Bug 859188 - [drm] Corrupted page table
Summary: [drm] Corrupted page table
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: kernel
Version: 18
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Kernel Maintainer List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-09-20 18:37 UTC by Mikhail
Modified: 2013-04-19 20:10 UTC (History)
13 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2013-04-19 16:35:34 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
dmesg (75.12 KB, text/plain)
2012-12-17 17:57 UTC, Mikhail
no flags Details
dmesg (78.74 KB, text/plain)
2012-12-18 04:33 UTC, Mikhail
no flags Details
htop screenshot (239.16 KB, image/png)
2013-02-06 03:42 UTC, Mikhail
no flags Details
fault.c patch (538 bytes, patch)
2013-04-10 19:30 UTC, Artem S. Tashkinov
no flags Details | Diff

Description Mikhail 2012-09-20 18:37:37 UTC
Description of problem:
[ 1586.743862] chrome: Corrupted page table at address 5f76b000
[ 1586.743894] *pdpt = 0000000000000000 *pde = 0000000000000000 
[ 1586.743922] Bad pagetable: 000f [#1] SMP 
[ 1586.743942] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[ 1586.744327]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[ 1586.744444] Pid: 3503, comm: chrome Not tainted 3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[ 1586.744514] EIP: 0073:[<b48eac18>] EFLAGS: 00010206 CPU: 1
[ 1586.744550] EIP is at 0xb48eac18
[ 1586.744571] EAX: 5f76b000 EBX: b7964ff4 ECX: 00000001 EDX: 00000053
[ 1586.744607] ESI: bfa8a120 EDI: 5f76b000 EBP: bfa8a0f8 ESP: bfa8a0e0
[ 1586.744642]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 1586.744676] Process chrome (pid: 3503, ti=dac38000 task=daea2b20 task.ti=dac38000)

[ 1586.744729] EIP: [<b48eac18>] 0xb48eac18 SS:ESP 007b:bfa8a0e0
[ 1586.768193] ---[ end trace 0f3cc9cb8367445d ]---

Comment 1 Mikhail 2012-09-20 19:10:07 UTC
[ 3840.914188] chrome: Corrupted page table at address 5320a000
[ 3840.914235] *pdpt = 0000000000000000 *pde = 0000000000000000 
[ 3840.914266] Bad pagetable: 000f [#2] SMP 
[ 3840.914289] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[ 3840.914714]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[ 3840.914818] Pid: 4279, comm: chrome Tainted: G      D      3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[ 3840.914877] EIP: 0073:[<b48eac18>] EFLAGS: 00010206 CPU: 1
[ 3840.914904] EIP is at 0xb48eac18
[ 3840.914920] EAX: 5320a000 EBX: b7964ff4 ECX: 00000001 EDX: 00000053
[ 3840.914949] ESI: bfa8a120 EDI: 5320a000 EBP: bfa8a0f8 ESP: bfa8a0e0
[ 3840.914977]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 3840.915003] Process chrome (pid: 4279, ti=d75de000 task=e0679590 task.ti=d75de000)

[ 3840.915045] EIP: [<b48eac18>] 0xb48eac18 SS:ESP 007b:bfa8a0e0
[ 3840.939410] ---[ end trace 0f3cc9cb8367445e ]---

Comment 2 Mikhail 2012-09-20 19:30:19 UTC
[ 1478.168209] SELinux: initialized (dev proc, type proc), uses genfs_contexts
[ 1586.743862] chrome: Corrupted page table at address 5f76b000
[ 1586.743894] *pdpt = 0000000000000000 *pde = 0000000000000000 
[ 1586.743922] Bad pagetable: 000f [#1] SMP 
[ 1586.743942] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[ 1586.744327]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[ 1586.744444] Pid: 3503, comm: chrome Not tainted 3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[ 1586.744514] EIP: 0073:[<b48eac18>] EFLAGS: 00010206 CPU: 1
[ 1586.744550] EIP is at 0xb48eac18
[ 1586.744571] EAX: 5f76b000 EBX: b7964ff4 ECX: 00000001 EDX: 00000053
[ 1586.744607] ESI: bfa8a120 EDI: 5f76b000 EBP: bfa8a0f8 ESP: bfa8a0e0
[ 1586.744642]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 1586.744676] Process chrome (pid: 3503, ti=dac38000 task=daea2b20 task.ti=dac38000)

[ 1586.744729] EIP: [<b48eac18>] 0xb48eac18 SS:ESP 007b:bfa8a0e0
[ 1586.768193] ---[ end trace 0f3cc9cb8367445d ]---
[ 2231.662686] EXT4-fs (sdb): recovery complete
[ 2231.681651] EXT4-fs (sdb): mounted filesystem with ordered data mode. Opts: (null)
[ 2231.681664] SELinux: initialized (dev sdb, type ext4), uses xattr
[ 3840.914188] chrome: Corrupted page table at address 5320a000
[ 3840.914235] *pdpt = 0000000000000000 *pde = 0000000000000000 
[ 3840.914266] Bad pagetable: 000f [#2] SMP 
[ 3840.914289] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[ 3840.914714]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[ 3840.914818] Pid: 4279, comm: chrome Tainted: G      D      3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[ 3840.914877] EIP: 0073:[<b48eac18>] EFLAGS: 00010206 CPU: 1
[ 3840.914904] EIP is at 0xb48eac18
[ 3840.914920] EAX: 5320a000 EBX: b7964ff4 ECX: 00000001 EDX: 00000053
[ 3840.914949] ESI: bfa8a120 EDI: 5320a000 EBP: bfa8a0f8 ESP: bfa8a0e0
[ 3840.914977]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 3840.915003] Process chrome (pid: 4279, ti=d75de000 task=e0679590 task.ti=d75de000)

[ 3840.915045] EIP: [<b48eac18>] 0xb48eac18 SS:ESP 007b:bfa8a0e0
[ 3840.939410] ---[ end trace 0f3cc9cb8367445e ]---
[ 4966.826239] SELinux: initialized (dev proc, type proc), uses genfs_contexts
[ 4988.094410] chrome: Corrupted page table at address 35700024
[ 4988.094471] *pdpt = 0000000000000000 *pde = 0000000000000000 
[ 4988.094514] Bad pagetable: 000f [#3] SMP 
[ 4988.094544] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[ 4988.095060]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[ 4988.095196] Pid: 5808, comm: chrome Tainted: G      D      3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[ 4988.095269] EIP: 0073:[<b489919d>] EFLAGS: 00010206 CPU: 1
[ 4988.095310] EIP is at 0xb489919d
[ 4988.095331] EAX: 35708080 EBX: b7936ff4 ECX: b8300008 EDX: 35800000
[ 4988.095368] ESI: 35700000 EDI: b83003bc EBP: bfe5c528 ESP: bfe5c4d0
[ 4988.095403]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 4988.095434] Process chrome (pid: 5808, ti=e0e20000 task=e132ab20 task.ti=e0e20000)

[ 4988.095490] EIP: [<b489919d>] 0xb489919d SS:ESP 007b:bfe5c4d0
[ 4988.127060] ---[ end trace 0f3cc9cb8367445f ]---
[mikhail@localhost ~]$

Comment 3 Mikhail 2012-09-22 03:44:16 UTC
[120877.850670] chrome: Corrupted page table at address 56380000
[120877.852831] *pdpt = 0000000000000000 *pde = 0000000000000000 
[120877.855055] Bad pagetable: 000f [#5] SMP 
[120877.857183] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[120877.864041]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[120877.868696] Pid: 881, comm: chrome Tainted: G      D W    3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[120877.871078] EIP: 0073:[<b481b9f8>] EFLAGS: 00010206 CPU: 2
[120877.873479] EIP is at 0xb481b9f8
[120877.875827] EAX: 56380000 EBX: b787cff4 ECX: 00000001 EDX: 00000053
[120877.878187] ESI: bf947080 EDI: 56380000 EBP: bf947058 ESP: bf947040
[120877.880498]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[120877.882749] Process chrome (pid: 881, ti=d3594000 task=dda42b20 task.ti=d3594000)

[120877.887089] EIP: [<b481b9f8>] 0xb481b9f8 SS:ESP 007b:bf947040
[120877.910087] ---[ end trace 0f3cc9cb83674461 ]---

Comment 4 Mikhail 2012-09-22 19:49:58 UTC
[151854.330164] chrome: Corrupted page table at address 3d0c7000
[151854.331788] *pdpt = 0000000000000000 *pde = 0000000000000000 
[151854.333869] Bad pagetable: 000f [#6] SMP 
[151854.335945] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[151854.344470]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[151854.349100] Pid: 11741, comm: chrome Tainted: G      D W    3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[151854.351469] EIP: 0073:[<b481b9f8>] EFLAGS: 00010206 CPU: 1
[151854.353840] EIP is at 0xb481b9f8
[151854.356221] EAX: 3d0c7000 EBX: b787cff4 ECX: 00000001 EDX: 00000053
[151854.360591] ESI: bf947080 EDI: 3d0c7000 EBP: bf947058 ESP: bf947040
[151854.365010]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[151854.369238] Process chrome (pid: 11741, ti=d5b16000 task=d7758000 task.ti=d5b16000)

[151854.377858] EIP: [<b481b9f8>] 0xb481b9f8 SS:ESP 007b:bf947040
[151854.404190] ---[ end trace 0f3cc9cb83674462 ]---
[172277.832958] sd 8:0:0:0: [sdc] Unhandled error code
[172277.832963] sd 8:0:0:0: [sdc]  
[172277.832965] Result: hostbyte=DID_OK driverbyte=DRIVER_OK
[172277.832968] sd 8:0:0:0: [sdc] CDB: 
[172277.832970] Read(10): 28 00 10 a8 08 18 00 00 08 00
[172277.832981] end_request: I/O error, dev sdc, sector 279447576
[172570.217574] [drm:__gen6_gt_force_wake_get] *ERROR* Force wake wait timed out
[178648.068628] chrome: Corrupted page table at address 258fa000
[178648.071101] *pdpt = 0000000000000000 *pde = 0000000000000000 
[178648.073416] Bad pagetable: 000f [#7] SMP 
[178648.075938] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 be2iscsi iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i cxgb4 lockd bnep bluetooth cxgb3i iptable_nat nf_nat rfkill cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_pcm serio_raw snd_page_alloc snd_timer lpc_ich mfd_core snd soundcore
[178648.084499]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[178648.090066] Pid: 18259, comm: chrome Tainted: G      D W    3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[178648.093109] EIP: 0073:[<b481b9f8>] EFLAGS: 00010206 CPU: 1
[178648.096145] EIP is at 0xb481b9f8
[178648.099222] EAX: 258fa000 EBX: b787cff4 ECX: 00000001 EDX: 00000053
[178648.102314] ESI: bf947080 EDI: 258fa000 EBP: bf947058 ESP: bf947040
[178648.105353]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[178648.108447] Process chrome (pid: 18259, ti=d6f7a000 task=c6611590 task.ti=d6f7a000)

[178648.114703] EIP: [<b481b9f8>] 0xb481b9f8 SS:ESP 007b:bf947040
[178648.145119] ---[ end trace 0f3cc9cb83674463 ]---

Comment 5 Mikhail 2012-09-23 10:36:37 UTC
[ 3998.620783] chrome: Corrupted page table at address 3b672000
[ 3998.622038] *pdpt = 0000000000000000 *pde = 0000000000000000 
[ 3998.623249] Bad pagetable: 000f [#1] SMP 
[ 3998.624401] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle be2iscsi iscsi_boot_sysfs bnx2i cnic uio ip6t_REJECT cxgb4i cxgb4 cxgb3i nf_conntrack_ipv6 nf_defrag_ipv6 cxgb3 mdio libcxgbi lockd bnep ip6table_filter bluetooth rfkill ip6_tables ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_nat nf_nat scsi_transport_iscsi iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec coretemp microcode ac97_bus snd_rawmidi serio_raw i2c_i801 snd_seq snd_seq_device snd_pcm lpc_ich mfd_core snd_page_alloc snd_timer snd soundcore
[ 3998.628638]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper drm atl1c i2c_core video usb_storage uas sunrpc
[ 3998.631546] Pid: 4087, comm: chrome Not tainted 3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[ 3998.633062] EIP: 0073:[<b48b79f8>] EFLAGS: 00010206 CPU: 1
[ 3998.634607] EIP is at 0xb48b79f8
[ 3998.636130] EAX: 3b672000 EBX: b7918ff4 ECX: 00000001 EDX: 00000053
[ 3998.637680] ESI: bfceade0 EDI: 3b672000 EBP: bfceadb8 ESP: bfceada0
[ 3998.639231]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 3998.640788] Process chrome (pid: 4087, ti=de908000 task=f5709590 task.ti=de908000)

[ 3998.643923] EIP: [<b48b79f8>] 0xb48b79f8 SS:ESP 007b:bfceada0
[ 3998.659346] ---[ end trace 00b77eb6ef0190a3 ]---

Comment 6 Mikhail 2012-09-23 14:20:09 UTC
[   57.429377] chrome: Corrupted page table at address 35315000
[   57.429409] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   57.429437] Bad pagetable: 000f [#1] SMP 
[   57.429457] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables bnep bluetooth rfkill be2iscsi lockd iscsi_boot_sysfs bnx2i cnic uio cxgb4i iptable_nat nf_nat cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 coretemp snd_ak4113 microcode snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx serio_raw snd_ak4xxx_adda i2c_i801 snd_ac97_codec ac97_bus snd_rawmidi snd_seq snd_seq_device lpc_ich snd_pcm mfd_core snd_page_alloc snd_timer snd soundcore
[   57.429837]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[   57.429929] Pid: 1892, comm: chrome Not tainted 3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   57.429977] EIP: 0073:[<b48fa9f8>] EFLAGS: 00010206 CPU: 0
[   57.430001] EIP is at 0xb48fa9f8
[   57.430015] EAX: 35315000 EBX: b795bff4 ECX: 00000001 EDX: 00000053
[   57.430039] ESI: bf87a190 EDI: 35315000 EBP: bf87a168 ESP: bf87a150
[   57.430064]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   57.430086] Process chrome (pid: 1892, ti=e2b8e000 task=e5e45640 task.ti=e2b8e000)

[   57.430122] EIP: [<b48fa9f8>] 0xb48fa9f8 SS:ESP 007b:bf87a150
[   57.454603] ---[ end trace f202a61776b072b4 ]---
[   58.329377] chrome: Corrupted page table at address 4b051000
[   58.329406] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   58.329434] Bad pagetable: 000f [#2] SMP 
[   58.329454] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables bnep bluetooth rfkill be2iscsi lockd iscsi_boot_sysfs bnx2i cnic uio cxgb4i iptable_nat nf_nat cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 coretemp snd_ak4113 microcode snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx serio_raw snd_ak4xxx_adda i2c_i801 snd_ac97_codec ac97_bus snd_rawmidi snd_seq snd_seq_device lpc_ich snd_pcm mfd_core snd_page_alloc snd_timer snd soundcore
[   58.329839]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[   58.329933] Pid: 1986, comm: chrome Tainted: G      D      3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   58.329985] EIP: 0073:[<b48fa9f8>] EFLAGS: 00010206 CPU: 2
[   58.330010] EIP is at 0xb48fa9f8
[   58.330024] EAX: 4b051000 EBX: b795bff4 ECX: 00000001 EDX: 00000053
[   58.330062] ESI: bf87a190 EDI: 4b051000 EBP: bf87a168 ESP: bf87a150
[   58.330087]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   58.330110] Process chrome (pid: 1986, ti=e1972000 task=e1961590 task.ti=e1972000)

[   58.330147] EIP: [<b48fa9f8>] 0xb48fa9f8 SS:ESP 007b:bf87a150
[   58.330186] ---[ end trace f202a61776b072b5 ]---
[   58.444580] chrome: Corrupted page table at address 35a00024
[   58.444620] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   58.444658] Bad pagetable: 000f [#3] SMP 
[   58.444686] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables bnep bluetooth rfkill be2iscsi lockd iscsi_boot_sysfs bnx2i cnic uio cxgb4i iptable_nat nf_nat cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi iptable_mangle scsi_transport_iscsi nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 coretemp snd_ak4113 microcode snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx serio_raw snd_ak4xxx_adda i2c_i801 snd_ac97_codec ac97_bus snd_rawmidi snd_seq snd_seq_device lpc_ich snd_pcm mfd_core snd_page_alloc snd_timer snd soundcore
[   58.445244]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[   58.445377] Pid: 1993, comm: chrome Tainted: G      D      3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   58.445455] EIP: 0073:[<b48dc62a>] EFLAGS: 00010282 CPU: 1
[   58.445493] EIP is at 0xb48dc62a
[   58.445513] EAX: b9249008 EBX: b795bff4 ECX: 00000004 EDX: 00000000
[   58.445549] ESI: 35a00000 EDI: 35a00000 EBP: bf879f98 ESP: bf879f20
[   58.445584]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   58.445619] Process chrome (pid: 1993, ti=e1920000 task=e1962b20 task.ti=e1920000)

[   58.445672] EIP: [<b48dc62a>] 0xb48dc62a SS:ESP 007b:bf879f20
[   58.445730] ---[ end trace f202a61776b072b6 ]---

Comment 7 Dave Jones 2012-09-24 14:46:19 UTC
every one of these traces has this..

Bad pagetable: 000f

that code decoded has reserved bits set. This can only happen either from random memory corruption, or random bit-flips from bad memory.

Yours is the only incident of this happening that we currently have open, so it seems unlikely to be corruption.

It doesn't look like there's anything we can do here.

Comment 8 Mikhail 2012-09-24 15:23:08 UTC
With Fedora 17 this is not happens. And I am sure that's my memory is fine.

Comment 9 Mikhail 2012-09-24 20:28:06 UTC
When this happens I get to a virtual terminal, after some time I press Ctrl + Alt + F1 and returns to the graphics mode and continue to work.

Comment 10 Mikhail 2012-09-25 19:12:45 UTC
Occurs again when I run Google Chrome

[   69.424903] chrome: Corrupted page table at address 2aa13000
[   69.426441] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   69.427979] Bad pagetable: 000f [#1] SMP 
[   69.429500] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 be2iscsi nf_defrag_ipv6 iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i lockd cxgb4 bnep bluetooth cxgb3i rfkill cxgb3 iptable_nat nf_nat mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 coretemp snd_i2c microcode snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec ac97_bus serio_raw snd_rawmidi snd_seq snd_seq_device snd_pcm snd_page_alloc i2c_i801 lpc_ich snd_timer mfd_core snd soundcore
[   69.435289]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[   69.439344] Pid: 1870, comm: chrome Not tainted 3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   69.441439] EIP: 0073:[<b48ae9f8>] EFLAGS: 00010206 CPU: 3
[   69.443579] EIP is at 0xb48ae9f8
[   69.445643] EAX: 2aa13000 EBX: b790fff4 ECX: 00000001 EDX: 00000055
[   69.447813] ESI: bfa29ab0 EDI: bfa29ab0 EBP: bfa29a88 ESP: bfa29a70
[   69.449964]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   69.451726] Process chrome (pid: 1870, ti=e20b8000 task=e4050000 task.ti=e20b8000)

[   69.454299] EIP: [<b48ae9f8>] 0xb48ae9f8 SS:ESP 007b:bfa29a70
[   69.472742] ---[ end trace 9c9b17c49f3ad8cf ]---
[   69.558677] DMA-API: debugging out of memory - disabling
[   73.559628] chrome: Corrupted page table at address 35399000
[   73.561501] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   73.563348] Bad pagetable: 000f [#2] SMP 
[   73.565218] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 be2iscsi nf_defrag_ipv6 iscsi_boot_sysfs ip6table_filter bnx2i ip6_tables cnic uio cxgb4i lockd cxgb4 bnep bluetooth cxgb3i rfkill cxgb3 iptable_nat nf_nat mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 coretemp snd_i2c microcode snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec ac97_bus serio_raw snd_rawmidi snd_seq snd_seq_device snd_pcm snd_page_alloc i2c_i801 lpc_ich snd_timer mfd_core snd soundcore
[   73.571589]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit drm_kms_helper atl1c drm i2c_core video usb_storage uas sunrpc
[   73.576833] Pid: 2086, comm: chrome Tainted: G      D      3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   73.579279] EIP: 0073:[<b48ae9f8>] EFLAGS: 00010206 CPU: 2
[   73.581696] EIP is at 0xb48ae9f8
[   73.584138] EAX: 35399000 EBX: b790fff4 ECX: 00000001 EDX: 00000053
[   73.586560] ESI: bfa29a50 EDI: 35399000 EBP: bfa29a28 ESP: bfa29a10
[   73.588937]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   73.591248] Process chrome (pid: 2086, ti=e1062000 task=e1360000 task.ti=e1062000)

[   73.596025] EIP: [<b48ae9f8>] 0xb48ae9f8 SS:ESP 007b:bfa29a10
[   73.598683] ---[ end trace 9c9b17c49f3ad8d0 ]---

Comment 11 Mikhail 2012-09-26 02:32:31 UTC
And again and again when I restart I launch Google Chrome it's occurs:

[   64.693071] chrome: Corrupted page table at address 59406000
[   64.693116] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   64.693158] Bad pagetable: 000f [#1] SMP 
[   64.693188] Modules linked in: vfat fat fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables lockd be2iscsi iscsi_boot_sysfs bnep bluetooth rfkill bnx2i cnic uio cxgb4i cxgb4 cxgb3i iptable_nat cxgb3 nf_nat mdio libcxgbi ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iTCO_wdt iTCO_vendor_support ppdev coretemp snd_ice1724 microcode snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c serio_raw snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec ac97_bus i2c_i801 snd_rawmidi snd_seq snd_seq_device snd_pcm lpc_ich snd_page_alloc mfd_core snd_timer snd soundcore
[   64.693768]  mei parport_pc parport vhost_net tun macvtap macvlan kvm_intel kvm uinput crc32c_intel i915 i2c_algo_bit atl1c drm_kms_helper drm i2c_core video usb_storage uas sunrpc
[   64.693908] Pid: 1963, comm: chrome Not tainted 3.6.0-0.rc6.git0.2.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   64.693982] EIP: 0073:[<b4828a38>] EFLAGS: 00010206 CPU: 1
[   64.694020] EIP is at 0xb4828a38
[   64.694041] EAX: 59406000 EBX: b7872ff4 ECX: 00000001 EDX: 00000053
[   64.694079] ESI: bfacf8c0 EDI: 59406000 EBP: bfacf898 ESP: bfacf880
[   64.694117]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   64.694151] Process chrome (pid: 1963, ti=e1850000 task=e42d2b20 task.ti=e1850000)

[   64.694207] EIP: [<b4828a38>] 0xb4828a38 SS:ESP 007b:bfacf880
[   64.714444] ---[ end trace 46e618071f43c760 ]---

Comment 12 Mikhail 2012-09-27 02:33:28 UTC
[   61.539441] chrome: Corrupted page table at address 3dd15000
[   61.539472] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   61.539500] Bad pagetable: 000f [#1] SMP 
[   61.539521] Modules linked in: fuse(F) ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) ip6table_mangle(F) ip6t_REJECT(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) lockd(F) ip6table_filter(F) be2iscsi(F) ip6_tables(F) iscsi_boot_sysfs(F) bnx2i(F) cnic(F) bnep(F) uio(F) bluetooth(F) rfkill(F) cxgb4i(F) cxgb4(F) cxgb3i(F) iptable_nat(F) nf_nat(F) cxgb3(F) mdio(F) libcxgbi(F) ib_iser(F) rdma_cm(F) ib_addr(F) iw_cm(F) ib_cm(F) ib_sa(F) ib_mad(F) ib_core(F) iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) iptable_mangle(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_conntrack(F) nf_conntrack(F) iTCO_wdt(F) iTCO_vendor_support(F) ppdev(F) coretemp(F) microcode(F) snd_ice1724(F) snd_ak4113(F) snd_pt2258(F) snd_ak4114(F) serio_raw(F) snd_i2c(F)
[   61.539863]  snd_ice17xx_ak4xxx(F) snd_ak4xxx_adda(F) snd_ac97_codec(F) ac97_bus(F) snd_rawmidi(F) snd_seq(F) i2c_i801(F) snd_seq_device(F) lpc_ich(F) mfd_core(F) snd_pcm(F) snd_page_alloc(F) snd_timer(F) snd(F) soundcore(F) mei(F) parport_pc(F) parport(F) vhost_net(F) tun(F) macvtap(F) macvlan(F) kvm_intel(F) kvm(F) uinput(F) crc32c_intel(F) i915(F) atl1c(F) i2c_algo_bit(F) drm_kms_helper(F) drm(F) i2c_core(F) video(F) usb_storage(F) uas(F) sunrpc(F)
[   61.540063] Pid: 1900, comm: chrome Tainted: GF            3.6.0-0.rc7.git1.4.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   61.540115] EIP: 0073:[<b491ca38>] EFLAGS: 00010206 CPU: 0
[   61.540139] EIP is at 0xb491ca38
[   61.540153] EAX: 3dd15000 EBX: b7966ff4 ECX: 00000001 EDX: 00000055
[   61.540177] ESI: bfc716e0 EDI: bfc716e0 EBP: bfc716b8 ESP: bfc716a0
[   61.540202]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   61.540224] Process chrome (pid: 1900, ti=e1dc2000 task=e33dc0b0 task.ti=e1dc2000)

