Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts.
2026/09/28 14:14:01 parsed 1 programs
2026/09/28 14:14:01 serving rpc on tcp://45481
[ 23.513785][ T36] audit: type=1400 audit(1790604841.199:64): avc: denied { node_bind } for pid=302 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.469123][ T36] audit: type=1400 audit(1790604842.159:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 24.470201][ T309] cgroup: Unknown subsys name 'net'
[ 24.491822][ T36] audit: type=1400 audit(1790604842.159:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.519007][ T36] audit: type=1400 audit(1790604842.179:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.519119][ T309] cgroup: Unknown subsys name 'devices'
[ 24.639302][ T309] cgroup: Unknown subsys name 'hugetlb'
[ 24.644910][ T309] cgroup: Unknown subsys name 'rlimit'
[ 24.761903][ T36] audit: type=1400 audit(1790604842.449:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 24.785045][ T36] audit: type=1400 audit(1790604842.449:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 24.796753][ T312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 24.805516][ T36] audit: type=1400 audit(1790604842.449:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.828887][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 24.834294][ T36] audit: type=1400 audit(1790604842.449:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.863009][ T36] audit: type=1400 audit(1790604842.449:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 24.883988][ T36] audit: type=1400 audit(1790604842.449:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 25.801374][ T319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 26.106109][ T345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.127610][ T345] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.134680][ T345] bridge_slave_0: entered allmulticast mode
[ 26.145137][ T345] bridge_slave_0: entered promiscuous mode
[ 26.179666][ T345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.186712][ T345] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.197331][ T345] bridge_slave_1: entered allmulticast mode
[ 26.203711][ T345] bridge_slave_1: entered promiscuous mode
[ 26.464778][ T345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.471867][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.479190][ T345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.486214][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.513044][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.520716][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.549249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.556284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.565691][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.572745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.600484][ T345] veth0_vlan: entered promiscuous mode
[ 26.613278][ T345] veth1_macvtap: entered promiscuous mode
2026/09/28 14:14:04 executed programs: 0
[ 26.723634][ T61] bridge_slave_1: left allmulticast mode
[ 26.729336][ T61] bridge_slave_1: left promiscuous mode
[ 26.734919][ T61] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.742574][ T61] bridge_slave_0: left allmulticast mode
[ 26.748256][ T61] bridge_slave_0: left promiscuous mode
[ 26.753810][ T61] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.840447][ T61] veth1_macvtap: left promiscuous mode
[ 26.845935][ T61] veth0_vlan: left promiscuous mode
[ 26.943458][ T384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.950540][ T384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.957567][ T384] bridge_slave_0: entered allmulticast mode
[ 26.963758][ T384] bridge_slave_0: entered promiscuous mode
[ 26.969869][ T381] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.976893][ T381] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.984043][ T381] bridge_slave_0: entered allmulticast mode
[ 26.990183][ T381] bridge_slave_0: entered promiscuous mode
[ 26.999692][ T384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.006711][ T384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.013791][ T384] bridge_slave_1: entered allmulticast mode
[ 27.019915][ T384] bridge_slave_1: entered promiscuous mode
[ 27.025832][ T381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.033040][ T381] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.040103][ T381] bridge_slave_1: entered allmulticast mode
[ 27.046209][ T381] bridge_slave_1: entered promiscuous mode
[ 27.056777][ T383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.063831][ T383] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.070898][ T383] bridge_slave_0: entered allmulticast mode
[ 27.077001][ T383] bridge_slave_0: entered promiscuous mode
[ 27.085600][ T383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.092634][ T383] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.100141][ T383] bridge_slave_1: entered allmulticast mode
[ 27.106234][ T383] bridge_slave_1: entered promiscuous mode
[ 27.138678][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.145809][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.152861][ T380] bridge_slave_0: entered allmulticast mode
[ 27.158978][ T380] bridge_slave_0: entered promiscuous mode
[ 27.174789][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.181913][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.189067][ T380] bridge_slave_1: entered allmulticast mode
[ 27.195171][ T380] bridge_slave_1: entered promiscuous mode
[ 27.323902][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.330955][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.346920][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.359914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.366949][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.386656][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.393685][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.431177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.438254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.446718][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.453747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.463285][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.470322][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.480887][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.487931][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.499228][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.506266][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.519777][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.526787][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.546861][ T383] veth0_vlan: entered promiscuous mode
[ 27.568755][ T383] veth1_macvtap: entered promiscuous mode
[ 27.585165][ T380] veth0_vlan: entered promiscuous mode
[ 27.593256][ T381] veth0_vlan: entered promiscuous mode
[ 27.612149][ T380] veth1_macvtap: entered promiscuous mode
[ 27.621579][ T381] veth1_macvtap: entered promiscuous mode
[ 27.628531][ T384] veth0_vlan: entered promiscuous mode
[ 27.644530][ T384] veth1_macvtap: entered promiscuous mode
2026/09/28 14:14:17 executed programs: 12
[ 40.158984][ T36] kauditd_printk_skb: 32 callbacks suppressed
[ 40.159014][ T36] audit: type=1400 audit(1790604857.849:106): avc: denied { unmount } for pid=383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 43.294650][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.302009][ T417] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.309148][ T417] bridge_slave_0: entered allmulticast mode
[ 43.315257][ T417] bridge_slave_0: entered promiscuous mode
[ 43.324660][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.331715][ T417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.338787][ T417] bridge_slave_1: entered allmulticast mode
[ 43.344933][ T417] bridge_slave_1: entered promiscuous mode
[ 43.381305][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.388405][ T415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.395446][ T415] bridge_slave_0: entered allmulticast mode
[ 43.401646][ T415] bridge_slave_0: entered promiscuous mode
[ 43.410492][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.417517][ T415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.424615][ T415] bridge_slave_1: entered allmulticast mode
[ 43.430744][ T415] bridge_slave_1: entered promiscuous mode
[ 43.436701][ T416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.443773][ T416] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.450853][ T416] bridge_slave_0: entered allmulticast mode
[ 43.456990][ T416] bridge_slave_0: entered promiscuous mode
[ 43.465717][ T416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.472788][ T416] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.479961][ T416] bridge_slave_1: entered allmulticast mode
[ 43.486115][ T416] bridge_slave_1: entered promiscuous mode
[ 43.590344][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.597441][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.604710][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.611735][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.621000][ T416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.628075][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.635333][ T416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.642385][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.650886][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.657919][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.665185][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.672228][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.709903][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.717156][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.725359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.732595][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.740795][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.747999][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.758627][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.765650][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.774814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.781860][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.801311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.808344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.815788][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.822827][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.837102][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.844163][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.852043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.859074][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.895275][ T415] veth0_vlan: entered promiscuous mode
[ 43.901754][ T416] veth0_vlan: entered promiscuous mode
[ 43.916254][ T415] veth1_macvtap: entered promiscuous mode
[ 43.922702][ T417] veth0_vlan: entered promiscuous mode
[ 43.937173][ T416] veth1_macvtap: entered promiscuous mode
[ 43.949199][ T417] veth1_macvtap: entered promiscuous mode
[ 43.967742][ T402] ------------[ cut here ]------------
[ 43.973211][ T402] kobject: '(null)' (ffff88811a706548): is not initialized, yet kobject_put() is being called.
[ 43.985418][ T402] WARNING: CPU: 1 PID: 402 at lib/kobject.c:736 kobject_put+0x8e/0x2a0
[ 43.993729][ T402] Modules linked in:
[ 43.997659][ T402] CPU: 1 UID: 0 PID: 402 Comm: syz.0.17 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[ 44.008975][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 44.019050][ T402] RIP: 0010:kobject_put+0x8e/0x2a0
[ 44.024161][ T402] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 64 2a 44 fc 48 8b 33 48 c7 c7 c0 1c 9b 86 48 89 da e8 52 1d 68 fb <0f> 0b eb 0f e8 99 4c eb fb e9 9c 01 00 00 e8 8f 4c eb fb 4c 8d 7b
[ 44.043795][ T402] RSP: 0018:ffffc9000102f1f8 EFLAGS: 00010246
[ 44.049892][ T402] RAX: c7c497cf4f5ef000 RBX: ffff88811a706548 RCX: ffff888132802600
[ 44.057889][ T402] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 44.065857][ T402] RBP: ffffc9000102f220 R08: 0000000000000003 R09: 0000000000000004
[ 44.073859][ T402] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 00000000fffffff4
[ 44.081846][ T402] R13: ffff88811a706584 R14: 1ffff110234e0cb0 R15: 0000000000000000
[ 44.089864][ T402] FS: 00007f48f9ac36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 44.098820][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.105389][ T402] CR2: 00005555807fd4e8 CR3: 0000000116fb8000 CR4: 00000000003526b0
[ 44.113381][ T402] Call Trace:
[ 44.116656][ T402]
[ 44.119610][ T402] put_device+0x23/0x40
[ 44.123772][ T402] __scsi_remove_device+0xc4/0x3c0
[ 44.128900][ T402] scsi_alloc_sdev+0x970/0xcc0
[ 44.133686][ T402] ? scsi_target_destroy+0x300/0x300
[ 44.138996][ T402] ? vsnprintf+0x19ef/0x1ad0
[ 44.143588][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 44.149433][ T402] scsi_probe_and_add_lun+0x1e9/0x3e60
[ 44.155096][ T402] ? __cfi_kvasprintf+0x10/0x10
[ 44.159981][ T402] ? scsi_alloc_target+0xc50/0xc50
[ 44.165170][ T402] ? __kasan_check_write+0x18/0x20
[ 44.170286][ T402] ? mutex_unlock+0x90/0x240
[ 44.174922][ T402] ? __cfi_mutex_unlock+0x10/0x10
[ 44.179964][ T402] ? rpm_resume+0xb92/0x1670
[ 44.184705][ T402] ? __cfi_transport_setup_classdev+0x10/0x10
[ 44.190842][ T402] ? __pm_runtime_resume+0xa0/0xa0
[ 44.195953][ T402] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 44.201414][ T402] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 44.207301][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 44.213147][ T402] ? __pm_runtime_resume+0x7a/0xa0
[ 44.218310][ T402] __scsi_scan_target+0x1f1/0xc20
[ 44.223455][ T402] ? scsi_scan_target+0x270/0x270
[ 44.228496][ T402] ? __pm_runtime_resume+0xa0/0xa0
[ 44.233633][ T402] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 44.239152][ T402] ? __mutex_lock_slowpath+0xe/0x20
[ 44.244639][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 44.250465][ T402] ? __pm_runtime_resume+0x7a/0xa0
[ 44.255576][ T402] scsi_scan_host_selected+0x352/0x610
[ 44.261222][ T402] store_scan+0x4ba/0x550
[ 44.265534][ T402] ? __cfi_store_scan+0x10/0x10
[ 44.270391][ T402] ? _copy_from_iter+0x215/0x1520
[ 44.275417][ T402] ? __kasan_check_write+0x18/0x20
[ 44.280556][ T402] ? __cfi_store_scan+0x10/0x10
[ 44.285402][ T402] dev_attr_store+0x76/0xa0
[ 44.289930][ T402] ? __cfi_dev_attr_store+0x10/0x10
[ 44.295122][ T402] sysfs_kf_write+0x13e/0x160
