ss permissive=1
[ 19.572853][ T36] audit: type=1400 audit(1788611858.590:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts.
2026/09/05 12:37:48 parsed 1 programs
2026/09/05 12:37:48 serving rpc on tcp://42061
[ 29.597834][ T36] audit: type=1400 audit(1788611868.620:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 30.623136][ T36] audit: type=1400 audit(1788611869.650:65): avc: denied { mounton } for pid=308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 30.624287][ T308] cgroup: Unknown subsys name 'net'
[ 30.646396][ T36] audit: type=1400 audit(1788611869.650:66): avc: denied { mount } for pid=308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 30.674424][ T36] audit: type=1400 audit(1788611869.670:67): avc: denied { unmount } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 30.674617][ T308] cgroup: Unknown subsys name 'devices'
[ 30.794706][ T308] cgroup: Unknown subsys name 'hugetlb'
[ 30.800446][ T308] cgroup: Unknown subsys name 'rlimit'
[ 30.899066][ T36] audit: type=1400 audit(1788611869.920:68): avc: denied { setattr } for pid=308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 30.923933][ T36] audit: type=1400 audit(1788611869.920:69): avc: denied { create } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 30.946164][ T36] audit: type=1400 audit(1788611869.920:70): avc: denied { write } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 30.950261][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 30.969288][ T36] audit: type=1400 audit(1788611869.920:71): avc: denied { read } for pid=308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 31.002922][ T36] audit: type=1400 audit(1788611869.920:72): avc: denied { sys_module } for pid=308 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 31.025059][ T36] audit: type=1400 audit(1788611869.920:73): avc: denied { mounton } for pid=308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 31.045192][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 32.117760][ T328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 32.119512][ T318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 32.142375][ T318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 32.150347][ T318] bridge_slave_0: entered allmulticast mode
[ 32.156709][ T318] bridge_slave_0: entered promiscuous mode
[ 32.164748][ T318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 32.172418][ T318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 32.181515][ T318] bridge_slave_1: entered allmulticast mode
[ 32.188035][ T318] bridge_slave_1: entered promiscuous mode
[ 32.364871][ T318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 32.373105][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 32.381225][ T318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 32.389092][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 32.640200][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 32.652902][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 32.699607][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 32.708244][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 32.717452][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 32.725930][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 32.816565][ T318] veth0_vlan: entered promiscuous mode
[ 32.834663][ T318] veth1_macvtap: entered promiscuous mode
2026/09/05 12:37:52 executed programs: 0
[ 33.152838][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.160505][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.168133][ T380] bridge_slave_0: entered allmulticast mode
[ 33.175208][ T380] bridge_slave_0: entered promiscuous mode
[ 33.183955][ T46] bridge_slave_1: left allmulticast mode
[ 33.189618][ T46] bridge_slave_1: left promiscuous mode
[ 33.195372][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.203896][ T46] bridge_slave_0: left allmulticast mode
[ 33.209811][ T46] bridge_slave_0: left promiscuous mode
[ 33.215773][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.302852][ T383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.310889][ T383] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.318119][ T383] bridge_slave_0: entered allmulticast mode
[ 33.324677][ T383] bridge_slave_0: entered promiscuous mode
[ 33.331022][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.339094][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.347998][ T380] bridge_slave_1: entered allmulticast mode
[ 33.355827][ T380] bridge_slave_1: entered promiscuous mode
[ 33.370389][ T383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.378110][ T383] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.385390][ T383] bridge_slave_1: entered allmulticast mode
[ 33.392480][ T383] bridge_slave_1: entered promiscuous mode
[ 33.408721][ T46] veth1_macvtap: left promiscuous mode
[ 33.414327][ T46] veth0_vlan: left promiscuous mode
[ 33.446897][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.454530][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.461997][ T379] bridge_slave_0: entered allmulticast mode
[ 33.468594][ T379] bridge_slave_0: entered promiscuous mode
[ 33.475508][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.483692][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.491061][ T379] bridge_slave_1: entered allmulticast mode
[ 33.497621][ T379] bridge_slave_1: entered promiscuous mode
[ 33.601482][ T384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.609020][ T384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.617332][ T384] bridge_slave_0: entered allmulticast mode
[ 33.623992][ T384] bridge_slave_0: entered promiscuous mode
[ 33.644877][ T384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.651942][ T384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.659410][ T384] bridge_slave_1: entered allmulticast mode
[ 33.666357][ T384] bridge_slave_1: entered promiscuous mode
[ 33.718533][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.725734][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.733171][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.740303][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.773142][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.780822][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.789174][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.796681][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.808242][ T383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.816219][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.824601][ T383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.831745][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.880593][ T384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.887686][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.895516][ T384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.902545][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.912388][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.919708][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.927976][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.935277][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.943006][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.951110][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.958530][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.984382][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.991577][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.999476][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.007324][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.021998][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.029170][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.036865][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.047353][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.061304][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.068365][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.090897][ T361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.098418][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.106401][ T361] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.113450][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.127361][ T383] veth0_vlan: entered promiscuous mode
[ 34.151634][ T383] veth1_macvtap: entered promiscuous mode
[ 34.168649][ T384] veth0_vlan: entered promiscuous mode
[ 34.185567][ T379] veth0_vlan: entered promiscuous mode
[ 34.204816][ T380] veth0_vlan: entered promiscuous mode
[ 34.217484][ T384] veth1_macvtap: entered promiscuous mode
[ 34.232092][ T379] veth1_macvtap: entered promiscuous mode
[ 34.245245][ T380] veth1_macvtap: entered promiscuous mode
2026/09/05 12:38:06 executed programs: 12
[ 47.094073][ T36] kauditd_printk_skb: 32 callbacks suppressed
[ 47.094108][ T36] audit: type=1400 audit(1788611886.120:106): avc: denied { unmount } for pid=383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 50.241365][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.248450][ T415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.255793][ T415] bridge_slave_0: entered allmulticast mode
[ 50.262193][ T415] bridge_slave_0: entered promiscuous mode
[ 50.270061][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.277244][ T415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.284385][ T415] bridge_slave_1: entered allmulticast mode
[ 50.290926][ T415] bridge_slave_1: entered promiscuous mode
[ 50.322323][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.331793][ T417] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.339349][ T417] bridge_slave_0: entered allmulticast mode
[ 50.345936][ T417] bridge_slave_0: entered promiscuous mode
[ 50.354539][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.363452][ T417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.373983][ T417] bridge_slave_1: entered allmulticast mode
[ 50.380300][ T417] bridge_slave_1: entered promiscuous mode
[ 50.419802][ T418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.426923][ T418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.434588][ T418] bridge_slave_0: entered allmulticast mode
[ 50.440790][ T418] bridge_slave_0: entered promiscuous mode
[ 50.453440][ T418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.460788][ T418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.467957][ T418] bridge_slave_1: entered allmulticast mode
[ 50.474341][ T418] bridge_slave_1: entered promiscuous mode
[ 50.565586][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.573377][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.581014][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.588095][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.609054][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.616132][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.623439][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.630566][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.650530][ T418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.657699][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.665019][ T418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.672224][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.708014][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.716245][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.723782][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.731270][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.740999][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.748593][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.763598][ T361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.770655][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.778851][ T361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.785993][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.796859][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.804267][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.815148][ T361] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.822214][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.835749][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.843686][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.855453][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.862666][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.913802][ T417] veth0_vlan: entered promiscuous mode
[ 50.931314][ T418] veth0_vlan: entered promiscuous mode
[ 50.938696][ T415] veth0_vlan: entered promiscuous mode
[ 50.955873][ T415] veth1_macvtap: entered promiscuous mode
[ 50.968134][ T417] veth1_macvtap: entered promiscuous mode
[ 50.976255][ T418] veth1_macvtap: entered promiscuous mode
[ 50.993042][ T400] ------------[ cut here ]------------
[ 50.998984][ T400] kobject: '(null)' (ffff88811ae40548): is not initialized, yet kobject_put() is being called.
[ 51.011374][ T400] WARNING: CPU: 0 PID: 400 at lib/kobject.c:736 kobject_put+0x8e/0x2a0
[ 51.020933][ T400] Modules linked in:
[ 51.024969][ T400] CPU: 0 UID: 0 PID: 400 Comm: syz.5.17 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167
[ 51.038059][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 51.049621][ T400] RIP: 0010:kobject_put+0x8e/0x2a0
[ 51.054907][ T400] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 14 95 44 fc 48 8b 33 48 c7 c7 a0 0f 9b 86 48 89 da e8 22 8d 68 fb <0f> 0b eb 0f e8 89 ba eb fb e9 9c 01 00 00 e8 7f ba eb fb 4c 8d 7b
[ 51.075008][ T400] RSP: 0018:ffffc9000100f1f8 EFLAGS: 00010246
[ 51.081305][ T400] RAX: c4417369b2004a00 RBX: ffff88811ae40548 RCX: ffff88811506a600
[ 51.089474][ T400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 51.097543][ T400] RBP: ffffc9000100f220 R08: 0000000000000003 R09: 0000000000000004
[ 51.105582][ T400] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 00000000fffffff4
[ 51.114002][ T400] R13: ffff88811ae40584 R14: 1ffff110235c80b0 R15: 0000000000000000
[ 51.125593][ T400] FS: 00007f61cf7bf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 51.134892][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.144229][ T400] CR2: 00007ffd7baf5dc0 CR3: 0000000117fe4000 CR4: 00000000003526b0
[ 51.152649][ T400] Call Trace:
[ 51.155933][ T400]
[ 51.158855][ T400] put_device+0x23/0x40
[ 51.164321][ T400] __scsi_remove_device+0xc4/0x3c0
[ 51.171583][ T400] scsi_alloc_sdev+0x970/0xcc0
[ 51.179200][ T400] ? scsi_target_destroy+0x300/0x300
[ 51.185292][ T400] ? vsnprintf+0x19ef/0x1ad0
[ 51.190949][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 51.197662][ T400] scsi_probe_and_add_lun+0x1e9/0x3e60
[ 51.203715][ T400] ? __cfi_kvasprintf+0x10/0x10
[ 51.210869][ T400] ? scsi_alloc_target+0xc50/0xc50
[ 51.217415][ T400] ? __kasan_check_write+0x18/0x20
[ 51.223592][ T400] ? mutex_unlock+0x90/0x240
[ 51.228593][ T400] ? __cfi_mutex_unlock+0x10/0x10
[ 51.233669][ T400] ? rpm_resume+0xb92/0x1670
[ 51.238722][ T400] ? __cfi_transport_setup_classdev+0x10/0x10
[ 51.245062][ T400] ? __pm_runtime_resume+0xa0/0xa0
[ 51.250535][ T400] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 51.256356][ T400] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 51.262771][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 51.268719][ T400] ? __pm_runtime_resume+0x7a/0xa0
[ 51.274039][ T400] __scsi_scan_target+0x1f1/0xc20
[ 51.279112][ T400] ? scsi_scan_target+0x270/0x270
[ 51.284707][ T400] ? __pm_runtime_resume+0xa0/0xa0
[ 51.290014][ T400] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 51.295644][ T400] ? __mutex_lock_slowpath+0xe/0x20
[ 51.301540][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 51.307830][ T400] ? __pm_runtime_resume+0x7a/0xa0
[ 51.313824][ T400] scsi_scan_host_selected+0x352/0x610
[ 51.319387][ T400] store_scan+0x4ba/0x550
[ 51.324253][ T400] ? __cfi_store_scan+0x10/0x10
[ 51.330754][ T400] ? _copy_from_iter+0x215/0x1520
[ 51.337570][ T400] ? __virt_addr_valid+0x2a1/0x370
[ 51.343623][ T400] ? __kasan_check_write+0x18/0x20
[ 51.348785][ T400] ? __cfi_store_scan+0x10/0x10
[ 51.353742][ T400] dev_attr_store+0x76/0xa0
[ 51.358523][ T400] ? __cfi_dev_attr_store+0x10/0x10
[ 51.363885][ T400] sysfs_kf_write+0x13e/0x160
[ 51.368762][ T400] ? __cfi_sysfs_kf_write+0x10/0x10
[ 51.374217][ T400] kernfs_fop_write_iter+0x316/0x510
[ 51.380663][ T400] vfs_write+0x762/0xfd0
[ 51.385011][ T400] ? __cfi_vfs_write+0x10/0x10
[ 51.390286][ T400] ? __cfi_mutex_lock+0x10/0x10
[ 51.395502][ T400] ksys_write+0x145/0x260
[ 51.400332][ T400] ? xfd_validate_state+0x68/0x140
[ 51.405782][ T400] ? __cfi_ksys_write+0x10/0x10
[ 51.414116][ T400] ? __kasan_check_write+0x18/0x20
[ 51.419248][ T400] ? fpregs_restore_userregs+0x11c/0x260
[ 51.424966][ T400] __x64_sys_write+0x7f/0x90
[ 51.429618][ T400] x64_sys_call+0x271c/0x2ee0
[ 51.434346][ T400] do_syscall_64+0x57/0xf0
[ 51.438786][ T400] ? clear_bhb_loop+0x50/0xa0
[ 51.443987][ T400] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 51.452025][ T400] RIP: 0033:0x7f61ce99e159
[ 51.456866][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 51.477626][ T400] RSP: 002b:00007f61cf7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 51.486735][ T400] RAX: ffffffffffffffda RBX: 00007f61cec25fa0 RCX: 00007f61ce99e159
[ 51.494806][ T400] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
[ 51.502807][ T400] RBP: 00007f61cea35024 R08: 0000000000000000 R09: 0000000000000000
[ 51.510793][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 51.518839][ T400] R13: 00007f61cec26038 R14: 00007f61cec25fa0 R15: 00007fff4c0ef748
[ 51.526969][ T400]
[ 51.529985][ T400] ---[ end trace 0000000000000000 ]---
[ 51.537972][ T400] ------------[ cut here ]------------
[ 51.543595][ T400] refcount_t: underflow; use-after-free.
[ 51.549810][ T400] WARNING: CPU: 0 PID: 400 at lib/refcount.c:28 refcount_warn_saturate+0x119/0x1c0
[ 51.559189][ T400] Modules linked in:
[ 51.563197][ T400] CPU: 0 UID: 0 PID: 400 Comm: syz.5.17 Tainted: G W syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167
[ 51.576071][ T400] Tainted: [W]=WARN
[ 51.579940][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 51.590135][ T400] RIP: 0010:refcount_warn_saturate+0x119/0x1c0
[ 51.597193][ T400] Code: 05 01 48 c7 c7 60 f4 51 86 e8 b3 1c 55 fe 0f 0b eb da e8 1a 4a d8 fe c6 05 39 2c 36 05 01 48 c7 c7 c0 f4 51 86 e8 97 1c 55 fe <0f> 0b eb be e8 fe 49 d8 fe c6 05 1a 2c 36 05 01 48 c7 c7 00 f4 51
[ 51.620613][ T400] RSP: 0018:ffffc9000100f1d8 EFLAGS: 00010246
[ 51.627175][ T400] RAX: c4417369b2004a00 RBX: 0000000000000003 RCX: ffff88811506a600
[ 51.636448][ T400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 51.645593][ T400] RBP: ffffc9000100f1e8 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a
[ 51.656044][ T400] R10: dffffc0000000000 R11: ffffed103edc529b R12: 0000000000000000
[ 51.664437][ T400] R13: ffff88811ae40584 R14: ffff88811ae40580 R15: ffff88811ae40580
