WARNING in smb2_add_credits

Status: upstream: reported C repro on 2026/08/01 00:35
Subsystems: cifs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+eeb58d2197d88720a228@syzkaller.appspotmail.com
First crash: 51d, last: 3h11m
Cause bisection: introduced by (bisect log) [merge commit]:
commit c297ed90fbba72d32b7759aae362b36d15b2db1f
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Mon Sep 7 17:01:38 2026 +0000

  Merge tag 'configfs-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/leitao/linux

Crash: WARNING in smb2_add_credits (log)
Repro: syz .config
  
✨ AI Patch Versions (2)
Version Stage Reported Report Link Job
2 moderation 2026/08/07 11:35 Discussion 41f83e92-1b53-4701-b089-30a34a1b8cc8
1 moderation 2026/08/03 09:32 Discussion 53130d26-0860-4523-bf44-fbc757857958
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
41f83e92 patch-iteration WARNING in smb2_add_credits 2026/08/07 10:30 2026/08/07 10:30 2026/08/07 11:35 c38879ea
53130d26 patching WARNING in smb2_add_credits 2026/08/03 07:44 2026/08/03 07:44 2026/08/03 09:32 e611ffe1
9fa9fafc assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ WARNING in smb2_add_credits 2026/07/29 01:42 2026/07/29 01:42 2026/07/29 02:25 7be3c40b
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [cifs?] WARNING in smb2_add_credits 0 (2) 2026/08/05 00:00
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in smb2_add_credits origin:upstream -1 syz, C 14 3d12h 38d 0/3 upstream: reported C repro on 2026/08/10 08:53
linux-6.6 WARNING in smb2_add_credits -1 syz 27 1d06h 51d 0/2 upstream: reported syz repro on 2026/07/28 12:45
Cause bisection attempts (3)
Created Duration User Patch Repo Result
2026/09/10 06:54 11h18m bisect upstream OK (1) job log log
2026/09/02 03:21 0m bisect upstream error
2026/08/10 14:06 0m bisect upstream error

Sample crash report:
CIFS: VFS: \\127.0.0.1 Error -32 sending data on socket to server
------------[ cut here ]------------
server->in_flight == 0
WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104, CPU#0: syz-executor203/8920
Modules linked in:
CPU: 0 UID: 0 PID: 8920 Comm: syz-executor203 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104
Code: c6 e8 d1 e9 b5 fe 84 db 0f 85 0a fb ff ff e8 b4 ef b5 fe 48 8d 3d 9d ad d5 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 9e ef b5 fe 90 <0f> 0b 90 0f b6 05 9c e3 b5 0d 31 ff 89 c6 88 44 24 28 e8 96 e9 b5
RSP: 0018:ffffc90008187208 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888032dce300 RCX: ffffffff835465cb
RDX: ffff88802c5d8000 RSI: ffffffff83547542 RDI: ffff88802c5d8000
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90008187448
R13: 0000000000000200 R14: 0000000000000001 R15: ffff888032dce000
FS:  00007f73289316c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f73289d463c CR3: 0000000071a37000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 add_credits fs/smb/client/cifsglob.h:894 [inline]
 compound_send_recv+0x1030/0x2a10 fs/smb/client/transport.c:979
 cifs_send_recv+0x43/0x60 fs/smb/client/transport.c:1106
 SMB2_negotiate+0x15c4/0x5380 fs/smb/client/smb2pdu.c:1188
 cifs_negotiate_protocol fs/smb/client/connect.c:4043 [inline]
 cifs_negotiate_protocol+0x268/0x4c0 fs/smb/client/connect.c:4014
 cifs_get_smb_ses+0xfc9/0x2170 fs/smb/client/connect.c:2492
 cifs_mount_get_session+0xf8/0x460 fs/smb/client/connect.c:3578
 get_session fs/smb/client/dfs.c:65 [inline]
 dfs_mount_share+0x200/0x1e20 fs/smb/client/dfs.c:275
 cifs_mount+0xc4/0xdb0 fs/smb/client/connect.c:3860
 cifs_smb3_do_mount+0x2c0/0x1b20 fs/smb/client/cifsfs.c:1024
 smb3_get_tree_common fs/smb/client/fs_context.c:897 [inline]
 smb3_get_tree fs/smb/client/fs_context.c:917 [inline]
 smb3_get_tree+0x1fd/0x440 fs/smb/client/fs_context.c:909
 vfs_get_tree+0x92/0x320 fs/super.c:1700
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3765 [inline]
 do_new_mount fs/namespace.c:3841 [inline]
 path_mount+0x7d0/0x23d0 fs/namespace.c:4161
 do_mount fs/namespace.c:4174 [inline]
 __do_sys_mount fs/namespace.c:4390 [inline]
 __se_sys_mount fs/namespace.c:4367 [inline]
 __x64_sys_mount+0x293/0x310 fs/namespace.c:4367
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7328959099
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f73289311d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f7328a09b48 RCX: 00007f7328959099
RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200
RBP: 00007f7328a09b40 R08: 0000200000000500 R09: 38203a6b63617473
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f73289db378
R13: 0000200000000200 R14: 0000200000000400 R15: 0000200000000300
 </TASK>

