40 dead as militants ambush Pakistan police