Attaching a QTest reproducer. ./i386-softmmu/qemu-system-i386 -device nec-usb-xhci -trace usb\* \ -device usb-audio -device usb-storage,drive=mydrive \ -drive id=mydrive,file=null-co://,size=2M,format=raw,if=none \ -nodefaults -nographic -qtest stdio < repro
Close to the crash: 21000@1597111713.503068:usb_xhci_slot_configure slotid 58 21000@1597111713.503074:usb_xhci_ep_disable slotid 58, epid 2 21000@1597111713.503077:usb_xhci_ep_enable slotid 58, epid 2 21000@1597111713.503085:usb_xhci_ep_disable slotid 58, epid 6 21000@1597111713.503088:usb_xhci_ep_enable slotid 58, epid 6 21000@1597111713.503092:usb_xhci_ep_disable slotid 58, epid 24 21000@1597111713.503095:usb_xhci_ep_enable slotid 58, epid 24 21000@1597111713.503099:usb_xhci_ep_disable slotid 58, epid 25 21000@1597111713.503102:usb_xhci_ep_enable slotid 58, epid 25 21000@1597111713.503106:usb_xhci_ep_disable slotid 58, epid 29 21000@1597111713.503109:usb_xhci_ep_enable slotid 58, epid 29 21000@1597111713.503113:usb_xhci_ep_disable slotid 58, epid 30 21000@1597111713.503116:usb_xhci_ep_enable slotid 58, epid 30 21000@1597111713.503121:usb_xhci_fetch_trb addr 0x0000000000000b20, CR_ENABLE_SLOT, p 0x0000000000000000, s 0x00000000, c 0x00002700 21000@1597111713.503127:usb_xhci_slot_enable slotid 59 21000@1597111713.503130:usb_xhci_fetch_trb addr 0x0000000000000b30, CR_SET_TR_DEQUEUE, p 0x0000000000000000, s 0x00000000, c 0x00004300 21000@1597111713.503135:usb_xhci_fetch_trb addr 0x0000000000000b40, CR_ENABLE_SLOT, p 0x0000000000000000, s 0x00000000, c 0x00002700 21000@1597111713.503140:usb_xhci_slot_enable slotid 60 21000@1597111713.503143:usb_xhci_fetch_trb addr 0x0000000000000b50, CR_EVALUATE_CONTEXT, p 0x0000000000000000, s 0x00000000, c 0x00003600 21000@1597111713.503149:usb_xhci_fetch_trb addr 0x0000000000000b60, CR_STOP_ENDPOINT, p 0x0000000000000000, s 0x00000000, c 0x3afd3c00 21000@1597111713.503154:usb_xhci_ep_stop slotid 58, epid 29 21000@1597111713.503159:usb_xhci_ep_state slotid 58, epid 29, running -> stopped 21000@1597111713.503163:usb_xhci_fetch_trb addr 0x0000000000000b70, CR_ENABLE_SLOT, p 0x0000000000000000, s 0x00000000, c 0x00002700 21000@1597111713.503168:usb_xhci_slot_enable slotid 61 21000@1597111713.503171:usb_xhci_fetch_trb addr 0x0000000000000b80, CR_SET_TR_DEQUEUE, p 0x0000000000000000, s 0x00000000, c 0x3afd4300 21000@1597111713.503177:usb_xhci_ep_set_dequeue slotid 58, epid 29, streamid 0, ptr 0x0000000000000000 qemu-system-i386: hw/usb/hcd-xhci.c:1016: XHCIStreamContext *xhci_find_stream(XHCIEPContext *, unsigned int, uint32_t *): Assertion `streamid != 0' failed. Aborted ** Attachment added: "repro" https://bugs.launchpad.net/qemu/+bug/1883729/+attachment/5400547/+files/repro -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1883729 Title: xhci_find_stream: Assertion `streamid != 0' failed. Status in QEMU: New Bug description: To reproduce run the QEMU with the following command line: ``` qemu-system-x86_64 -cdrom hypertrash_os_bios_crash.iso -nographic -m 100 -enable-kvm -device virtio-gpu-pci -device nec-usb-xhci -device usb-audio ``` QEMU Version: ``` # qemu-5.0.0 $ ./configure --target-list=x86_64-softmmu --enable-sanitizers; make $ x86_64-softmmu/qemu-system-x86_64 --version QEMU emulator version 5.0.0 Copyright (c) 2003-2020 Fabrice Bellard and the QEMU Project developers ``` To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1883729/+subscriptions
