Panic in usbd_create_xfer

[Yorick Hardy <yorickhardy%gmail.com@localhost>]

Dear current-users,

Is anyone else seeing panics when opening a uhidev? (Generally from SDL.)
I am using a custom kernel with a uintuos (not commited) Wacom, ukbd
and ums hid devices. The panic only happens after a few days, the host
controller is ehci (ATI SB700).

Some example panics:

[ 86314.177679] uvm_fault(0xffff9eda7c67d6f8, 0x810000, 1) -> e
[ 86314.177679] fatal page fault in supervisor mode
[ 86314.177679] trap type 6 code 0 rip 0xffffffff8035784f cs 0x8 rflags 0x10286 cr2 0x810702 ilevel 0 rsp 0xffff9f8156ab2a40
[ 86314.177679] curlwp 0xffff9edaa1c52900 pid 786.786 lowest kstack 0xffff9f8156aae2c0
[ 86314.177679] panic: trap
[ 86314.177679] cpu1: Begin traceback...
[ 86314.177679] vpanic() at netbsd:vpanic+0x156
[ 86314.187672] snprintf() at netbsd:snprintf
[ 86314.187672] startlwp() at netbsd:startlwp
[ 86314.187672] alltraps() at netbsd:alltraps+0xbb
[ 86314.187672] usbd_create_xfer() at netbsd:usbd_create_xfer+0x186
[ 86314.197668] usbd_open_pipe_intr() at netbsd:usbd_open_pipe_intr+0x74
[ 86314.197668] uhidev_open() at netbsd:uhidev_open+0x18c
[ 86314.207668] uhidopen() at netbsd:uhidopen+0xe1
[ 86314.207668] cdev_open() at netbsd:cdev_open+0xae
[ 86314.207668] spec_open() at netbsd:spec_open+0x176
[ 86314.217669] VOP_OPEN() at netbsd:VOP_OPEN+0x3c
[ 86314.217669] vn_open() at netbsd:vn_open+0x130
[ 86314.217669] do_open() at netbsd:do_open+0x119
[ 86314.227669] do_sys_openat() at netbsd:do_sys_openat+0x74
[ 86314.227669] sys_open() at netbsd:sys_open+0x24
[ 86314.237670] syscall() at netbsd:syscall+0x1cc
[ 86314.237670] --- syscall (number 5) ---
[ 86314.237670] netbsd:syscall+0x1cc:
[ 86314.237670] cpu1: End traceback...

Crash version 9.99.77, image version 9.99.77.
crash: _kvm_kvatop(0)
Kernel compiled without options LOCKDEBUG.
System panicked: trap
Backtrace from time of crash is available.
crash> bt
_KERNEL_OPT_NAGR() at 0
?() at ffffbb0150547000
sys_reboot() at sys_reboot
vpanic() at vpanic+0x160
snprintf() at snprintf
startlwp() at startlwp
calltrap() at calltrap+0x11
usbd_create_xfer() at usbd_create_xfer+0x186
usbd_open_pipe_intr() at usbd_open_pipe_intr+0x74
uhidev_open() at uhidev_open+0x18c
uhidopen() at uhidopen+0xe1
cdev_open() at cdev_open+0xae
spec_open() at spec_open+0x176
VOP_OPEN() at VOP_OPEN+0x3c
vn_open() at vn_open+0x130
do_open() at do_open+0x119
do_sys_openat() at do_sys_openat+0x74
sys_open() at sys_open+0x24
syscall() at syscall+0x1cc
--- syscall (number 5) ---
syscall+0x1cc:
crash>

Crash version 9.99.77, image version 9.99.77.
crash: _kvm_kvatop(0)
Kernel compiled without options LOCKDEBUG.
System panicked: trap
Backtrace from time of crash is available.
crash> bt
_KERNEL_OPT_NAGR() at 0
?() at ffffb7814c8e0000
sys_reboot() at sys_reboot
vpanic() at vpanic+0x160
snprintf() at snprintf
startlwp() at startlwp
calltrap() at calltrap+0x11
usbd_create_xfer() at usbd_create_xfer+0x186
usbd_open_pipe_intr() at usbd_open_pipe_intr+0x74
uhidev_open() at uhidev_open+0x18c
uhidopen() at uhidopen+0xe1
cdev_open() at cdev_open+0xae
spec_open() at spec_open+0x176
VOP_OPEN() at VOP_OPEN+0x3c
vn_open() at vn_open+0x130
do_open() at do_open+0x119
do_sys_openat() at do_sys_openat+0x74
sys_open() at sys_open+0x24
syscall() at syscall+0x1cc
--- syscall (number 5) ---
syscall+0x1cc:

-- 
Kind regards,

Yorick Hardy