kern/43375: panic when mount(8)ing umass(4) device (Sony DSC-H50 Digital Camera)

[alan.bsd%gmail.com@localhost]

>Number:         43375
>Category:       kern
>Synopsis:       panic when mount(8)ing umass(4) device (Sony DSC-H50 Digital 
>Camera)
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri May 28 12:15:00 +0000 2010
>Originator:     Alan Bueno
>Release:        NetBSD -current
>Organization:
>Environment:
NetBSD middle-earth.arda.net 5.99.29 NetBSD 5.99.29 (CUSTOM) #0: Mon May 24 
17:37:51 BRT 2010  
root%middle-earth.arda.net@localhost:/usr/obj/sys/arch/i386/compile/CUSTOM i386

>Description:
The umass(4) manual page says that Sony DSC Digital Cameras are known to work, 
but when I try to mount the device (DSC-H50) the kernel panic.

On FreeBSD, OpenBSD, and Linux the device works ok.

When I plug the digital camera, kernel says:
--------------------------------------------

umass0 at uhub4 port 4 configuration 1 interface 0
umass0: Sony DSC-H50, rev 2.00/1.00, addr 4
umass0: using ATAPI over Bulk-Only
atapibus1 at umass0: 2 targets
sd0 at atapibus1 drive 0: <Sony, DSC, 1.00> disk removable
sd0: fabricating a geometry
sd0: 7693 MB, 7693 cyl, 64 head, 32 sec, 512 bytes/sect x 15755264 sectors
fabricating a geometry


fdisk(8) says:
--------------

$ fdisk /dev/sd0
fdisk: Cannot determine the number of heads
Disk: /dev/sd0d
NetBSD disklabel disk geometry:
cylinders: 7693, heads: 64, sectors/track: 32 (2048 sectors/cylinder)
total sectors: 15755264

BIOS disk geometry:
cylinders: 980, heads: 255, sectors/track: 63 (16065 sectors/cylinder)
total sectors: 15755264

Partitions aligned to 16065 sector boundaries, offset 63

Partition table:
0: Primary DOS with 32 bit FAT - LBA (sysid 12)
    start 192, size 15755046 (7693 MB, Cyls 0/3/4-980/183/9), Active
1: <UNUSED>
2: <UNUSED>
3: <UNUSED>
First active partition: 0
$


disklabel(8) says:
------------------

$ disklabel /dev/sd0 
# /dev/sd0d:
type: ATAPI
disk: DSC
label: fictitious
flags: removable
bytes/sector: 512
sectors/track: 32
tracks/cylinder: 64
sectors/cylinder: 2048
cylinders: 7693
total sectors: 15755264
rpm: 3600
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0           # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0 

5 partitions:
#        size    offset     fstype [fsize bsize cpg/sgs]
 d:  15755264         0     unused      0     0        # (Cyl.      0 -   7692)
 e:  15755046       192      MSDOS                     # (Cyl.      0*-   7692*)
disklabel: boot block size 0
disklabel: super block size 0
$


The panic:
----------

# mount_msdos /dev/sd0e /mnt
mount_msdos: "/mnt/" is a non-resolved or relative path.
mount_msdos: using "/mnt" instead.
panic: buf mem pool index 23
cpu0: Begin traceback...
cpu0: End traceback...

dumping to dev 0,1 offset 20063
dump 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25
24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 succeeded


rebooting...
>How-To-Repeat:

>Fix: