Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. 2026/09/15 19:31:21 parsed 1 programs 2026/09/15 19:31:21 serving rpc on tcp://36411 [ 103.537284][ T36] audit: type=1400 audit(1789500681.690:64): avc: denied { node_bind } for pid=303 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 105.045295][ T36] audit: type=1400 audit(1789500683.200:65): avc: denied { mounton } for pid=310 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 105.048864][ T310] cgroup: Unknown subsys name 'net' [ 105.068486][ T36] audit: type=1400 audit(1789500683.200:66): avc: denied { mount } for pid=310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.095418][ T36] audit: type=1400 audit(1789500683.230:67): avc: denied { unmount } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.095874][ T310] cgroup: Unknown subsys name 'devices' [ 105.213565][ T310] cgroup: Unknown subsys name 'hugetlb' [ 105.219202][ T310] cgroup: Unknown subsys name 'rlimit' [ 105.322852][ T36] audit: type=1400 audit(1789500683.480:68): avc: denied { setattr } for pid=310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.346145][ T36] audit: type=1400 audit(1789500683.480:69): avc: denied { create } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.366657][ T36] audit: type=1400 audit(1789500683.480:70): avc: denied { write } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.387035][ T36] audit: type=1400 audit(1789500683.480:71): avc: denied { read } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 105.407354][ T36] audit: type=1400 audit(1789500683.480:72): avc: denied { sys_module } for pid=310 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 105.428356][ T36] audit: type=1400 audit(1789500683.480:73): avc: denied { mounton } for pid=310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 105.433862][ T313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 105.496046][ T310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.486285][ T320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.658294][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.674271][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.681491][ T324] bridge_slave_0: entered allmulticast mode [ 106.688206][ T324] bridge_slave_0: entered promiscuous mode [ 106.696193][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.703320][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.710403][ T324] bridge_slave_1: entered allmulticast mode [ 106.717120][ T324] bridge_slave_1: entered promiscuous mode [ 107.048059][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.055743][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.063111][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.070171][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.195663][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.208882][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.231852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.238968][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.274597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.281722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.408642][ T324] veth0_vlan: entered promiscuous mode [ 107.427765][ T324] veth1_macvtap: entered promiscuous mode 2026/09/15 19:31:25 executed programs: 0 [ 107.710472][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.717668][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.725006][ T380] bridge_slave_0: entered allmulticast mode [ 107.732186][ T380] bridge_slave_0: entered promiscuous mode [ 107.738775][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.745893][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.753327][ T380] bridge_slave_1: entered allmulticast mode [ 107.759589][ T380] bridge_slave_1: entered promiscuous mode [ 107.832598][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.839775][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.846954][ T381] bridge_slave_0: entered allmulticast mode [ 107.853671][ T381] bridge_slave_0: entered promiscuous mode [ 107.863102][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.870166][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.877503][ T381] bridge_slave_1: entered allmulticast mode [ 107.883939][ T381] bridge_slave_1: entered promiscuous mode [ 107.933166][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.940254][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.947441][ T384] bridge_slave_0: entered allmulticast mode [ 107.954112][ T384] bridge_slave_0: entered promiscuous mode [ 107.973942][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.981000][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.988133][ T384] bridge_slave_1: entered allmulticast mode [ 107.994856][ T384] bridge_slave_1: entered promiscuous mode [ 108.001284][ T53] bridge_slave_1: left allmulticast mode [ 108.006958][ T53] bridge_slave_1: left promiscuous mode [ 108.012752][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.020310][ T53] bridge_slave_0: left allmulticast mode [ 108.026159][ T53] bridge_slave_0: left promiscuous mode [ 108.031925][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.146123][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.153325][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.160651][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.167762][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.176021][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.183140][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.190315][ T385] bridge_slave_0: entered allmulticast mode [ 108.196959][ T385] bridge_slave_0: entered promiscuous mode [ 108.203769][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.210833][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.218222][ T385] bridge_slave_1: entered allmulticast mode [ 108.224647][ T385] bridge_slave_1: entered promiscuous mode [ 108.249165][ T53] veth1_macvtap: left promiscuous mode [ 108.254853][ T53] veth0_vlan: left promiscuous mode [ 108.336367][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.343467][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.350766][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.357847][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.405173][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.412872][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.472584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.479685][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.487424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.494508][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.540617][ T380] veth0_vlan: entered promiscuous mode [ 108.547523][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.554635][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.572206][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.579277][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.601799][ T381] veth0_vlan: entered promiscuous mode [ 108.613369][ T380] veth1_macvtap: entered promiscuous mode [ 108.631684][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.638811][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.647236][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.654316][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.668959][ T381] veth1_macvtap: entered promiscuous mode [ 108.696515][ T384] veth0_vlan: entered promiscuous mode [ 108.717342][ T384] veth1_macvtap: entered promiscuous mode [ 108.728052][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 108.728070][ T36] audit: type=1400 audit(1789500686.880:105): avc: denied { mount } for