[   61.540260] EIP: [<b491ca38>] 0xb491ca38 SS:ESP 007b:bfc716a0
[   61.555786] ---[ end trace 9956a0a301527e77 ]---
[   62.865791] DMA-API: debugging out of memory - disabling
[   88.623517] chrome: Corrupted page table at address 2bd94000
[   88.623557] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   88.623598] Bad pagetable: 000f [#2] SMP 
[   88.623626] Modules linked in: fuse(F) ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) ip6table_mangle(F) ip6t_REJECT(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) lockd(F) ip6table_filter(F) be2iscsi(F) ip6_tables(F) iscsi_boot_sysfs(F) bnx2i(F) cnic(F) bnep(F) uio(F) bluetooth(F) rfkill(F) cxgb4i(F) cxgb4(F) cxgb3i(F) iptable_nat(F) nf_nat(F) cxgb3(F) mdio(F) libcxgbi(F) ib_iser(F) rdma_cm(F) ib_addr(F) iw_cm(F) ib_cm(F) ib_sa(F) ib_mad(F) ib_core(F) iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) iptable_mangle(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_conntrack(F) nf_conntrack(F) iTCO_wdt(F) iTCO_vendor_support(F) ppdev(F) coretemp(F) microcode(F) snd_ice1724(F) snd_ak4113(F) snd_pt2258(F) snd_ak4114(F) serio_raw(F) snd_i2c(F)
[   88.624158]  snd_ice17xx_ak4xxx(F) snd_ak4xxx_adda(F) snd_ac97_codec(F) ac97_bus(F) snd_rawmidi(F) snd_seq(F) i2c_i801(F) snd_seq_device(F) lpc_ich(F) mfd_core(F) snd_pcm(F) snd_page_alloc(F) snd_timer(F) snd(F) soundcore(F) mei(F) parport_pc(F) parport(F) vhost_net(F) tun(F) macvtap(F) macvlan(F) kvm_intel(F) kvm(F) uinput(F) crc32c_intel(F) i915(F) atl1c(F) i2c_algo_bit(F) drm_kms_helper(F) drm(F) i2c_core(F) video(F) usb_storage(F) uas(F) sunrpc(F)
[   88.624458] Pid: 2462, comm: chrome Tainted: GF     D      3.6.0-0.rc7.git1.4.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   88.624534] EIP: 0073:[<b491e34e>] EFLAGS: 00010283 CPU: 3
[   88.624573] EIP is at 0xb491e34e
[   88.624595] EAX: 2bd94000 EBX: b7966ff4 ECX: 2bd94fe0 EDX: bfc716fc
[   88.624632] ESI: bfc71680 EDI: 00000000 EBP: bfc71658 ESP: bfc71630
[   88.624671]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   88.624705] Process chrome (pid: 2462, ti=e08a2000 task=df67c0b0 task.ti=e08a2000)

[   88.624761] EIP: [<b491e34e>] 0xb491e34e SS:ESP 007b:bfc71630
[   88.624821] ---[ end trace 9956a0a301527e78 ]---

Comment 13 Mikhail 2012-09-29 07:56:57 UTC
[   60.549198] chrome: Corrupted page table at address 260cc000
[   60.549230] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   60.549257] Bad pagetable: 000f [#1] SMP 
[   60.549278] Modules linked in: vfat(F) fat(F) fuse(F) ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) ip6table_mangle(F) ip6t_REJECT(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ip6table_filter(F) ip6_tables(F) lockd(F) be2iscsi(F) iscsi_boot_sysfs(F) bnep(F) bluetooth(F) rfkill(F) bnx2i(F) cnic(F) uio(F) iptable_nat(F) nf_nat(F) cxgb4i(F) cxgb4(F) cxgb3i(F) cxgb3(F) mdio(F) libcxgbi(F) ib_iser(F) rdma_cm(F) ib_addr(F) iw_cm(F) ib_cm(F) ib_sa(F) ib_mad(F) ib_core(F) iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) iptable_mangle(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_conntrack(F) nf_conntrack(F) iTCO_wdt(F) iTCO_vendor_support(F) ppdev(F) coretemp(F) microcode(F) snd_ice1724(F) snd_ak4113(F) snd_pt2258(F) snd_ak4114(F) snd_i2c(F)
[   60.549624]  snd_ice17xx_ak4xxx(F) snd_ak4xxx_adda(F) snd_ac97_codec(F) ac97_bus(F) serio_raw(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) i2c_i801(F) snd_pcm(F) snd_page_alloc(F) snd_timer(F) snd(F) soundcore(F) lpc_ich(F) mfd_core(F) mei(F) parport_pc(F) parport(F) vhost_net(F) tun(F) macvtap(F) macvlan(F) kvm_intel(F) kvm(F) uinput(F) crc32c_intel(F) i915(F) i2c_algo_bit(F) atl1c(F) drm_kms_helper(F) drm(F) i2c_core(F) video(F) usb_storage(F) uas(F) sunrpc(F)
[   60.549826] Pid: 1902, comm: chrome Tainted: GF            3.6.0-0.rc7.git1.4.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   60.549878] EIP: 0073:[<b4886c68>] EFLAGS: 00010206 CPU: 0
[   60.549902] EIP is at 0xb4886c68
[   60.549916] EAX: 260cc000 EBX: b78ceff4 ECX: 00000001 EDX: 00000055
[   60.549941] ESI: bfb12090 EDI: bfb12090 EBP: bfb12068 ESP: bfb12050
[   60.549966]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   60.549988] Process chrome (pid: 1902, ti=e2932000 task=e458d640 task.ti=e2932000)

[   60.550024] EIP: [<b4886c68>] 0xb4886c68 SS:ESP 007b:bfb12050
[   60.577327] ---[ end trace 6ec03ef5ad7c676e ]---

Comment 14 Mikhail 2012-09-30 09:27:13 UTC
[   83.990073] chrome: Corrupted page table at address 43327000
[   83.990117] *pdpt = 0000000000000000 *pde = f000eef3f000eef3 
[   83.990158] Bad pagetable: 000f [#1] SMP 
[   83.990188] Modules linked in: vfat(F) fat(F) fuse(F) ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) ip6table_mangle(F) ip6t_REJECT(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ip6table_filter(F) ip6_tables(F) bnep(F) bluetooth(F) rfkill(F) be2iscsi(F) iscsi_boot_sysfs(F) bnx2i(F) cnic(F) uio(F) lockd(F) cxgb4i(F) cxgb4(F) cxgb3i(F) cxgb3(F) mdio(F) libcxgbi(F) ib_iser(F) rdma_cm(F) ib_addr(F) iw_cm(F) ib_cm(F) ib_sa(F) ib_mad(F) iptable_nat(F) nf_nat(F) ib_core(F) iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) iptable_mangle(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_conntrack(F) nf_conntrack(F) iTCO_wdt(F) iTCO_vendor_support(F) ppdev(F) coretemp(F) microcode(F) serio_raw(F) i2c_i801(F) snd_ice1724(F) snd_ak4113(F) snd_pt2258(F)
[   83.990734]  snd_ak4114(F) snd_i2c(F) snd_ice17xx_ak4xxx(F) snd_ak4xxx_adda(F) snd_ac97_codec(F) ac97_bus(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) snd_pcm(F) lpc_ich(F) mfd_core(F) snd_page_alloc(F) snd_timer(F) snd(F) soundcore(F) parport_pc(F) parport(F) mei(F) vhost_net(F) tun(F) macvtap(F) macvlan(F) kvm_intel(F) kvm(F) uinput(F) crc32c_intel(F) i915(F) i2c_algo_bit(F) drm_kms_helper(F) atl1c(F) drm(F) i2c_core(F) video(F) usb_storage(F) uas(F) sunrpc(F)
[   83.991053] Pid: 2484, comm: chrome Tainted: GF            3.6.0-0.rc7.git1.4.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   83.991132] EIP: 0073:[<b48e0c68>] EFLAGS: 00010206 CPU: 3
[   83.991173] EIP is at 0xb48e0c68
[   83.991194] EAX: 43327000 EBX: b7928ff4 ECX: 00000001 EDX: 00000053
[   83.991232] ESI: bf846c20 EDI: 43327000 EBP: bf846bf8 ESP: bf846be0
[   83.991270]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   83.991304] Process chrome (pid: 2484, ti=decb6000 task=df270000 task.ti=decb6000)

[   83.991361] EIP: [<b48e0c68>] 0xb48e0c68 SS:ESP 007b:bf846be0
[   84.018990] ---[ end trace 15649dcf9d9991ab ]---
[ 1780.523881] file-roller[3709]: segfault at 8 ip 0809c8b3 sp bfe90f30 error 4 in file-roller[8048000+75000]
[ 3110.182423] [drm:i915_hangcheck_hung] *ERROR* Hangcheck timer elapsed... GPU hung
[ 3110.182454] [drm] capturing error event; look for more information in /debug/dri/0/i915_error_state
[17438.124936] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.
[35495.712822] [drm:i915_hangcheck_hung] *ERROR* Hangcheck timer elapsed... GPU hung
[41630.656633] [drm:i915_hangcheck_hung] *ERROR* Hangcheck timer elapsed... GPU hung
[41657.746737] [drm:i915_hangcheck_hung] *ERROR* Hangcheck timer elapsed... GPU hung
[42014.641606] EXT4-fs (sdb): recovery complete
[42014.883103] EXT4-fs (sdb): mounted filesystem with ordered data mode. Opts: (null)
[42014.883123] SELinux: initialized (dev sdb, type ext4), uses xattr
[42519.834932] [drm:i915_hangcheck_hung] *ERROR* Hangcheck timer elapsed... GPU hung
[42567.931575] SELinux: initialized (dev fuse, type fuse), uses genfs_contexts
[42586.323503] SELinux: initialized (dev proc, type proc), uses genfs_contexts
[42602.663622] chrome: Corrupted page table at address 5c3a5000
[42602.663653] *pdpt = 0000000000000000 *pde = 0000000000000000 
[42602.663681] Bad pagetable: 000f [#2] SMP 
[42602.663701] Modules linked in: vfat(F) fat(F) fuse(F) ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) ip6table_mangle(F) ip6t_REJECT(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ip6table_filter(F) ip6_tables(F) bnep(F) bluetooth(F) rfkill(F) be2iscsi(F) iscsi_boot_sysfs(F) bnx2i(F) cnic(F) uio(F) lockd(F) cxgb4i(F) cxgb4(F) cxgb3i(F) cxgb3(F) mdio(F) libcxgbi(F) ib_iser(F) rdma_cm(F) ib_addr(F) iw_cm(F) ib_cm(F) ib_sa(F) ib_mad(F) iptable_nat(F) nf_nat(F) ib_core(F) iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) iptable_mangle(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_conntrack(F) nf_conntrack(F) iTCO_wdt(F) iTCO_vendor_support(F) ppdev(F) coretemp(F) microcode(F) serio_raw(F) i2c_i801(F) snd_ice1724(F) snd_ak4113(F) snd_pt2258(F)
[42602.664055]  snd_ak4114(F) snd_i2c(F) snd_ice17xx_ak4xxx(F) snd_ak4xxx_adda(F) snd_ac97_codec(F) ac97_bus(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) snd_pcm(F) lpc_ich(F) mfd_core(F) snd_page_alloc(F) snd_timer(F) snd(F) soundcore(F) parport_pc(F) parport(F) mei(F) vhost_net(F) tun(F) macvtap(F) macvlan(F) kvm_intel(F) kvm(F) uinput(F) crc32c_intel(F) i915(F) i2c_algo_bit(F) drm_kms_helper(F) atl1c(F) drm(F) i2c_core(F) video(F) usb_storage(F) uas(F) sunrpc(F)
[42602.664268] Pid: 15310, comm: chrome Tainted: GF     D      3.6.0-0.rc7.git1.4.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[42602.664321] EIP: 0073:[<b486cc68>] EFLAGS: 00010206 CPU: 0
[42602.664347] EIP is at 0xb486cc68
[42602.664361] EAX: 5c3a5000 EBX: b78b4ff4 ECX: 00000001 EDX: 00000053
[42602.664387] ESI: bff247f0 EDI: 5c3a5000 EBP: bff247c8 ESP: bff247b0
[42602.664412]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[42602.664435] Process chrome (pid: 15310, ti=cfdf8000 task=df549590 task.ti=cfdf8000)

[42602.664473] EIP: [<b486cc68>] 0xb486cc68 SS:ESP 007b:bff247b0
[42602.693336] ---[ end trace 15649dcf9d9991ac ]---
[50071.132354] chrome: Corrupted page table at address 4cc9c000
[50071.132406] *pdpt = 0000000000000000 *pde = 0000000000000000 
[50071.132439] Bad pagetable: 000f [#3] SMP 
[50071.132463] Modules linked in: vfat(F) fat(F) fuse(F) ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) ip6table_mangle(F) ip6t_REJECT(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ip6table_filter(F) ip6_tables(F) bnep(F) bluetooth(F) rfkill(F) be2iscsi(F) iscsi_boot_sysfs(F) bnx2i(F) cnic(F) uio(F) lockd(F) cxgb4i(F) cxgb4(F) cxgb3i(F) cxgb3(F) mdio(F) libcxgbi(F) ib_iser(F) rdma_cm(F) ib_addr(F) iw_cm(F) ib_cm(F) ib_sa(F) ib_mad(F) iptable_nat(F) nf_nat(F) ib_core(F) iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) iptable_mangle(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_conntrack(F) nf_conntrack(F) iTCO_wdt(F) iTCO_vendor_support(F) ppdev(F) coretemp(F) microcode(F) serio_raw(F) i2c_i801(F) snd_ice1724(F) snd_ak4113(F) snd_pt2258(F)
[50071.133001]  snd_ak4114(F) snd_i2c(F) snd_ice17xx_ak4xxx(F) snd_ak4xxx_adda(F) snd_ac97_codec(F) ac97_bus(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) snd_pcm(F) lpc_ich(F) mfd_core(F) snd_page_alloc(F) snd_timer(F) snd(F) soundcore(F) parport_pc(F) parport(F) mei(F) vhost_net(F) tun(F) macvtap(F) macvlan(F) kvm_intel(F) kvm(F) uinput(F) crc32c_intel(F) i915(F) i2c_algo_bit(F) drm_kms_helper(F) atl1c(F) drm(F) i2c_core(F) video(F) usb_storage(F) uas(F) sunrpc(F)
[50071.133331] Pid: 19286, comm: chrome Tainted: GF     D      3.6.0-0.rc7.git1.4.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[50071.133419] EIP: 0073:[<b486cc68>] EFLAGS: 00010206 CPU: 2
[50071.133460] EIP is at 0xb486cc68
[50071.133484] EAX: 4cc9c000 EBX: b78b4ff4 ECX: 00000001 EDX: 00000053
[50071.133529] ESI: bff247f0 EDI: 4cc9c000 EBP: bff247c8 ESP: bff247b0
[50071.133568]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[50071.133601] Process chrome (pid: 19286, ti=dafdc000 task=ccbcc0b0 task.ti=dafdc000)

[50071.140904] EIP: [<b486cc68>] 0xb486cc68 SS:ESP 007b:bff247b0
[50071.161182] ---[ end trace 15649dcf9d9991ad ]---

Comment 15 Mikhail 2012-10-02 02:56:59 UTC
[ 3544.164805] chrome: Corrupted page table at address 437d4000
[ 3544.165785] *pdpt = 0000000000000000 *pde = f000eef3f000eef3 
[ 3544.167194] Bad pagetable: 000f [#1] SMP 
[ 3544.168606] Modules linked in: snd_seq_midi(F) snd_seq_midi_event(F) snd_seq_dummy(F) snd_hrtimer(F) vfat(F) fat(F) fuse(F) ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) ip6table_mangle(F) lockd(F) ip6t_REJECT(F) bnep(F) be2iscsi(F) iscsi_boot_sysfs(F) bluetooth(F) rfkill(F) bnx2i(F) cnic(F) uio(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) cxgb4i(F) cxgb4(F) ip6table_filter(F) cxgb3i(F) cxgb3(F) ip6_tables(F) mdio(F) libcxgbi(F) ib_iser(F) rdma_cm(F) ib_addr(F) iw_cm(F) ib_cm(F) ib_sa(F) ib_mad(F) ib_core(F) iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) iptable_nat(F) nf_nat(F) iptable_mangle(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_conntrack(F) nf_conntrack(F) binfmt_misc(F) iTCO_wdt(F) iTCO_vendor_support(F) ppdev(F) coretemp(F)
[ 3544.173378]  microcode(F) snd_ice1724(F) snd_ak4113(F) snd_pt2258(F) serio_raw(F) snd_ak4114(F) snd_i2c(F) snd_ice17xx_ak4xxx(F) snd_ak4xxx_adda(F) snd_ac97_codec(F) i2c_i801(F) ac97_bus(F) snd_rawmidi(F) snd_seq(F) lpc_ich(F) mfd_core(F) snd_seq_device(F) snd_pcm(F) snd_page_alloc(F) snd_timer(F) snd(F) soundcore(F) mei(F) parport_pc(F) parport(F) vhost_net(F) tun(F) macvtap(F) macvlan(F) kvm_intel(F) kvm(F) uinput(F) crc32c_intel(F) i915(F) i2c_algo_bit(F) drm_kms_helper(F) atl1c(F) drm(F) i2c_core(F) video(F) usb_storage(F) uas(F) sunrpc(F)
[ 3544.180313] Pid: 9633, comm: chrome Tainted: GF            3.6.0-0.rc7.git1.4.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[ 3544.182172] EIP: 0073:[<b487cc68>] EFLAGS: 00010206 CPU: 1
[ 3544.184043] EIP is at 0xb487cc68
[ 3544.185898] EAX: 437d4000 EBX: b78c4ff4 ECX: 00000001 EDX: 00000053
[ 3544.187776] ESI: bfe78350 EDI: 437d4000 EBP: bfe78328 ESP: bfe78310
[ 3544.189669]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 3544.191565] Process chrome (pid: 9633, ti=d7c1c000 task=ddc3c0b0 task.ti=d7c1c000)

[ 3544.195393] EIP: [<b487cc68>] 0xb487cc68 SS:ESP 007b:bfe78310
[ 3544.213337] ---[ end trace ef8c0c5a45558afa ]---


Again and again occurs when I open in Google Chrome in new tab site.

Comment 16 Mikhail 2012-10-08 02:40:39 UTC
[  212.107498] chrome: Corrupted page table at address 4243d000
[  212.107528] *pdpt = 0000000000000000 *pde = f000eef3f000eef3 
[  212.107555] Bad pagetable: 000f [#1] SMP 
[  212.107573] Modules linked in: fuse ebtable_nat ebtables lockd bnep ipt_MASQUERADE bluetooth rfkill nf_conntrack_netbios_ns nf_conntrack_broadcast be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser ip6table_mangle rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ip6t_REJECT ib_core iscsi_tcp libiscsi_tcp libiscsi nf_conntrack_ipv6 scsi_transport_iscsi nf_defrag_ipv6 ip6table_filter ip6_tables iptable_nat nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec ac97_bus snd_rawmidi snd_seq snd_seq_device vhost_net snd_pcm tun macvtap iTCO_wdt macvlan iTCO_vendor_support snd_page_alloc ppdev lpc_ich snd_timer snd parport_pc binfmt_misc coretemp
[  212.107928]  kvm_intel kvm microcode serio_raw i2c_i801 mfd_core soundcore mei parport uinput usb_storage i915 i2c_algo_bit crc32c_intel drm_kms_helper drm atl1c i2c_core video sunrpc
[  212.108013] Pid: 3444, comm: chrome Not tainted 3.6.0-3.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[  212.108055] EIP: 0073:[<b4831108>] EFLAGS: 00010206 CPU: 0
[  212.108078] EIP is at 0xb4831108
[  212.108091] EAX: 4243d000 EBX: b78c6ff4 ECX: 00000001 EDX: 00000055
[  212.108115] ESI: bf9effc0 EDI: bf9effc0 EBP: bf9eff98 ESP: bf9eff80
[  212.108139]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[  212.108160] Process chrome (pid: 3444, ti=cd2a0000 task=ed55e480 task.ti=cd2a0000)

[  212.108195] EIP: [<b4831108>] 0xb4831108 SS:ESP 007b:bf9eff80
[  212.123801] ---[ end trace 9f2dee8d9914a306 ]---

Comment 17 Mikhail 2012-10-09 17:21:51 UTC
[   13.156069] Ebtables v2.0 registered
[   14.844852] NetworkManager[640]: segfault at ffffffff ip 4c3e4ce0 sp bfbf2730 error 4 in libglib-2.0.so.0.3400.0[4c381000+129000]
[   28.708442] fuse init (API version 7.20)
[   28.711744] SELinux: initialized (dev fuse, type fuse), uses genfs_contexts
[   28.732936] SELinux: initialized (dev fusectl, type fusectl), uses genfs_contexts
[   31.069402] gdbus[1530]: segfault at ffffffff ip 4c3e4ce0 sp b6cf1bb0 error 4 in libglib-2.0.so.0.3400.0[4c381000+129000]
[   48.478897] NetworkManager[1840]: segfault at ffffffff ip 4c3e4ce0 sp bfb74980 error 4 in libglib-2.0.so.0.3400.0[4c381000+129000]
[   54.750003] SELinux: initialized (dev proc, type proc), uses genfs_contexts
[   55.293153] chrome: Corrupted page table at address 3abad000
[   55.293183] *pdpt = 0000000000000000 *pde = 0000000000000000 
[   55.293209] Bad pagetable: 000f [#1] SMP 
[   55.293228] Modules linked in: fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast lockd bnep bluetooth rfkill be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser ip6table_mangle rdma_cm ib_addr iw_cm ib_cm ip6t_REJECT ib_sa ib_mad ib_core nf_conntrack_ipv6 iscsi_tcp nf_defrag_ipv6 libiscsi_tcp libiscsi scsi_transport_iscsi ip6table_filter ip6_tables iptable_nat nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec ac97_bus snd_rawmidi snd_seq snd_seq_device snd_pcm vhost_net tun macvtap snd_page_alloc iTCO_wdt macvlan ppdev snd_timer iTCO_vendor_support snd parport_pc lpc_ich binfmt_misc coretemp
[   55.293616]  kvm_intel kvm microcode i2c_i801 serio_raw mfd_core soundcore mei parport uinput usb_storage i915 i2c_algo_bit drm_kms_helper crc32c_intel drm atl1c i2c_core video sunrpc
[   55.293701] Pid: 2099, comm: chrome Not tainted 3.6.1-1.fc18.i686.PAE #1 To Be Filled By O.E.M. To Be Filled By O.E.M./H61M/U3S3
[   55.293744] EIP: 0073:[<b482d108>] EFLAGS: 00010206 CPU: 3
[   55.293767] EIP is at 0xb482d108
[   55.293780] EAX: 3abad000 EBX: b78c2ff4 ECX: 00000001 EDX: 00000055
[   55.293804] ESI: bf99c930 EDI: bf99c930 EBP: bf99c908 ESP: bf99c8f0
[   55.293828]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   55.293849] Process chrome (pid: 2099, ti=ebb06000 task=ee566480 task.ti=ebb06000)

[   55.293884] EIP: [<b482d108>] 0xb482d108 SS:ESP 007b:bf99c8f0
[   55.315452] ---[ end trace 25a98af052a2b28e ]---
[   55.505702] ------------[ cut here ]------------
[   55.505713] WARNING: at arch/x86/kernel/apic/ipi.c:109 default_send_IPI_mask_logical+0xb2/0xf0()
[   55.505715] Hardware name: To Be Filled By O.E.M.
[   55.505717] empty IPI mask
[   55.505719] Modules linked in:
[   55.505721]  fuse ebtable_nat ebtables ipt_MASQUERADE nf_conntrack_netbios_ns nf_conntrack_broadcast lockd bnep bluetooth rfkill be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser ip6table_mangle rdma_cm ib_addr iw_cm ib_cm ip6t_REJECT ib_sa ib_mad ib_core nf_conntrack_ipv6 iscsi_tcp nf_defrag_ipv6 libiscsi_tcp libiscsi scsi_transport_iscsi ip6table_filter ip6_tables iptable_nat nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack snd_ice1724 snd_ak4113 snd_pt2258 snd_ak4114 snd_i2c snd_ice17xx_ak4xxx snd_ak4xxx_adda snd_ac97_codec ac97_bus snd_rawmidi snd_seq snd_seq_device snd_pcm vhost_net tun macvtap snd_page_alloc iTCO_wdt macvlan ppdev snd_timer iTCO_vendor_support snd parport_pc lpc_ich binfmt_misc coretemp kvm_intel kvm microcode
[   55.505779]  i2c_i801 serio_raw mfd_core soundcore mei parport uinput usb_storage i915 i2c_algo_bit drm_kms_helper crc32c_intel drm atl1c i2c_core video sunrpc
[   55.505793] Pid: 2065, comm: Chrome_ProcessL Tainted: G      D      3.6.1-1.fc18.i686.PAE #1
[   55.505794] Call Trace:
[   55.505802]  [<c044b692>] warn_slowpath_common+0x72/0xa0
[   55.505805]  [<c0434672>] ? default_send_IPI_mask_logical+0xb2/0xf0
[   55.505807]  [<c0434672>] ? default_send_IPI_mask_logical+0xb2/0xf0
[   55.505810]  [<c044b763>] warn_slowpath_fmt+0x33/0x40
[   55.505812]  [<c0434672>] default_send_IPI_mask_logical+0xb2/0xf0
[   55.505817]  [<c0432641>] native_send_call_func_ipi+0x41/0x60
[   55.505822]  [<c04a3c54>] smp_call_function_many+0x174/0x210
[   55.505827]  [<c054da14>] ? __mem_cgroup_commit_charge+0x124/0x2c0
[   55.505830]  [<c0443990>] ? do_flush_tlb_all+0x50/0x50
[   55.505832]  [<c0443a6b>] native_flush_tlb_others+0x2b/0x30
[   55.505835]  [<c0443d00>] flush_tlb_page+0x50/0xa0
[   55.505840]  [<c053527c>] ptep_clear_flush+0x3c/0x50
[   55.505842]  [<c0525dcf>] do_wp_page+0x27f/0x890
[   55.505847]  [<c047ed25>] ? sched_clock_cpu+0x105/0x190
[   55.505849]  [<c0527b87>] handle_pte_fault+0x307/0xad0
[   55.505853]  [<c052944d>] handle_mm_fault+0x1dd/0x280
[   55.505859]  [<c097aea0>] ? vmalloc_fault+0x171/0x171
[   55.505862]  [<c097afe1>] do_page_fault+0x141/0x450
[   55.505866]  [<c0555795>] ? vfs_read+0xe5/0x160
[   55.505870]  [<c04bd296>] ? __audit_syscall_exit+0x356/0x3b0
[   55.505873]  [<c04bd296>] ? __audit_syscall_exit+0x356/0x3b0
[   55.505877]  [<c097aea0>] ? vmalloc_fault+0x171/0x171
[   55.505881]  [<c09784d3>] error_code+0x67/0x6c
[   55.505884] ---[ end trace 25a98af052a2b28f ]---
[   61.404075] NetworkManager[2058]: segfault at ffffffff ip 4c3e4ce0 sp bfa4f1a0 error 4 in libglib-2.0.so.0.3400.0[4c381000+129000]
[   64.098497] NetworkManager[2924]: segfault at ffffffff ip 4c3e4ce0 sp bf8558a0 error 4 in libglib-2.0.so.0.3400.0[4c381000+129000]

Comment 18 Sergey 2012-10-21 12:58:42 UTC
This does happen with Fedora 17: the first attempt after reboot to start Chrome ends up with this:


