tty-related panic on "init 0"

Hey,

Just got a tty-related panic when running "init 0" over a serial console
on FreeBSD 6.0-CURRENT #2: Fri Nov 26 16:59:28 GMT 2004.  I was unable
to obtain a dump, but have a debug kernel available.

Gavin



foo# init 0
foo# Shutting down daemon processes:.
Stopping cron.
Shutting down local daemons:.
Writing entropy file:.
.
Dec  1 16:39:47

Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 00
fault virtual address   = 0x4
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc0639bd6
stack pointer           = 0x10:0xecd10b58
frame pointer           = 0x10:0xecd10b70
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 3483 (screen)
[thread pid 3483 tid 100148 ]
Stopped at      ttymodem+0xee:  movl    0x4(%eax),%edi
db> tr
Tracing pid 3483 tid 100148 td 0xc3b6fc00
ttymodem(c35da000) at ttymodem+0xee
ptcclose(c44c5200,7,2000,c3b6fc00,c3b6fc00) at ptcclose+0x1a
devfs_close(ecd10bc0,c08b78e0,c930c564,7,c4029a80) at devfs_close+0x1ba
vn_close(c930c564,7,c4029a80,c3b6fc00,85a) at vn_close+0x5d
vn_closefile(c5137a5c,c3b6fc00,c44c6c00,0,ecd10cc0) at vn_closefile+0x44
fdrop_locked(c5137a5c,c3b6fc00,c0870164,c3b6fc70,407) at fdrop_locked+0x79
closef(c5137a5c,c3b6fc00,0,ecd10d40,7) at closef+0x1e
close(c3b6fc00,ecd10d14,1,23,246) at close+0x149
syscall(2f,2f,2f,80aa000,80aa000) at syscall+0x128
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (6, FreeBSD ELF32, close), eip = 0x2816766f, esp = 0xbfbfe06c, ebp = 0xbfbfe088 ---