Hi,
I just got this panic on my 1.4G i386, while closing connection to a remote
system (so either ssh or the xterm in which it was running was exiting):

pmap_page_remove: pg=0xf0311c94: va=3a000, pv_ptp=0xf0353550
pmap_page_remove: PTP's phys addr: actual=0, recorded=31a4000
panic: pmap_page_remove: mapped managed page has invalid pv_ptp field
syncing disks... 10 10 4 done

(gdb) where
#0  0xf01e74fa in pmap_remove (pmap=0xf4a92e30, sva=4104728100, eva=4027790312)
    at ../../../../arch/i386/i386/pmap.c:2539
#1  0xf01e318b in cpu_reboot (howto=256, bootstr=0x0)
    at ../../../../arch/i386/i386/machdep.c:1209
#2  0xf01333e8 in log (level=-266439430, 
    fmt=0xf01e74be "pmap_page_remove: PTP's phys addr: actual=%x, recorded=%lx\n") at ../../../../kern/subr_prf.c:212
#3  0xf01e76aa in pmap_page_remove (pg=0xf0311c94)
    at ../../../../arch/i386/i386/pmap.c:2589
#4  0xf01d0e52 in uvm_anfree (anon=0xf491cc00) at machine/pmap.h:471
#5  0xf01d034b in amap_wipeout (amap=0xf4a2dc68)
    at ../../../../uvm/uvm_amap.c:533
#6  0xf01cfc0e in amap_unref (entry=0xf4ab2054, all=0)
    at ../../../../uvm/uvm_amap_i.h:258
#7  0xf01d65a9 in uvm_unmap_detach (first_entry=0xf4ab2a2c, amap_unref_flags=0)
    at ../../../../uvm/uvm_map.c:1134
#8  0xf01d5837 in uvm_unmap (map=0xf4a9a840, start=0, end=4022329344)
    at ../../../../uvm/uvm_map_i.h:178
#9  0xf01def64 in uvm_deallocate (map=0xf4a9a840, start=0, size=4022329344)
    at ../../../../uvm/uvm_user.c:66
#10 0xf01240f2 in exit1 (p=0xf4a843f8, rv=0)
    at ../../../../kern/kern_exit.c:204
#11 0xf0123f74 in sys_exit (p=0xf4a843f8, v=0xf4a92f88, retval=0xf4a92f80)
---Type <return> to continue, or q <return> to quit---
    at ../../../../kern/kern_exit.c:138
#12 0xf01ea4fa in syscall (frame={tf_es = 43, tf_ds = 43, tf_edi = 0, 
      tf_esi = -1, tf_ebp = -272641852, tf_ebx = 1075736672, tf_edx = 0, 
      tf_ecx = 0, tf_eax = 1, tf_trapno = 3, tf_err = 2, tf_eip = 1075670095, 
      tf_cs = 35, tf_eflags = 662, tf_esp = -272641876, tf_ss = 43, 
      tf_vm86_es = 0, tf_vm86_ds = 0, tf_vm86_fs = 0, tf_vm86_gs = 0})
    at ../../../../arch/i386/i386/trap.c:753


I can make the core dump available if someone wants to have a look at it.

--
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
--