assert issue locates in hw/scsi/lsi53c895a.c:624: lsi_do_dma: Assertion `s->current' failed

This bug has been copied automatically from: https://bugs.launchpad.net/qemu/+bug/1905521
Reported by 'Gaoning Pan' on 2020-11-25 :

Hello,

I found an assertion failure in hw/scsi/lsi53c895a.c:624

This was found in latest version 5.2.0.


my reproduced environment is as follows:
    Host: ubuntu 18.04
    Guest: ubuntu 18.04



QEMU boot command line:
qemu-system-x86_64 -enable-kvm -boot c -m 4G -drive
format=qcow2,file=./ubuntu.img -nic user,hostfwd=tcp:0.0.0.0:5555-:22
-display none -device lsi53c895a -trace lsi\*

Backtrace is as follows:
#0  0x00007f845c6eff47 in __GI_raise (sig=sig@entry=6) at
../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007f845c6f18b1 in __GI_abort () at abort.c:79
#2  0x00007f845c6e142a in __assert_fail_base (fmt=0x7f845c868a38
"%s%s%s:%u: %s%sAssertion `%s' failed.\n%n",
assertion=assertion@entry=0x55a1034486a0 "s->current",
file=file@entry=0x55a103448360 "../hw/scsi/lsi53c895a.c",
line=line@entry=624, function=function@entry=0x55a10344ae60
<__PRETTY_FUNCTION__.31674> "lsi_do_dma") at assert.c:92
#3  0x00007f845c6e14a2 in __GI___assert_fail (assertion=0x55a1034486a0
"s->current", file=0x55a103448360 "../hw/scsi/lsi53c895a.c", line=624,
function=0x55a10344ae60 <__PRETTY_FUNCTION__.31674> "lsi_do_dma") at
assert.c:101
#4  0x000055a102049c65 in lsi_do_dma (s=0x62600000c100, out=1) at
../hw/scsi/lsi53c895a.c:624
#5  0x000055a102051573 in lsi_execute_script (s=0x62600000c100) at
../hw/scsi/lsi53c895a.c:1250
#6  0x000055a10205b05d in lsi_reg_writeb (s=0x62600000c100, offset=47,
val=178 '\262') at ../hw/scsi/lsi53c895a.c:1984
#7  0x000055a10205fef8 in lsi_io_write (opaque=0x62600000c100, addr=47,
val=178, size=1) at ../hw/scsi/lsi53c895a.c:2146
#8  0x000055a102d1b791 in memory_region_write_accessor (mr=0x62600000cbe0,
addr=47, value=0x7f8349dfe2f8, size=1, shift=0, mask=255, attrs=...) at
../softmmu/memory.c:484
#9  0x000055a102d1bba8 in access_with_adjusted_size (addr=47,
value=0x7f8349dfe2f8, size=1, access_size_min=1, access_size_max=1,
access_fn=0x55a102d1b4de <memory_region_write_accessor>,
mr=0x62600000cbe0, attrs=...) at ../softmmu/memory.c:545
#10 0x000055a102d261ef in memory_region_dispatch_write (mr=0x62600000cbe0,
addr=47, data=178, op=MO_8, attrs=...) at ../softmmu/memory.c:1494
#11 0x000055a102b57c3c in flatview_write_continue (fv=0x6060000ea920,
addr=49199, attrs=..., ptr=0x7f8449efb000, len=1, addr1=47, l=1,
mr=0x62600000cbe0) at ../softmmu/physmem.c:2767
#12 0x000055a102b57f07 in flatview_write (fv=0x6060000ea920, addr=49199,
attrs=..., buf=0x7f8449efb000, len=1) at ../softmmu/physmem.c:2807
#13 0x000055a102b587cb in address_space_write (as=0x55a105ebca80
<address_space_io>, addr=49199, attrs=..., buf=0x7f8449efb000, len=1) at
../softmmu/physmem.c:2899
#14 0x000055a102b58878 in address_space_rw (as=0x55a105ebca80
<address_space_io>, addr=49199, attrs=..., buf=0x7f8449efb000, len=1,
is_write=true) at ../softmmu/physmem.c:2909
#15 0x000055a102ad4d50 in kvm_handle_io (port=49199, attrs=...,
data=0x7f8449efb000, direction=1, size=1, count=1) at ../accel/kvm/kvm-
all.c:2283
#16 0x000055a102ad6a0f in kvm_cpu_exec (cpu=0x62e000000400) at
../accel/kvm/kvm-all.c:2529
#17 0x000055a102c26fbb in kvm_vcpu_thread_fn (arg=0x62e000000400) at
../accel/kvm/kvm-cpus.c:49
#18 0x000055a1032c08f8 in qemu_thread_start (args=0x603000082780) at
../util/qemu-thread-posix.c:521
#19 0x00007f845caa96db in start_thread (arg=0x7f8349dff700) at
pthread_create.c:463
#20 0x00007f845c7d2a3f in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:95


The poc is attached.