
[ 6.988772] systemd[1]: Starting Coldplug All udev Devices...
[ 6.990573] systemd[1]: Mounted Huge Pages File System.
[ 6.990876] systemd[1]: Mounted POSIX Message Queue File System.
[ 6.991168] systemd[1]: Mounted Kernel Debug File System.
[ 6.991470] systemd[1]: Mounted Kernel Trace File System.
[ 6.991877] systemd[1]: Finished Create List of Static Device Nodes.
[ 6.992231] systemd[1]: Mounted Kernel Configuration File System.
[ 6.992568] systemd[1]: Mounted FUSE Control File System.
[ 6.993063] systemd[1]: Finished Generate Network Units from Kernel Command Line.
[ 6.994358] systemd[1]: Starting Create Static Device Nodes in /dev gracefully...
[ 6.994894] systemd-journald[599]: Collecting audit messages is disabled.
[ 6.995079] systemd[1]: Finished Load udev Rules from Credentials.
[ 6.996005] systemd[1]: Finished Remount Root and Kernel File Systems.
[ 6.996159] sd 5:0:0:0: Attached scsi generic sg0 type 0
[ 6.996188] sd 8:0:0:0: Attached scsi generic sg1 type 0
[ 6.996319] i2c_dev: i2c /dev entries driver
[ 6.996541] systemd[1]: Rebuild Hardware Database skipped, unmet condition check ConditionNeedsUpdate=/etc
[ 6.997049] Asymmetric key parser 'pkcs8' registered
[ 6.997181] systemd[1]: Starting Load/Save OS Random Seed...
[ 6.997529] systemd[1]: TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.997542] systemd[1]: TPM PCR NvPCR Initialization Separator skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.997550] systemd[1]: Reached target Local Encrypted Volumes.
[ 6.997792] systemd[1]: TPM NvPCR Product ID Measurement skipped, unmet condition check ConditionSecurity=measured-uki
[ 6.998031] systemd[1]: Finished Load Kernel Modules.
[ 6.998961] systemd[1]: Starting Apply Kernel Variables...
[ 6.999990] systemd[1]: Started Journal Service.
[ 8.226164] ccp 0000:13:00.2: enabling device (0000 -> 0002)
[ 8.227534] ccp 0000:13:00.2: tee enabled
[ 8.228953] ccp 0000:13:00.2: psp enabled
[ 8.244553] zram0: detected capacity change from 0 to 33554432
[ 8.250600] mc: Linux media interface: v0.10
[ 8.278570] mousedev: PS/2 mouse device common for all mice
[ 8.291679] VFIO - User Level meta-driver version: 0.3
[ 8.332611] snd_hda_intel 0000:03:00.1: enabling device (0000 -> 0002)
[ 8.333879] snd_hda_intel 0000:03:00.1: Handle vga_switcheroo audio client
[ 8.333882] snd_hda_intel 0000:03:00.1: Force to non-snoop mode
[ 8.335199] snd_hda_intel 0000:13:00.1: enabling device (0000 -> 0002)
[ 8.336254] snd_hda_intel 0000:13:00.1: Handle vga_switcheroo audio client
[ 8.336754] snd_hda_intel 0000:13:00.6: enabling device (0000 -> 0002)
[ 8.341175] snd_hda_intel 0000:13:00.6: no codecs found!
[ 8.341929] Adding 16777212k swap on /dev/zram0. Priority:100 extents:1 across:16777212k SSDsc
[ 8.362100] snd_hda_intel 0000:03:00.1: bound 0000:03:00.0 (ops amdgpu_dm_audio_component_bind_ops [amdgpu])
[ 8.364350] snd_hda_intel 0000:13:00.1: bound 0000:13:00.0 (ops amdgpu_dm_audio_component_bind_ops [amdgpu])
[ 8.447583] input: HD-Audio Generic HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input30
[ 8.447651] input: HD-Audio Generic HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input31
[ 8.447694] input: HD-Audio Generic HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input32
[ 8.447757] input: HD-Audio Generic HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:08.1/0000:13:00.1/sound/card2/input33
[ 8.447762] input: HDA ATI HDMI HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input26
[ 8.447970] input: HDA ATI HDMI HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input27
[ 8.448012] input: HDA ATI HDMI HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input28
[ 8.448056] input: HDA ATI HDMI HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:01.1/0000:01:00.0/0000:02:00.0/0000:03:00.1/sound/card1/input29
[ 8.448309] input: PC Speaker as /devices/platform/pcspkr/input/input34
[ 8.448920] RAPL PMU: API unit is 2^-32 Joules, 2 fixed counters, 163840 ms ovfl timer
[ 8.448923] RAPL PMU: hw unit of domain package 2^-16 Joules
[ 8.448924] RAPL PMU: hw unit of domain core 2^-16 Joules
