usb/90700: Kernel panic on connect/mount/use umass device

[Vlad]

>Number:         90700
>Category:       usb
>Synopsis:       Kernel panic on connect/mount/use umass device
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-usb
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Dec 20 18:30:02 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Vlad
>Release:        4.11-STABLE
>Organization:
>Environment:
FreeBSD alpha.office.ezd.com 4.11-STABLE FreeBSD 4.11-STABLE #10: Tue Dec 20 11:52:51 EST 2005
>Description:
Same proble also happen on
FreeBSD delta.VL7.net 4.11-STABLE FreeBSD 4.11-STABLE #1: Thu Nov 10 10:52:24 EST 2005

Date of the kernel is the same date of cvsup.

When connecting, mounting or using any of umass devices "Kingston DataTraveler 2.0 1.00" or "Nikon Coolpix 2200", "some mp3 player (don't remember model and vendor)" with "ufs" or/and "msdos" file systems:

"Kingston DataTraveler 2.0 1.00":
Dec 20 11:59:44 alpha /kernel: umass0: Kingston DataTraveler 2.0, rev 2.00/1.00, addr 2
Dec 20 11:59:44 alpha /kernel: da0 at umass-sim0 bus 0 target 0 lun 0
Dec 20 11:59:44 alpha /kernel: da0: <Kingston DataTraveler 2.0 1.00> Removable Direct Access SCSI-2 device 
Dec 20 11:59:44 alpha /kernel: da0: 650KB/s transfers
Dec 20 11:59:44 alpha /kernel: da0: 978MB (2002944 512 byte sectors: 64H 32S/T 978C)


Kernel panics with this message (/var/log/all.log):

Dec 20 10:48:20 alpha /kernel: Fatal trap 12: page fault while in kernel mode
Dec 20 10:48:20 alpha /kernel: fault virtual address    = 0x70
Dec 20 10:48:20 alpha /kernel: fault code               = supervisor read, page not present
Dec 20 10:48:20 alpha /kernel: instruction pointer      = 0x8:0xc015d968
Dec 20 10:48:20 alpha /kernel: stack pointer            = 0x10:0xc028da24
Dec 20 10:48:20 alpha /kernel: frame pointer            = 0x10:0xc028da4c
Dec 20 10:48:20 alpha /kernel: code segment             = base 0x0, limit 0xfffff, type 0x1b
Dec 20 10:48:20 alpha /kernel: = DPL 0, pres 1, def32 1, gran 1
Dec 20 10:48:20 alpha /kernel: processor eflags = interrupt enabled, resume, IOPL = 0
Dec 20 10:48:20 alpha /kernel: current process          = Idle
Dec 20 10:48:20 alpha /kernel: interrupt mask           = net tty bio cam 
Dec 20 10:48:20 alpha /kernel: trap number              = 12
Dec 20 10:48:20 alpha /kernel: panic: page fault
Dec 20 10:48:20 alpha /kernel: 
Dec 20 10:48:20 alpha /kernel: syncing disks... 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21

One system (delta.VL7.net) is fully scsi based, another don't have any scsi devices, but have scsi support specialy for umass devices.

After update on Dec 20 2005 system stop panic on (un)pluging / (un)mounting, but still panic after reading about 500M from it.

It was not happen with the same systems and same devices before summer 2005 (can't tell exact date of releases).
>How-To-Repeat:
- Plug device
- Mount device fs
- Transfer data from/to the media
>Fix:
              
>Release-Note:
>Audit-Trail:
>Unformatted: