=== PATCHED smbfs.ko module — T2RQ returns EINVAL ===
[*] DF-0734: nsmb T2RQ signed/unsigned OOB read trigger
[+] smb_ctx_init ok (parsed UNC)
[*] resolving context...
[+] context resolved
[*] establishing VC + share via SMBIOC_LOOKUP...
[+] VC + share established (fd=3)
[*] issuing SMBIOC_T2RQ with ioc_setupcnt = -1 (0xffffffff)
[!] T2RQ returned rc=-1 errno=22 (m)
EXIT=0
(guest stays up)