Enabling TPM module causes kernel panic

ChairmanFaust · 2025-11-30 18:04:22

I was looking into enabling secure boot for my dual boot win/arch PC but have hit a roadblock when enabling the TPM module in the CMOS. I have "tpm tpm_tis" in the MODULES section of mkinitcpio.conf but on boot i get the following error:

Loading Linux linux ...
Loading initial ramdisk ...
Error: kern/mm.c:grub_memalign:552:out of memory.

I then get a blue kernel panic screen where is says it is unable to read the root device (0,0). When i disable the TPM module it boots just fine.

gromit · 2025-12-01 16:58:38

Could you please paste the contents of the panic message?

Also does this work when you load the kernel module in a regular session?

ChairmanFaust · 2025-12-02 00:10:53

Grub Error BSOD

I suppose i could modprobe the tpm modules (what are they?) but i cant actually boot into Arch when the TPM is enabled.

gromit · 2025-12-02 00:16:21

Could you post the dmesg which is encoded in the QR Code?

ChairmanFaust · 2025-12-02 01:50:30

Kernel Panic QR code link

Panic Report
Arch: x86_64
Version: 6.17.9-arch1-1

[    0.914498] integrity: Loading X.509 certificate: UEFI:db
[    0.914510] integrity: Loaded X.509 cert 'Microsoft Corporation: Windows UEFI CA 2023: aefc5fbbbe055d8f8daa585473499417ab5a5272'
[    0.915681] PM:   Magic number: 5:972:709
[    0.917057] RAS: Correctable Errors collector initialized.
[    0.921609] clk: Disabling unused clocks
[    0.921610] PM: genpd: Disabling unused power domains
[    0.921643] check access for rdinit=/init failed: -2, ignoring
[    1.131637] usb 1-1: new full-speed USB device number 2 using xhci_hcd
[    1.194545] ata9: SATA link down (SStatus 0 SControl 300)
[    1.194594] ata5: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[    1.194645] ata6: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[    1.194697] ata8: SATA link down (SStatus 4 SControl 300)
[    1.194926] ata5.00: Model 'Samsung SSD 870 EVO 2TB', rev 'SVT03B6Q', applying quirks: noncqtrim zeroaftertrim noncqonati nolpmonati
[    1.194979] ata7: SATA link down (SStatus 4 SControl 300)
[    1.195072] ata5.00: supports DRM functions and may not be fully accessible
[    1.195082] ata5.00: ATA-11: Samsung SSD 870 EVO 2TB, SVT03B6Q, max UDMA/133
[    1.195427] ata6.00: ATA-11: ST16000NM001G-2KK103, SN03, max UDMA/133
[    1.195818] ata5.00: 3907029168 sectors, multi 1: LBA48 NCQ (depth 32), AA
[    1.199110] ata5.00: Features: Trust Dev-Sleep DIPM NCQ-sndrcv
[    1.199481] ata5.00: supports DRM functions and may not be fully accessible
[    1.203491] ata5.00: configured for UDMA/133
[    1.203556] ahci 0000:00:17.0: port does not support device sleep
[    1.203984] scsi 4:0:0:0: Direct-Access     ATA      Samsung SSD 870  3B6Q PQ: 0 ANSI: 5
[    1.204837] ata5.00: Enabling discard_zeroes_data
[    1.204879] sd 4:0:0:0: [sda] 3907029168 512-byte logical blocks: (2.00 TB/1.82 TiB)
[    1.204903] sd 4:0:0:0: [sda] Write Protect is off
[    1.204909] sd 4:0:0:0: [sda] Mode Sense: 00 3a 00 00
[    1.204936] sd 4:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[    1.205003] sd 4:0:0:0: [sda] Preferred minimum I/O size 512 bytes
[    1.206352] ata5.00: Enabling discard_zeroes_data
[    1.234735]  sda: sda1 sda2 sda3 sda4
[    1.236312] ata6.00: 31251759104 sectors, multi 16: LBA48 NCQ (depth 32), AA
[    1.236401] sd 4:0:0:0: [sda] supports TCG Opal
[    1.236409] sd 4:0:0:0: [sda] Attached SCSI disk
[    1.238506] ata6.00: Features: DIPM NCQ-sndrcv
[    1.258104] usb 1-1: New USB device found, idVendor=046a, idProduct=00ea, bcdDevice= 1.23
[    1.258118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[    1.258123] usb 1-1: Product: MX 3.0S Dongle
[    1.258127] usb 1-1: Manufacturer: CHERRY
[    1.264567] input: CHERRY MX 3.0S Dongle Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:046A:00EA.0001/input/input3
[    1.271717] ata6.00: configured for UDMA/133
[    1.306956] scsi 5:0:0:0: Direct-Access     ATA      ST16000NM001G-2K SN03 PQ: 0 ANSI: 5
[    1.307559] sd 5:0:0:0: [sdb] 31251759104 512-byte logical blocks: (16.0 TB/14.6 TiB)
[    1.307572] sd 5:0:0:0: [sdb] 4096-byte physical blocks
[    1.307595] sd 5:0:0:0: [sdb] Write Protect is off
[    1.307633] sd 5:0:0:0: [sdb] Mode Sense: 00 3a 00 00
[    1.307687] sd 5:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[    1.307716] sd 5:0:0:0: [sdb] Preferred minimum I/O size 4096 bytes
