On Sunday, June 1, 2003, at 07:56  AM, Jason Thorpe wrote:

> Is anyone else observing this?  It's happened to me 3 times now.

To follow up... the address seems to be in pager_map's range:

db> trace
cpu_Debugger+4 (97fff000,7d,0,0) ra 881780e4 sz 0
panic+128 (8823b81c,7d,0,0) ra 88159764 sz 40
lockmgr+d4 (8823b81c,7d,0,0) ra 881ccc70 sz 80
uvm_fault+b8 (88260a60,c4010000,0,1) ra 881e7634 sz 296
trap+700 (2,c4010000,0,1) ra 881e12e8 sz 72
mips3_exceptionEnd+e4 (2,c4010000,0,1) ra 0 sz 0
User-level: curlwp NULL

db> show map/f *pager_map
MAP 0xc0010f00: [0xc4010000->0xc5010000]
         #ent=8, sz=65536, ref=2, version=11906, flags=0x0
         pmap=0x88288690(resident=1449)
  - 0x8e970630: 0xc4012000->0xc4014000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0
  - 0x8e970318: 0xc4014000->0xc4016000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0
  - 0x8e970828: 0xc4016000->0xc4018000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0
  - 0x8e9709d8: 0xc4018000->0xc401a000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0
  - 0x8e9705a0: 0xc401a000->0xc401c000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0
  - 0x8e970ee8: 0xc401c000->0xc401e000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0
  - 0x8e970288: 0xc401e000->0xc4020000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0
  - 0x8e970af8: 0xc4020000->0xc4022000: obj=0x0/0x0, amap=0x0/0
         submap=F, cow=F, nc=F, prot(max)=0/0, inh=0, wc=0, adv=0

But note the address in question does not seem to have an active map 
entry.

         -- Jason R. Thorpe <thorpej@wasabisystems.com>