[   24.010975] Bad pagetable: 000f [#1] SMP 
[   24.011003] Modules linked in: fuse rfcomm bnep ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core videodev media iTCO_wdt iTCO_vendor_support arc4 snd_hda_codec_conexant iwldvm mac80211 btusb bluetooth binfmt_misc snd_hda_intel coretemp snd_hda_codec kvm microcode snd_hwdep snd_seq snd_seq_device snd_pcm i2c_i801 lpc_ich mfd_core iwlwifi cfg80211 snd_page_alloc snd_timer e1000e mei thinkpad_acpi snd soundcore rfkill uinput crc32c_intel sdhci_pci sdhci mmc_core i915 nouveau mxm_wmi wmi video i2c_algo_bit drm_kms_helper ttm drm i2c_core
[   24.011483] Pid: 1561, comm: chrome Not tainted 3.6.1-1.fc17.i686.PAE #1 LENOVO 4174EN7/4174EN7
[   24.011536] EIP: 0073:[<b4b0bce7>] EFLAGS: 00210206 CPU: 1
[   24.011572] EIP is at 0xb4b0bce7
[   24.011594] EAX: 4abfb000 EBX: b7888ff4 ECX: 00000001 EDX: 00000055
[   24.011634] ESI: bff84d20 EDI: bff84d20 EBP: b8a90edc ESP: bff84ce0
[   24.011673]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[   24.011708] Process chrome (pid: 1561, ti=ed372000 task=eb4acb60 task.ti=ed372000)
[   24.011750] 
[   24.011761] EIP: [<b4b0bce7>] 0xb4b0bce7 SS:ESP 007b:bff84ce0
[   24.022533] ---[ end trace 9ba32a88664a0369 ]---

The mouse pointer is alive, but the only possibility to recover is to kill X server. Then after subsequent login the chrome starts. This started after update of the kernel to the 3.6.1-1

Comment 19 Sergey 2012-10-21 21:50:15 UTC
In addition to my comment #18: 
booting with kernel 3.5.5-2 really solves the problem - the chrome is starting just after the boot with no problems.

Comment 20 Artem S. Tashkinov 2012-10-21 22:10:31 UTC
[ 5455.494559] chrome: Corrupted page table at address 3b286000
[ 5455.494564] *pdpt = 0000000000000000 *pde = 0000000000000000
[ 5455.494569] Bad pagetable: 000f [#1] PREEMPT SMP
[ 5455.494572] Modules linked in: vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) pppoe pppox ppp_synctty ppp_async crc_ccitt ppp_generic slhc ipv6 nf_conntrack_ftp nf_conntrack_netbios_ns nf_conntrack_broadcast xt_LOG xt_limit nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_tcpudp xt_pkttype ipt_ULOG xt_owner xt_multiport iptable_filter ip_tables x_tables w83627ehf adt7475 hwmon_vid binfmt_misc fuse hid_generic usbhid hid snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi uvcvideo videobuf2_core videodev videobuf2_vmalloc videobuf2_memops coretemp aesni_intel ablk_helper cryptd aes_i586 aes_generic microcode i2c_i801 pcspkr sr_mod cdrom sg nvidia(PO) agpgart e1000e xhci_hcd snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd snd_page_alloc ehci_hcd fan evdev
[ 5455.494635] Pid: 7005, comm: chrome Tainted: P           O 3.6.2-ic #2 System manufacturer System Product Name/P8P67 PRO
[ 5455.494638] EIP: 0073:[<b47e2468>] EFLAGS: 00010206 CPU: 3
[ 5455.494642] EIP is at 0xb47e2468
[ 5455.494644] EAX: 3b286000 EBX: b78b0ff4 ECX: 00000000 EDX: 00000055
[ 5455.494646] ESI: bfcc6f20 EDI: bfcc6f20 EBP: bfcc6ef8 ESP: bfcc6ee0
[ 5455.494648]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[ 5455.494651] Process chrome (pid: 7005, ti=e310e000 task=f328df00 task.ti=e310e000)
[ 5455.494652]
[ 5455.494653] EIP: [<b47e2468>] 0xb47e2468 SS:ESP 007b:bfcc6ee0
[ 5455.494661] ---[ end trace 0b96dc30d6198648 ]---

Comment 21 Stanislaw Gruszka 2012-12-17 16:44:14 UTC
Please install kernel-debug, boot it and then try to reproduce the problem, then attach dmesg (it should include a warning, which should indicate where the problem is).

Comment 22 Artem S. Tashkinov 2012-12-17 17:24:44 UTC
This can be resurfaced bug 555944

Comment 23 Mikhail 2012-12-17 17:57:52 UTC
Created attachment 665017 [details]
dmesg

Comment 24 Mikhail 2012-12-18 04:33:19 UTC
Created attachment 665291 [details]
dmesg

Comment 25 Stanislaw Gruszka 2012-12-18 10:24:22 UTC
Unfortunetly kernel-debug did not print anything new nor useful to dmesg :-/

I wonder what chrome do to trigger this, I'll try to reproduce problem locally, what version of chrome is used ?

Comment 26 Mikhail 2012-12-18 10:26:51 UTC
(In reply to comment #25)
> Unfortunetly kernel-debug did not print anything new nor useful to dmesg :-/
> 
> I wonder what chrome do to trigger this, I'll try to reproduce problem
> locally, what version of chrome is used ?

25.0.1359.3 dev

Comment 27 Stanislaw Gruszka 2012-12-22 15:16:13 UTC
I installed google-chrome-unstable-25.0.1364.5-174090.i386, since that was the latest package from dev channel. Problem does not trigger here (I'm using  3.6.10-4.fc18.i686.PAE). Do you load some specific web page to make problem happen ?

Comment 28 Mikhail 2012-12-22 15:55:09 UTC
I think should be done several conditions:

1. enabled GPU acceleration. Open chrome://flags and enable "Override software rendering list" restart and check chrome://gpu in my case:
Graphics Feature Status
Canvas: Hardware accelerated
Compositing: Hardware accelerated
3D CSS: Hardware accelerated
CSS Animation: Accelerated
WebGL: Hardware accelerated
WebGL multisampling: Hardware accelerated
Flash 3D: Hardware accelerated
Flash Stage3D: Hardware accelerated
Texture Sharing: Hardware accelerated
Video Decode: Hardware accelerated
Video: Hardware accelerated
Panel Fitting: Unavailable. Hardware acceleration disabled.

2. Intel GPU, in my case Sandybridge.

After this usually when I launch google chrome with a lot of tab's this problem happen.

Comment 29 Artem S. Tashkinov 2012-12-22 19:35:09 UTC
(In reply to comment #27)

Speaking frankly this bug is almost impossible to trigger on purpose - for the past several months I've had it several times but I cannot say it's related to anything specific - it just happens occasionally sometimes on its own, e.g. when I exit Chrome.

I still feel it's somehow related to the physical memory or memory management, but I've tested my RAM for several hours using both MemTest86+ 4.2 and 5.0 beta 1 and none of them have found any problems.

Comment 30 Mikhail 2012-12-22 20:01:22 UTC
(In reply to comment #29)
> Speaking frankly this bug is almost impossible to trigger on purpose - for
> the past several months I've had it several times but I cannot say it's
> related to anything specific - it just happens occasionally sometimes on its
> own, e.g. when I exit Chrome.
> 


Artem do you read my post? What GPU are you using? Do you "Override software rendering list" in Chrome flags?

Comment 31 Stanislaw Gruszka 2013-01-06 17:31:19 UTC
I'm not able to reproduce, this problem is probably hardware specific ...

Comment 32 Artem S. Tashkinov 2013-01-07 13:16:44 UTC
At least for me this bug has nothing to do with the i915 module as I don't have any Intel GPU.

Comment 33 Bapf 2013-01-27 09:25:16 UTC
I also have this bug since FC18 an chrome 26 (unstable, which is the only one working for me on FC18) on a nvidia GPU.
(It shows quite often when I start chrome - and a bunch of other programs - directly after booting / logging in.)

On my laptop (which has an Intel GPU) on the other hand a I hadn't hat it yet.

