kern/60276: Kernel panic when plugginh in USB storage

[Alexey A. Kiritchun]

>Number:         60276
>Category:       kern
>Synopsis:       Kernel panic when plugginh in USB storage
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Dec 15 09:20:19 PST 2003
>Closed-Date:
>Last-Modified:
>Originator:     Alexey A. Kiritchun
>Release:        RELENG_5_2
>Organization:
INLINE Tech.
>Environment:
FreeBSD lair.in-line.ru 5.2-RC FreeBSD 5.2-RC #1: Mon Dec 15 17:17:25 MSK 2003     root at lair.in-line.ru:/usr/obj/usr/src/sys/LAIR  i386
>Description:
When powering on XClef-HD500 MP3 player/USB storage when it is connected to USB, kernel panics and enters debugger. 

Error message is: 
Fatal trap 12: page fault while in kernel mode.

at: umass_cam_rescan+0x40


where says: 
umass_cam_rescan
softclock
ithread_loop
fork_exit
fork_trampoline

Before that, kernel driver find, the immidiately looses the device.
Kernel logs (approx, copyed by hand):

BBB: reset failed, IOERROR
BBB: bulk-in clear failed, IOERROR
BBB: bulk-out clear failed, IOERROR

synchronize cache failed, status=0x39, scsi status=0x0

then device is immidiately found again, with another error message:
uhub1: illegal enable change, port1

umass0 detaches, then system panics.

Dependic on port to which I plug the device, I get different behaviour, but it does not work.

This player works properly with both Windows and Linux, and reports to system as "In-System Design" device.

dmesg follows:
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 5.2-RC #1: Mon Dec 15 17:17:25 MSK 2003
    root at lair.in-line.ru:/usr/obj/usr/src/sys/LAIR
Preloaded elf kernel "/boot/kernel/kernel" at 0xc0854000.
Preloaded elf module "/boot/kernel/snd_pcm.ko" at 0xc08541cc.
Preloaded elf module "/boot/kernel/snd_cmi.ko" at 0xc0854278.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel Celeron (700.00-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x683  Stepping = 3
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
real memory  = 394252288 (375 MB)
avail memory = 373272576 (355 MB)
Pentium Pro MTRR support enabled
acpi0: <ASUS   CUSI-M  > on motherboard
pcibios: BIOS version 2.10
Using $PIR table, 6 entries at 0xc00f1420
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0xe408-0xe40b on acpi0
acpi_cpu0: <CPU> on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib0: slot 1 INTC is routed to irq 10
pcib0: slot 1 INTD is routed to irq 12
pcib0: slot 1 INTD is routed to irq 12
atapci0: <SiS 630 UDMA66 controller> port 0xd800-0xd80f at device 0.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata0: [MPSAFE]
ata1: at 0x170 irq 15 on atapci0
ata1: [MPSAFE]
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
sis0: <SiS 900 10/100BaseTX> port 0xd400-0xd4ff mem 0xee800000-0xee800fff irq 10 at device 1.1 on pci0
sis0: Ethernet address: 00:e0:18:37:52:24
miibus0: <MII bus> on sis0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
ohci0: <SiS 5571 USB controller> mem 0xee000000-0xee000fff irq 12 at device 1.2 on pci0
usb0: OHCI version 1.0, legacy support
usb0: <SiS 5571 USB controller> on ohci0
usb0: USB revision 1.0
uhub0: SiS OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ums0: Logitech Optical USB Mouse, rev 2.00/3.40, addr 2, iclass 3/1
ums0: 3 buttons and Z dir.
ohci1: <SiS 5571 USB controller> mem 0xed800000-0xed800fff irq 12 at device 1.3 on pci0
usb1: OHCI version 1.0, legacy support
usb1: <SiS 5571 USB controller> on ohci1
usb1: USB revision 1.0
uhub1: SiS OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
pcib1: <ACPI PCI-PCI bridge> at device 2.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pcib1: slot 0 INTA is routed to irq 11
pci1: <display, VGA> at device 0.0 (no driver attached)
pcm0: <CMedia CMI8738> port 0x9800-0x98ff at device 5.0 on pci0
pcib0: slot 5 INTA is routed to irq 10
fdc0: <Enhanced floppy controller (i82077, NE72065 or clone)> port 0x3f7,0x3f2-0x3f5 irq 6 drq 2 on acpi0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
ppc0 port 0x778-0x77b,0x378-0x37f irq 7 drq 3 on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/16 bytes threshold
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
sio0 port 0x3f8-0x3ff irq 4 on acpi0
sio0: type 16550A
sio1 port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
atkbdc0: <Keyboard controller (i8042)> port 0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
orm0: <Option ROM> at iomem 0xc0000-0xcbfff on isa0
pmtimer0 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 700002086 Hz quality 800
Timecounters tick every 10.000 msec
GEOM: create disk ad0 dp=0xc3a43c60
ad0: 19546MB <FUJITSU MPG3204AT E> [39714/16/63] at ata0-master UDMA66
acd0: CDROM <SONY CD-ROM CDU5221> at ata1-master PIO4
Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
/tmp: mount pending error: blocks 576 files 1
WARNING: /usr was not properly dismounted
/usr: superblock summary recomputed
WARNING: /var was not properly dismounted
drm0: <SiS 630> port 0xa800-0xa87f mem 0xec800000-0xec81ffff,0xf0000000-0xf7ffffff irq 11 at device 0.0 on pci1
info: [drm] Initialized sis 1.1.0 20030826 on minor 0
>How-To-Repeat:
Plug the device.
>Fix:
no      
>Release-Note:
>Audit-Trail:
>Unformatted: