Change:
I use tpm + luks, but recently when the kernel updating to 6.4.11, the can't find devices. And, if I switch to old kernel like 6.1, it can't work too. Steps to reproduce the behavior: the latest unstable work correctly. ! ! Add any other context about the problem here. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result.
I have the same exact behavior with 6.4.11 and 6.1.46, however I am using Arch Linux. I imagine this is not a NixOS specific problem. Edit: likely relevant BZ
Same here with Fedora 38 after latest Kernel (6.4.11) update.
Same here with nixOS unstable and kernel version 6.1.46 with LUKS enabled for root partition.
Also on my cumputer
All bugfix patches will be backported to all maintenance branches, so the latest version of both the 6.4 and 6.1 branches has the same buggy commit. If you meet some bug and want to roll back to dig out the problem, you should roll back to the last working version you have used, rather than a version that looks older.
Ok, thanks
This exact error is happening on openSUSE too:
Out of curiosity, what hardware is everyone using? I thought this was causing my boot failure on my XPS 9560, but it turns out it was a different kernel bug causing boot to fail. My specs: XPS 9560 i7-7700HQ Not quite sure atm how to get TPM model.
Asrock z370 with i5-8600K The issue prevented me booting my Windows 11 VM (running as close to the "metal" as possible with GPU Passthrough) after updating to 23.05 (and emulated TPM doesn't work ootb). I had to manually apply the above referenced PR to my kernel last night after spending a number of hours tracking down the source of the problem (single-GPU passthrough makes this a bit difficult). After an hour or so compilation it was resolved. I'm sure there are others out there with issues that haven't identified what is causing it.
I'm using HP Gaming Pavilion - 15 with i7-9750H inside.
Hmm okay: My XPS 9560 boots fine with TPM decryption. Suspending and resuming does not got any errors with the TPM. My desktop with Ryzen 5950X and Asus Prime X570-Pro boots fine with TPM decryption. I do not have suspend enabled on that machine due it's home-server setup, so I cannot test.
I use i9-13900k, with TPM included in the CPU.
+1. My Fedora 38 NUC will no longer boot after 6.4.12 and this is the same error I see in the logs. The last working kernel I can boot into is 6.4.12. 6.4.13 and 6.4.14 just hang on boot.
Still happens to me under 6.4.15. Had to boot with 6.4.12.
I am sorry to reopen this issue but I have a very similar problem on nixos 23.11 on a Raspberry Pi 4. The module is not found on kernel 6.1.21.2023.0405 (the current version of linux_rpi4 in the nixos23.11 branch) As a workaround for now I am using the following code to allow missing kernel modules when rebuilding the kernel: I am not 100% sure that this is a nixpkgs issue, but I could not find any references to this problem on the Raspberry Pi 4 for now.
I'm using and , all seems good to me. Maybe it's something need to backport? I'm not sure if it's acceptable to discuss it here. If it's a rpi-4-only issue, maybe we should open a new issue and keep it quiet.

Discussion:
"5.15": { "patch": { "extra": "-hardened1", <del> "name": "linux-hardened-5.15.130-hardened1.patch", "sha256": "12wm6kyg63rg1lk1w9208vpcm71cjy236rjp9gf8mfx7iraqssl7", "url": "https://github.com/anthraxx/linux-hardened/releases/download/5.15.130-hardened1/linux-hardened-5.15.130-hardened1.patch" </del> <ins> "name": "linux-hardened-5.15.131-hardened1.patch", "sha256": "06hy3v9r2rqnqxsby2204grzjcll64561m26wlnkyiz20gpl16n4", "url": "https://github.com/anthraxx/linux-hardened/releases/download/5.15.131-hardened1/linux-hardened-5.15.131-hardened1.patch" </ins> }, <del> "sha256": "0qix62jsn3z9yccakac7fvqnip19zi05qn0w5wkgb7rj0x0lwimb", "version": "5.15.130" </del> <ins> "sha256": "0sacnbw48lblnqaj56nybh588sq4k84gwf0r5zinzyrryj8k6z4r", "version": "5.15.131" </ins> }, "5.4": { "patch": {

