kern/56518: USB panic when using uaudio

[coypu%sdf.org@localhost]

>Number:         56518
>Category:       kern
>Synopsis:       USB panic when using uaudio
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Nov 23 19:45:00 +0000 2021
>Originator:     coypu
>Release:        NetBSD 9.99.92
>Organization:
>Environment:
NetBSD planets 9.99.92 NetBSD 9.99.92 (GENERIC) #3: Mon Nov 22 21:29:13 IST 2021  fly@planets:/bracket/git/obj/sys/arch/amd64/compile/GENERIC amd64

>Description:
Use a Creative BT-W3 and play some audio. Works fine, but panics fairly quickly.

One of the ways it panics is:
[  4550.987083] uaudio0 at uhub1 port 4 configuration 1 interface 0
[  4550.987083] uaudio0: Creative Technology Ltd (0x041e) Creative BT-W3 (0x3270), rev 2.00/1.00, addr 6
[  4551.007083] uaudio0: audio rev 1.00
[  4551.007083] audio1 at uaudio0: playback, capture, full duplex, independent
[  4551.007083] audio1: slinear_le:16 2ch 48000Hz, blk 11520 bytes (60ms) for playback
[  4551.007083] audio1: slinear_le:16 1ch 48000Hz, blk 5760 bytes (60ms) for recording
[  4551.007083] spkr2 at audio1: PC Speaker (synthesized)
[  4551.007083] wsbell at spkr2 not configured
[  4551.007083] uhidev6 at uhub1 port 4 configuration 1 interface 3
[  4551.007083] uhidev6: Creative Technology Ltd (0x041e) Creative BT-W3 (0x3270), rev 2.00/1.00, addr 6, iclass 3/0
[  4551.037083] uhidev6: 3 report ids
[  4551.037083] uhid4 at uhidev6 reportid 1: input=2, output=0, feature=0
[  4551.037083] uhid5 at uhidev6 reportid 2: input=18, output=18, feature=0
[  4551.037083] uhid6 at uhidev6 reportid 3: input=64, output=64, feature=0
[  4551.037083] uhidev7 at uhub1 port 4 configuration 1 interface 4
[  4551.037083] uhidev7: Creative Technology Ltd (0x041e) Creative BT-W3 (0x3270), rev 2.00/1.00, addr 6, iclass 3/0
[  4551.077083] uhidev7: 4 report ids
[  4551.077083] uhid7 at uhidev7 reportid 1: input=0, output=65, feature=0
[  4551.077083] uhid8 at uhidev7 reportid 2: input=65, output=0, feature=0
[  4551.077083] uhid9 at uhidev7 reportid 3: input=0, output=0, feature=3
[  4551.077083] uhid10 at uhidev7 reportid 4: input=0, output=0, feature=3
51] uaudio0: uaudio_chan_pintr: count(0) != size(1920), status(1s/dev/usb/usbdi.c", line 1058 xfer 0xffffc7155a315180 is not start of queue (0xffffc7155a3152c0 is at start)
[  4640.896695] cpu0: Begin traceback...
[  4640.896695] vpanic() at netbsd:vpanic+0x156
[  4640.896695] __x86_indirect_thunk_rax() at netbsd:__x86_indirect_thunk_rax
[  4640.896695] usb_transfer_complete() at netbsd:usb_transfer_complete+0x403
[  4640.896695] xhci_softintr() at netbsd:xhci_softintr+0x53a
[  4640.896695] usb_soft_intr() at netbsd:usb_soft_intr+0x25
[  4640.896695] softint_dispatch() at netbsd:softint_dispatch+0xf2
[  4640.896695] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff88813d6720f0
[  4640.896695] Xsoftintr() at netbsd:Xsoftintr+0x4f
[  4640.896695] --- interrupt ---
[  4640.896695] 47c6e3a74b86e3a3:
[  4640.896695] cpu0: End traceback...

>How-To-Repeat:

>Fix: