syzbot


WARNING in add_mtd_device

Status: upstream: reported C repro on 2026/06/20 08:22
Subsystems: mtd
[Documentation on labels]
Reported-by: syzbot+3ae80219c633aca5431c@syzkaller.appspotmail.com
First crash: 4d19h, last: 19h07m
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
83edb5b2-0675-4e4d-84b0-1b51490623cc assessment-security 💥 WARNING in add_mtd_device 2026/06/20 00:04 2026/06/20 00:04 2026/06/20 00:04 023e42b533e586523329e56d8cc833583d338ca9
dashboard requested TargetOS "linux" TargetArch "arm", but agent does not support it
04b80831-e21a-4237-b4a4-59f51b7d7346 assessment-security 💥 WARNING in add_mtd_device 2026/06/18 02:07 2026/06/18 02:07 2026/06/18 02:07 b62b3ded1759f79b37600c5ffe2b0a81b919b0b0
dashboard requested TargetOS "linux" TargetArch "arm", but agent does not support it
Discussions (3)
Title Replies (including bot) Last reply
[PATCH] mtd: mtdpart: validate partition bounds in mtd_add_partition() 1 (1) 2026/06/20 22:56
[PATCH] mtd: mtdpart: fix uninitialized erasesize on MTDPART_OFS_RETAIN error path 1 (1) 2026/06/20 17:06
[syzbot] [mtd?] WARNING in add_mtd_device 0 (4) 2026/06/20 16:09
Last patch testing requests (2)
Created Duration User Patch Repo Result
2026/06/20 16:09 51m nivchenko.dev@gmail.com patch upstream OK log
2026/06/20 13:05 47m kartikey406@gmail.com patch upstream OK log

Sample crash report:
mtd partition "" doesn't have enough space: 0x8000003 < 0x8000084bb, disabled
------------[ cut here ]------------
WARNING: drivers/mtd/mtdcore.c:719 at add_mtd_device+0x56c/0x14cc drivers/mtd/mtdcore.c:719, CPU#0: syz.2.17/3665
Modules linked in:
CPU: 0 UID: 0 PID: 3665 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT 
Hardware name: linux,dummy-virt (DT)
pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : add_mtd_device+0x56c/0x14cc drivers/mtd/mtdcore.c:719
lr : mtd_add_partition+0x218/0x48c drivers/mtd/mtdpart.c:280
sp : ffff8000a2c276f0
x29: ffff8000a2c277b0 x28: ffff0000158a8000 x27: ffff00001ef34004
x26: 1fffe00003de683f x25: ffff00001ef34014 x24: 0000000000000004
x23: ffff00001ef34000 x22: 1ffff00014584f02 x21: 0000000000000000
x20: ffff00001ef341a0 x19: 0000000000000c00 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008764b708
x14: 1ffff00010ec96e1 x13: 0000000000000004 x12: ffff700014584ee9
x11: 1ffff00014584ee8 x10: ffff700014584ee8 x9 : dfff800000000000
x8 : ffff8000a2c27747 x7 : 1ffff00014584eea x6 : 0000000041b58ab3
x5 : ffff700014584eea x4 : ffff8000a2c27750 x3 : 1fffe00003de6800
x2 : 0000000000000000 x1 : 0000000000000007 x0 : 0000000000000000
Call trace:
 add_mtd_device+0x56c/0x14cc drivers/mtd/mtdcore.c:719 (P)
 mtd_add_partition+0x218/0x48c drivers/mtd/mtdpart.c:280
 mtdchar_blkpg_ioctl+0x17c/0x1b8 drivers/mtd/mtdchar.c:562
 mtdchar_ioctl+0x2f8/0x1ed8 drivers/mtd/mtdchar.c:1218
 mtdchar_unlocked_ioctl+0xa0/0xfc drivers/mtd/mtdchar.c:1241
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __arm64_sys_ioctl+0x124/0x1a4 fs/ioctl.c:583
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x74/0x240 arch/arm64/kernel/syscall.c:49
 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:140
 el0_svc+0x58/0x2a4 arch/arm64/kernel/entry-common.c:736
 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:755
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594
irq event stamp: 0
hardirqs last  enabled at (0): [<0000000000000000>] 0x0
hardirqs last disabled at (0): [<ffff800080215cc8>] copy_process+0x16a8/0x5700 kernel/fork.c:2232
softirqs last  enabled at (0): [<ffff800080215ce8>] copy_process+0x16c8/0x5700 kernel/fork.c:2233
softirqs last disabled at (0): [<0000000000000000>] 0x0
---[ end trace 0000000000000000 ]---

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/20 09:10 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master a975094bf98c 43bfcdb0 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64 WARNING in add_mtd_device
2026/06/20 05:14 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master a975094bf98c 43bfcdb0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64 WARNING in add_mtd_device
2026/06/20 05:13 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master a975094bf98c 43bfcdb0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64 WARNING in add_mtd_device
2026/06/16 08:19 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master 0e0611827f33 50bb0618 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-compat WARNING in add_mtd_device
2026/06/16 08:19 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master 0e0611827f33 50bb0618 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-compat WARNING in add_mtd_device
* Struck through repros no longer work on HEAD.