pid=400 comm="syz.0.17" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 108.764877][ T385] veth0_vlan: entered promiscuous mode [ 108.795057][ T385] veth1_macvtap: entered promiscuous mode 2026/09/15 19:31:39 executed programs: 12 [ 121.433073][ T36] audit: type=1400 audit(1789500699.590:106): avc: denied { unmount } for pid=380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.598801][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.606079][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.613373][ T410] bridge_slave_0: entered allmulticast mode [ 124.619685][ T410] bridge_slave_0: entered promiscuous mode [ 124.629657][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.636761][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.643894][ T410] bridge_slave_1: entered allmulticast mode [ 124.650212][ T410] bridge_slave_1: entered promiscuous mode [ 124.671739][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.678814][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.686089][ T401] ------------[ cut here ]------------ [ 124.686518][ T411] bridge_slave_0: entered allmulticast mode [ 124.691679][ T401] kobject: '(null)' (ffff88811b9e4548): is not initialized, yet kobject_put() is being called. [ 124.698885][ T411] bridge_slave_0: entered promiscuous mode [ 124.709195][ T401] WARNING: CPU: 0 PID: 401 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 [ 124.716281][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.722043][ T401] Modules linked in: [ 124.729079][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.733046][ T401] CPU: 0 UID: 0 PID: 401 Comm: syz.4.18 Not tainted syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 124.740161][ T411] bridge_slave_1: entered allmulticast mode [ 124.751322][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.751353][ T401] RIP: 0010:kobject_put+0x8e/0x2a0 [ 124.758843][ T411] bridge_slave_1: entered promiscuous mode [ 124.767739][ T401] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d4 60 44 fc 48 8b 33 48 c7 c7 a0 12 9b 86 48 89 da e8 22 4d 68 fb <0f> 0b eb 0f e8 39 7d eb fb e9 9c 01 00 00 e8 2f 7d eb fb 4c 8d 7b [ 124.798372][ T401] RSP: 0018:ffffc90000edf1f8 EFLAGS: 00010246 [ 124.804523][ T401] RAX: 972320d40e3bd300 RBX: ffff88811b9e4548 RCX: ffff88812a0e5f00 [ 124.812566][ T401] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 124.820573][ T401] RBP: ffffc90000edf220 R08: 0000000000000003 R09: 0000000000000004 [ 124.828605][ T401] R10: dffffc0000000000 R11: fffff520001dbda4 R12: 00000000fffffff4 [ 124.836647][ T401] R13: ffff88811b9e4584 R14: 1ffff1102373c8b0 R15: 0000000000000000 [ 124.844682][ T401] FS: 00005555874b3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 124.853865][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.860510][ T401] CR2: 0000555561cb54e8 CR3: 000000011871c000 CR4: 00000000003526b0 [ 124.868644][ T401] Call Trace: [ 124.871974][ T401] [ 124.874943][ T401] put_device+0x23/0x40 [ 124.879145][ T401] __scsi_remove_device+0xc4/0x3c0 [ 124.884328][ T401] scsi_alloc_sdev+0x970/0xcc0 [ 124.889224][ T401] ? scsi_target_destroy+0x300/0x300 [ 124.894588][ T401] ? vsnprintf+0x19ef/0x1ad0 [ 124.899223][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 124.905088][ T401] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 124.910590][ T401] ? __cfi_kvasprintf+0x10/0x10 [ 124.915558][ T401] ? scsi_alloc_target+0xc50/0xc50 [ 124.920718][ T401] ? __kasan_check_write+0x18/0x20 [ 124.921921][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.925942][ T401] ? mutex_unlock+0x90/0x240 [ 124.933075][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.937509][ T401] ? __cfi_mutex_unlock+0x10/0x10 [ 124.944666][ T412] bridge_slave_0: entered allmulticast mode [ 124.949607][ T401] ? rpm_resume+0xb92/0x1670 [ 124.956836][ T412] bridge_slave_0: entered promiscuous mode [ 124.960137][ T401] ? __cfi_transport_setup_classdev+0x10/0x10 [ 124.972072][ T401] ? __pm_runtime_resume+0xa0/0xa0 [ 124.977401][ T401] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 124.982925][ T401] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 124.984776][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.988935][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 124.996328][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.001867][ T401] ? __pm_runtime_resume+0x7a/0xa0 [ 125.009038][ T412] bridge_slave_1: entered allmulticast mode [ 125.014027][ T401] __scsi_scan_target+0x1f1/0xc20 [ 125.021330][ T412] bridge_slave_1: entered promiscuous mode [ 125.024987][ T401] ? scsi_scan_target+0x270/0x270 [ 125.035845][ T401] ? __pm_runtime_resume+0xa0/0xa0 [ 125.041004][ T401] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 125.046523][ T401] ? __mutex_lock_slowpath+0xe/0x20 [ 125.051840][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 125.057687][ T401] ? __pm_runtime_resume+0x7a/0xa0 [ 125.062874][ T401] scsi_scan_host_selected+0x352/0x610 [ 125.068383][ T401] store_scan+0x4ba/0x550 [ 125.072774][ T401] ? __cfi_store_scan+0x10/0x10 [ 125.077676][ T401] ? _copy_from_iter+0x215/0x1520 [ 125.078698][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.082769][ T401] ? __virt_addr_valid+0x2a1/0x370 [ 125.089802][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.094934][ T401] ? __kasan_check_write+0x18/0x20 [ 125.102423][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.107278][ T401] ? __cfi_store_scan+0x10/0x10 [ 125.114319][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.119174][ T401] dev_attr_store+0x76/0xa0 [ 125.130936][ T401] ? __cfi_dev_attr_store+0x10/0x10 [ 125.136196][ T401] sysfs_kf_write+0x141/0x160 [ 125.141599][ T401] ? __cfi_sysfs_kf_write+0x10/0x10 [ 125.146878][ T401] kernfs_fop_write_iter+0x319/0x510 [ 125.152258][ T401] vfs_write+0x762/0xfd0 [ 125.156576][ T401] ? __cfi_vfs_write+0x10/0x10 [ 125.161409][ T401] ? __cfi_do_futex+0x10/0x10 [ 125.166129][ T401] ? __kasan_check_read+0x15/0x20 [ 125.171220][ T401] ksys_write+0x145/0x260 [ 125.175594][ T401] ? __cfi_ksys_write+0x10/0x10 [ 125.180489][ T401] ? __kasan_check_read+0x15/0x20 [ 125.185608][ T401] __x64_sys_write+0x7f/0x90 [ 125.190240][ T401] x64_sys_call+0x271c/0x2ee0 [ 125.195022][ T401] do_syscall_64+0x57/0xf0 [ 125.199472][ T401] ? clear_bhb_loop+0x50/0xa0 [ 125.204246][ T401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.210186][ T401] RIP: 0033:0x7fcf7619e159 [ 125.214691][ T401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.234366][ T401] RSP: 002b:00007ffe6b8ee338 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.242881][ T401] RAX: ffffffffffffffda RBX: 00007fcf76425fa0 RCX: 00007fcf7619e159 [ 125.250890][ T401] RDX: 0000000000000005 RSI: 00002000000000c0 RDI: 0000000000000003 [ 125.258933][ T401] RBP: 00007fcf7623506b R08: 0000000000000000 R09: 0000000000000000 [ 125.267018][ T401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.275060][ T401] R13: 00007fcf76425fac R14: 00007fcf76425fa0 R15: 00007fcf76425fa0 [ 125.283105][ T401] [ 125.286157][ T401] ---[ end trace 0000000000000000 ]--- [ 125.292428][ T401] ------------[ cut here ]------------ [ 125.297931][ T401] refcount_t: underflow; use-after-free. [ 125.304027][ T401] WARNING: CPU: 0 PID: 401 at lib/refcount.c:28 refcount_warn_saturate+0x119/0x1c0 [ 125.313432][ T401] Modules linked in: [ 125.317386][ T401] CPU: 0 UID: 0 PID: 401 Comm: syz.4.18 Tainted: G W syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 125.330228][ T401] Tainted: [W]=WARN [ 125.334111][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.344503][ T401] RIP: 0010:refcount_warn_saturate+0x119/0x1c0 [ 125.350714][ T401] Code: 05 01 48 c7 c7 60 f6 51 86 e8 63 05 55 fe 0f 0b eb da e8 7a 35 d8 fe c6 05 e9 1d 36 05 01 48 c7 c7 c0 f6 51 86 e8 47 05 55 fe <0f> 0b eb be e8 5e 35 d8 fe c6 05 ca 1d 36 05 01 48 c7 c7 00 f6 51 [ 125.370586][ T401] RSP: 0018:ffffc90000edf1d8 EFLAGS: 00010246 [ 125.376902][ T401] RAX: 972320d40e3bd300 RBX: 0000000000000003 RCX: ffff88812a0e5f00 [ 125.384944][ T401] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 125.392971][ T401] RBP: ffffc90000edf1e8 R08: 0000000000000003 R09: 0000000000000004 [ 125.401041][ T401] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 0000000000000000 [ 125.409101][ T401] R13: ffff88811b9e4584 R14: ffff88811b9e4580 R15: ffff88811b9e4580 [ 125.417213][ T401] FS: 00005555874b3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 125.426330][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.432986][ T401] CR2: 0000555561cb54e8 CR3: 000000011871c000 CR4: 00000000003526b0 [ 125.441012][ T401] Call Trace: [ 125.444359][ T401] [ 125.447311][ T401] kobject_put+0x25a/0x2a0 [ 125.451794][ T401] put_device+0x23/0x40 [ 125.456034][ T401] __scsi_remove_device+0xc4/0x3c0 [ 125.461204][ T401] scsi_alloc_sdev+0x970/0xcc0 [ 125.466020][ T401] ? scsi_target_destroy+0x300/0x300 [ 125.471405][ T401] ? vsnprintf+0x19ef/0x1ad0 [ 125.476055][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 125.481935][ T401] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 125.487429][ T401] ? __cfi_kvasprintf+0x10/0x10 [ 125.492350][ T401] ? scsi_alloc_target+0xc50/0xc50 [ 125.497493][ T401] ? __kasan_check_write+0x18/0x20 [ 125.502686][ T401] ? mutex_unlock+0x90/0x240 [ 125.507318][ T401] ? __cfi_mutex_unlock+0x10/0x10 [ 125.512417][ T401] ? rpm_resume+0xb92/0x1670 [ 125.517046][ T401] ? __cfi_transport_setup_classdev+0x10/0x10 [ 125.523286][ T401] ? __pm_runtime_resume+0xa0/0xa0 [ 125.528432][ T401] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 125.534055][ T401] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 125.539981][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 125.545894][ T401] ? __pm_runtime_resume+0x7a/0xa0 [ 125.551042][ T401] __scsi_scan_target+0x1f1/0xc20 [ 125.556169][ T401] ? scsi_scan_target+0x270/0x270 [ 125.561266][ T401] ? __pm_runtime_resume+0xa0/0xa0 [ 125.566429][ T401] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 125.571964][ T401] ? __mutex_lock_slowpath+0xe/0x20 [ 125.577202][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 125.583076][ T401] ? __pm_runtime_resume+0x7a/0xa0 [ 125.588219][ T401] scsi_scan_host_selected+0x352/0x610 [ 125.593748][ T401] store_scan+0x4ba/0x550 [ 125.598099][ T401] ? __cfi_store_scan+0x10/0x10 [ 125.603012][ T401] ? _copy_from_iter+0x215/0x1520 [ 125.608076][ T401] ? __virt_addr_valid+0x2a1/0x370 [ 125.613262][ T401] ? __kasan_check_write+0x18/0x20 [ 125.618436][ T401] ? __cfi_store_scan+0x10/0x10 [ 125.623342][ T401] dev_attr_store+0x76/0xa0 [ 125.627872][ T401] ? __cfi_dev_attr_store+0x10/0x10 [ 125.633165][ T401] sysfs_kf_write+0x141/0x160 [ 125.637897][ T401] ? __cfi_sysfs_kf_write+0x10/0x10 [ 125.643154][ T401] kernfs_fop_write_iter+0x319/0x510 [ 125.648476][ T401] vfs_write+0x762/0xfd0 [ 125.652778][ T401] ? __cfi_vfs_write+0x10/0x10 [ 125.657569][ T401] ? __cfi_do_futex+0x10/0x10 [ 125.662328][ T401] ? __kasan_check_read+0x15/0x20 [ 125.667384][ T401] ksys_write+0x145/0x260 [ 125.671769][ T401] ? __cfi_ksys_write+0x10/0x10 [ 125.676665][ T401] ? __kasan_check_read+0x15/0x20 [ 125.681744][ T401] __x64_sys_write+0x7f/0x90 [ 125.686365][ T401] x64_sys_call+0x271c/0x2ee0 [ 125.691046][ T401] do_syscall_64+0x57/0xf0 [ 125.695549][ T401] ? clear_bhb_loop+0x50/0xa0 [ 125.700268][ T401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.706226][ T401] RIP: 0033:0x7fcf7619e159 [ 125.710669][ T401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.730348][ T401] RSP: 002b:00007ffe6b8ee338 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.738843][ T401] RAX: ffffffffffffffda RBX: 00007fcf76425fa0 RCX: 00007fcf7619e159 [ 125.747060][ T401] RDX: 0000000000000005 RSI: 00002000000000c0 RDI: 0000000000000003 [ 125.755104][ T401] RBP: 00007fcf7623506b R08: 0000000000000000 R09: 0000000000000000 [ 125.763132][ T401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.771157][ T401] R13: 00007fcf76425fac R14: 00007fcf76425fa0 R15: 00007fcf76425fa0 [ 125.779158][ T401] [ 125.782234][ T401] ---[ end trace 0000000000000000 ]--- [ 125.788375][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.795771][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.811988][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.819066][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.826801][ T401] ------------[ cut here ]------------ [ 125.832342][ T401] kobject: '(null)' (ffff88811b9e41d0): is not initialized, yet kobject_put() is being called. [ 125.843392][ T401] WARNING: CPU: 1 PID: 401 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 [ 125.851725][ T401] Modules linked in: [ 125.855664][ T401] CPU: 1 UID: 0 PID: 401 Comm: syz.4.18 Tainted: G W syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 125.868524][ T401] Tainted: [W]=WARN [ 125.872414][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.882544][ T401] RIP: 0010:kobject_put+0x8e/0x2a0 [ 125.887697][ T401] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d4 60 44 fc 48 8b 33 48 c7 c7 a0 12 9b 86 48 89 da e8 22 4d 68 fb <0f> 0b eb 0f e8 39 7d eb fb e9 9c 01 00 00 e8 2f 7d eb fb 4c 8d 7b [ 125.906082][ T411] veth0_vlan: entered promiscuous mode [ 125.907529][ T401] RSP: 0018:ffffc90000edf1f8 EFLAGS: 00010246 [ 125.918923][ T401] RAX: 972320d40e3bd300 RBX: ffff88811b9e41d0 RCX: ffff88812a0e5f00 [ 125.926978][ T401] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 125.934443][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.935044][ T401] RBP: ffffc90000edf220 R08: 0000000000000003 R09: 0000000000000004 [ 125.942038][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.957296][ T401] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: ffffffff866314d0 [ 125.965357][ T401] R13: ffff88811b9e420c R14: 1ffff1102373c841 R15: 0000000000000000 [ 125.973413][ T401] FS: 00005555874b3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 125.982435][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.989057][ T401] CR2: 00007ffd16b51c50 CR3: 000000011871c000 CR4: 00000000003526b0 [ 125.997117][ T401] Call Trace: [ 126.000439][ T401] [ 126.003425][ T401] put_device+0x23/0x40 [ 126.007628][ T401] __scsi_remove_device+0x32d/0x3c0 [ 126.012956][ T401] scsi_alloc_sdev+0x970/0xcc0 [ 126.017832][ T401] ? scsi_target_destroy+0x300/0x300 [ 126.023202][ T401] ? vsnprintf+0x19ef/0x1ad0 [ 126.027860][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 126.030666][ T411] veth1_macvtap: entered promiscuous mode [ 126.033765][ T401] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 126.044965][ T401] ? __cfi_kvasprintf+0x10/0x10 [ 126.049863][ T401] ? scsi_alloc_target+0xc50/0xc50 [ 126.055080][ T401] ? __kasan_check_write+0x18/0x20 [ 126.056698][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.060240][ T401] ? mutex_unlock+0x90/0x240 [ 126.067301][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.076133][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.079167][ T401] ? __cfi_mutex_unlock+0x10/0x10 [ 126.086312][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.098593][ T401] ? rpm_resume+0xb92/0x1670 [ 126.103270][ T401] ? __cfi_transport_setup_classdev+0x10/0x10 [ 126.109394][ T401] ? __pm_runtime_resume+0xa0/0xa0 [ 126.114588][ T401] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 