Re: [syzbot] [usb?] WARNING in dib0700_ctrl_rd/usb_submit_urb

From: syzbot

Date: Sun Jun 21 2026 - 09:51:19 EST


> #syz test: git:// http://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 9afe652958c3

I've failed to parse your command.
Did you perhaps forget to provide the branch name, or added an extra ':'?
Please use one of the two supported formats:
1. #syz test
2. #syz test: repo branch-or-commit-hash
Note the lack of ':' in option 1.

>
>
>
> diff --git a/drivers/media/usb/dvb-usb/dib0700_core.c b/drivers/media/usb/dvb-usb/dib0700_core.c
>
> index 986e552f0a97..000000000000 100644
>
> --- a/drivers/media/usb/dvb-usb/dib0700_core.c
>
> +++ b/drivers/media/usb/dvb-usb/dib0700_core.c
>
> @@ -311,6 +311,11 @@ static int dib0700_i2c_xfer_legacy(struct i2c_adapter *adap,
>
> st->buf[0] = REQUEST_I2C_READ;
>
> st->buf[1] |= 1;
>
>
>
> + if (msg[i + 1].len == 0) {
>
> + result = -EINVAL;
>
> + goto unlock;
>
> + }
>
> +
>
> /* special thing in the current firmware: when length is zero the read-failed */
>
> len = dib0700_ctrl_rd(d, st->buf, msg[i].len + 2,
>
>       st->buf, msg[i + 1].len);
>
>