CIFS: Attempting to mount //127.0.0.1/share CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server ------------[ cut here ]------------ server->in_flight == 0 WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104, CPU#0: syz.4.7154/2835 Modules linked in: CPU: 0 UID: 0 PID: 2835 Comm: syz.4.7154 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104 Code: c6 e8 51 3b b7 fe 84 db 0f 85 0a fb ff ff e8 34 41 b7 fe 48 8d 3d 0d d3 d7 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 1e 41 b7 fe 90 <0f> 0b 90 0f b6 05 06 0b b8 0d 31 ff 89 c6 88 44 24 28 e8 16 3b b7 RSP: 0000:ffffc900051872b8 EFLAGS: 00010287 RAX: 0000000000003bbb RBX: ffff888023db4300 RCX: ffffc90028062000 RDX: 0000000000080000 RSI: ffffffff83526b42 RDI: ffff88802a544a80 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900051874f8 R13: 0000000000000200 R14: 0000000000000001 R15: ffff888023db4000 FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f545db40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000000000c36412d CR3: 000000006ff88000 CR4: 0000000000352ef0 Call Trace: add_credits fs/smb/client/cifsglob.h:894 [inline] compound_send_recv+0x1030/0x2a10 fs/smb/client/transport.c:979 cifs_send_recv+0x43/0x60 fs/smb/client/transport.c:1106 SMB2_negotiate+0x15c4/0x5380 fs/smb/client/smb2pdu.c:1188 cifs_negotiate_protocol fs/smb/client/connect.c:4043 [inline] cifs_negotiate_protocol+0x268/0x4c0 fs/smb/client/connect.c:4014 cifs_get_smb_ses+0xfc9/0x2170 fs/smb/client/connect.c:2492 cifs_mount_get_session+0xf8/0x460 fs/smb/client/connect.c:3578 get_session fs/smb/client/dfs.c:65 [inline] dfs_mount_share+0x200/0x1e20 fs/smb/client/dfs.c:275 cifs_mount+0xc4/0xdb0 fs/smb/client/connect.c:3860 cifs_smb3_do_mount+0x2c0/0x1b20 fs/smb/client/cifsfs.c:1024 smb3_get_tree_common fs/smb/client/fs_context.c:897 [inline] smb3_get_tree fs/smb/client/fs_context.c:917 [inline] smb3_get_tree+0x1fd/0x440 fs/smb/client/fs_context.c:909 vfs_get_tree+0x92/0x320 fs/super.c:1700 vfs_cmd_create+0xd7/0x2a0 fs/fsopen.c:231 vfs_fsconfig_locked fs/fsopen.c:295 [inline] __do_sys_fsconfig+0x55a/0xcb0 fs/fsopen.c:463 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xe7/0x970 arch/x86/entry/syscall_32.c:307 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:332 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf706efec Code: Unable to access opcode bytes at 0xf706efc2. RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000006 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000