Panic on CURRENT

Got this panic from CURRENT:

%uname -a
FreeBSD tp.gddsn.org.cn 7.0-CURRENT FreeBSD 7.0-CURRENT #58: Tue Sep 13
08:26:01 CST 2005 hwh_at_tp.gddsn.org.cn:/usr/obj/usr/src/sys/IBM01 i386

# kgdb -c /usr/crash/vmcore.0 /usr/obj/usr/src/sys/IBM01/kernel
[GDB will not be able to debug user-mode threads:
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x24
fault code = supervisor write, page not present
instruction pointer = 0x20:0xc0716dd2
stack pointer = 0x28:0xf8d80bbc
frame pointer = 0x28:0xf8d80bc4
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 446 (java)
<5>em0: link state changed to UP


Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x24
fault code = supervisor write, page not present
instruction pointer = 0x20:0xc0716dd2
stack pointer = 0x28:0xf8d80bbc
frame pointer = 0x28:0xf8d80bc4
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 446 (java)


Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x24
fault code = supervisor write, page not present
instruction pointer = 0x20:0xc0716dd2
stack pointer = 0x28:0xf8d80bbc
frame pointer = 0x28:0xf8d80bc4
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 446 (java)
Dumping 2047 MB (2 chunks)
chunk 0: 1MB (159 pages) ... ok
chunk 1: 2047MB (523872 pages) 2031 2015 1999 1983 1967 1951 1935 1919
1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695
1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471
1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247
1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023
1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735
719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447
431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159
143 127 111 95 79 63 47 31 15

#0 doadump () at pcpu.h:165
165 pcpu.h: No such file or directory.
in pcpu.h
(kgdb) bt
#0 doadump () at pcpu.h:165
#1 0xc04940e7 in db_fncall (dummy1=-1063523552, dummy2=0,
dummy3=-1065127149, dummy4=0xf8d809e8
"\024\n\uffff\uffff\200U\203\uffff") at /usr/src/sys/ddb/db_command.c:486
#2 0xc0493eec in db_command (last_cmdp=0xc096cf04, cmd_table=0x0,
aux_cmd_tablep=0xc08e3648, aux_cmd_tablep_end=0xc08e3664)
at /usr/src/sys/ddb/db_command.c:401
#3 0xc0493fb4 in db_command_loop () at /usr/src/sys/ddb/db_command.c:452
#4 0xc0495b65 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_main.c:221
#5 0xc069b273 in kdb_trap (type=12, code=0, tf=0xf8d80b7c) at
/usr/src/sys/kern/subr_kdb.c:473
#6 0xc084e9c4 in trap_fatal (frame=0xf8d80b7c, eva=36) at
/usr/src/sys/i386/i386/trap.c:832
#7 0xc084e733 in trap_pfault (frame=0xf8d80b7c, usermode=0, eva=36) at
/usr/src/sys/i386/i386/trap.c:752
#8 0xc084e335 in trap (frame=
{tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -1063692320, tf_esi =
-1063692320, tf_ebp = -120058940, tf_isp = -120058968, tf_ebx =
-1014159968, tf_edx = 32, tf_ecx = -1014856092, tf_eax = 4096, tf_trapno
= 12, tf_err = 2, tf_eip = -1066308142, tf_cs = 32, tf_eflags = 66050,
tf_esp = -1004422012, tf_ss = -1014159968}) at
/usr/src/sys/i386/i386/trap.c:442
#9 0xc084069a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#10 0xc0716dd2 in in_pcbremlists (inp=0xc38d25a0) at
/usr/src/sys/netinet/in_pcb.c:1180
#11 0xc07162fb in in_pcbdetach (inp=0xc38d25a0) at
/usr/src/sys/netinet/in_pcb.c:723
#12 0xc072e306 in udp_detach (so=0x1000) at
/usr/src/sys/netinet/udp_usrreq.c:1016
#13 0xc06bb0d8 in soclose (so=0xc421bc84) at
/usr/src/sys/kern/uipc_socket.c:475
#14 0xc06aa7ab in soo_close (fp=0xc4296900, td=0xc39e2640) at
/usr/src/sys/kern/sys_socket.c:317
#15 0xc0663bd4 in fdrop_locked (fp=0xc4296900, td=0xc39e2640) at file.h:289
#16 0xc0663b29 in fdrop (fp=0xc4296900, td=0xc39e2640) at
/usr/src/sys/kern/kern_descrip.c:2101
#17 0xc06621fb in closef (fp=0xc4296900, td=0xc39e2640) at
/usr/src/sys/kern/kern_descrip.c:1921
#18 0xc065f675 in close (td=0xc39e2640, uap=0x1000) at
/usr/src/sys/kern/kern_descrip.c:1004
#19 0xc084ed0f in syscall (frame=
{tf_fs = 59, tf_es = -1082720197, tf_ds = -1082720197, tf_edi =
135494656, tf_esi = 811017696, tf_ebp = -1082955140, tf_isp =
-120058524, tf_ebx = 671753396, tf_edx = 0, tf_ecx = 135494656, tf_eax =
6, tf_trapno = 0, tf_err = 2, tf_eip = 672505451, tf_cs = 51, tf_eflags
= 582, tf_esp = -1082955184, tf_ss = 59}) at
/usr/src/sys/i386/i386/trap.c:986
#20 0xc08406ef in Xint0x80_syscall () at
/usr/src/sys/i386/i386/exception.s:200
#21 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)