In case we don't have a device for an active queue, just skip processing the queue (same we do for inactive queues) and log a guest bug.
Reported-by: Guenter Roeck <li...@roeck-us.net> Signed-off-by: Gerd Hoffmann <kra...@redhat.com> Tested-by: Guenter Roeck <li...@roeck-us.net> Message-id: 20190821085319.13711-1-kra...@redhat.com --- hw/usb/hcd-ehci.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/hw/usb/hcd-ehci.c b/hw/usb/hcd-ehci.c index 9ca7b87a8001..56ab2f457f4c 100644 --- a/hw/usb/hcd-ehci.c +++ b/hw/usb/hcd-ehci.c @@ -1838,6 +1838,9 @@ static int ehci_state_fetchqtd(EHCIQueue *q) ehci_set_state(q->ehci, q->async, EST_EXECUTING); break; } + } else if (q->dev == NULL) { + ehci_trace_guest_bug(q->ehci, "no device attached to queue"); + ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); } else { p = ehci_alloc_packet(q); p->qtdaddr = q->qtdaddr; -- 2.18.1