[ 8.455008] piix4_smbus 0000:00:14.0: SMBus Host Controller at 0xb00, revision 0
[ 8.455011] piix4_smbus 0000:00:14.0: Using register 0x02 for SMBus port selection
[ 8.456345] i2c i2c-16: Successfully instantiated SPD at 0x51
[ 8.457584] i2c i2c-16: Successfully instantiated SPD at 0x53
[ 8.457650] piix4_smbus 0000:00:14.0: Auxiliary SMBus Host Controller at 0xb20
[ 8.465419] Bluetooth: Core ver 2.22
[ 8.465461] NET: Registered PF_BLUETOOTH protocol family
[ 8.465463] Bluetooth: HCI device and connection manager initialized
[ 8.465467] Bluetooth: HCI socket layer initialized
[ 8.465469] Bluetooth: L2CAP socket layer initialized
[ 8.465472] Bluetooth: SCO socket layer initialized
[ 8.467857] sp5100_tco: SP5100/SB800 TCO WatchDog Timer Driver
[ 8.467906] sp5100-tco sp5100-tco: Using 0xfeb00000 for watchdog MMIO address
[ 8.467961] sp5100-tco sp5100-tco: initialized. heartbeat=60 sec (nowayout=0)
[ 8.476928] spd5118 16-0051: DDR5 temperature sensor: vendor 0x00:0xb3 revision 2.2
[ 8.478524] usbcore: registered new interface driver btusb
[ 8.482242] spd5118 16-0053: DDR5 temperature sensor: vendor 0x00:0xb3 revision 2.2
[ 8.491685] Bluetooth: hci0: HW/SW Version: 0x008a008a, Build Time: 20260224103448
[ 8.606984] kvm_amd: TSC scaling supported
[ 8.606986] kvm_amd: Nested Virtualization enabled
[ 8.606987] kvm_amd: Nested Paging enabled
[ 8.606988] kvm_amd: LBR virtualization supported
[ 8.606990] kvm_amd: AVIC enabled
[ 8.606990] kvm_amd: x2AVIC enabled
[ 8.606991] kvm_amd: Virtual GIF supported
[ 8.606992] kvm_amd: Virtual NMI enabled
[ 8.653287] Bluetooth: hci0: Failed to send wmt func ctrl (-22)
[ 8.653647] Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported.
[ 8.739122] amd_atl: AMD Address Translation Library initialized
[ 8.739432] intel_rapl_common: Found RAPL domain package
[ 8.739434] intel_rapl_common: Found RAPL domain core
[ 8.819378] input: Logitech G903 LS as /devices/pci0000:00/0000:00:08.1/0000:13:00.3/usb3/3-2/3-2.4/3-2.4:1.2/0003:046D:C539.000A/0003:046D:4087.000D/input/input35
[ 8.963934] logitech-hidpp-device 0003:046D:4087.000D: input,hidraw12: USB HID v1.11 Keyboard [Logitech G903 LS] on usb-0000:13:00.3-2.4/input2:1
[ 9.023960] systemd-journald[599]: Received client request to flush runtime journal.
[ 9.024730] Adding 67108860k swap on /swap/swapfile. Priority:-2 extents:125 across:3515892744k SS
[ 10.157938] nct6683: Found NCT6687D or compatible chip at 0x4e:0xa20
[ 10.161846] nct6683 nct6683.2592: NCT6687D EC firmware version 0.0 build 09/27/22
[ 10.218454] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 10.221106] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 10.221196] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
[ 10.221649] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 10.221652] cfg80211: failed to load regulatory.db
[ 13.967795] usbcore: registered new interface driver snd-usb-audio
[ 14.077230] r8169 0000:0e:00.0: enabling device (0000 -> 0003)
[ 14.085969] r8169 0000:0e:00.0 eth0: RTL8125B, d8:43:ae:4d:f6:19, XID 641, IRQ 87
[ 14.085973] r8169 0000:0e:00.0 eth0: jumbo features [frames: 16362 bytes, tx checksumming: ko]
[ 14.087267] mt7921e 0000:0f:00.0: enabling device (0000 -> 0002)
[ 14.089510] r8169 0000:0e:00.0 enp14s0: renamed from eth0
[ 14.092317] mt7921e 0000:0f:00.0: ASIC revision: 79220010
[ 14.120402] Realtek Internal NBASE-T PHY r8169-0-e00:00: attached PHY driver (mii_bus:phy_addr=r8169-0-e00:00, irq=MAC)
[ 14.166884] mt7921e 0000:0f:00.0: HW/SW Version: 0x8a108a10, Build Time: 20260224103145a
[ 14.181633] mt7921e 0000:0f:00.0: WM Firmware Version: ____000000, Build Time: 20260224103233
[ 14.227869] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 14.227871] Bluetooth: BNEP filters: protocol multicast
[ 14.227874] Bluetooth: BNEP socket layer initialized
[ 14.300844] r8169 0000:0e:00.0 enp14s0: Link is Down
[ 17.677636] r8169 0000:0e:00.0 enp14s0: Link is Up - 2.5Gbps/Full - flow control off
[ 39.622247] logitech-hidpp-device 0003:046D:4087.000D: HID++ 4.2 device connected.
^ permalink raw reply
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox