GENERIC 6.0-BETA1 from Jul 27 05:41 UTC, vmcore.432
Page fault in kern_proc.c:736

GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 6.0-BETA1 #3: Wed Jul 27 07:57:10 CEST 2005
    pho@current.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.14-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf13  Stepping = 3
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
real memory  = 267583488 (255 MB)
avail memory = 252194816 (240 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
rl0: link state changed to DOWN
lock order reversal
 1st 0xc097a0a0 UMA lock (UMA lock) @ vm/uma_core.c:1494
 2nd 0xc1060144 system map (system map) @ vm/vm_map.c:2317
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c092f1b8,c092f2f8,c08b9bc4) at kdb_backtrace+0x29
witness_checkorder(c1060144,9,c087042a,90d) at witness_checkorder+0x564
_mtx_lock_flags(c1060144,0,c0870421,90d) at _mtx_lock_flags+0x5b
_vm_map_lock(c10600c0,c0870421,90d) at _vm_map_lock+0x26
vm_map_remove(c10600c0,c1d1a000,c1d1b000,cc9d4c08,c077e34d) at vm_map_remove+0x1f
kmem_free(c10600c0,c1d1a000,1000,cc9d4c38,c077dcfa) at kmem_free+0x25
page_free(c1d1a000,1000,2) at page_free+0x29
zone_drain(c103e1e0) at zone_drain+0x26a
zone_foreach(c077da90,cc9d4cec,c078fb63,c1654300,cc9d4c74) at zone_foreach+0x37
uma_reclaim(c1654300,cc9d4c74,0,c09257e0,cc9d4c80) at uma_reclaim+0x12
vm_pageout_scan(0,c097a500,0,c08718fa,5c3) at vm_pageout_scan+0x103
vm_pageout(0,cc9d4d38,0,c079091c,0) at vm_pageout+0x2c3
fork_exit(c079091c,0,cc9d4d38) at fork_exit+0xa0
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xcc9d4d6c, ebp = 0 ---
kernel trap 12 with interrupts disabled


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x24
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc062c781
stack pointer           = 0x28:0xcc9f5840
frame pointer           = 0x28:0xcc9f5860
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = resume, IOPL = 0
current process         = 597 (top)
[thread pid 597 tid 100051 ]
Stopped at      fill_kinfo_thread+0x3f5:        movl    0x24(%edx),%eax
db> where
Tracing pid 597 tid 100051 td 0xc1655480
fill_kinfo_thread(c185fa80,cc9f5878,20f1,0,300) at fill_kinfo_thread+0x3f5
sysctl_out_proc(c21daa3c,cc9f5bf4,0,0,0) at sysctl_out_proc+0xdd
sysctl_kern_proc(c08b9f20,0,0,cc9f5bf4,c08b9f20) at sysctl_kern_proc+0x43c
sysctl_root(0,cc9f5c74,3,cc9f5bf4,c1655480) at sysctl_root+0x11b
userland_sysctl(c1655480,cc9f5c74,3,0,bfbfe9ac) at userland_sysctl+0xf4
__sysctl(c1655480,cc9f5d04,6,1d5d,296) at __sysctl+0x77
syscall(3b,bfbf003b,bfbf003b,3,bfbfe9ac) at syscall+0x22f
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (202, FreeBSD ELF32, __sysctl), eip = 0x2817e5d7, esp = 0xbfbfe90c, ebp = 0xbfbfe948 ---
db> call doadump
Dumping 254 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 255MB (65072 pages) 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

