Pull up following revision(s) (requested by rin in ticket #1169):

	sys/dev/usb/ehci.c: revision 1.333 (patch)

ehci: usb_syncmem against qtd **after** KASSERT for that qtd

Otherwise, we end up with stale data for DIAGNOSTIC kernel.

Fix device-probe failures discussed in PR kern/58730 for me.
(The main topic of the PR, NFS client lock-up, is not addressed.)

Author: MartinHusemann

sys/dev/usb/ehci.c

@@ -1,4 +1,4 @@
-/*	$NetBSD: ehci.c,v 1.315.2.4 2024/02/17 11:27:30 martin Exp $ */
+/*	$NetBSD: ehci.c,v 1.315.2.5 2025/10/01 17:23:32 martin Exp $ */
 
 /*
  * Copyright (c) 2004-2012,2016,2020 The NetBSD Foundation, Inc.
@@ -54,7 +54,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: ehci.c,v 1.315.2.4 2024/02/17 11:27:30 martin Exp $");
+__KERNEL_RCSID(0, "$NetBSD: ehci.c,v 1.315.2.5 2025/10/01 17:23:32 martin Exp $");
 
 #include "ohci.h"
 #include "uhci.h"
@@ -3780,11 +3780,11 @@ ehci_device_ctrl_start(struct usbd_xfer *xfer)
 	usb_syncmem(&setup->dma, setup->offs, sizeof(setup->qtd),
 	    BUS_DMASYNC_PREWRITE | BUS_DMASYNC_PREREAD);
 
-	 usb_syncmem(&status->dma, status->offs, sizeof(status->qtd),
-	    BUS_DMASYNC_PREWRITE | BUS_DMASYNC_PREREAD);
-
 	KASSERT(status->qtd.qtd_status & htole32(EHCI_QTD_TOGGLE_MASK));
 
+	usb_syncmem(&status->dma, status->offs, sizeof(status->qtd),
+	    BUS_DMASYNC_PREWRITE | BUS_DMASYNC_PREREAD);
+
 #ifdef EHCI_DEBUG
 	DPRINTFN(5, "--- dump start ---", 0, 0, 0, 0);
 	ehci_dump_sqh(sqh);