uhci on cardbus error blocks shutdown

[Iain Hibbert <plunky%rya-online.net@localhost>]

Hi,

Just upgrading from a couple of months ago (4.99.62) to -current as of a
couple of days ago, I notice that the machine won't shutdown/reboot
properly.

I have a bluetooth cardbus card that contains two UHCI controllers and a
bluetooth dongle all in one, shows up as:

uhci1 at cardbus1 function 0: vendor 0x1106 product 0x3038 (rev. 0x62)
uhci1: interrupting at 255
usb1 at uhci1: USB revision 1.0
uhub1 at usb1: vendor 0x1106 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at cardbus1 function 1: vendor 0x1106 product 0x3038 (rev. 0x62)
uhci2: interrupting at 255
usb2 at uhci2: USB revision 1.0
uhub2 at usb2: vendor 0x1106 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ubt0 at uhub1 port 1
ubt0: vendor 0x0a12 product 0x0001, rev 2.00/19.58, addr 2

when I try to shutdown the system, the disks are dismounted as normal
then I get:

uhci1: host system error
uhci1: host controller process error
uhci1: host controller halted
uhci2: host system error
uhci2: host controller process error
uhci2: host controller halted

and the machine just hangs.  I can break into DDB but there seems nothing
interesting in the backtrace (below) but if I eject the card then the halt
or reboot resumes. If this sounds familiar to anybody feel free to speak
up..

regards,
iain

fatal breakpoint trap in supervisor mode
trap type 1 code 0 eip c057404c cs 8 eflags 202 cr2 bbb3abd4 ilevel 6
Stopped in pid 0.3 (system) at  netbsd:breakpoint+0x4:  popl    %ebp
db{0}>
breakpoint(c04a40ec,c0b678e0,c0b67940,cae5cea0,c04a10f0,c0b678e2,c04ad39b,2,c0b548a0,c0b8c280)
 at netbsd:breakpoint+0x4
wskbd_translate(c1332100,1,246,c06edb50,246,0,cae5cf1c,c131b360,1,1501) at 
netbsd:wskbd_translate+0xb15
wskbd_input(c1332100,2,1,c06edbe5,6,1,2,1,1,1) at netbsd:wskbd_input+0xbe
pckbd_input(c131b360,1,1,20,6,c0b7a340,0,c130c8c0,4,6) at 
netbsd:pckbd_input+0x71
pckbcintr(c131b6c0,6,6,cadabcf0,3,0,c1336380,c010163b,c130c8c0,cadabcf0) at 
netbsd:pckbcintr+0xa2
intr_biglock_wrapper(c130c8c0,cadabcf0,ddf5ccdf,bf83aff9,fffbafb1,b7cff9ff,fdc7c5c9,32aeec3f,ead7de97,3df37fcf)
 at netbsd:intr_biglock_wrapper+0x1f
DDB lost frame for netbsd:Xintr_legacy1+0xbb, trying 0xcae5cf74
Xintr_legacy1() at netbsd:Xintr_legacy1+0xbb
--- interrupt ---
--- switch to interrupt stack ---
_kernel_lock(1,10,30,10,10,0,f72840,c134cf80,0,cadabda0) at 
netbsd:_kernel_lock+0x6
softint_dispatch(cbf72840,4,0,0,0,0,cadabd90,cadabd28,ca5a7980,28) at 
netbsd:softint_dispatch+0xe2
DDB lost frame for netbsd:Xsoftintr+0x3d, trying 0xcadabd88
Xsoftintr() at netbsd:Xsoftintr+0x3d
--- interrupt ---
fatal page fault in supervisor mode
trap type 6 code 0 eip c05764e0 cs 8 eflags 10202 cr2 3c ilevel 8
kernel: supervisor trap page fault, code=0
Faulted in DDB; continuing...
db{0}>