[ 51.672648][ T400] FS: 00007f61cf7bf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 51.681704][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.690936][ T400] CR2: 00007ffd7baf5dc0 CR3: 0000000117fe4000 CR4: 00000000003526b0
[ 51.700707][ T400] Call Trace:
[ 51.704010][ T400]
[ 51.707022][ T400] kobject_put+0x25a/0x2a0
[ 51.712055][ T400] put_device+0x23/0x40
[ 51.716258][ T400] __scsi_remove_device+0xc4/0x3c0
[ 51.721412][ T400] scsi_alloc_sdev+0x970/0xcc0
[ 51.726749][ T400] ? scsi_target_destroy+0x300/0x300
[ 51.732688][ T400] ? vsnprintf+0x19ef/0x1ad0
[ 51.738427][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 51.744281][ T400] scsi_probe_and_add_lun+0x1e9/0x3e60
[ 51.749849][ T400] ? __cfi_kvasprintf+0x10/0x10
[ 51.754737][ T400] ? scsi_alloc_target+0xc50/0xc50
[ 51.759872][ T400] ? __kasan_check_write+0x18/0x20
[ 51.765572][ T400] ? mutex_unlock+0x90/0x240
[ 51.770622][ T400] ? __cfi_mutex_unlock+0x10/0x10
[ 51.775851][ T400] ? rpm_resume+0xb92/0x1670
[ 51.780527][ T400] ? __cfi_transport_setup_classdev+0x10/0x10
[ 51.786927][ T400] ? __pm_runtime_resume+0xa0/0xa0
[ 51.792175][ T400] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 51.797813][ T400] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 51.804079][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 51.810599][ T400] ? __pm_runtime_resume+0x7a/0xa0
[ 51.815756][ T400] __scsi_scan_target+0x1f1/0xc20
[ 51.821783][ T400] ? scsi_scan_target+0x270/0x270
[ 51.828502][ T400] ? __pm_runtime_resume+0xa0/0xa0
[ 51.834097][ T400] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 51.839742][ T400] ? __mutex_lock_slowpath+0xe/0x20
[ 51.845092][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 51.850932][ T400] ? __pm_runtime_resume+0x7a/0xa0
[ 51.856130][ T400] scsi_scan_host_selected+0x352/0x610
[ 51.862699][ T400] store_scan+0x4ba/0x550
[ 51.867450][ T400] ? __cfi_store_scan+0x10/0x10
[ 51.872659][ T400] ? _copy_from_iter+0x215/0x1520
[ 51.879411][ T400] ? __virt_addr_valid+0x2a1/0x370
[ 51.886659][ T400] ? __kasan_check_write+0x18/0x20
[ 51.893420][ T400] ? __cfi_store_scan+0x10/0x10
[ 51.899010][ T400] dev_attr_store+0x76/0xa0
[ 51.903664][ T400] ? __cfi_dev_attr_store+0x10/0x10
[ 51.909488][ T400] sysfs_kf_write+0x13e/0x160
[ 51.914680][ T400] ? __cfi_sysfs_kf_write+0x10/0x10
[ 51.920064][ T400] kernfs_fop_write_iter+0x316/0x510
[ 51.925456][ T400] vfs_write+0x762/0xfd0
[ 51.930591][ T400] ? __cfi_vfs_write+0x10/0x10
[ 51.936188][ T400] ? __cfi_mutex_lock+0x10/0x10
[ 51.941329][ T400] ksys_write+0x145/0x260
[ 51.945790][ T400] ? xfd_validate_state+0x68/0x140
[ 51.950921][ T400] ? __cfi_ksys_write+0x10/0x10
[ 51.955814][ T400] ? __kasan_check_write+0x18/0x20
[ 51.960928][ T400] ? fpregs_restore_userregs+0x11c/0x260
[ 51.966648][ T400] __x64_sys_write+0x7f/0x90
[ 51.971251][ T400] x64_sys_call+0x271c/0x2ee0
[ 51.975994][ T400] do_syscall_64+0x57/0xf0
[ 51.980418][ T400] ? clear_bhb_loop+0x50/0xa0