[ 44.299931][ T402] ? __cfi_sysfs_kf_write+0x10/0x10
[ 44.305116][ T402] kernfs_fop_write_iter+0x316/0x510
[ 44.310436][ T402] vfs_write+0x75f/0xfd0
[ 44.314676][ T402] ? __cfi_vfs_write+0x10/0x10
[ 44.319442][ T402] ? __cfi_mutex_lock+0x10/0x10
[ 44.324299][ T402] ksys_write+0x145/0x260
[ 44.328645][ T402] ? xfd_validate_state+0x68/0x140
[ 44.333754][ T402] ? __cfi_ksys_write+0x10/0x10
[ 44.338634][ T402] ? __kasan_check_write+0x18/0x20
[ 44.343741][ T402] ? fpregs_restore_userregs+0x11c/0x260
[ 44.349375][ T402] __x64_sys_write+0x7f/0x90
[ 44.353970][ T402] x64_sys_call+0x271c/0x2ee0
[ 44.358678][ T402] do_syscall_64+0x57/0xf0
[ 44.363119][ T402] ? clear_bhb_loop+0x50/0xa0
[ 44.367813][ T402] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 44.373703][ T402] RIP: 0033:0x7f48f8b9e159
[ 44.378144][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 44.397793][ T402] RSP: 002b:00007f48f9ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 44.406195][ T402] RAX: ffffffffffffffda RBX: 00007f48f8e25fa0 RCX: 00007f48f8b9e159
[ 44.414200][ T402] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003
[ 44.422223][ T402] RBP: 00007f48f8c3506b R08: 0000000000000000 R09: 0000000000000000
[ 44.430212][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 44.438219][ T402] R13: 00007f48f8e26038 R14: 00007f48f8e25fa0 R15: 00007ffec4f18088
[ 44.446183][ T402]
[ 44.449219][ T402] ---[ end trace 0000000000000000 ]---
[ 44.457972][ T402] ------------[ cut here ]------------
[ 44.463425][ T402] refcount_t: underflow; use-after-free.
[ 44.474444][ T402] WARNING: CPU: 0 PID: 402 at lib/refcount.c:28 refcount_warn_saturate+0x119/0x1c0
[ 44.483774][ T402] Modules linked in:
[ 44.487680][ T402] CPU: 0 UID: 0 PID: 402 Comm: syz.0.17 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[ 44.500459][ T402] Tainted: [W]=WARN
[ 44.504254][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 44.514344][ T402] RIP: 0010:refcount_warn_saturate+0x119/0x1c0
[ 44.520531][ T402] Code: 05 01 48 c7 c7 e0 fa 51 86 e8 e3 08 55 fe 0f 0b eb da e8 2a 38 d8 fe c6 05 79 29 36 05 01 48 c7 c7 40 fb 51 86 e8 c7 08 55 fe <0f> 0b eb be e8 0e 38 d8 fe c6 05 5a 29 36 05 01 48 c7 c7 80 fa 51
[ 44.540202][ T402] RSP: 0018:ffffc9000102f1d8 EFLAGS: 00010246
[ 44.546269][ T402] RAX: c7c497cf4f5ef000 RBX: 0000000000000003 RCX: ffff888132802600
[ 44.554264][ T402] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 44.562261][ T402] RBP: ffffc9000102f1e8 R08: 0000000000000003 R09: 0000000000000004
[ 44.570267][ T402] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 0000000000000000
[ 44.578257][ T402] R13: ffff88811a706584 R14: ffff88811a706580 R15: ffff88811a706580
[ 44.586218][ T402] FS: 00007f48f9ac36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 44.595163][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.601769][ T402] CR2: 00007ffd08e63f70 CR3: 0000000116fb8000 CR4: 00000000003526b0
[ 44.609755][ T402] Call Trace:
[ 44.613015][ T402]
[ 44.615945][ T402] kobject_put+0x25a/0x2a0
[ 44.620430][ T402] put_device+0x23/0x40
[ 44.624588][ T402] __scsi_remove_device+0xc4/0x3c0
[ 44.629712][ T402] scsi_alloc_sdev+0x970/0xcc0
[ 44.634477][ T402] ? scsi_target_destroy+0x300/0x300
[ 44.639767][ T402] ? vsnprintf+0x19ef/0x1ad0
