Comment # 15 on bug 1209985 from Andrei Borzenkov

And to add to the last comment

Output of "blkid" and ""lsblk -f" would be useful
What is the content of
/sys/firmware/efi/efivars/SbatLevelRT-605dab50-e046-4300-abb6-3dd810dd8b23