[    1.316544] input: CHERRY MX 3.0S Dongle Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:046A:00EA.0001/input/input4
[    1.316799] input: CHERRY MX 3.0S Dongle as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:046A:00EA.0001/input/input5
[    1.317262] hid-generic 0003:046A:00EA.0001: input,hiddev96,hidraw0: USB HID v1.11 Keyboard [CHERRY MX 3.0S Dongle] on usb-0000:00:14.0-1/input0
[    1.339713] usb 4-1: new SuperSpeed USB device number 2 using xhci_hcd
[    1.354753] usb 4-1: New USB device found, idVendor=05e3, idProduct=0626, bcdDevice= 6.55
[    1.354765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[    1.354771] usb 4-1: Product: USB3.1 Hub
[    1.354776] usb 4-1: Manufacturer: GenesysLogic
[    1.358553] hub 4-1:1.0: USB hub found
[    1.358910] hub 4-1:1.0: 4 ports detected
[    1.362007]  sdb: sdb1
[    1.362266] sd 5:0:0:0: [sdb] Attached SCSI disk
[    1.366461] usb 2-7: new SuperSpeed USB device number 2 using xhci_hcd
[    1.379393] usb 2-7: New USB device found, idVendor=174c, idProduct=3074, bcdDevice= 0.01
[    1.379401] usb 2-7: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[    1.379406] usb 2-7: Product: AS2107
[    1.379409] usb 2-7: Manufacturer: ASMedia
[    1.379413] usb 2-7: SerialNumber: USB2.0 Hub
[    1.381081] hub 2-7:1.0: USB hub found
[    1.381220] hub 2-7:1.0: 4 ports detected
[    1.490486] usb 1-5: new high-speed USB device number 3 using xhci_hcd
[    1.614044] usb 1-5: New USB device found, idVendor=058f, idProduct=6254, bcdDevice= 1.00
[    1.614058] usb 1-5: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    1.616569] hub 1-5:1.0: USB hub found
[    1.616744] hub 1-5:1.0: 4 ports detected
[    1.619256] ata10: SATA link down (SStatus 0 SControl 300)
[    1.620108] /dev/root: Can't open blockdev
[    1.620142] VFS: Cannot open root device "UUID=ca320a3a-2a54-472f-9082-2522b3b007d1" or unknown-block(0,0): error -6
[    1.620146] Please append a correct "root=" boot option; here are the available partitions:
[    1.620151] 0800      1953514584 sda 
[    1.620156]  driver: sd
[    1.620158]   0801          102400 sda1 ce185590-4ac4-4be6-b951-f69517fee59a
[    1.620162] 
[    1.620164]   0802           16384 sda2 908d4342-e8c9-4cfb-a5b1-a52e0ceb238f
[    1.620166] 
[    1.620167]   0803      1952638976 sda3 212d5a2f-9158-44f7-af73-ff48553d6989
[    1.620169] 
[    1.620171]   0804          754688 sda4 8d0ca731-eb1b-4da8-a92d-f53bba272c2a
[    1.620172] 
[    1.620176] 0810      15625879552 sdb 
[    1.620178]  driver: sd
[    1.620179]   0811      15625877504 sdb1 f6b71c3e-a6a1-4ac6-a659-7a225e4be2f0
[    1.620181] 
[    1.620183] List of all bdev filesystems:
[    1.620184]  ext3
[    1.620186]  ext2
[    1.620187]  ext4
[    1.620188]  fuseblk
[    1.620189]  btrfs
[    1.620191] 
[    1.620193] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    1.620202] fbcon: Taking over console
[    1.620216] CPU: 2 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.17.9-arch1-1 #1 PREEMPT(full)  71adf6020e7d04ea315feaf360c679be0fb5cb04
[    1.620227] Hardware name: ASUS System Product Name/ROG MAXIMUS Z790 HERO, BIOS 2801 11/29/2024
[    1.620233] Call Trace:
[    1.620238]  <TASK>
[    1.620243]  dump_stack_lvl+0x5d/0x80
[    1.620256]  vpanic+0xc4/0x2a0
[    1.620265]  panic+0x6b/0x6b
[    1.620273]  mount_root_generic+0x1cf/0x270
[    1.620285]  prepare_namespace+0x1dc/0x230
[    1.620291]  kernel_init_freeable+0x27f/0x2b0
[    1.620298]  ? __pfx_kernel_init+0x10/0x10
[    1.620309]  kernel_init+0x1a/0x140
[    1.620318]  ret_from_fork+0x1c1/0x1f0
[    1.620328]  ? __pfx_kernel_init+0x10/0x10
[    1.620335]  ret_from_fork_asm+0x1a/0x30
[    1.620348]  </TASK>
[    1.620573] Kernel Offset: 0x30600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

 # /dev/md127p3
 UUID=ca320a3a-2a54-472f-9082-2522b3b007d1   /           ext4        rw,relatime,stripe=512  0 1

looks like it doesnt like my mdadm array

Last edited by ChairmanFaust (2025-12-02 01:54:15)

Arch Linux

#1 2025-11-30 18:04:22

Enabling TPM module causes kernel panic

#2 2025-12-01 16:58:38

Re: Enabling TPM module causes kernel panic

#3 2025-12-02 00:10:53

Re: Enabling TPM module causes kernel panic

#4 2025-12-02 00:16:21

Re: Enabling TPM module causes kernel panic

#5 2025-12-02 01:50:30

Re: Enabling TPM module causes kernel panic

Board footer