[ 44.644356][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 44.650172][ T402] scsi_probe_and_add_lun+0x1e9/0x3e60
[ 44.655639][ T402] ? __cfi_kvasprintf+0x10/0x10
[ 44.660512][ T402] ? scsi_alloc_target+0xc50/0xc50
[ 44.665631][ T402] ? __kasan_check_write+0x18/0x20
[ 44.670749][ T402] ? mutex_unlock+0x90/0x240
[ 44.675340][ T402] ? __cfi_mutex_unlock+0x10/0x10
[ 44.680370][ T402] ? rpm_resume+0xb92/0x1670
[ 44.684963][ T402] ? __cfi_transport_setup_classdev+0x10/0x10
[ 44.691060][ T402] ? __pm_runtime_resume+0xa0/0xa0
[ 44.696188][ T402] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 44.701908][ T402] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 44.707875][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 44.713681][ T402] ? __pm_runtime_resume+0x7a/0xa0
[ 44.718822][ T402] __scsi_scan_target+0x1f1/0xc20
[ 44.723849][ T402] ? scsi_scan_target+0x270/0x270
[ 44.728884][ T402] ? __pm_runtime_resume+0xa0/0xa0
[ 44.733996][ T402] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 44.739471][ T402] ? __mutex_lock_slowpath+0xe/0x20
[ 44.744668][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 44.750481][ T402] ? __pm_runtime_resume+0x7a/0xa0
[ 44.755595][ T402] scsi_scan_host_selected+0x352/0x610
[ 44.761062][ T402] store_scan+0x4ba/0x550
[ 44.765387][ T402] ? __cfi_store_scan+0x10/0x10
[ 44.770244][ T402] ? _copy_from_iter+0x215/0x1520
[ 44.775270][ T402] ? __kasan_check_write+0x18/0x20
[ 44.780445][ T402] ? __cfi_store_scan+0x10/0x10
[ 44.785295][ T402] dev_attr_store+0x76/0xa0
[ 44.789801][ T402] ? __cfi_dev_attr_store+0x10/0x10
[ 44.795001][ T402] sysfs_kf_write+0x13e/0x160
[ 44.799708][ T402] ? __cfi_sysfs_kf_write+0x10/0x10
[ 44.804904][ T402] kernfs_fop_write_iter+0x316/0x510
[ 44.810199][ T402] vfs_write+0x75f/0xfd0
[ 44.814440][ T402] ? __cfi_vfs_write+0x10/0x10
[ 44.819210][ T402] ? __cfi_mutex_lock+0x10/0x10
[ 44.824065][ T402] ksys_write+0x145/0x260
[ 44.828404][ T402] ? xfd_validate_state+0x68/0x140
[ 44.833540][ T402] ? __cfi_ksys_write+0x10/0x10
[ 44.838402][ T402] ? __kasan_check_write+0x18/0x20
[ 44.843526][ T402] ? fpregs_restore_userregs+0x11c/0x260
[ 44.849197][ T402] __x64_sys_write+0x7f/0x90
[ 44.853792][ T402] x64_sys_call+0x271c/0x2ee0
[ 44.858543][ T402] do_syscall_64+0x57/0xf0
[ 44.862960][ T402] ? clear_bhb_loop+0x50/0xa0
[ 44.867650][ T402] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 44.873558][ T402] RIP: 0033:0x7f48f8b9e159
[ 44.877975][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 44.897609][ T402] RSP: 002b:00007f48f9ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 44.906012][ T402] RAX: ffffffffffffffda RBX: 00007f48f8e25fa0 RCX: 00007f48f8b9e159
[ 44.914002][ T402] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003
[ 44.922012][ T402] RBP: 00007f48f8c3506b R08: 0000000000000000 R09: 0000000000000000
[ 44.929997][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 44.937999][ T402] R13: 00007f48f8e26038 R14: 00007f48f8e25fa0 R15: 00007ffec4f18088
[ 44.945988][ T402]
[ 44.949043][ T402] ---[ end trace 0000000000000000 ]---
[ 44.997875][ T402] ------------[ cut here ]------------
[ 45.003376][ T402] kobject: '(null)' (ffff88811a7061d0): is not initialized, yet kobject_put() is being called.
