panic on pmap_remove_pages with INVARIANTS

	Hi, I have a trouble about pmap.

$ uname -a
FreeBSD nadesico.ninth-nine.com 7.0-CURRENT FreeBSD 7.0-CURRENT #34: Sat Dec 30 16:23:53 JST 2006     nork_at_nadesico.ninth-nine.com:/usr/obj/usr/src/sys/NADESICO  i386
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
FreeBSD/i386 (nadesico.ninth-nine.com) (dcons)

login: panic: Bad link elm 0x82d99da8 prev->next != elm
cpuid = 1
KDB: enter: panic
[thread pid 19264 tid 100318 ]
Stopped at      kdb_enter+0x30: leave
db> c
panic: boot: not running on cpu 0
cpuid = 1
KDB: enter: panic
[thread pid 19264 tid 100318 ]
Stopped at      kdb_enter+0x30: leave
db> bt
Tracing pid 19264 tid 100318 td 0x84ef1a20
kdb_enter(806b56bb,1,8072ab90,f9f8cb48,84ef1a20,...) at kdb_enter+0x30
panic(806b5745,0,806b56df,112,8072ab90,...) at panic+0x13b
boot(104,0,806b56df,234,84ef1a20,...) at boot+0x7d
panic(806acd11,82d99da8,806d7b56,bc7,0,...) at panic+0x1a1
pmap_remove_pages(8635cddc,806b46d3,ae,0,84b0f480,...) at pmap_remove_pages+0x24a
vmspace_exit(84ef1a20,0,806b24b2,126,1,...) at vmspace_exit+0x90
exit1(84ef1a20,0,f9f8cd2c,8068f363,84ef1a20,...) at exit1+0x5c7
sys_exit(84ef1a20,f9f8cd00,4,c,f9f8cd38,...) at sys_exit+0x1d
syscall(f9f8cd38) at syscall+0x2e3
Xint0x80_syscall() at Xint0x80_syscall+0x20
--- syscall (0, FreeBSD ELF32, nosys), eip = 0x2, esp = 0x206, ebp = 0x7fbfd684 ---
db> call doadump
Physical memory: 1527 MB
Dumping 277 MB: 262 246 230 214 198 182 166 150 134 118 102 86 70 54 38 22 6
Dump complete
= 0xf
db> reset
cpu_reset: Restarting BSP
cpu_reset_proxy: Stopped CPU 1
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

	I tried to kgdb kernel.debug vmcore.0.  But I don't know that
	I should check parameters:-(.  What do I dump pmap_t related
	parametres?