Currently `CONFIG_EFI_DISABLE_PCI_DMA=y` is set but following corresponding command line option is not yet included ``` efi=disable_early_pci_dma ``` This should be added to complete the protection.