[ 45.013954][ T402] WARNING: CPU: 0 PID: 402 at lib/kobject.c:736 kobject_put+0x8e/0x2a0
[ 45.022304][ T402] Modules linked in:
[ 45.026325][ T402] CPU: 0 UID: 0 PID: 402 Comm: syz.0.17 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[ 45.039141][ T402] Tainted: [W]=WARN
[ 45.042956][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 45.053016][ T402] RIP: 0010:kobject_put+0x8e/0x2a0
[ 45.058148][ T402] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 64 2a 44 fc 48 8b 33 48 c7 c7 c0 1c 9b 86 48 89 da e8 52 1d 68 fb <0f> 0b eb 0f e8 99 4c eb fb e9 9c 01 00 00 e8 8f 4c eb fb 4c 8d 7b
[ 45.077784][ T402] RSP: 0018:ffffc9000102f1f8 EFLAGS: 00010246
[ 45.083854][ T402] RAX: c7c497cf4f5ef000 RBX: ffff88811a7061d0 RCX: ffff888132802600
[ 45.091842][ T402] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 45.099835][ T402] RBP: ffffc9000102f220 R08: 0000000000000003 R09: 0000000000000004
[ 45.107824][ T402] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: ffffffff86631a10
[ 45.115791][ T402] R13: ffff88811a70620c R14: 1ffff110234e0c41 R15: 0000000000000000
[ 45.123769][ T402] FS: 00007f48f9ac36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 45.132814][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.139412][ T402] CR2: 00007ffc33669f98 CR3: 0000000116fb8000 CR4: 00000000003526b0
[ 45.147419][ T402] Call Trace:
[ 45.150731][ T402]
[ 45.153655][ T402] put_device+0x23/0x40
[ 45.157834][ T402] __scsi_remove_device+0x32d/0x3c0
[ 45.163036][ T402] scsi_alloc_sdev+0x970/0xcc0
[ 45.167818][ T402] ? scsi_target_destroy+0x300/0x300
[ 45.173111][ T402] ? vsnprintf+0x19ef/0x1ad0
[ 45.177729][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 45.183552][ T402] scsi_probe_and_add_lun+0x1e9/0x3e60
[ 45.189056][ T402] ? __cfi_kvasprintf+0x10/0x10
[ 45.193907][ T402] ? scsi_alloc_target+0xc50/0xc50
[ 45.199028][ T402] ? __kasan_check_write+0x18/0x20
[ 45.204153][ T402] ? mutex_unlock+0x90/0x240
[ 45.208751][ T402] ? __cfi_mutex_unlock+0x10/0x10
[ 45.213775][ T402] ? rpm_resume+0xb92/0x1670
[ 45.218382][ T402] ? __cfi_transport_setup_classdev+0x10/0x10
[ 45.224459][ T402] ? __pm_runtime_resume+0xa0/0xa0
[ 45.229618][ T402] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 45.235074][ T402] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 45.240980][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 45.246784][ T402] ? __pm_runtime_resume+0x7a/0xa0
[ 45.251904][ T402] __scsi_scan_target+0x1f1/0xc20
[ 45.256931][ T402] ? scsi_scan_target+0x270/0x270
[ 45.261966][ T402] ? __pm_runtime_resume+0xa0/0xa0
[ 45.267075][ T402] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 45.272546][ T402] ? __mutex_lock_slowpath+0xe/0x20
[ 45.277773][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 45.283577][ T402] ? __pm_runtime_resume+0x7a/0xa0
[ 45.288703][ T402] scsi_scan_host_selected+0x352/0x610
[ 45.294163][ T402] store_scan+0x4ba/0x550
[ 45.298505][ T402] ? __cfi_store_scan+0x10/0x10
[ 45.303357][ T402] ? _copy_from_iter+0x215/0x1520
[ 45.308435][ T402] ? __kasan_check_write+0x18/0x20
[ 45.313550][ T402] ? __cfi_store_scan+0x10/0x10
[ 45.318410][ T402] dev_attr_store+0x76/0xa0
[ 45.322933][ T402] ? __cfi_dev_attr_store+0x10/0x10