[ 51.985249][ T400] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 51.991328][ T400] RIP: 0033:0x7f61ce99e159
[ 51.996851][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 52.018143][ T400] RSP: 002b:00007f61cf7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 52.026902][ T400] RAX: ffffffffffffffda RBX: 00007f61cec25fa0 RCX: 00007f61ce99e159
[ 52.034933][ T400] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
[ 52.043088][ T400] RBP: 00007f61cea35024 R08: 0000000000000000 R09: 0000000000000000
[ 52.051449][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 52.059926][ T400] R13: 00007f61cec26038 R14: 00007f61cec25fa0 R15: 00007fff4c0ef748
[ 52.068223][ T400]
[ 52.071623][ T400] ---[ end trace 0000000000000000 ]---
2026/09/05 12:38:11 executed programs: 14
[ 52.124406][ T400] ------------[ cut here ]------------
[ 52.130047][ T400] kobject: '(null)' (ffff88811ae401d0): is not initialized, yet kobject_put() is being called.
[ 52.145109][ T400] WARNING: CPU: 0 PID: 400 at lib/kobject.c:736 kobject_put+0x8e/0x2a0
[ 52.155548][ T400] Modules linked in:
[ 52.160196][ T400] CPU: 0 UID: 0 PID: 400 Comm: syz.5.17 Tainted: G W syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167
[ 52.173533][ T400] Tainted: [W]=WARN
[ 52.177346][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 52.188147][ T400] RIP: 0010:kobject_put+0x8e/0x2a0
[ 52.193307][ T400] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 14 95 44 fc 48 8b 33 48 c7 c7 a0 0f 9b 86 48 89 da e8 22 8d 68 fb <0f> 0b eb 0f e8 89 ba eb fb e9 9c 01 00 00 e8 7f ba eb fb 4c 8d 7b
[ 52.213215][ T400] RSP: 0018:ffffc9000100f1f8 EFLAGS: 00010246
[ 52.219672][ T400] RAX: c4417369b2004a00 RBX: ffff88811ae401d0 RCX: ffff88811506a600
[ 52.227866][ T400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 52.235903][ T400] RBP: ffffc9000100f220 R08: 0000000000000003 R09: 0000000000000004
[ 52.245835][ T400] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: ffffffff866312d0
[ 52.254648][ T400] R13: ffff88811ae4020c R14: 1ffff110235c8041 R15: 0000000000000000
[ 52.263350][ T400] FS: 00007f61cf7bf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 52.273302][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.280368][ T400] CR2: 0000562688ee44e0 CR3: 0000000117fe4000 CR4: 00000000003526b0
[ 52.288861][ T400] Call Trace:
[ 52.292335][ T400]
[ 52.295572][ T400] put_device+0x23/0x40
[ 52.300839][ T400] __scsi_remove_device+0x32d/0x3c0
[ 52.306276][ T400] scsi_alloc_sdev+0x970/0xcc0
[ 52.311406][ T400] ? scsi_target_destroy+0x300/0x300
[ 52.316963][ T400] ? vsnprintf+0x19ef/0x1ad0
[ 52.321776][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 52.328340][ T400] scsi_probe_and_add_lun+0x1e9/0x3e60
[ 52.334001][ T400] ? __cfi_kvasprintf+0x10/0x10
[ 52.339038][ T400] ? scsi_alloc_target+0xc50/0xc50
[ 52.344196][ T400] ? __kasan_check_write+0x18/0x20
[ 52.349390][ T400] ? mutex_unlock+0x90/0x240
[ 52.354577][ T400] ? __cfi_mutex_unlock+0x10/0x10
