kern/53895: Intermittent USB-related kernel panics when using athn

[david%gutteridge.ca@localhost]

>Number:         53895
>Category:       kern
>Synopsis:       Intermittent USB-related kernel panics when using athn
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 19 23:00:01 +0000 2019
>Originator:     David H. Gutteridge
>Release:        HEAD as of Jan 7, 2019
>Organization:
>Environment:
NetBSD arcusvii.nonus-porta.net 8.99.30 NetBSD 8.99.30 (GENERIC) #0: Mon Jan  7 03:00:39 UTC 2019  mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/i386/compile/GENERIC i386
>Description:
When using a USB athn WiFi dongle, I get intermittent kernel panics
like the following:

[  2191.934743] panic: kernel diagnostic assertion "xfer->ux_status == USBD_CANCELLED || xfer->ux_status == USBD_TIMEOUT" failed: file "/usr/src/sys/dev/usb/ehci.c", line 1058 
[  2191.934743] cpu0: Begin traceback...
[  2191.934743] vpanic(c1070014,da0e0ee0,da0e0f28,c05a7b38,c1070014,c106ff7b,c10e8690,c10e8c89,422,0) at netbsd:vpanic+0x132
[  2191.934743] kern_assert(c1070014,c106ff7b,c10e8690,c10e8c89,422,0,0,f08,4,da0e0f70) at netbsd:kern_assert+0x23
[  2191.934743] ehci_idone.isra.1(db024f3c,f08,4,1,a,7003010,c2dac890,c091fbba,c270ff80,f00) at netbsd:ehci_idone.isra.1+0x66
[  2191.944755] ehci_softintr(c2b07828,da0d00e4,da0e0fe0,c0911481,c2b07828,0,da0d00e4,c0100400,162a000,1630010) at netbsd:ehci_softintr+0x29d
[  2191.944755] usb_soft_intr(c2b07828,0,da0d00e4,c0100400,162a000,1630010,30,c0100010,c272e2a0,0) at netbsd:usb_soft_intr+0x23
[  2191.954759] softint_dispatch(c272ed20,5,a1bffbf7,bbffffff,c9ecffff,7fefdff7,da0e3ff0,da0e3eb4,da0e3f10,80050033) at netbsd:softint_dispatch+0xc9
[  2191.954759] Bad frame pointer: 0xc2a22388
[  2191.954759] cpu0: End traceback...
[  2191.954759] dumping to dev 0,1 offset 2223
[  2191.954759] dump Skipping crash dump on recursive panic
[  2191.954759] panic: atastart: channel 0 busy, xfer not possible
[  2191.954759] cpu0: Begin traceback...
[  2191.954759] vpanic(c10848d4,da0e0ca0,da0e0cd8,c0184eb3,c10848d4,c0d94268,0,c2c77bec,0,c2c77bec) at netbsd:vpanic+0x132
[  2191.954759] snprintf(c10848d4,c0d94268,0,c2c77bec,0,c2c77bec,c2a115dc,c29c7110,c29c7110,200) at netbsd:snprintf
[  2191.954759] ata_get_xfer(c29c7108,c2c77bec,c2c77808,c2c77bec,da0e0d1c,c01800eb,c2b19008,c2c77bec,2000,0) at netbsd:ata_get_xfer
[  2191.954759] wdc_ata_bio(c2b19008,c2c77bec,2000,0,4247af,0,c2c77808,8,c1320340,da0e0d74) at netbsd:wdc_ata_bio+0x75
[  2191.954759] wd_dumpblocks(c2b0f048,db05e000,4247a7,0,8,1fb330,0,8bf,0,c2c78e48) at netbsd:wd_dumpblocks+0xf6
[  2191.954759] dk_dump(c2c77808,1,0,8b7,0,db05e000,1000,0,1000,da0e0dc8) at netbsd:dk_dump+0x1bb
[  2191.954759] wddump(1,0,8b7,0,db05e000,1000,db05f000,da0e0dec,da0e0de4,c0117f1d) at netbsd:wddump+0x82
[  2191.954759] dump_header_flush(da0e0dec,10,3b528000,1,1,da0e0dfc,c011801b,3b527000,0,1000) at netbsd:dump_header_flush+0x74
[  2191.954759] dump_header_addbytes(3b527000,0,1000,0,da0e0e30,c0117cb0,3b527000,1000,c139f410,c0117fee) at netbsd:dump_header_addbytes+0x2f
[  2191.954759] dump_header_addseg(3b527000,1000,c139f410,c0117fee,1,0,3b527000,3f5b2000,2446a,c13c1680) at netbsd:dump_header_addseg+0x2d
[  2191.954759] dump_seg_iter(1,0,da0e0e5c,1,0,8af,1fb330,ca8f8604,d5f8,162a000) at netbsd:dump_seg_iter+0xb0
[  2191.954759] dodumpsys(da0e0ee0,5,104,c011b405,8,c10fdfe1,0,104,c1070014,da0e0ee0) at netbsd:dodumpsys+0x240
[  2191.954759] dumpsys(104,0,c1070014,da0e0ee0,db024f00,c2b21bf4,c2b21bf4,da0e0ed4,c0d81be2,c1070014) at netbsd:dumpsys+0x14
[  2191.954759] vpanic(c1070014,da0e0ee0,da0e0f28,c05a7b38,c1070014,c106ff7b,c10e8690,c10e8c89,422,0) at netbsd:vpanic+0x142
[  2191.954759] kern_assert(c1070014,c106ff7b,c10e8690,c10e8c89,422,0,0,f08,4,da0e0f70) at netbsd:kern_assert+0x23
[  2191.954759] ehci_idone.isra.1(db024f3c,f08,4,1,a,7003010,c2dac890,c091fbba,c270ff80,f00) at netbsd:ehci_idone.isra.1+0x66
[  2191.954759] ehci_softintr(c2b07828,da0d00e4,da0e0fe0,c0911481,c2b07828,0,da0d00e4,c0100400,162a000,1630010) at netbsd:ehci_softintr+0x29d
[  2191.954759] usb_soft_intr(c2b07828,0,da0d00e4,c0100400,162a000,1630010,30,c0100010,c272e2a0,0) at netbsd:usb_soft_intr+0x23
[  2191.954759] softint_dispatch(c272ed20,5,a1bffbf7,bbffffff,c9ecffff,7fefdff7,da0e3ff0,da0e3eb4,da0e3f10,80050033) at netbsd:softint_dispatch+0xc9

>How-To-Repeat:
Plug in an athn USB WiFi dongle.
Start wpa_supplicant. (It may panic at this point.)
Start dhcpcd. (It may panic at this point.)

It does not panic at the same point every time, nor is it consistently
reproducible, but I have had it happen four times so far.

>Fix: