program:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async)
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r2, &(0x7f0000000300), 0x4c, 0x3b00, 0x0, 0xfffffffffffffdfd)
sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100310}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1bc, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3b1}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2936}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x4f1}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x90}, 0x4010)
close(r1)
dup(0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x2, @mcast1}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x19)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8)
lseek(0xffffffffffffffff, 0x0, 0x2)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
[ 95.208306][ T5280] Bluetooth: hci0: command tx timeout
[ 95.328714][ T5318] CIFS: Attempting to mount //127.0.0.1/share
[ 95.352090][ T5318] CIFS: decode_ntlmssp_challenge: authentication has been weakened as server does not support key exchange
[ 95.366115][ T5318] CIFS: VFS: \\127.0.0.1 Error -32 sending data on socket to server
[ 95.378177][ T5318] ------------[ cut here ]------------
[ 95.378191][ T5318] server->in_flight == 0
[ 95.378197][ T5318] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1249/0x2b70, CPU#0: syz.0.0/5318
[ 95.388325][ T5318] Modules linked in:
[ 95.390330][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.394470][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.399008][ T5318] RIP: 0010:smb2_add_credits+0x1249/0x2b70
[ 95.403835][ T5318] Code: de 83 e6 01 31 ff e8 a6 26 b7 fe f6 c3 01 75 0a e8 9c 21 b7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 8d 21 b7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d b2 25 53 0d 01 0f 85 9e 03 00 00 e8 72 21 b7 fe 49
[ 95.412509][ T5318] RSP: 0018:ffffc9000f1f7198 EFLAGS: 00010246
[ 95.415152][ T5318] RAX: ffffffff8310b398 RBX: 1ffff110024f4861 RCX: ffff888000ad0000
[ 95.418612][ T5318] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 95.425399][ T5318] RBP: 0000000000002000 R08: 0000000000000003 R09: 0000000000000004
[ 95.429073][ T5318] R10: dffffc0000000000 R11: ffffffff8310e0f0 R12: ffff8880127a4308
[ 95.433112][ T5318] R13: ffffc9000f1f73b0 R14: ffff8880127a4000 R15: 0000000000000000
[ 95.436958][ T5318] FS: 00007f29c45876c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000
[ 95.441144][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.443882][ T5318] CR2: 00007f29c39f36b8 CR3: 0000000012d07000 CR4: 0000000000352ef0
[ 95.447439][ T5318] Call Trace:
[ 95.448921][ T5318]
[ 95.450606][ T5318] ? do_raw_spin_unlock+0x4d/0x200
[ 95.453070][ T5318] compound_send_recv+0x13b4/0x2b90
[ 95.455463][ T5318] ? __pfx_compound_send_recv+0x10/0x10
[ 95.457880][ T5318] ? kasan_save_track+0x3e/0x80
[ 95.459998][ T5318] ? __kasan_kmalloc+0x93/0xb0
[ 95.462306][ T5318] ? __kmalloc_noprof+0x36b/0x720
[ 95.464509][ T5318] ? build_ntlmssp_auth_blob+0xa5/0xdf0
[ 95.467269][ T5318] ? SMB2_negotiate+0x660/0x4030
[ 95.469409][ T5318] ? cifs_setup_session+0x86b/0x1130
[ 95.471758][ T5318] ? cifs_get_smb_ses+0x114d/0x1ff0
[ 95.474211][ T5318] cifs_send_recv+0x42/0x60
[ 95.476301][ T5318] SMB2_sess_sendreceive+0x22f/0x780
[ 95.478861][ T5318] ? __pfx_SMB2_sess_sendreceive+0x10/0x10
[ 95.481637][ T5318] ? build_ntlmssp_auth_blob+0x754/0xdf0
[ 95.484219][ T5318] SMB2_sess_auth_rawntlmssp_authenticate+0x465/0x800
[ 95.487189][ T5318] ? __pfx_SMB2_sess_auth_rawntlmssp_authenticate+0x10/0x10
[ 95.490586][ T5318] ? __kmalloc_cache_noprof+0x321/0x600
[ 95.493063][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600
[ 95.495560][ T5318] ? SMB2_sess_setup+0xaa/0x8b0
[ 95.497917][ T5318] ? SMB2_sess_setup+0x445/0x8b0
[ 95.500145][ T5318] ? __pfx_SMB2_sess_auth_rawntlmssp_authenticate+0x10/0x10
[ 95.503424][ T5318] SMB2_sess_setup+0x475/0x8b0
[ 95.505938][ T5318] cifs_setup_session+0x86b/0x1130
[ 95.508320][ T5318] cifs_get_smb_ses+0x114d/0x1ff0
[ 95.511037][ T5318] cifs_mount_get_session+0xf1/0x450
[ 95.513354][ T5318] dfs_mount_share+0x22e/0x990
[ 95.515539][ T5318] cifs_mount+0xcc/0xbf0
[ 95.517453][ T5318] ? __pfx_cifs_mount+0x10/0x10
[ 95.519657][ T5318] ? smb3_update_mnt_flags+0x2df/0x410
[ 95.522100][ T5318] ? cifs_setup_cifs_sb+0x5d8/0x900
[ 95.524417][ T5318] cifs_smb3_do_mount+0x2d0/0x8a0
[ 95.526600][ T5318] ? smb3_get_tree+0x2bf/0x400
[ 95.528745][ T5318] ? __pfx___mutex_lock+0x10/0x10
[ 95.531154][ T5318] ? kfree+0x1c5/0x650
[ 95.533042][ T5318] ? __pfx_cifs_smb3_do_mount+0x10/0x10
[ 95.535443][ T5318] ? smb3_handle_conflicting_options+0x40f/0xbf0
[ 95.538208][ T5318] smb3_get_tree+0x2dd/0x400
[ 95.540471][ T5318] vfs_get_tree+0x92/0x2a0
[ 95.542450][ T5318] do_new_mount+0x319/0xdc0
[ 95.544452][ T5318] ? __pfx_do_new_mount+0x10/0x10
[ 95.546858][ T5318] ? ns_capable+0x89/0xe0
[ 95.548867][ T5318] ? path_mount+0x647/0x1050
[ 95.551290][ T5318] ? user_path_at+0xd4/0x160
[ 95.553325][ T5318] __se_sys_mount+0x31d/0x420
[ 95.555290][ T5318] ? __pfx___se_sys_mount+0x10/0x10
[ 95.557517][ T5318] ? __x64_sys_mount+0x20/0xc0
[ 95.559611][ T5318] do_syscall_64+0x166/0x520
[ 95.562051][ T5318] ? trace_irq_disable+0x3b/0x140
[ 95.564294][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.566926][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 95.569032][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.571765][ T5318] RIP: 0033:0x7f29c379e159
[ 95.573823][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.582390][ T5318] RSP: 002b:00007f29c4586fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 95.586116][ T5318] RAX: ffffffffffffffda RBX: 00007f29c3a25fa0 RCX: 00007f29c379e159
[ 95.589593][ T5318] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500
[ 95.593069][ T5318] RBP: 00007f29c383506b R08: 0000200000000300 R09: 0000000000000000
[ 95.596457][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.600096][ T5318] R13: 00007f29c3a26038 R14: 00007f29c3a25fa0 R15: 00007ffc26160938
[ 95.603669][ T5318]
[ 95.605185][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.608391][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.612236][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.616619][ T5318] Call Trace:
[ 95.618287][ T5318]
[ 95.619782][ T5318] vpanic+0x56d/0xa60
[ 95.621845][ T5318] ? __pfx__printk+0x10/0x10
[ 95.624137][ T5318] ? __pfx_vpanic+0x10/0x10
[ 95.626263][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 95.628562][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 95.630825][ T5318] panic+0xc5/0xd0
[ 95.632534][ T5318] ? __pfx_panic+0x10/0x10
[ 95.634502][ T5318] __warn+0x315/0x4c0
[ 95.636285][ T5318] ? smb2_add_credits+0x1249/0x2b70
[ 95.638538][ T5318] ? smb2_add_credits+0x1249/0x2b70
[ 95.640777][ T5318] __report_bug+0x276/0x570
[ 95.642814][ T5318] ? smb2_add_credits+0x1249/0x2b70
[ 95.645127][ T5318] ? __pfx___report_bug+0x10/0x10
[ 95.647433][ T5318] ? __lock_acquire+0x747/0x2de0
[ 95.649616][ T5318] ? __pfx___schedule+0x10/0x10
[ 95.651754][ T5318] ? smb2_add_credits+0x1249/0x2b70
[ 95.653978][ T5318] report_bug+0x16b/0x220
[ 95.655880][ T5318] ? smb2_add_credits+0x1249/0x2b70
[ 95.658155][ T5318] ? smb2_add_credits+0x124b/0x2b70
[ 95.660649][ T5318] handle_bug+0x9c/0x200
[ 95.662413][ T5318] exc_invalid_op+0x1a/0x50
[ 95.664276][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 95.666428][ T5318] RIP: 0010:smb2_add_credits+0x1249/0x2b70
[ 95.669096][ T5318] Code: de 83 e6 01 31 ff e8 a6 26 b7 fe f6 c3 01 75 0a e8 9c 21 b7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 8d 21 b7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d b2 25 53 0d 01 0f 85 9e 03 00 00 e8 72 21 b7 fe 49
[ 95.677423][ T5318] RSP: 0018:ffffc9000f1f7198 EFLAGS: 00010246
[ 95.680170][ T5318] RAX: ffffffff8310b398 RBX: 1ffff110024f4861 RCX: ffff888000ad0000
