HP PhotoSmart 635 (umass) locks up FreeBSD 5.3-RC1

Hi, I've been putting this off for ages unfortunately. My problem is that
my digital camera, an HP PhotoSmart 635 model with umass support fails to
work correctly on any FreeBSD release I've tried from FreeBSD 5.3-beta5
through to RC1. For starters, I'd like to rule out the camera as the problem,
as other systems such as Linux or Windows XP support it without a hitch.

The two main problems are that when plugged in, it _is_ detected as follows:

umass0: Hewlett-Packard hp photosmart 635, rev 2.00/0.00, addr 3
da0 at umass-sim0 bus 0 target 0 lun 0
da0: <HP PhotoSmart 635 0101> Removable Direct Access SCSI-0 device
da0: 1.000MB/s transfers
da0: 14MB (28864 512 byte sectors: 64H 32S/T 14C)
(da0:umass-sim0:0:0:0): Synchronize cache failed, status == 0x10, scsi status ==
 0x0

at this point, I try to mount -t msdosfs /dev/da0 /mnt which seems to just
hang up. ctrl-c doesn't even get me back to the prompt right away.

After giving up because of my unmountable camera, I usually unplug the camera
which outputs this:

umass0: at uhub1 port 2 (addr 3) disconnected
(da0:umass-sim0:0:0:0): lost device
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
(da0:umass-sim0:0:0:0): removing device entry
Opened disk da0 -> 5
umass0: detached

Unfortunately, rather than being able to go back to my regular tasks, 
the machine usually locks up. Quite consistantly I might add. Only once have
I actually been at the console while it panics, so I only have the one
panic message which I copied down by hand:

Fatal Trap 12: page fault while in kernel mode
fault virtual address		= 0x2
fault code			= supervisor write, page not present
instruction pointer		= 0x8:0xc272f864
stack pointer			= 0x10:0xdc8e9c69
frame pointer			= 0x10:0xdc8e9c94'
code segment			= base 0x0, limit 0xfffff, type 1x1b
				= DPL 0, pres 1, def32 1, gren 1
processor eflags		= interrupt enabled, resume, IOPL=0
current process			= 16 (irq5: pcm0 ohci0)
trap number			= 12
panic: page fault
Uptime: 6m14s

Now, I've actually tried this on _3_ different motherboards, one ECS k7s5a which
has an SiS 735 chipset, unfortunately I don't have the dmesg from that machine.
The second motherboard was an ASRock of some sort, rather new, it also had an
SiS chipset of a different model but due to a lack of driver support for its
agp chipset I returned it and finally bought my present motherboard, an Nforce2.
The board works great, but I'm still stuck without being able to access my
camera, and its quite a pain. On a final note, I also own a vivitar camera,
also a umass device, which seems to work fine. it gets successfully detected
without getting that "Synchronize cache failed" message that the HP camera gets.

I hope this information can be of use, and I hope I can use my camera when 5.3-Release comes out.

Oh, and i'm using SCHED_4BSD, not ULE ;)

- ryan

dmesg:

