This was originally reported at: https://bugs.launchpad.net/qemu/+bug/1890155 Hello, Reproducer ----------- ``` cat << EOF | ./qemu-system-i386 -device vmxnet3 -m 64 -nodefaults -qtest\ stdio -nographic outl 0xcf8 0x80001014 outl 0xcfc 0xe0001000 outl 0xcf8 0x80001004 outw 0xcfc 0x06 write 0x0 0x1 0xe1 write 0x1 0x1 0xfe write 0x2 0x1 0xbe write 0x3 0x1 0xba write 0x52 0x1 0x20 write 0xe0001020 0x4 0x0000feca EOF ``` Stack-Trace ----------- ``` qemu: hardware error: Bad interrupt index: 32 CPU #0: EAX=00000000 EBX=00000000 ECX=00000000 EDX=00000663 ESI=00000000 EDI=00000000 EBP=00000000 ESP=00000000 EIP=0000fff0 EFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 00000000 0000ffff 00009300 CS =f000 ffff0000 0000ffff 00009b00 SS =0000 00000000 0000ffff 00009300 DS =0000 00000000 0000ffff 00009300 FS =0000 00000000 0000ffff 00009300 GS =0000 00000000 0000ffff 00009300 LDT=0000 00000000 0000ffff 00008200 TR =0000 00000000 0000ffff 00008b00 GDT= 00000000 0000ffff IDT= 00000000 0000ffff CR0=60000010 CR2=00000000 CR3=00000000 CR4=00000000 DR0=00000000 DR1=00000000 DR2=00000000 DR3=00000000 DR6=ffff0ff0 DR7=00000400 EFER=0000000000000000 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 Aborted #0 __GI_raise at ../sysdeps/unix/sysv/linux/raise.c:50 #1 0x00007ffff620f537 in __GI_abort at abort.c:79 #2 0x00005555573f8870 in hw_error at ../softmmu/cpus.c:126 #3 0x0000555556b5741b in vmxnet3_validate_interrupts at ../hw/net/vmxnet3.c:1360 #4 0x0000555556b5496a in vmxnet3_activate_device at ../hw/net/vmxnet3.c:1559 #5 vmxnet3_handle_command at ../hw/net/vmxnet3.c:1589 #6 vmxnet3_io_bar1_write at ../hw/net/vmxnet3.c:1785 #7 0x00005555571f867c in memory_region_write_accessor at ../softmmu/memory.c:492 #8 0x00005555571f83ab in access_with_adjusted_size at ../softmmu/memory.c:554 #9 0x00005555571f804d in memory_region_dispatch_write at ../softmmu/memory.c:1511 #10 0x0000555557243d52 in flatview_write_continue at ../softmmu/physmem.c:2777 #11 0x00005555572400e1 in flatview_write at ../softmmu/physmem.c:2817 #12 address_space_write at ../softmmu/physmem.c:2909 #13 0x000055555739bff3 in qtest_process_command at ../softmmu/qtest.c:670 #14 0x000055555739a83a in qtest_process_inbuf at ../softmmu/qtest.c:813 #15 0x000055555768d9f9 in fd_chr_read at ../chardev/char-fd.c:73 #16 0x00007ffff7884d6f in g_main_context_dispatch at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0 #17 0x00005555579b1cf5 in glib_pollfds_poll at ../util/main-loop.c:232 #18 os_host_main_loop_wait at ../util/main-loop.c:255 #19 main_loop_wait at ../util/main-loop.c:531 #20 0x0000555557279fb7 in qemu_main_loop at ../softmmu/runstate.c:726 #21 0x00005555567997cb in main at ../softmmu/main.c:50 ``` **OSS-Fuzz Report:** https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36871 **libqtest Reproducer:** [1890155.c](/uploads/c874c6e8317d6cd86cac73c5a1ae4405/1890155.c) Thank you