Dump complete
= 0xf
db> reset

#0  doadump () at pcpu.h:165
#1  0xc0468e63 in db_fncall (dummy1=0x0, dummy2=0x0, dummy3=0x0, dummy4=0xcc9f5690 "V\2374") at ../../../ddb/db_command.c:489
#2  0xc0468c68 in db_command (last_cmdp=0xc0903244, cmd_table=0x0, aux_cmd_tablep=0xc0880740, aux_cmd_tablep_end=0xc088075c)
    at ../../../ddb/db_command.c:349
#3  0xc0468d30 in db_command_loop () at ../../../ddb/db_command.c:455
#4  0xc046a8d1 in db_trap (type=0xc, code=0x0) at ../../../ddb/db_main.c:221
#5  0xc0649e20 in kdb_trap (type=0xc, code=0x0, tf=0xcc9f5800) at ../../../kern/subr_kdb.c:473
#6  0xc07ed608 in trap_fatal (frame=0xcc9f5800, eva=0x24) at ../../../i386/i386/trap.c:831
#7  0xc07ecd4e in trap (frame=
      {tf_fs = 0x8, tf_es = 0xcc9f0028, tf_ds = 0xc0620028, tf_edi = 0xcc9f5878, tf_esi = 0xc30c2000, tf_ebp = 0xcc9f5860, tf_isp = 0xcc9f582c, tf_ebx = 0xc185fa80, tf_edx = 0x0, tf_ecx = 0xc185fa80, tf_eax = 0xfffffffe, tf_trapno = 0xc, tf_err = 0x0, tf_eip = 0xc062c781, tf_cs = 0x20, tf_eflags = 0x10006, tf_esp = 0x78979, tf_ss = 0x0}) at ../../../i386/i386/trap.c:271
#8  0xc07dabaa in calltrap () at ../../../i386/i386/exception.s:137
#9  0x00000008 in ?? ()
#10 0xcc9f0028 in ?? ()
#11 0xc0620028 in jail (td=0xc185fa80, uap=0x0) at ../../../kern/kern_jail.c:172
#12 0xc062ccb1 in sysctl_out_proc (p=0xc21daa3c, req=0xcc9f5bf4, flags=0x0) at ../../../kern/kern_proc.c:886
#13 0xc062d208 in sysctl_kern_proc (oidp=0x0, arg1=0x0, arg2=0x0, req=0xcc9f5bf4) at ../../../kern/kern_proc.c:1075
#14 0xc06391f3 in sysctl_root (oidp=0x0, arg1=0x0, arg2=0x0, req=0xcc9f5bf4) at ../../../kern/kern_sysctl.c:1241
#15 0xc06393c4 in userland_sysctl (td=0x0, name=0xcc9f5c74, namelen=0x3, old=0xcc9f5bf4, oldlenp=0xbfbfe9ac, inkernel=0x0, new=0x0,
    newlen=0x0, retval=0xcc9f5c70, flags=0x0) at ../../../kern/kern_sysctl.c:1340
#16 0xc063927b in __sysctl (td=0xc1655480, uap=0xcc9f5d04) at ../../../kern/kern_sysctl.c:1275
#17 0xc07ed8f7 in syscall (frame=
      {tf_fs = 0x3b, tf_es = 0xbfbf003b, tf_ds = 0xbfbf003b, tf_edi = 0x3, tf_esi = 0xbfbfe9ac, tf_ebp = 0xbfbfe948, tf_isp = 0xcc9f5d64, tf_ebx = 0x281a24e8, tf_edx = 0x0, tf_ecx = 0xbfbfe9e0, tf_eax = 0xca, tf_trapno = 0x0, tf_err = 0x2, tf_eip = 0x2817e5d7, tf_cs = 0x33, tf_eflags = 0x296, tf_esp = 0xbfbfe90c, tf_ss = 0x3b}) at ../../../i386/i386/trap.c:985
#18 0xc07dabff in Xint0x80_syscall () at ../../../i386/i386/exception.s:198
(kgdb) f 12
#12 0xc062ccb1 in sysctl_out_proc (p=0xc21daa3c, req=0xcc9f5bf4, flags=0x0) at ../../../kern/kern_proc.c:886
886                             fill_kinfo_thread(td, &kinfo_proc);
(kgdb) l
881                                        sizeof(kinfo_proc));
882                     PROC_LOCK(p);
883             } else {
884                     _PHOLD(p);
885                     FOREACH_THREAD_IN_PROC(p, td) {
886                             fill_kinfo_thread(td, &kinfo_proc);
887                             PROC_UNLOCK(p);
888                             error = SYSCTL_OUT(req, (caddr_t)&kinfo_proc,
889                                                sizeof(kinfo_proc));
890                             PROC_LOCK(p);
(kgdb) p td->td_state
$3 = TDS_INACTIVE
(kgdb) l *0xc062c781
0xc062c781 is in fill_kinfo_thread (../../../kern/kern_proc.c:736).
731                     }
732
733                     kg = td->td_ksegrp;
734
735                     /* things in the KSE GROUP */
736                     kp->ki_estcpu = kg->kg_estcpu;
737                     kp->ki_slptime = kg->kg_slptime;
738                     kp->ki_pri.pri_user = kg->kg_user_pri;
739                     kp->ki_pri.pri_class = kg->kg_pri_class;
740