** Tags added: fuzzer -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1909261
Title: [OSS-Fuzz] Issue 28929 xhci: ASSERT: xfer->packet.status != USB_RET_NAK Status in QEMU: New Bug description: === Reproducer === ./qemu-system-i386 -m 512M -machine q35,accel=qtest \ -drive file=null-co://,if=none,format=raw,id=disk0 \ -device qemu-xhci,id=xhci -device usb-tablet,bus=xhci.0 \ -device usb-bot -device usb-storage,drive=disk0 \ -chardev null,id=cd0 -chardev null,id=cd1 \ -device usb-braille,chardev=cd0 -device usb-ccid \ -device usb-ccid -device usb-kbd -device usb-mouse \ -device usb-serial,chardev=cd1 -device usb-tablet \ -device usb-wacom-tablet -device usb-audio \ -qtest stdio -nographic -nodefaults < attachment === Stack Trace === #0 raise #1 abort #2 libc.so.6 #3 __assert_fail #4 xhci_kick_epctx /src/qemu/hw/usb/hcd-xhci.c:1865:13 #5 xhci_ep_kick_timer /src/qemu/hw/usb/hcd-xhci.c:1034:5 #6 timerlist_run_timers /src/qemu/util/qemu-timer.c:574:9 #7 qemu_clock_run_timers /src/qemu/util/qemu-timer.c:588:12 #8 qtest_clock_warp /src/qemu/softmmu/qtest.c:356:9 #9 qtest_process_command /src/qemu/softmmu/qtest.c:752:9 #10 qtest_process_inbuf /src/qemu/softmmu/qtest.c:797:9 #11 qtest_server_inproc_recv /src/qemu/softmmu/qtest.c:904:9 #12 send_wrapper /src/qemu/tests/qtest/libqtest.c:1390:5 #13 qtest_sendf /src/qemu/tests/qtest/libqtest.c:438:5 #14 qtest_clock_step_next /src/qemu/tests/qtest/libqtest.c:912:5 #15 op_clock_step /src/qemu/tests/qtest/fuzz/generic_fuzz.c:574:5 OSS-Fuzz Report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28929 To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1909261/+subscriptions