[ 95.683610][ T5318] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 95.687174][ T5318] RBP: 0000000000002000 R08: 0000000000000003 R09: 0000000000000004
[ 95.690671][ T5318] R10: dffffc0000000000 R11: ffffffff8310e0f0 R12: ffff8880127a4308
[ 95.694225][ T5318] R13: ffffc9000f1f73b0 R14: ffff8880127a4000 R15: 0000000000000000
[ 95.697840][ T5318] ? __pfx_smb2_get_credits_field+0x10/0x10
[ 95.700454][ T5318] ? smb2_add_credits+0x3f8/0x2b70
[ 95.702793][ T5318] ? smb2_add_credits+0x3f8/0x2b70
[ 95.704935][ T5318] ? do_raw_spin_unlock+0x4d/0x200
[ 95.707133][ T5318] compound_send_recv+0x13b4/0x2b90
[ 95.709336][ T5318] ? __pfx_compound_send_recv+0x10/0x10
[ 95.711704][ T5318] ? kasan_save_track+0x3e/0x80
[ 95.713744][ T5318] ? __kasan_kmalloc+0x93/0xb0
[ 95.715802][ T5318] ? __kmalloc_noprof+0x36b/0x720
[ 95.718030][ T5318] ? build_ntlmssp_auth_blob+0xa5/0xdf0
[ 95.720397][ T5318] ? SMB2_negotiate+0x660/0x4030
[ 95.722740][ T5318] ? cifs_setup_session+0x86b/0x1130
[ 95.725352][ T5318] ? cifs_get_smb_ses+0x114d/0x1ff0
[ 95.727834][ T5318] cifs_send_recv+0x42/0x60
[ 95.729918][ T5318] SMB2_sess_sendreceive+0x22f/0x780
[ 95.732244][ T5318] ? __pfx_SMB2_sess_sendreceive+0x10/0x10
[ 95.734806][ T5318] ? build_ntlmssp_auth_blob+0x754/0xdf0
[ 95.737316][ T5318] SMB2_sess_auth_rawntlmssp_authenticate+0x465/0x800
[ 95.740218][ T5318] ? __pfx_SMB2_sess_auth_rawntlmssp_authenticate+0x10/0x10
[ 95.743927][ T5318] ? __kmalloc_cache_noprof+0x321/0x600
[ 95.746210][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600
[ 95.748669][ T5318] ? SMB2_sess_setup+0xaa/0x8b0
[ 95.751158][ T5318] ? SMB2_sess_setup+0x445/0x8b0
[ 95.753770][ T5318] ? __pfx_SMB2_sess_auth_rawntlmssp_authenticate+0x10/0x10
[ 95.757769][ T5318] SMB2_sess_setup+0x475/0x8b0
[ 95.760126][ T5318] cifs_setup_session+0x86b/0x1130
[ 95.762409][ T5318] cifs_get_smb_ses+0x114d/0x1ff0
[ 95.764938][ T5318] cifs_mount_get_session+0xf1/0x450
[ 95.767204][ T5318] dfs_mount_share+0x22e/0x990
[ 95.769188][ T5318] cifs_mount+0xcc/0xbf0
[ 95.771304][ T5318] ? __pfx_cifs_mount+0x10/0x10
[ 95.773522][ T5318] ? smb3_update_mnt_flags+0x2df/0x410
[ 95.775910][ T5318] ? cifs_setup_cifs_sb+0x5d8/0x900
[ 95.778206][ T5318] cifs_smb3_do_mount+0x2d0/0x8a0
[ 95.780423][ T5318] ? smb3_get_tree+0x2bf/0x400
[ 95.782868][ T5318] ? __pfx___mutex_lock+0x10/0x10
[ 95.785128][ T5318] ? kfree+0x1c5/0x650
[ 95.787007][ T5318] ? __pfx_cifs_smb3_do_mount+0x10/0x10
[ 95.789556][ T5318] ? smb3_handle_conflicting_options+0x40f/0xbf0
[ 95.793140][ T5318] smb3_get_tree+0x2dd/0x400
[ 95.795274][ T5318] vfs_get_tree+0x92/0x2a0
[ 95.797404][ T5318] do_new_mount+0x319/0xdc0
[ 95.799724][ T5318] ? __pfx_do_new_mount+0x10/0x10
[ 95.802218][ T5318] ? ns_capable+0x89/0xe0
[ 95.804561][ T5318] ? path_mount+0x647/0x1050
[ 95.806842][ T5318] ? user_path_at+0xd4/0x160
[ 95.808851][ T5318] __se_sys_mount+0x31d/0x420
[ 95.810907][ T5318] ? __pfx___se_sys_mount+0x10/0x10
[ 95.812990][ T5318] ? __x64_sys_mount+0x20/0xc0
[ 95.814968][ T5318] do_syscall_64+0x166/0x520
[ 95.816942][ T5318] ? trace_irq_disable+0x3b/0x140
[ 95.819216][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.821949][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 95.824151][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.826801][ T5318] RIP: 0033:0x7f29c379e159
[ 95.828829][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.837260][ T5318] RSP: 002b:00007f29c4586fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 95.841067][ T5318] RAX: ffffffffffffffda RBX: 00007f29c3a25fa0 RCX: 00007f29c379e159
[ 95.844698][ T5318] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500
[ 95.848248][ T5318] RBP: 00007f29c383506b R08: 0000200000000300 R09: 0000000000000000
[ 95.851833][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.855225][ T5318] R13: 00007f29c3a26038 R14: 00007f29c3a25fa0 R15: 00007ffc26160938
[ 95.858736][ T5318]
[ 95.860491][ T5318] Kernel Offset: disabled
[ 95.862332][ T5318] Rebooting in 86400 seconds..