hi, 
i386 sources rsynced on sunday,
this is easily reproducable (compiling kernel, using ghostscript etc.)

uvm_fault(0xf48a9708, 0xc2a5f000, 0, 1) -> 1
kernel: page fault trap, code=0
Stopped in cpp at amap_wipeout+0x19: movl(%eax, %edx, 4), %eax
db> trace
amap_wipeout(f48b2e10, f49eba20,0,0,f49deed0) at amap_wipeout+0x19
amap_unref(f49eba20,0) at amap_unref+0x1a
uvm_unmap_detach(f49eba20,0,f48a9708, f49ce004, f49eba20) at
uvm_unmap_detach+0x31
uvm_unmap(f48a9708,0,efbfe000,f48a9708,f49def30) at uvm_unmap+0xaf
uvm_deallocate(f48a9708,0,efbfe00) at uvm_deallocate+0x38
exit1(f49ce004,0,f49defa8,f01bb70e,f49ce004)
at exit1+0x13c
sys_exit(f49ce004,f49def88,f49def80,0,ffffffff)
at sys_exit+0x14
syscall() at syscall+0x1c2
---syscall(number 1)--
0x480d29bb