126.120113][ T401] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 126.126088][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 126.131964][ T401] ? __pm_runtime_resume+0x7a/0xa0 [ 126.137135][ T401] __scsi_scan_target+0x1f1/0xc20 [ 126.142285][ T401] ? scsi_scan_target+0x270/0x270 [ 126.147367][ T401] ? __pm_runtime_resume+0xa0/0xa0 [ 126.152552][ T401] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 126.158057][ T401] ? __mutex_lock_slowpath+0xe/0x20 [ 126.163340][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 126.169344][ T401] ? __pm_runtime_resume+0x7a/0xa0 [ 126.174554][ T401] scsi_scan_host_selected+0x352/0x610 [ 126.180073][ T401] store_scan+0x4ba/0x550 [ 126.184478][ T401] ? __cfi_store_scan+0x10/0x10 [ 126.189454][ T401] ? _copy_from_iter+0x215/0x1520 [ 126.194557][ T401] ? __virt_addr_valid+0x2a1/0x370 [ 126.199702][ T401] ? __kasan_check_write+0x18/0x20 [ 126.204886][ T401] ? __cfi_store_scan+0x10/0x10 [ 126.209801][ T401] dev_attr_store+0x76/0xa0 [ 126.214374][ T401] ? __cfi_dev_attr_store+0x10/0x10 [ 126.219600][ T401] sysfs_kf_write+0x141/0x160 [ 126.224381][ T401] ? __cfi_sysfs_kf_write+0x10/0x10 [ 126.229607][ T401] kernfs_fop_write_iter+0x319/0x510 [ 126.234963][ T401] vfs_write+0x762/0xfd0 [ 126.239238][ T401] ? __cfi_vfs_write+0x10/0x10 [ 126.244070][ T401] ? __cfi_do_futex+0x10/0x10 [ 126.248823][ T401] ? __kasan_check_read+0x15/0x20 [ 126.253926][ T401] ksys_write+0x145/0x260 [ 126.258290][ T401] ? __cfi_ksys_write+0x10/0x10 [ 126.263225][ T401] ? __kasan_check_read+0x15/0x20 [ 126.268281][ T401] __x64_sys_write+0x7f/0x90 [ 126.272953][ T401] x64_sys_call+0x271c/0x2ee0 [ 126.277658][ T401] do_syscall_64+0x57/0xf0 [ 126.282157][ T401] ? clear_bhb_loop+0x50/0xa0 [ 126.286889][ T401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.292854][ T401] RIP: 0033:0x7fcf7619e159 [ 126.297293][ T401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.316999][ T401] RSP: 002b:00007ffe6b8ee338 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.325539][ T401] RAX: ffffffffffffffda RBX: 00007fcf76425fa0 RCX: 00007fcf7619e159 [ 126.333683][ T401] RDX: 0000000000000005 RSI: 00002000000000c0 RDI: 0000000000000003 [ 126.341738][ T401] RBP: 00007fcf7623506b R08: 0000000000000000 R09: 0000000000000000 [ 126.349734][ T401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.357777][ T401] R13: 00007fcf76425fac R14: 00007fcf76425fa0 R15: 00007fcf76425fa0 [ 126.365828][ T401] [ 126.368865][ T401] ---[ end trace 0000000000000000 ]--- [ 126.375071][ T401] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured [ 126.386553][ T401] ------------[ cut here ]------------ [ 126.392092][ T401] kernel BUG at drivers/scsi/scsi_scan.c:594! [ 126.398670][ T401] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 126.405656][ T401] CPU: 1 UID: 0 PID: 401 Comm: syz.4.18 Tainted: G W syzkaller #0 66e0367a682451885f6d715637b1d5cf64eb84ed [ 126.418451][ T401] Tainted: [W]=WARN [ 126.422265][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.432332][ T401] RIP: 0010:scsi_target_reap+0x172/0x180 [ 126.437994][ T401] Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 a8 5b 81 fe e9 39 ff ff ff e8 4e 78 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 0c 01 b2 8c 90 90 90 [ 126.457612][ T401] RSP: 0018:ffffc90000edf7a8 EFLAGS: 00010293 [ 126.463691][ T401] RAX: ffffffff835f01c2 RBX: ffff888129173800 RCX: ffff88812a0e5f00 [ 126.471671][ T401] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 126.479647][ T401] RBP: ffffc90000edf7d0 R08: 0000000000000003 R09: 0000000000000004 [ 126.487645][ T401] R10: dffffc0000000000 R11: fffff520001dbee0 R12: ffff888129173800 [ 126.495624][ T401] R13: ffff888129173bc4 R14: 1ffff1102522e778 R15: 0000000000000005 [ 126.503600][ T401] FS: 00005555874b3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 126.512539][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.519128][ T401] CR2: 00007ffd16b51c50 CR3: 000000011871c000 CR4: 00000000003526b0 [ 126.527107][ T401] Call Trace: [ 126.530386][ T401] [ 126.533324][ T401] __scsi_scan_target+0x62c/0xc20 [ 126.538366][ T401] ? scsi_scan_target+0x270/0x270 [ 126.543406][ T401] ? __pm_runtime_resume+0xa0/0xa0 [ 126.548533][ T401] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 126.554029][ T401] ? __mutex_lock_slowpath+0xe/0x20 [ 126.559240][ T401] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 126.565053][ T401] ? __pm_runtime_resume+0x7a/0xa0 [ 126.570174][ T401] scsi_scan_host_selected+0x352/0x610 [ 126.575687][ T401] store_scan+0x4ba/0x550 [ 126.580045][ T401] ? __cfi_store_scan+0x10/0x10 [ 126.584905][ T401] ? _copy_from_iter+0x215/0x1520 [ 126.589943][ T401] ? __virt_addr_valid+0x2a1/0x370 [ 126.595061][ T401] ? __kasan_check_write+0x18/0x20 [ 126.600180][ T401] ? __cfi_store_scan+0x10/0x10 [ 126.605036][ T401] dev_attr_store+0x76/0xa0 [ 126.609550][ T401] ? __cfi_dev_attr_store+0x10/0x10 [ 126.614761][ T401] sysfs_kf_write+0x141/0x160 [ 126.619446][ T401] ? __cfi_sysfs_kf_write+0x10/0x10 [ 126.624650][ T401] kernfs_fop_write_iter+0x319/0x510 [ 126.629946][ T401] vfs_write+0x762/0xfd0 [ 126.634197][ T401] ? __cfi_vfs_write+0x10/0x10 [ 126.638967][ T401] ? __cfi_do_futex+0x10/0x10 [ 126.643690][ T401] ? __kasan_check_read+0x15/0x20 [ 126.648722][ T401] ksys_write+0x145/0x260 [ 126.653056][ T401] ? __cfi_ksys_write+0x10/0x10 [ 126.657917][ T401] ? __kasan_check_read+0x15/0x20 [ 126.662948][ T401] __x64_sys_write+0x7f/0x90 [ 126.667564][ T401] x64_sys_call+0x271c/0x2ee0 [ 126.672250][ T401] do_syscall_64+0x57/0xf0 [ 126.676672][ T401] ? clear_bhb_loop+0x50/0xa0 [ 126.681357][ T401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.687257][ T401] RIP: 0033:0x7fcf7619e159 [ 126.691672][ T401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.711284][ T401] RSP: 002b:00007ffe6b8ee338 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.719719][ T401] RAX: ffffffffffffffda RBX: 00007fcf76425fa0 RCX: 00007fcf7619e159 [ 126.727695][ T401] RDX: 0000000000000005 RSI: 00002000000000c0 RDI: 0000000000000003 [ 126.735669][ T401] RBP: 00007fcf7623506b R08: 0000000000000000 R09: 0000000000000000 [ 126.743646][ T401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.751641][ T401] R13: 00007fcf76425fac R14: 00007fcf76425fa0 R15: 00007fcf76425fa0 [ 126.759632][ T401] [ 126.762666][ T401] Modules linked in: 2026/09/15 19:31:44 executed programs: 13 [ 126.766820][ T401] ---[ end trace 0000000000000000 ]--- [ 126.773065][ T401] RIP: 0010:scsi_target_reap+0x172/0x180 [ 126.778772][ T401] Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 a8 5b 81 fe e9 39 ff ff ff e8 4e 78 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 0c 01 b2 8c 90 90 90 [ 126.801255][ T401] RSP: 0018:ffffc90000edf7a8 EFLAGS: 00010293 [ 126.807635][ T401] RAX: ffffffff835f01c2 RBX: ffff888129173800 RCX: ffff88812a0e5f00 [ 126.827784][ T401] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 126.835998][ T401] RBP: ffffc90000edf7d0 R08: 0000000000000003 R09: 0000000000000004 [ 126.844060][ T401] R10: dffffc0000000000 R11: fffff520001dbee0 R12: ffff888129173800 [ 126.852007][ T412] veth0_vlan: entered promiscuous mode [ 126.858056][ T401] R13: ffff888129173bc4 R14: 1ffff1102522e778 R15: 0000000000000005 [ 126.869487][ T401] FS: 00005555874b3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 126.878549][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.885225][ T401] CR2: 000055e222053830 CR3: 000000011871c000 CR4: 00000000003526b0 [ 126.893302][ T401] Kernel panic - not syncing: Fatal exception [ 126.899982][ T401] Kernel Offset: disabled [ 126.904321][ T401] Rebooting in 86400 seconds..