kern/44676: unplug USB device with ses(4) panics

[reed%reedmedia.net@localhost]

>Number:         44676
>Category:       kern
>Synopsis:       unplug USB device with ses(4) panics
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Mar 03 22:40:00 +0000 2011
>Originator:     reed%reedmedia.net@localhost
>Release:        NetBSD 5.0.0_PATCH
>Organization:
        
>Environment:
        
        
System: NetBSD new-host 5.0.0_PATCH NetBSD 5.0.0_PATCH (GENERIC) #0: Wed Jul 15 
12:42:22 UTC 2009 
builds%b8.netbsd.org@localhost:/home/builds/ab/netbsd-5-0/i386/200907150000Z-obj/home/builds/ab/netbsd-5-0/src/sys/arch/i386/compile/GENERIC
 i386
Architecture: i386
Machine: i386
>Description:
Unplugging the USB cable for my Western Digital My Passport 0730
caused the system to panic. I reporduce this on i386 and amd64
(amd64 was 5.99.38)

Here is the device:

umass0 at uhub4 port 5 configuration 1 interface 0
umass0: Western Digital My Passport 0730, rev 2.10/10.08, addr 2
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets, 2 luns per target
umass0: at uhub4 port 5 (addr 2) disconnected
probe(umass0:0:0:0): generic HBA error
scsibus0: detached
umass0: detached
umass0 at uhub4 port 5 configuration 1 interface 0
umass0: Western Digital My Passport 0730, rev 2.10/10.08, addr 2
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets, 2 luns per target
sd0 at scsibus0 target 0 lun 0: <WD, My Passport 0730, 1008> disk fixed
sd0: fabricating a geometry
sd0: 931 GB, 953837 cyl, 64 head, 32 sec, 512 bytes/sect x 1953458176 
sectors
sd0: fabricating a geometry
ses0 at scsibus0 target 0 lun 1: <WD, SES Device, 1008> enclosure 
services fixed
ses0: SCSI-3 SES Device

Here is the panic (when I unplugg it):

umass0: at uhub4 port 5 (addr 2) disconnected
panic: config_detach: forced detach of umass failed (45)
fatal breakpoint trap in supervisor mode
trap type 1 code 0 eip c053d13c cs 8 eflags 246 cr2 bb903808 ilevel 0
stopped in pid 0.36 (system) at netbsd:breakpoint+0x4:   pop1  %ebp

bt showed:

usb_disconnect_port
usb_explore
usb_discover
usb_event_thread
(I took a photo, but didn't type in yet.)

I was told on netbsd-users to try disabling ses. That worked.
I can unplug the USB as long as I "disable ses" on the i386.

On the amd64 it looks like this (multiple devices):

umass1 at uhub7 port 1 configuration 1 interface 0
umass1: Western Digital My Passport 0730, rev 2.10/10.08, addr 3
umass1: using SCSI over Bulk-Only
scsibus1 at umass1: 2 targets, 2 luns per target
sd1 at scsibus1 target 0 lun 0: <WD, My Passport 0730, 1008> disk fixed
sd1: fabricating a geometry
sd1: 931 GB, 953837 cyl, 64 head, 32 sec, 512 bytes/sect x 1953458176 
sectors
sd1: fabricating a geometry
ses0 at scsibus1 target 0 lun 1: <WD, SES Device, 1008> enclosure 
services fixed
ses0: SCSI-3 SES Device
scsibus1: detached
umass1: detached
umass1: at uhub7 port 1 (addr 3) disconnected
umass1 at uhub7 port 1 configuration 1 interface 0
umass1: Western Digital My Passport 0730, rev 2.10/10.08, addr 3
umass1: using SCSI over Bulk-Only
scsibus1 at umass1: 2 targets, 2 luns per target
sd2 at scsibus1 target 0 lun 0: <WD, My Passport 0730, 1008> disk fixed
sd2: fabricating a geometry
sd2: 931 GB, 953837 cyl, 64 head, 32 sec, 512 bytes/sect x 1953458176 
sectors
sd2: fabricating a geometry
ses1 at scsibus1 target 0 lun 1: <WD, SES Device, 1008> enclosure 
services fixed
ses1: SCSI-3 SES Device

>How-To-Repeat:
        
>Fix:

>Unformatted: