GENERIC HEAD from Jan 8 08:45 UTC + bmilekic@'s uma_core patch, vmcore.141
Panic in fs/procfs/procfs_regs.c:60

GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 6.0-CURRENT #1: Sun Jan  9 10:54:24 CET 2005
    pho@current.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I  OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.15-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf13  Stepping = 3
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
real memory  = 267583488 (255 MB)
avail memory = 252448768 (240 MB)
:
mount root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
ppanic: thread 100082(truss):2 holds Giant but isn't blocked on a lock

cpuid = 0
KDB: enter: panic
[thread pid 35 tid 100011 ]
Stopped at      kdb_enter+0x2c: leave
db> where
Tracing pid 35 tid 100011 td 0xc1524170
kdb_enter(c082c521,104,c1524170,c175a2e0,c175a2e0) at kdb_enter+0x2c
panic(c082f6a7,186f2,c18b9f4c,2,c083e608) at panic+0x190
propagate_priority(c08f7844,c08f7840,c175a2e0,c08ef4c0,c1524170) at propagate_priority+0x159
turnstile_wait(c08ef4c0,c175a2e0,c08ef4c0,2,c082b965,216) at turnstile_wait+0x1ae
_mtx_lock_sleep(c08ef4c0,c1524170,0,c082d54a,f7) at _mtx_lock_sleep+0xa6
_mtx_lock_flags(c08ef4c0,0,c082d54a,f7) at _mtx_lock_flags+0x88
softclock(0,0,0,c1555bd0,0) at softclock+0x1de
ithread_loop(c154d180,cbc7fd48,c154d180,c0600378,0) at ithread_loop+0x19e
fork_exit(c0600378,c154d180,cbc7fd48) at fork_exit+0x7e
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xcbc7fd7c, ebp = 0 ---
db> where 100082
Tracing pid 2685 tid 100082 td 0xc175a2e0
sched_switch(c175a2e0,0,0) at sched_switch+0xeb
mi_switch(2,0,c08ef480,8,c082da2c) at mi_switch+0x1b1
critical_exit(c08d1660,c175a2e0,0,c175a2e0,3f8) at critical_exit+0xa2
intr_execute_handlers(c08d1660,ce77897c,c175a2e0,3f8,2580) at intr_execute_handlers+0xd0
atpic_handle_intr(0) at atpic_handle_intr+0x39
Xatpic_intr0() at Xatpic_intr0+0x20
--- interrupt, eip = 0xc06227b1, esp = 0xce7789c0, ebp = 0xce7789c4 ---
critical_exit(c0958840,0,c084a234,a23) at critical_exit+0x61
siocnputc(c08cca60,70,5,70,ce778b10) at siocnputc+0x82
cnputc(70,c062baec,c082c6bf,c0826351,ce778af4) at cnputc+0x4c
putchar(70,ce778b10,ce778a58,0,2062bce3) at putchar+0x96
kvprintf(c082c6be,c062baec,ce778b10,a,ce778b30) at kvprintf+0x5f
printf(c082c6be,c08f0960,c08f0960,100,c0826351,ce778b64) at printf+0x43
panic(c0826351,c0826973,c082fcfc,3,c175a2e0) at panic+0xd8
procfs_doprocregs(c175a2e0,c1b1b5e8,c1665d80,0,ce778c90) at procfs_doprocregs+0x10a
pfs_read(ce778c1c,20000,c1f19e04,c08294ba,845) at pfs_read+0x20f
vn_read(c1b17ae4,ce778c90,c1a9c080,0,c175a2e0) at vn_read+0x1b9
dofileread(8,bfbfea50,4c,ffffffff,ffffffff) at dofileread+0x82
read(c175a2e0,ce778d14,3,1,282) at read+0x44
syscall(2f,2f,2f,8059f48,a7c) at syscall+0x128
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (3, FreeBSD ELF32, read), eip = 0x280cdc87, esp = 0xbfbfea1c, ebp = 0xbfbfead8 ---
db> show alllocks
Process 2685 (truss) thread 0xc175a2e0 (100082)
exclusive sleep mutex process lock r = 0 (0xc1b1b650) locked @ fs/procfs/procfs_regs.c:59
exclusive sleep mutex Giant r = 0 (0xc08ef4c0) locked @ kern/vfs_vnops.c:533
Process 2683 (truss) thread 0xc1b1d5c0 (100124)
exclusive sx user map r = 0 (0xc1aaa9a4) locked @ vm/vm_map.c:2994
db> where 100124
Tracing pid 2683 tid 100124 td 0xc1b1d5c0
sched_switch(c1b1d5c0,0,1) at sched_switch+0xeb
mi_switch(1,0,c08f7844,c08f7840,c175a2e0) at mi_switch+0x1b1
turnstile_wait(c08ef4c0,c175a2e0,c08ef4c0,2,c082b965,216) at turnstile_wait+0x1b7
_mtx_lock_sleep(c08ef4c0,c1b1d5c0,0,c08452c1,122) at _mtx_lock_sleep+0xa6
_mtx_lock_flags(c08ef4c0,0,c08452c1,122) at _mtx_lock_flags+0x88
vm_fault(c1aaa960,805a000,2,8,c1b1d5c0) at vm_fault+0xc3a
trap_pfault(805a010,805a010,0,0,1) at trap_pfault+0x126
trap(2f,2f,2f,5,4) at trap+0x392
calltrap() at calltrap+0x5
--- trap 0xc, eip = 0x280db2e5, esp = 0xbfbfe930, ebp = 0xbfbfe968 ---
db> call doadump
Dumping 255 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
Dump complete
0x27
db> reset

1) panic: proc not held
2) panic: thread 100082(truss):2 holds Giant but isn't blocked on a lock

(kgdb) ptd
panic td 0xc175a2e0, pid 2685
(kgdb) btp 2685
 frame 0 at 0xce7788c4: ebp ce778914, eip 0xc06189c9 <mi_switch+433>:   add    $0xc,%esp
 frame 1 at 0xce778914: ebp ce778938, eip 0xc06227f2 <critical_exit+162>:       push   $0x254
 frame 2 at 0xce778938: ebp ce778958, eip 0xc07b3498 <intr_execute_handlers+208>:       mov    0xffffffec(%ebp),%eax
 frame 3 at 0xce778958: ebp ce778974, eip 0xc07c3aad <atpic_handle_intr+57>:    lea    0xfffffff4(%ebp),%esp
 frame 4 at 0xce778974: ebp ce7789c4, eip 0xc07afd10 <Xatpic_intr0+32>: add    $0x4,%esp
 frame 5 at 0xce7789c4: ebp ce7789fc, eip 0xc079e1ca <siocnputc+130>:   add    $0x10,%esp
 frame 6 at 0xce7789fc: ebp ce778a18, eip 0xc0645300 <cnputc+76>:       pop    %eax
 frame 7 at 0xce778a18: ebp ce778a30, eip 0xc062bb82 <putchar+150>:     pop    %eax
 frame 8 at 0xce778a30: ebp ce778af4, eip 0xc062bce3 <kvprintf+95>:     pop    %eax
 frame 9 at 0xce778af4: ebp ce778b24, eip 0xc062c9e3 <printf+67>:       mov    0xc08f0948,%ecx
 frame 10 at 0xce778b24: ebp ce778b58, eip 0xc061247c <panic+216>:      add    $0x18,%esp
 frame 11 at 0xce778b58: ebp ce778bc0, eip 0xc05d984a <procfs_doprocregs+266>:  nop
 frame 12 at 0xce778bc0: ebp ce778bf8, eip 0xc05db8ef <pfs_read+527>:   mov    %eax,%esi
 frame 13 at 0xce778bf8: ebp ce778c68, eip 0xc067199d <vn_read+441>:    testb  $0x1,0x14(%ebp)
 frame 14 at 0xce778c68: ebp ce778cbc, eip 0xc06351a2 <dofileread+130>: add    $0x14,%esp
 frame 15 at 0xce778cbc: ebp ce778cec, eip 0xc06352ec <read+68>:        push   %edi
 frame 16 at 0xce778cec: ebp ce778d40, eip 0xc07c1730 <syscall+296>:    mov    %eax,%ebx
(kgdb) l *vn_read+441
0xc067199d is in vn_read (../../../kern/vfs_vnops.c:552).
547 #ifdef MAC
548  error = mac_check_vnode_read(active_cred, fp->f_cred, vp);
549  if (error == 0)
550 #endif
551     error = VOP_READ(vp, uio, ioflag, fp->f_cred);
552  if ((flags & FOF_OFFSET) == 0)
553     fp->f_offset = uio->uio_offset;
554  fp->f_nextoff = uio->uio_offset;
555  VOP_UNLOCK(vp, 0, td);
556  mtx_unlock(&Giant);
(kgdb) p *((struct thread*)0xc175a2e0).td_proc
$4 = {p_list = {le_next = 0xc1b1b5e8, le_prev = 0xc08f0884}, p_ksegrps = {tqh_first = 0xc1572c60, tqh_last = 0xc1572c64}, p_threads = {
    tqh_first = 0xc175a2e0, tqh_last = 0xc175a2e8}, p_suspended = {tqh_first = 0x0, tqh_last = 0xc18b9de0}, p_ucred = 0xc1a9c080,
  p_fd = 0xc1df8500, p_fdtol = 0x0, p_stats = 0xc1887400, p_limit = 0xc18bd800, p_sigacts = 0xc1cc3000, p_flag = 0x2, p_sflag = 0x1,
  p_state = PRS_NORMAL, p_pid = 0xa7d, p_hash = {le_next = 0x0, le_prev = 0xc15111f4}, p_pglist = {le_next = 0xc1cab000,
    le_prev = 0xc1b1ca28}, p_pptr = 0xc1b1c9d8, p_sibling = {le_next = 0x0, le_prev = 0xc1b1ca3c}, p_children = {lh_first = 0x0}, p_mtx = {
    mtx_object = {lo_class = 0xc088c944, lo_name = 0xc082bb81 "process lock", lo_type = 0xc082bb81 "process lock", lo_flags = 0x430000,
      lo_list = {tqe_next = 0xc18ba068, tqe_prev = 0xc18b9c48}, lo_witness = 0xc0901940}, mtx_lock = 0x4, mtx_recurse = 0x0},
  p_oppid = 0x0, p_vmspace = 0xc1cc44b0, p_swtime = 0x0, p_realtimer = {it_interval = {tv_sec = 0x0, tv_usec = 0x0}, it_value = {
      tv_sec = 0x0, tv_usec = 0x0}}, p_rux = {rux_runtime = {sec = 0x0, frac = 0xd4a16e36adccb4}, rux_uticks = 0x0, rux_sticks = 0x1,
    rux_iticks = 0x0, rux_uu = 0x0, rux_su = 0x0, rux_iu = 0x0}, p_crux = {rux_runtime = {sec = 0x0, frac = 0x0}, rux_uticks = 0x0,
    rux_sticks = 0x0, rux_iticks = 0x0, rux_uu = 0x0, rux_su = 0x0, rux_iu = 0x0}, p_profthreads = 0x0, p_maxthrwaits = 0x0,
  p_traceflag = 0x0, p_tracevp = 0x0, p_tracecred = 0x0, p_textvp = 0xc1e3dbdc, p_siglist = {__bits = {0x0, 0x0, 0x0, 0x0}}, p_lock = 0x0,
  p_sigiolst = {slh_first = 0x0}, p_sigparent = 0x14, p_sig = 0x0, p_code = 0x0, p_stops = 0x0, p_stype = 0x0, p_step = 0x0,
  p_pfsflags = 0x0, p_nlminfo = 0x0, p_aioinfo = 0x0, p_singlethread = 0x0, p_suspcount = 0x0, p_xthread = 0x0, p_boundary_count = 0x0,
  p_magic = 0xbeefface, p_comm = "truss\000r", '\0' <repeats 12 times>, p_pgrp = 0xc182d640, p_sysent = 0xc08cda40, p_args = 0xc182d180,
  p_cpulimit = 0x7fffffffffffffff, p_nice = 0x0, p_xstat = 0x0, p_klist = {kl_lock = 0xc18b9e30, kl_list = {slh_first = 0x0}},
  p_numthreads = 0x1, p_numksegrps = 0x1, p_md = {md_ldt = 0xc1c7d900}, p_itcallout = {c_links = {sle = {sle_next = 0x0}, tqe = {
        tqe_next = 0x0, tqe_prev = 0x0}}, c_time = 0x0, c_arg = 0x0, c_func = 0, c_flags = 0x8}, p_acflag = 0x1, p_ru = 0x0, p_peers = 0x0,
  p_leader = 0xc18b9dc8, p_emuldata = 0x0, p_label = 0x0, p_sched = 0xc18b9fc0}