WARNING in smb2_add_credits

Status: upstream: reported C repro on 2026/08/01 00:35
Subsystems: cifs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+eeb58d2197d88720a228@syzkaller.appspotmail.com
Fix commit: 8f6f8a48399f smb: client: delete compound mids on send failure before unlock
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root]
First crash: 80d, last: 1d05h
Cause bisection: introduced by (bisect log) [merge commit]:
commit c297ed90fbba72d32b7759aae362b36d15b2db1f
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Mon Sep 7 17:01:38 2026 +0000

  Merge tag 'configfs-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/leitao/linux

Crash: WARNING in smb2_add_credits (log)
Repro: syz .config
  
▶ ▼ ✨ AI Patch Versions (2)
Version Stage Reported Report Link Job
2 moderation 2026/08/07 11:35 Discussion 41f83e92-1b53-4701-b089-30a34a1b8cc8
1 moderation 2026/08/03 09:32 Discussion 53130d26-0860-4523-bf44-fbc757857958
▶ ▼ ✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
41f83e92 patch-iteration ❓ WARNING in smb2_add_credits 2026/08/07 10:30 2026/08/07 10:30 2026/08/07 11:35 c38879ea
53130d26 patching ❓ WARNING in smb2_add_credits 2026/08/03 07:44 2026/08/03 07:44 2026/08/03 09:32 e611ffe1
9fa9fafc assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ WARNING in smb2_add_credits 2026/07/29 01:42 2026/07/29 01:42 2026/07/29 02:25 7be3c40b
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[syzbot] [cifs?] WARNING in smb2_add_credits 0 (4) 2026/09/20 06:40
[PATCH] smb: client: delete compound mids on send failure before unlock 2 (2) 2026/09/20 04:32
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in smb2_add_credits origin:upstream -1 syz, C 19 6d11h 67d 0/3 upstream: reported C repro on 2026/08/10 08:53
linux-6.6 WARNING in smb2_add_credits -1 syz, C 39 5h47m 79d 0/2 upstream: reported C repro on 2026/07/28 12:45
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/09/19 08:15 40m adarshdas950@gmail.com patch upstream OK job log log
▶ ▼ Cause bisection attempts (3)
Created Duration User Patch Repo Result
2026/09/10 06:54 11h18m bisect upstream OK (1) job log log
2026/09/02 03:21 0m bisect upstream error
2026/08/10 14:06 0m bisect upstream error

Sample crash report:
CIFS: VFS: \\127.0.0.1 Error -32 sending data on socket to server
------------[ cut here ]------------
server->in_flight == 0
WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104, CPU#0: syz.0.69/6182
Modules linked in:
CPU: 0 UID: 0 PID: 6182 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
RIP: 0010:smb2_add_credits+0x1213/0x1790 fs/smb/client/smb2ops.c:104
Code: c6 e8 c1 64 b0 fe 84 db 0f 85 0a fb ff ff e8 a4 6a b0 fe 48 8d 3d ed e4 f0 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 8e 6a b0 fe 90 <0f> 0b 90 0f b6 05 29 5e d1 0d 31 ff 89 c6 88 44 24 28 e8 86 64 b0
RSP: 0018:ffffc90003ef71d8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880357de300 RCX: 0000000000000001
RDX: ffff888056cb0000 RSI: ffffffff835bb802 RDI: ffff888056cb0000
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003ef7418
R13: 0000000000002000 R14: 0000000000000001 R15: ffff8880357de000
FS:  00007f6cbb3a16c0(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6cba5eb840 CR3: 0000000073e05000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 add_credits fs/smb/client/cifsglob.h:894 [inline]
 compound_send_recv+0x1030/0x2a10 fs/smb/client/transport.c:978
 cifs_send_recv+0x43/0x60 fs/smb/client/transport.c:1105
 SMB2_sess_sendreceive+0x235/0x950 fs/smb/client/smb2pdu.c:1655
 SMB2_sess_auth_rawntlmssp_negotiate+0x775/0xbf0 fs/smb/client/smb2pdu.c:1851
 SMB2_sess_setup+0x314/0x640 fs/smb/client/smb2pdu.c:2045
 cifs_setup_session+0x434/0xfe0 fs/smb/client/connect.c:4170
 cifs_get_smb_ses+0x1813/0x2170 fs/smb/client/connect.c:2503
 cifs_mount_get_session+0xf8/0x460 fs/smb/client/connect.c:3587
 get_session fs/smb/client/dfs.c:65 [inline]
 dfs_mount_share+0x200/0x1e20 fs/smb/client/dfs.c:275
 cifs_mount+0xc4/0xdb0 fs/smb/client/connect.c:3869
 cifs_smb3_do_mount+0x2c0/0x1b10 fs/smb/client/cifsfs.c:1026
 smb3_get_tree_common fs/smb/client/fs_context.c:897 [inline]
 smb3_get_tree fs/smb/client/fs_context.c:917 [inline]
 smb3_get_tree+0x1fd/0x440 fs/smb/client/fs_context.c:909
 vfs_get_tree+0x92/0x320 fs/super.c:1933
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3772 [inline]
 do_new_mount fs/namespace.c:3848 [inline]
 path_mount+0x7d0/0x24c0 fs/namespace.c:4168
 do_mount fs/namespace.c:4181 [inline]
 __do_sys_mount fs/namespace.c:4397 [inline]
 __se_sys_mount fs/namespace.c:4374 [inline]
 __x64_sys_mount+0x293/0x310 fs/namespace.c:4374
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6cba59e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6cbb3a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f6cba825fa0 RCX: 00007f6cba59e159
RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500
RBP: 00007f6cba63506b R08: 0000200000000300 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6cba826038 R14: 00007f6cba825fa0 R15: 00007ffebf432298
 </TASK>

