Tserver[/boot/kernel] 0> sudo kgdb kernel /usr/local/crash/vmcore.0GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: vm_fault: fault on nofault entry, addr: c2781000
cpuid = 0
Uptime: 78d10h16m47s
(da0:ahc0:0:6:0): SYNCHRONIZE CACHE(10). CDB: 35 0 0 0 0 0 0 0 0 0 
(da0:ahc0:0:6:0): Sense Error Code 0xe0 at block no. -423037557 (decimal)
Physical memory: 1015 MB
Dumping 256 MB: 241 225 209 193 177 161 145 129ath0: device timeout
 113 97 81 65 49 33 17 1

Reading symbols from /boot/kernel/if_bridge.ko...Reading symbols from /boot/kernel/if_bridge.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_bridge.ko
Reading symbols from /boot/kernel/bridgestp.ko...Reading symbols from /boot/kernel/bridgestp.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/bridgestp.ko
Reading symbols from /boot/kernel/green_saver.ko...Reading symbols from /boot/kernel/green_saver.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/green_saver.ko
#0  doadump () at pcpu.h:197
197	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:197
#1  0xc05e3836 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:421
#2  0xc05e3b1c in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:576
#3  0xc082bc08 in vm_fault (map=0xc1171000, vaddr=3262648320, 
    fault_type=2 '\002', fault_flags=0) at /usr/src/sys/vm/vm_fault.c:277
#4  0xc08852e4 in trap_pfault (frame=0xe68bfa5c, usermode=0, eva=3262650572)
    at /usr/src/sys/i386/i386/trap.c:852
#5  0xc0885d72 in trap (frame=0xe68bfa5c) at /usr/src/sys/i386/i386/trap.c:541
#6  0xc086922b in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#7  0xc087d7ed in pmap_insert_entry (pmap=Variable "pmap" is not available.
)
    at /usr/src/sys/i386/i386/pmap.c:2446
#8  0xc08828e8 in pmap_enter (pmap=0xc655b540, va=696795136, access=2 '\002', 
    m=Variable "m" is not available.
) at /usr/src/sys/i386/i386/pmap.c:3371
#9  0xc082d595 in vm_fault (map=0xc655b4b0, vaddr=696795136, 
    fault_type=2 '\002', fault_flags=8) at /usr/src/sys/vm/vm_fault.c:894
#10 0xc0885237 in trap_pfault (frame=0xe68bfd38, usermode=1, eva=696795152)
    at /usr/src/sys/i386/i386/trap.c:840
#11 0xc0885c0a in trap (frame=0xe68bfd38) at /usr/src/sys/i386/i386/trap.c:406
#12 0xc086922b in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#13 0x28cef2c1 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) print panicstr
$1 = 0xc097a9a0 "vm_fault: fault on nofault entry, addr: c2781000"
(kgdb)


All the panics I have seem to be related to some interaction between if_bridge and ath(4), as I usually see ath(4) or fxp(1) (the two interfaces bridged) resets in the logs, leading up to the panic

How-To-Repeat: not repeatable