"6.1": { "patch": { "extra": "-hardened1", <del> "name": "linux-hardened-6.1.51-hardened1.patch", "sha256": "0nbf7j3hwlsvh8f4mmc9w2gqdcj8lyx1hxrz91y2hwlqlqjx7w4p", "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.1.51-hardened1/linux-hardened-6.1.51-hardened1.patch" </del> <ins> "name": "linux-hardened-6.1.52-hardened1.patch", "sha256": "1xp8m9d927g3nb8l6pc4xzm0yspxxa0kpiv6hi1x0cal5a1bwnb3", "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.1.52-hardened1/linux-hardened-6.1.52-hardened1.patch" </ins> }, <del> "sha256": "0fqhmb6v28rssd44z7jw57mwvvskpl4kabjylck0pg54irnl9c2q", "version": "6.1.51" </del> <ins> "sha256": "0lis73mxnl7hxz8lyja6sfgmbym944l3k1h7dab6b4mw1nckfxsn", "version": "6.1.52" </ins> }, "6.4": { "patch": { "extra": "-hardened1", <del> "name": "linux-hardened-6.4.14-hardened1.patch", "sha256": "1cw0zyjxbfprb2m2kjrpz8s56axbzhnwj8hg9b0486nsqz5s66bs", "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.4.14-hardened1/linux-hardened-6.4.14-hardened1.patch" </del> <ins> "name": "linux-hardened-6.4.15-hardened1.patch", "sha256": "1r6c1yzr0cmfhqv0qirj9nbc2hgmmh43mwal1gmyhk5qisq7h1rf", "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.4.15-hardened1/linux-hardened-6.4.15-hardened1.patch" </ins> }, <del> "sha256": "1rjh0jrn5qvxwzmyg478n08vckkld8r52nkc102ppqvsfhiy7skm", "version": "6.4.14" </del> <ins> "sha256": "1phlx375ln5pslw5vjqm029cdv6pzf4ang10xlrf90x5sb4fgy93", "version": "6.4.15" </ins> } }

with lib; buildLinux (args // rec { <del> version = "6.1.52"; </del> <ins> version = "6.1.53"; </ins> # modDirVersion needs to be x.y.z, will automatically add .0 if needed modDirVersion = versions.pad 3 version;

src = fetchurl { url = "mirror://kernel/linux/kernel/v6.x/linux-${version}.tar.xz"; <del> sha256 = "0lis73mxnl7hxz8lyja6sfgmbym944l3k1h7dab6b4mw1nckfxsn"; </del> <ins> sha256 = "0zpdg3fcc12iyjhfs5w7cw75700z4i8m9jcg38mlzlhh92hf0msz"; </ins> }; } // (args.argsOverride or { }))

with lib; buildLinux (args // rec { <del> version = "6.4.15"; </del> <ins> version = "6.4.16"; </ins> # modDirVersion needs to be x.y.z, will automatically add .0 if needed modDirVersion = versions.pad 3 version;

src = fetchurl { url = "mirror://kernel/linux/kernel/v6.x/linux-${version}.tar.xz"; <del> sha256 = "1phlx375ln5pslw5vjqm029cdv6pzf4ang10xlrf90x5sb4fgy93"; </del> <ins> sha256 = "0zgj1z97jyx7wf12zrnlcp0mj4cl43ais9qsy6dh1jwylf2fq9ln"; </ins> }; } // (args.argsOverride or { }))

with lib; buildLinux (args // rec { <del> version = "6.5.2"; </del> <ins> version = "6.5.3"; </ins> # modDirVersion needs to be x.y.z, will automatically add .0 if needed modDirVersion = versions.pad 3 version;

src = fetchurl { url = "mirror://kernel/linux/kernel/v6.x/linux-${version}.tar.xz"; <del> hash = "sha256-ICfhQFfVaK093BANrfTIhTpJsDEnBHimHYj2ARVyZQ8="; </del> <ins> hash = "sha256-TKwT97F72Nz5AyrWj5Ejq1MT1pjJ9ZQWBDFlFQdj608="; </ins> }; } // (args.argsOverride or { }))