Copyright (c) 1992-2004 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 5.3-RC1 #7: Wed Oct 20 14:05:42 PDT 2004
    ryan_at_ryan.lan:/usr/obj/usr/src/sys/RYAN
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Sempron(tm)  2400+ (1659.32-MHz 686-class CPU)
  Origin = "AuthenticAMD"  Id = 0x681  Stepping = 1
  Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CM
OV,PAT,PSE36,MMX,FXSR,SSE>
  AMD Features=0xc0480000<MP,AMIE,DSP,3DNow!>
real memory  = 536674304 (511 MB)
avail memory = 511320064 (487 MB)
acpi0: <A M I OEMRSDT> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
cpu0: <ACPI CPU> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pci0: <memory, RAM> at device 0.1 (no driver attached)
pci0: <memory, RAM> at device 0.2 (no driver attached)
pci0: <memory, RAM> at device 0.3 (no driver attached)
pci0: <memory, RAM> at device 0.4 (no driver attached)
pci0: <memory, RAM> at device 0.5 (no driver attached)
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
ohci0: <OHCI (generic) USB controller> mem 0xfe900000-0xfe900fff irq 11 at devic
e 2.0 on pci0
ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: SMM does not respond, resetting
usb0: <OHCI (generic) USB controller> on ohci0
usb0: USB revision 1.0
uhub0: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1: <OHCI (generic) USB controller> mem 0xfea00000-0xfea00fff irq 11 at devic
e 2.1 on pci0
ohci1: [GIANT-LOCKED]
usb1: OHCI version 1.0, legacy support
usb1: SMM does not respond, resetting
usb1: <OHCI (generic) USB controller> on ohci1
usb1: USB revision 1.0
uhub1: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
ums0: Logitech USB-PS/2 Optical Mouse, rev 2.00/11.10, addr 2, iclass 3/1
ums0: 3 buttons and Z dir.
ehci0: <EHCI (generic) USB 2.0 controller> mem 0xfeb00000-0xfeb000ff irq 5 at de
vice 2.2 on pci0
ehci0: [GIANT-LOCKED]
ehci_pci_attach: companion usb0
ehci_pci_attach: companion usb1
usb2: EHCI version 1.0
usb2: companion controllers, 4 ports each: usb0 usb1
usb2: <EHCI (generic) USB 2.0 controller> on ehci0
usb2: USB revision 2.0
uhub2: nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 6 ports with 6 removable, self powered
ndis0: <NVIDIA nForce MCP Networking Adapter> port 0xeff0-0xeff7 mem 0xfe800000-
0xfe800fff irq 11 at device 4.0 on pci0
ndis0: NDIS API version: 5.0
ndis0: Ethernet address: 00:0e:a6:aa:67:22
pcm0: <nVidia nForce2> port 0xec00-0xec7f,0xe800-0xe8ff mem 0xfe700000-0xfe700ff
f irq 11 at device 6.0 on pci0
pcm0: [GIANT-LOCKED]
pcm0: <Avance Logic ALC650 AC97 Codec>
pcib1: <ACPI PCI-PCI bridge> at device 8.0 on pci0
pci1: <ACPI PCI bus> on pcib1
atapci0: <nVidia nForce2 UDMA133 controller> port 0xffa0-0xffaf,0x376,0x170-0x17
7,0x3f6,0x1f0-0x1f7 at device 9.0 on pci0
ata0: channel #0 on atapci0
ata1: channel #1 on atapci0
pcib2: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci2: <ACPI PCI bus> on pcib2
nvidia0: <GeForce4 Ti 4200> mem 0xf3d00000-0xf3d7ffff,0xe8000000-0xefffffff,0xfd
000000-0xfdffffff irq 11 at device 0.0 on pci2
nvidia0: [GIANT-LOCKED]
acpi_button0: <Power Button> on acpi0
fdc0: <floppy drive controller (FDE)> port 0x3f7,0x3f0-0x3f5 irq 6 drq 2 on acpi
0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> port 0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
orm0: <ISA Option ROM> at iomem 0xc0000-0xcefff on isa0
pmtimer0 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 1659318664 Hz quality 800
Timecounters tick every 10.000 msec
ad0: 19541MB <Maxtor 32049H2/YAH814Y0> [39704/16/63] at ata0-master UDMA100
ad1: 39205MB <Maxtor 6E040L0/NAR61EA0> [79656/16/63] at ata0-slave UDMA133
acd0: CDRW <LITE-ON LTR-40125S/ZS0J> at ata1-master UDMA33
acd1: DVDROM <HL-DT-STDVD-ROM GDR8162B/0015> at ata1-slave UDMA33
ums0: at uhub1 port 1 (addr 2) disconnected
ums0: detached
Mounting root from ufs:/dev/ad0s2a
ums0: Logitech USB-PS/2 Optical Mouse, rev 2.00/11.10, addr 2, iclass 3/1
ums0: 3 buttons and Z dir.
ndis0: link up
stray irq7
stray irq7
stray irq7
stray irq7
too many stray irq 7's: not logging anymore
Warning: pid 3125 used static ldt allocation.
See the i386_set_ldt man page for more info