[ 45.328157][ T402] sysfs_kf_write+0x13e/0x160
[ 45.332832][ T402] ? __cfi_sysfs_kf_write+0x10/0x10
[ 45.338044][ T402] kernfs_fop_write_iter+0x316/0x510
[ 45.343332][ T402] vfs_write+0x75f/0xfd0
[ 45.347608][ T402] ? __cfi_vfs_write+0x10/0x10
[ 45.352377][ T402] ? __cfi_mutex_lock+0x10/0x10
[ 45.357226][ T402] ksys_write+0x145/0x260
[ 45.361585][ T402] ? xfd_validate_state+0x68/0x140
[ 45.366699][ T402] ? __cfi_ksys_write+0x10/0x10
[ 45.371555][ T402] ? __kasan_check_write+0x18/0x20
[ 45.376661][ T402] ? fpregs_restore_userregs+0x11c/0x260
[ 45.382300][ T402] __x64_sys_write+0x7f/0x90
[ 45.386905][ T402] x64_sys_call+0x271c/0x2ee0
[ 45.391588][ T402] do_syscall_64+0x57/0xf0
[ 45.396001][ T402] ? clear_bhb_loop+0x50/0xa0
[ 45.400703][ T402] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 45.406597][ T402] RIP: 0033:0x7f48f8b9e159
[ 45.411029][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 45.430654][ T402] RSP: 002b:00007f48f9ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 45.439096][ T402] RAX: ffffffffffffffda RBX: 00007f48f8e25fa0 RCX: 00007f48f8b9e159
[ 45.447066][ T402] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003
[ 45.455043][ T402] RBP: 00007f48f8c3506b R08: 0000000000000000 R09: 0000000000000000
[ 45.463063][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 45.471057][ T402] R13: 00007f48f8e26038 R14: 00007f48f8e25fa0 R15: 00007ffec4f18088
[ 45.479049][ T402]
[ 45.482075][ T402] ---[ end trace 0000000000000000 ]---
[ 45.487543][ T402] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured
[ 45.499101][ T402] ------------[ cut here ]------------
[ 45.504604][ T402] kernel BUG at drivers/scsi/scsi_scan.c:594!
[ 45.510993][ T402] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 45.517920][ T402] CPU: 0 UID: 0 PID: 402 Comm: syz.0.17 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[ 45.530656][ T402] Tainted: [W]=WARN
[ 45.534436][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 45.544476][ T402] RIP: 0010:scsi_target_reap+0x172/0x180
[ 45.550121][ T402] Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 78 52 81 fe e9 39 ff ff ff e8 ee 74 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 d3 27 59 56 90 90 90
[ 45.569717][ T402] RSP: 0018:ffffc9000102f7a8 EFLAGS: 00010293
[ 45.575786][ T402] RAX: ffffffff835f0482 RBX: ffff888116772000 RCX: ffff888132802600
[ 45.583833][ T402] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[ 45.591806][ T402] RBP: ffffc9000102f7d0 R08: 0000000000000003 R09: 0000000000000004
[ 45.599787][ T402] R10: dffffc0000000000 R11: fffff52000205ee0 R12: ffff888116772000
[ 45.607740][ T402] R13: ffff8881167723c4 R14: 1ffff11022cee478 R15: 0000000000000005
[ 45.615691][ T402] FS: 00007f48f9ac36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 45.624603][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.631164][ T402] CR2: 00007ffc33669f98 CR3: 0000000116fb8000 CR4: 00000000003526b0
[ 45.639118][ T402] Call Trace:
[ 45.642381][ T402]
[ 45.645310][ T402] __scsi_scan_target+0x62c/0xc20
[ 45.650323][ T402] ? scsi_scan_target+0x270/0x270
[ 45.655333][ T402] ? __pm_runtime_resume+0xa0/0xa0
[ 45.660427][ T402] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 45.665876][ T402] ? __mutex_lock_slowpath+0xe/0x20
[ 45.671086][ T402] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 45.676888][ T402] ? __pm_runtime_resume+0x7a/0xa0
[ 45.681991][ T402] scsi_scan_host_selected+0x352/0x610
[ 45.687446][ T402] store_scan+0x4ba/0x550
[ 45.691760][ T402] ? __cfi_store_scan+0x10/0x10
[ 45.696591][ T402] ? _copy_from_iter+0x215/0x1520
[ 45.701600][ T402] ? __kasan_check_write+0x18/0x20
[ 45.706689][ T402] ? __cfi_store_scan+0x10/0x10
[ 45.711520][ T402] dev_attr_store+0x76/0xa0
[ 45.716004][ T402] ? __cfi_dev_attr_store+0x10/0x10
[ 45.721180][ T402] sysfs_kf_write+0x13e/0x160
[ 45.725838][ T402] ? __cfi_sysfs_kf_write+0x10/0x10
[ 45.731017][ T402] kernfs_fop_write_iter+0x316/0x510
[ 45.736283][ T402] vfs_write+0x75f/0xfd0
[ 45.740509][ T402] ? __cfi_vfs_write+0x10/0x10
[ 45.745261][ T402] ? __cfi_mutex_lock+0x10/0x10
[ 45.750093][ T402] ksys_write+0x145/0x260
[ 45.754404][ T402] ? xfd_validate_state+0x68/0x140
[ 45.759508][ T402] ? __cfi_ksys_write+0x10/0x10
[ 45.764344][ T402] ? __kasan_check_write+0x18/0x20
[ 45.769444][ T402] ? fpregs_restore_userregs+0x11c/0x260
[ 45.775077][ T402] __x64_sys_write+0x7f/0x90
[ 45.779649][ T402] x64_sys_call+0x271c/0x2ee0
[ 45.784304][ T402] do_syscall_64+0x57/0xf0
[ 45.788699][ T402] ? clear_bhb_loop+0x50/0xa0
[ 45.793359][ T402] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 45.799234][ T402] RIP: 0033:0x7f48f8b9e159
[ 45.803634][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 45.823257][ T402] RSP: 002b:00007f48f9ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 45.831654][ T402] RAX: ffffffffffffffda RBX: 00007f48f8e25fa0 RCX: 00007f48f8b9e159
[ 45.839604][ T402] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003
[ 45.847554][ T402] RBP: 00007f48f8c3506b R08: 0000000000000000 R09: 0000000000000000
[ 45.855514][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 45.863483][ T402] R13: 00007f48f8e26038 R14: 00007f48f8e25fa0 R15: 00007ffec4f18088
[ 45.871459][ T402]
[ 45.874459][ T402] Modules linked in:
[ 45.878430][ T402] ---[ end trace 0000000000000000 ]---
[ 45.883925][ T402] RIP: 0010:scsi_target_reap+0x172/0x180
[ 45.889591][ T402] Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 78 52 81 fe e9 39 ff ff ff e8 ee 74 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 d3 27 59 56 90 90 90
[ 45.909262][ T402] RSP: 0018:ffffc9000102f7a8 EFLAGS: 00010293
[ 45.915464][ T402] RAX: ffffffff835f0482 RBX: ffff888116772000 RCX: ffff888132802600
[ 45.923505][ T402] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[ 45.931519][ T402] RBP: ffffc9000102f7d0 R08: 0000000000000003 R09: 0000000000000004
[ 45.939528][ T402] R10: dffffc0000000000 R11: fffff52000205ee0 R12: ffff888116772000
[ 45.947496][ T402] R13: ffff8881167723c4 R14: 1ffff11022cee478 R15: 0000000000000005
[ 45.955472][ T402] FS: 00007f48f9ac36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 45.964413][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.971002][ T402] CR2: 00007ffc33669f98 CR3: 0000000116fb8000 CR4: 00000000003526b0
[ 45.979838][ T402] Kernel panic - not syncing: Fatal exception
[ 45.986149][ T402] Kernel Offset: disabled
[ 45.990476][ T402] Rebooting in 86400 seconds..