Crashes (792):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/23 17:28 upstream fe2ec83746e5 abce1216 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/23 15:37 upstream fe2ec83746e5 abce1216 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/23 14:07 upstream fe2ec83746e5 abce1216 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/08/04 19:27 upstream 848acc8ffe1b d4abbeac .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/08/27 11:20 upstream 818bebeb63dd c53a1b9c .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/08 07:27 upstream c297ed90fbba 680aa3e1 .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/08 04:19 upstream c297ed90fbba 680aa3e1 .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/08/28 19:19 upstream 1b78070aaef6 bcbc8ceb .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/08/02 05:50 upstream 2d2338c93da7 e611ffe1 .config strace log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/07/28 02:01 upstream f5098b6bae76 4cb2b096 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/08/24 08:50 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/24 06:10 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/24 04:41 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/24 04:01 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/08/22 17:05 upstream 818bebeb63dd 1e72964b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/10/14 10:25 upstream ca3e345926b0 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/10/03 20:48 upstream e767a4ea70a3 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/25 19:03 upstream 165768bb7026 f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/25 16:54 upstream 165768bb7026 f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/25 10:20 upstream 165768bb7026 f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/25 08:07 upstream 165768bb7026 f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/25 01:22 upstream f49a343b305c 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/25 00:07 upstream f49a343b305c 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/24 22:53 upstream f49a343b305c 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/24 18:32 upstream 62f4c998b297 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/24 17:16 upstream 62f4c998b297 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/24 11:01 upstream 62f4c998b297 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/24 08:49 upstream 62f4c998b297 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/23 21:04 upstream fe2ec83746e5 0a1606bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/23 13:56 upstream fe2ec83746e5 abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/23 11:33 upstream fe2ec83746e5 abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/23 10:28 upstream fe2ec83746e5 abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/23 03:20 upstream c4e9f74da438 3e2106e5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/22 21:16 upstream c4e9f74da438 3e2106e5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/22 13:03 upstream f0100363d8c3 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/22 11:57 upstream f0100363d8c3 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/22 03:32 upstream f0100363d8c3 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/22 00:16 upstream f0100363d8c3 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/21 16:36 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/21 14:10 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/21 09:48 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/21 08:27 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/21 04:53 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/21 01:18 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/20 23:22 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in smb2_add_credits
2026/09/20 12:03 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/20 08:18 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/09/20 07:16 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/19 23:43 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/19 20:29 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in smb2_add_credits
2026/09/19 18:54 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in smb2_add_credits
2026/09/19 17:41 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in smb2_add_credits
2026/10/15 03:46 upstream 0fcb05b72344 8fb0ae89 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/10/03 07:50 upstream 5e0f8396d480 57bbd979 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/24 00:50 upstream 62f4c998b297 0a1606bc .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/23 22:50 upstream fe2ec83746e5 0a1606bc .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/23 19:14 upstream fe2ec83746e5 0a1606bc .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/22 07:28 upstream f0100363d8c3 e12281bd .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/22 03:47 upstream f0100363d8c3 a8efa948 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/21 11:54 upstream 93f51579e7df 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/21 02:33 upstream 518e5b794c06 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/20 21:39 upstream 518e5b794c06 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/20 18:14 upstream 518e5b794c06 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/20 16:20 upstream 518e5b794c06 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/20 13:38 upstream 518e5b794c06 853b104b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in smb2_add_credits
2026/09/20 02:14 upstream 518e5b794c06 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/19 15:59 upstream 40288c9206c1 853b104b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in smb2_add_credits
2026/09/25 09:31 upstream 165768bb7026 f281d9d2 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in smb2_add_credits
2026/09/22 01:29 linux-next 9d80aa4617b3 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in smb2_add_credits
2026/09/19 14:12 linux-next 9d80aa4617b3 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in smb2_add_credits
2026/09/11 20:18 linux-next a9d7ced84989 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in smb2_add_credits
* Struck through repros no longer work on HEAD.