[ 52.360177][ T400] ? rpm_resume+0xb92/0x1670
[ 52.364877][ T400] ? __cfi_transport_setup_classdev+0x10/0x10
[ 52.371223][ T400] ? __pm_runtime_resume+0xa0/0xa0
[ 52.377190][ T400] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 52.383136][ T400] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 52.390711][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 52.397120][ T400] ? __pm_runtime_resume+0x7a/0xa0
[ 52.402346][ T400] __scsi_scan_target+0x1f1/0xc20
[ 52.407408][ T400] ? scsi_scan_target+0x270/0x270
[ 52.412882][ T400] ? __pm_runtime_resume+0xa0/0xa0
[ 52.418363][ T400] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 52.424062][ T400] ? __mutex_lock_slowpath+0xe/0x20
[ 52.429269][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 52.435213][ T400] ? __pm_runtime_resume+0x7a/0xa0
[ 52.440350][ T400] scsi_scan_host_selected+0x352/0x610
[ 52.446075][ T400] store_scan+0x4ba/0x550
[ 52.450422][ T400] ? __cfi_store_scan+0x10/0x10
[ 52.455424][ T400] ? _copy_from_iter+0x215/0x1520
[ 52.460470][ T400] ? __virt_addr_valid+0x2a1/0x370
[ 52.465621][ T400] ? __kasan_check_write+0x18/0x20
[ 52.470857][ T400] ? __cfi_store_scan+0x10/0x10
[ 52.475912][ T400] dev_attr_store+0x76/0xa0
[ 52.480609][ T400] ? __cfi_dev_attr_store+0x10/0x10
[ 52.485870][ T400] sysfs_kf_write+0x13e/0x160
[ 52.490906][ T400] ? __cfi_sysfs_kf_write+0x10/0x10
[ 52.496338][ T400] kernfs_fop_write_iter+0x316/0x510
[ 52.501726][ T400] vfs_write+0x762/0xfd0
[ 52.506007][ T400] ? __cfi_vfs_write+0x10/0x10
[ 52.510777][ T400] ? __cfi_mutex_lock+0x10/0x10
[ 52.516075][ T400] ksys_write+0x145/0x260
[ 52.522418][ T400] ? xfd_validate_state+0x68/0x140
[ 52.527561][ T400] ? __cfi_ksys_write+0x10/0x10
[ 52.532423][ T400] ? __kasan_check_write+0x18/0x20
[ 52.537681][ T400] ? fpregs_restore_userregs+0x11c/0x260
[ 52.544323][ T400] __x64_sys_write+0x7f/0x90
[ 52.548918][ T400] x64_sys_call+0x271c/0x2ee0
[ 52.553631][ T400] do_syscall_64+0x57/0xf0
[ 52.558077][ T400] ? clear_bhb_loop+0x50/0xa0
[ 52.563530][ T400] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 52.569804][ T400] RIP: 0033:0x7f61ce99e159
[ 52.574553][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 52.595236][ T400] RSP: 002b:00007f61cf7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 52.604222][ T400] RAX: ffffffffffffffda RBX: 00007f61cec25fa0 RCX: 00007f61ce99e159
[ 52.612554][ T400] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003
[ 52.620829][ T400] RBP: 00007f61cea35024 R08: 0000000000000000 R09: 0000000000000000
[ 52.629024][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 52.637124][ T400] R13: 00007f61cec26038 R14: 00007f61cec25fa0 R15: 00007fff4c0ef748
[ 52.645235][ T400]
[ 52.648272][ T400] ---[ end trace 0000000000000000 ]---
[ 52.654305][ T400] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured
[ 52.666940][ T400] ------------[ cut here ]------------
[ 52.672490][ T400] kernel BUG at drivers/scsi/scsi_scan.c:594!
