Bug#1130365: linux-image-6.18.15+deb14-amd64: kernel panic during startup

Path	csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	Ben Hutchings <ben@decadent.org.uk>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#1130365: linux-image-6.18.15+deb14-amd64: kernel panic during startup
Date	Tue, 05 May 2026 11:40:01 +0200
Message-ID	<MRkpX-2K6U-1@gated-at.bofh.it> (permalink)
References	<MxwDn-6I3z-1@gated-at.bofh.it> <MxwDn-6I3z-1@gated-at.bofh.it>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Tue May 5 09:31:07 2026
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-1.65
Reply-To	Ben Hutchings <ben@decadent.org.uk>, 1130365@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	debian-kernel@lists.debian.org
X-Debian-Pr-Message	followup 1130365
X-Debian-Pr-Package	src:linux
X-Debian-Pr-Keywords	upstream unreproducible
X-Debian-Pr-Source	linux
Content-Type	multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-lQMgR+UAwgH+cQAZ4gnT"
User-Agent	Evolution 3.56.2-9
MIME-Version	1.0
X-Sa-Exim-Connect-IP	2a03:2267:2:0:b9c2:3755:da0:52dd
X-Sa-Exim-Mail-From	ben@decadent.org.uk
X-Sa-Exim-Scanned	No (on maynard); SAEximRunCond expanded to false
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1967898
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	78
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Tue, 05 May 2026 11:28:53 +0200
X-Original-Message-ID	<08c3b55aa0ff490b7d1b4dfad47f937ee3933dc9.camel@decadent.org.uk>
X-Original-References	<177325382166.7366.8585996712228448745.reportbug@commanDeb.home.lan> <177325382166.7366.8585996712228448745.reportbug@commanDeb.home.lan>
Xref	csiph.com linux.debian.bugs.dist:1292251 linux.debian.kernel:92278

Cross-posted to 2 groups.

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

On Wed, 11 Mar 2026 19:30:21 +0100 jake <deb.suing861@8shield.net> wrote:
[...]
> [   20.854801] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [   20.854803] CR2: 000056333b377018 CR3: 0000000111f7e003 CR4: 0000000000f70ef0
> [   20.854806] PKRU: 55555554
> [   20.854807] Call Trace:
> [   20.854810]  <TASK>
> [   20.854814]  kernfs_create_dir_ns+0x2f/0xa0

Although we are missing the top of this crash message, the following BUG
shows only a W taint flag.  So we know that this was a WARN message, not
a BUG.

We don't have the RIP for the WARN, but the return address here
indicates a call to kernfs_new_node().  There is no WARN directly in
that function, but in this kernel build kernfs_get() was inlined, and
that does:

void kernfs_get(struct kernfs_node *kn)
{
	if (kn) {
		WARN_ON(!atomic_read(&kn->count));
		atomic_inc(&kn->count);
	}
}

> [   20.854821]  sysfs_create_dir_ns+0x83/0xe0
> [   20.854826]  kobject_add_internal+0xbc/0x260
> [   20.854833]  kobject_add+0x99/0xc0
> [   20.854838]  ? get_device_parent+0x23/0x1f0
> [   20.854843]  device_add+0xe1/0x880
> [   20.854849]  parport_register_dev_model+0x18c/0x340 [parport]
> [   20.854860]  lp_register+0x86/0x1b0 [lp]
[...]

So somewhere in here the reference-counting for a kernfs (i.e. sysfs)
directory has gone wrong.

These reports seem to have started appearing with 6.17, but there were
no changes in lp or parport (aside from some API renaming) between 6.12
and 6.17, so the fault may be elsewhere.

Ben.

-- 
Ben Hutchings
Design a system any fool can use, and only a fool will want to use it.

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar

Thread

Bug#1130365: linux-image-6.18.15+deb14-amd64: kernel panic during startup Ben Hutchings <ben@decadent.org.uk> - 2026-05-05 11:40 +0200
  Bug#1130365: linux-image-6.18.15+deb14-amd64: kernel panic during startup Ben Hutchings <ben@decadent.org.uk> - 2026-05-05 17:20 +0200

csiph-web