Crashes (675):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/04 19:27 upstream 848acc8ffe1b d4abbeac .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/08/27 11:20 upstream 818bebeb63dd c53a1b9c .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/08 07:27 upstream c297ed90fbba 680aa3e1 .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/08 04:19 upstream c297ed90fbba 680aa3e1 .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/08/28 19:19 upstream 1b78070aaef6 bcbc8ceb .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/08/02 05:50 upstream 2d2338c93da7 e611ffe1 .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/07/28 02:01 upstream f5098b6bae76 4cb2b096 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/08/24 08:50 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/24 06:10 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/24 04:41 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/24 04:01 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/22 17:05 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/17 16:57 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/17 12:23 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/17 09:37 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/17 06:13 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/17 04:32 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/16 23:36 upstream 9b87fdc9af2f 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/16 23:31 upstream 9b87fdc9af2f 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/16 20:48 upstream 9b87fdc9af2f 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/16 13:38 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/16 11:37 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/16 09:51 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/16 07:47 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/16 02:58 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/15 19:27 upstream 587858367581 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/15 17:18 upstream 587858367581 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/15 11:15 upstream 587858367581 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/15 07:51 upstream 587858367581 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/14 16:04 upstream 704340f1cd0d 924033e8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/14 14:56 upstream 704340f1cd0d 924033e8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/14 09:05 upstream 704340f1cd0d 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/13 23:07 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/13 19:21 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/13 16:22 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/13 12:49 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/13 09:10 upstream cba2348ab114 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/13 04:27 upstream cba2348ab114 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/13 03:25 upstream cba2348ab114 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/13 01:54 upstream cba2348ab114 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/13 00:50 upstream cba2348ab114 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/12 13:53 upstream 5225b8eec4c9 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/12 10:42 upstream 5225b8eec4c9 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/11 22:37 upstream 3026c6e4f223 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/11 19:17 upstream 08df884136f1 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/17 18:15 upstream 238650ef6c7c 4a607247 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/17 07:55 upstream 238650ef6c7c 95928915 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/16 21:58 upstream 9b87fdc9af2f b0e4c57e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/16 06:02 upstream f6e7b42bf05b 12a0a44a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/15 05:04 upstream 587858367581 81a27d1a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/15 01:23 upstream 587858367581 81a27d1a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/12 15:09 upstream 5225b8eec4c9 70a60e12 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/12 08:16 upstream 3026c6e4f223 70a60e12 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/12 05:01 upstream 827751b699b7 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/12 03:48 upstream 827751b699b7 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/12 03:47 upstream 827751b699b7 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/12 00:42 upstream 827751b699b7 70a60e12 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/11 21:26 upstream 08df884136f1 9c29f801 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/14 07:42 upstream 50d05c7c76c9 70a60e12 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in smb2_add_credits
2026/09/13 00:17 upstream 50d05c7c76c9 70a60e12 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in smb2_add_credits
2026/09/12 22:23 upstream 50d05c7c76c9 70a60e12 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in smb2_add_credits
2026/09/16 17:50 linux-next 9d80aa4617b3 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in smb2_add_credits
2026/09/16 07:15 linux-next 9d80aa4617b3 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in smb2_add_credits
2026/09/11 20:18 linux-next a9d7ced84989 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in smb2_add_credits
* Struck through repros no longer work on HEAD.