[ 52.679061][ T400] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 52.686262][ T400] CPU: 1 UID: 0 PID: 400 Comm: syz.5.17 Tainted: G W syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167
[ 52.699379][ T400] Tainted: [W]=WARN
[ 52.703167][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 52.713230][ T400] RIP: 0010:scsi_target_reap+0x172/0x180
[ 52.718890][ T400] Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 28 67 81 fe e9 39 ff ff ff e8 de 8c 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 70 88 2f f2 90 90 90
[ 52.739325][ T400] RSP: 0018:ffffc9000100f7a8 EFLAGS: 00010293
[ 52.746061][ T400] RAX: ffffffff835eea82 RBX: ffff88811abd1000 RCX: ffff88811506a600
[ 52.754550][ T400] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[ 52.762626][ T400] RBP: ffffc9000100f7d0 R08: 0000000000000003 R09: 0000000000000004
[ 52.770604][ T400] R10: dffffc0000000000 R11: fffff52000201ee0 R12: ffff88811abd1000
[ 52.778579][ T400] R13: ffff88811abd13c4 R14: 1ffff1102357a278 R15: 0000000000000005
[ 52.786637][ T400] FS: 00007f61cf7bf6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 52.796344][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.803286][ T400] CR2: 00000c15268fa000 CR3: 0000000117fe4000 CR4: 00000000003526b0
[ 52.811260][ T400] Call Trace:
[ 52.814534][ T400]
[ 52.817452][ T400] __scsi_scan_target+0x62c/0xc20
[ 52.822587][ T400] ? scsi_scan_target+0x270/0x270
[ 52.828008][ T400] ? __pm_runtime_resume+0xa0/0xa0
[ 52.833212][ T400] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 52.838697][ T400] ? __mutex_lock_slowpath+0xe/0x20
[ 52.844437][ T400] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 52.850803][ T400] ? __pm_runtime_resume+0x7a/0xa0
[ 52.856091][ T400] scsi_scan_host_selected+0x352/0x610
[ 52.862428][ T400] store_scan+0x4ba/0x550
[ 52.866792][ T400] ? __cfi_store_scan+0x10/0x10
[ 52.871911][ T400] ? _copy_from_iter+0x215/0x1520
[ 52.877266][ T400] ? __virt_addr_valid+0x2a1/0x370
[ 52.882999][ T400] ? __kasan_check_write+0x18/0x20
[ 52.888660][ T400] ? __cfi_store_scan+0x10/0x10
[ 52.894143][ T400] dev_attr_store+0x76/0xa0
[ 52.899088][ T400] ? __cfi_dev_attr_store+0x10/0x10
[ 52.904912][ T400] sysfs_kf_write+0x13e/0x160
[ 52.911078][ T400] ? __cfi_sysfs_kf_write+0x10/0x10
[ 52.916376][ T400] kernfs_fop_write_iter+0x316/0x510
[ 52.922032][ T400] vfs_write+0x762/0xfd0
[ 52.926465][ T400] ? __cfi_vfs_write+0x10/0x10
[ 52.932143][ T400] ? __cfi_mutex_lock+0x10/0x10
[ 52.937660][ T400] ksys_write+0x145/0x260
[ 52.942086][ T400] ? xfd_validate_state+0x68/0x140
[ 52.947215][ T400] ? __cfi_ksys_write+0x10/0x10
[ 52.953137][ T400] ? __kasan_check_write+0x18/0x20
[ 52.958778][ T400] ? fpregs_restore_userregs+0x11c/0x260
[ 52.964425][ T400] __x64_sys_write+0x7f/0x90
[ 52.969194][ T400] x64_sys_call+0x271c/0x2ee0
[ 52.977846][ T400] do_syscall_64+0x57/0xf0
[ 52.982363][ T400] ? clear_bhb_loop+0x50/0xa0
[ 52.987270][ T400] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 52.994325][ T400] RIP: 0033:0x7f61ce99e159
[ 52.998828][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 53.019169][ T400] RSP: 002b:00007f61cf7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 5