LOR+PANIC in 7.0-CURRENT

FreeBSD  7.0-CURRENT FreeBSD 7.0-CURRENT #16: Mon Dec 26 19:39:26 CET 2005 
root_at_:/usr/src/sys/i386/compile/TEST  i386


  lock order reversal: (sleepable after non-sleepable)
  1st 0xc2b77498 inp (tcpinp) _at_ netinet/tcp_input.c:743
  2nd 0xc0967ec4 user map (user map) _at_ vm/vm_map.c:2993
  KDB: stack backtrace:
  kdb_backtrace(0,ffffffff,c0977848,c0977488,c092ad8c) at kdb_backtrace+0x29
  witness_checkorder(c0967ec4,9,c08b631d,bb1) at witness_checkorder+0x580
  _sx_xlock(c0967ec4,c08b6314,bb1) at _sx_xlock+0x50
  _vm_map_lock_read(c0967e80,c08b6314,bb1,216da80,c216c6ec) at _vm_map_lock_read+0x33
  vm_map_lookup(cbfd9888,0,2,cbfd988c,cbfd987c) at vm_map_lookup+0x28
  vm_fault(c0967e80,0,2,8,c216da80) at vm_fault+0x65
  trap_pfault(cbfd99a4,0,44) at trap_pfault+0xee
  trap(c2160008,cbfd0028,c0690028,44,c28baa63) at trap+0x3cd
  calltrap() at calltrap+0x5
  --- trap 0xc, eip = 0xc0829b36, esp = 0xcbfd99e4, ebp = 0xcbfd9a14 ---
  generic_bcopy(c28baa63,6d,c228a438,c228a438,c0929784) at generic_bcopy+0x1a
  pppasyncstart(c243a600,c227210c,0,c08a5fee,3af) at pppasyncstart+0x108
  pppoutput(c2272000,c2a52500,c2846330,c2437ba0,c2849c00) at pppoutput+0x2b2
  ip_output(c2a52500,0,cbfd9ac8,0,0) at ip_output+0x7b6
  tcp_output(c2b74c94) at tcp_output+0xff6
  tcp_input(c2a52400,14,138,16055b93,0) at tcp_input+0x2bff
  ip_input(c2a52400) at ip_input+0x5a1
  netisr_processqueue(c09b5098) at netisr_processqueue+0x6e
  swi_net(0) at swi_net+0xc2
  ithread_execute_handlers(c216c684,c216a400) at ithread_execute_handlers+0xe6
  ithread_loop(c21566f0,cbfd9d38,c21566f0,c0659f00,0) at ithread_loop+0x66
  fork_exit(c0659f00,c21566f0,cbfd9d38) at fork_exit+0xa4
  fork_trampoline() at fork_trampoline+0x8
  --- trap 0x1, eip = 0, esp = 0xcbfd9d6c, ebp = 0 ---


  Fatal trap 12: page fault while in kernel mode
  fault virtual address  = 0x0
  fault code             = supervisor read, page not present
  instruction pointer    = 0x20:0xc0829b36
  stack pointer          = 0x28:0xcca66c5c
  frame pointer          = 0x28:0xcca66c88
  code segment           = base 0x0, limit 0xfffff, type 0x1b
  = DPL 0, pres 1, def32 1, gran 1
  processor eflags       = interrupt enabled, resume, IOPL = 0
  current process                = 28 (swi0: sio)

For some reason I couldn't use kgdb to do bactrace:

# kgdb  /usr/src/sys/i386/compile/TEST/kernel.debug  /var/crash/vmcore.0
kgdb: cannot read PTD
#


Regards,
gg.