@7hir7een: Yeah, the logs were indeed useful, if only to see what happens on a successful switch

.
So, let's try r15029!
Hooopefully it works in every situation, AND it doesn't crash...
A few things to look out for:
If it doesn't crash, it *may* not actually switch to USBMS until the next time the device is unplugged. Wait for ~10s, there *should* be a message asking you to do just that.
If stuff switches properly immediately, it'll instead proceed to shut down telnet & sshd as usual without that extra 6s delay.
If you're up for it, testing both while plugged in and not will be helpful (KUAL will no longer prevent you to do that).
Thanks again

.