The -q noserial option doesnt sanitise SAS address in some places
When using "smartctl -q noserial" to create anonymised output, I found that reports from SAS drives containing the "Protocol Specific port log page for SAS SSP" output showed both the drive SAS address and the HBA port SAS address.
See https://www.smartmontools.org/wiki/Examples_HUS154545VLS300 for an example of this output
I could duplicate this example with:
smartctl /dev/bus/0 -d megaraid,0 -x -q noserial