fatal kernel trap (cpu 1): trap vector = 0x14 (Page Not Present)

On ia64 r216732 I got this panic:


- - - - - - - - - - Prior Console Output - - - - - - - - - -
    cr.iip      = 0xe00000000482b8a0
    cr.ipsr     = 0x210080a6038 (ac,mfl,mfh,ic,i,dt,dfh,rt,cpl=0,it,ri=1)
    cr.isr      = 0xa0200000000 (code=0,vector=0,w,ei=1,ed)
    cr.ifa      = 0x71000406376e661
    curthread   = 0xe00000001198e450
        pid = 41614, comm = initial thread

[ thread pid 41614 tid 100081 ]
Stopped at      bzero+0xd1:     [M1]    st8 [r21]=r0,0x40
db>
- - - - - - - - - - - - Live Console - - - - - - - - - - - -
db> thread 100081
[ thread pid 41614 tid 100081 ]
bzero+0xd1:     [M1]    st8 [r21]=r0,0x40
db>
db> show thread
Thread 100081 at 0xe00000001198e450:
 proc (pid 41614): 0xe000000011982cd8
 name: initial thread
 stack: 0xa0000000c6eca000-0xa0000000c6ed1fff
 flags: 0x10004  pflags: 0
 state: RUNNING (CPU 1)
 priority: 201
 container lock: sched lock 1 (0xe000000004a1db80)
db>
db> bt
Tracing pid 41614 tid 100081 td 0xe00000001198e450
UNW: unw_copyin_from_pcb(0xe000000004a36e40, 102)
bzero() at bzero+0xd1
vfs_bio_clrbuf(0xa00000007ee73a80, 0xa0000000aa57a000, 0x2000, 0xa0000000aa57c00
0, 0xa00000007ee73bb0, 0xffff, 0x0, 0x0) at vfs_bio_clrbuf+0x400
ffs_balloc_ufs2(0xe00000001b70c000, 0x0, 0x25ce, 0xe00000001c224a00, 0x2010000,
0xa0000000c6ed1240) at ffs_balloc_ufs2+0x1630
ffs_write(0xa0000000c6ed1328, 0x25ce, 0x0) at ffs_write+0x520
VOP_WRITE_APV(0xe0000000049c6698, 0xa0000000c6ed1328, 0x0, 0x0) at VOP_WRITE_APV
+0x2d0
vn_write(0xe00000001fc5f2c0, 0xa0000000c6ed1360, 0xe00000001c224a00, 0x0, 0xe000
00001b70c000) at vn_write+0x420
dofilewrite(0xe00000001198e450, 0x3, 0xe00000001fc5f2c0, 0xa0000000c6ed1360, 0xf
fffffffffffffff, 0x0) at dofilewrite+0x160
kern_writev(0xe00000001198e450, 0x3, 0xa0000000c6ed1360) at kern_writev+0x70
write(0xe00000001198e450, 0xa0000000c6ed14e8, 0xe00000000443e610, 0x50e) at writ
e+0xd0
syscallenter(0xe00000001198e450, 0xa0000000c6ed13a0, 0xa0000000c6ed13a8) at sysc
allenter+0x4e0
syscall(0xa0000000c6ed14c8, 0xe00000001198e450, 0x25ce, 0xe00000000483e180, 0x8,
 0x309) at syscall+0x60
epc_syscall_return() at epc_syscall_return
db>

>From console logs:

Jan 17 09:03:52 mech-cluster241 su: mexas to root on /dev/pts/2
lock order reversal: (sleepable after non-sleepable)
 1st 0xe00000001f558948 vm object (standard object) _at_ /usr/src/sys/kern/vfs_bio.
c:3739

_sx_slock(0xe0000000118bb018, 0x0, 0xe0000000048c6460, 0xe11) at _sx_slock+0xb0
_vm_map_lock_read(0xe0000000118bafa0, 0xe0000000048c6460, 0xe11, 0xe0000000047ca
600) at _vm_map_lock_read+0x80
vm_map_lookup(0xa0000000c6ed0118, 0x71000406376e000, 0x2, 0xa0000000c6ed0120, 0x
a0000000c6ed0108, 0xa0000000c6ed0110, 0xa0000000c6ed0060, 0xa0000000c6ed0064) at
 vm_map_lookup+0x70
vm_fault_hold(0xe0000000118bafa0, 0x71000406376e000, 0x2, 0x0, 0x0) at vm_fault_
hold+0x260
vm_fault(0xe0000000118bafa0, 0x71000406376e000, 0x2, 0x0, 0xe0000000048431c0, 0x
716, 0x716) at vm_fault+0x40
trap(0x14, 0xa0000000c6ed0c00) at trap+0x9a0
ivt_Data_TLB() at ivt_Data_TLB+0x1d0
--- trapframe at 0xa0000000c6ed0c00
bzero() at bzero+0xd1
vfs_bio_clrbuf(0xa00000007ee73a80, 0xa0000000aa57a000, 0x2000, 0xa0000000aa57c00
0, 0xa00000007ee73bb0, 0xffff, 0x0, 0x0) at vfs_bio_clrbuf+0x400
ffs_balloc_ufs2(0xe00000001b70c000, 0x0, 0x25ce, 0xe00000001c224a00, 0x2010000,
0xa0000000c6ed1240) at ffs_balloc_ufs2+0x1630
ffs_write(0xa0000000c6ed1328, 0x25ce, 0x0) at ffs_write+0x520
VOP_WRITE_APV(0xe0000000049c6698, 0xa0000000c6ed1328, 0x0, 0x0) at VOP_WRITE_APV
+0x2d0

kern_writev(0xe00000001198e450, 0x3, 0xa0000000c6ed1360) at kern_writev+0x70
write(0xe00000001198e450, 0xa0000000c6ed14e8, 0xe00000000443e610, 0x50e) at writ
e+0xd0
syscallenter(0xe00000001198e450, 0xa0000000c6ed13a0, 0xa0000000c6ed13a8) at sysc
allenter+0x4e0
syscall(0xa0000000c6ed14c8, 0xe00000001198e450, 0x25ce, 0xe00000000483e180, 0x8,
 0x309) at syscall+0x60
epc_syscall_return() at epc_syscall_return

fatal kernel trap (cpu 1):

    trap vector = 0x14 (Page Not Present)
    cr.iip      = 0xe00000000482b8a0
    cr.ipsr     = 0x210080a6038 (ac,mfl,mfh,ic,i,dt,dfh,rt,cpl=0,it,ri=1)
    cr.isr      = 0xa0200000000 (code=0,vector=0,w,ei=1,ed)
    cr.ifa      = 0x71000406376e661
    curthread   = 0xe00000001198e450
        pid = 41614, comm = initial thread

[ thread pid 41614 tid 100081 ]
Stopped at      bzero+0xd1:     [M1]    st8 [r21]=r0,0x40


-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423