Comment 34 Mikhail 2013-02-02 22:41:12 UTC
Please run MemBench in Chrome browser for imitate highload http://gregor-wagner.com/tmp/mem

Comment 35 Artem S. Tashkinov 2013-02-03 10:53:39 UTC
Another bug but I'm gonna post it here anyways:

[34336.864488] ------------[ cut here ]------------
[34336.864499] WARNING: at arch/x86/kernel/apic/ipi.c:109 default_send_IPI_mask_logical+0x9b/0xd0()
[34336.864501] Hardware name: System Product Name
[34336.864502] empty IPI mask
[34336.864504] Modules linked in: tun usb_storage ipv6 nf_conntrack_ftp nf_conntrack_netbios_ns nf_conntrack_broadcast xt_LOG xt_limit nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_tcpudp xt_pkttype ipt_ULOG xt_owner xt_multiport iptable_filter ip_tables x_tables w83627ehf adt7475 hwmon_vid vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) binfmt_misc fuse hid_generic usbhid hid uvcvideo videobuf2_core videodev videobuf2_vmalloc videobuf2_memops snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi fan sg coretemp aesni_intel ablk_helper cryptd lrw aes_i586 xts gf128mul microcode sr_mod cdrom pcspkr i2c_i801 xhci_hcd snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd snd_page_alloc ehci_hcd nvidia(PO) e1000e evdev
[34336.864584] Pid: 1605, comm: WorkerPool/1605 Tainted: P           O 3.7.3-ic #2
[34336.864586] Call Trace:
[34336.864592]  [<c102f70d>] warn_slowpath_common+0x6d/0xa0
[34336.864596]  [<c102151b>] ? default_send_IPI_mask_logical+0x9b/0xd0
[34336.864599]  [<c102151b>] ? default_send_IPI_mask_logical+0x9b/0xd0
[34336.864603]  [<c102f7be>] warn_slowpath_fmt+0x2e/0x30
[34336.864606]  [<c102151b>] default_send_IPI_mask_logical+0x9b/0xd0
[34336.864611]  [<c101f710>] native_send_call_func_ipi+0x40/0x60
[34336.864626]  [<c106c1ca>] smp_call_function_many+0x16a/0x200
[34336.864629]  [<c102c136>] native_flush_tlb_others+0x26/0x30
[34336.864633]  [<c102c442>] flush_tlb_page+0x82/0xd0
[34336.864636]  [<c102b131>] ptep_set_access_flags+0x51/0x60
[34336.864641]  [<c10a0cd0>] handle_pte_fault+0x380/0xc40
[34336.864646]  [<c108d2c7>] ? free_hot_cold_page_list+0x27/0x40
[34336.864650]  [<c10901c2>] ? release_pages+0x152/0x190
[34336.864654]  [<c10a2334>] handle_mm_fault+0x1c4/0x240
[34336.864659]  [<c1027890>] ? vmalloc_sync_all+0x10/0x10
[34336.864664]  [<c102756c>] __do_page_fault+0x12c/0x440
[34336.864666]  [<c10a4589>] ? remove_vma+0x39/0x50
[34336.864670]  [<c10a5c3f>] ? do_munmap+0x22f/0x2e0
[34336.864673]  [<c10a5d31>] ? vm_munmap+0x41/0x50
[34336.864677]  [<c1027890>] ? vmalloc_sync_all+0x10/0x10
[34336.864682]  [<c1027898>] do_page_fault+0x8/0x10
[34336.864686]  [<c1306586>] error_code+0x5a/0x60
[34336.864690]  [<c1027890>] ? vmalloc_sync_all+0x10/0x10
[34336.864695] ---[ end trace 1c3b665192e6a097 ]---

Comment 36 Mikhail 2013-02-06 03:42:38 UTC
Created attachment 693669 [details]
htop screenshot

Comment 37 Mikhail 2013-02-06 03:44:31 UTC
Maybe this occurs when large IO wait in system? Look at my htop screenshot.

Comment 38 Jan Iven 2013-03-15 07:49:57 UTC
One more backtrace triggered by chrome that looks much like the original report, no hardware acceleration, Intel GPU:


[121348.152940] chrome: Corrupted page table at address 43d3a000
[121348.153027] *pdpt = 0000000000000000 *pde = f0003cc3f0003cc3 
[121348.153027] Bad pagetable: 000f [#1] SMP 
[121348.153027] Modules linked in: fuse nf_conntrack_netbios_ns nf_conntrack_broadcast ipt_MASQUERADE ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ebtable_filter ebtables ip6table_filter ip6_tables snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep arc4 snd_seq snd_seq_device uvcvideo videobuf2_vmalloc b43 videobuf2_memops videobuf2_core videodev bcma snd_pcm mac80211 snd_page_alloc media iTCO_wdt snd_timer cfg80211 iTCO_vendor_support r8169 snd lpc_ich ssb ideapad_laptop mii sparse_keymap soundcore mmc_core mfd_core rfkill i2c_i801 coretemp microcode uinput i915 i2c_algo_bit drm_kms_helper drm i2c_core video
[121348.153434] Pid: 19009, comm: chrome Not tainted 3.8.2-206.fc18.i686.PAE #1 LENOVO 2957                            /Mariana2
[121348.153434] EIP: 0073:[<b4426098>] EFLAGS: 00210206 CPU: 1
[121348.153434] EIP is at 0xb4426098
[121348.153434] EAX: 43d3a000 EBX: b796f97c ECX: 00001000 EDX: 00000055
[121348.153434] ESI: bf924768 EDI: bf924768 EBP: bf924738 ESP: bf924720
[121348.153434]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[121348.153434] Process chrome (pid: 19009, ti=c447e000 task=f6988cb0 task.ti=c447e000)

[121348.153434] EIP: [<b4426098>] 0xb4426098 SS:ESP 007b:bf924720


Versions:
google-chrome-unstable-27.0.1430.0-186115.i386

/opt/google/chrome/chrome --type=renderer [...] --renderer-print-preview --disable-webgl --disable-pepper-3d --disable-accelerated-2d-canvas --disable-accelerated-video-decode 

chrome://gpu/  says:
Graphics Feature Status
Canvas: Software only, hardware acceleration unavailable
Compositing: Hardware accelerated
3D CSS: Hardware accelerated
CSS Animation: Accelerated
WebGL: Unavailable. Hardware acceleration unavailable
WebGL multisampling: Hardware accelerated
Flash 3D: Unavailable. Hardware acceleration unavailable
Flash Stage3D: Unavailable. Hardware acceleration unavailable
Flash Stage3D Baseline profile: Unavailable. Hardware acceleration unavailable
Texture Sharing: Hardware accelerated
Video Decode: Software only, hardware acceleration unavailable
Video: Hardware accelerated
Panel Fitting: Unavailable. Hardware acceleration disabled.


lspci:

00:02.1 Display controller: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller (rev 03)

Comment 39 Jesse Pangburn 2013-03-17 17:38:40 UTC
I got this same problem for the first time today.  I do have the gpu acceleration enabled on Chrome, and it occurred when starting Chrome when it would be reopening about 6-7 tabs.  It's on a laptop with Intel GPU:
[  210.860023] chrome: Corrupted page table at address 2315e000
[  210.860054] *pdpt = 0000000000000000 *pde = 0000000000000000 
[  210.860081] Bad pagetable: 000f [#1] SMP 
[  210.860100] Modules linked in: fuse lockd sunrpc rfcomm bnep vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter nf_conntrack_ipv4 nf_defrag_ipv4 xt_state ip6_tables nf_conntrack binfmt_misc btusb bluetooth uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core videodev media snd_hda_codec_hdmi snd_hda_codec_idt snd_hda_intel iTCO_wdt lib80211_crypt_tkip coretemp ppdev iTCO_vendor_support kvm_intel parport_pc kvm wl(PO) snd_hda_codec parport lpc_ich e1000e i2c_i801 snd_hwdep mei snd_seq cfg80211 snd_seq_device mfd_core snd_pcm rfkill dell_wmi dell_laptop microcode sparse_keymap snd_page_alloc snd_timer snd soundcore lib80211 dcdbas uinput crc32c_intel hid_logitech_dj sdhci_pci sdhci mmc_core wmi i915 video i2c_algo_bit drm_kms_helper drm i2c_core
[  210.860478] Pid: 1913, comm: chrome Tainted: P         C O 3.7.9-104.fc17.i686.PAE #1 Dell Inc. Latitude E6420/0X8R3Y
[  210.860519] EIP: 0073:[<b449efc8>] EFLAGS: 00210206 CPU: 0
[  210.860543] EIP is at 0xb449efc8
[  210.860556] EAX: 2315e000 EBX: b7944ff4 ECX: 00001000 EDX: 00000053
[  210.860581] ESI: bfb0e598 EDI: 2315e000 EBP: bfb0e568 ESP: bfb0e550
[  210.860606]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[  210.860627] Process chrome (pid: 1913, ti=ea7f2000 task=ebf98000 task.ti=ea7f2000)
[  210.860656] 
[  210.860664] EIP: [<b449efc8>] 0xb449efc8 SS:ESP 007b:bfb0e550
[  210.877342] ---[ end trace 229d2343058bf502 ]---

Comment 40 Lukas Tvrdy 2013-04-10 16:55:50 UTC
This happens to me on daily basis with Google Chrome in Fedora 18. Finally I decided I will report it.

Steps to reproduce:
1. Do fresh boot
2. Log into KDE Desktop 
3. Run Google Chrome

What happens:
1. Error message pop ups in screen with black background

Getting out of black background window: Ctrl+Alt+F2, then Ctrl+Alt+F1

Additional info:
I have 16 Gb of ram and I'm torturing this machine with i686 PAE kernel.
It might be related?


[log]
[  131.541504] chrome: Corrupted page table at address 393eb000
[  131.541530] *pdpt = 0000000000000000 *pde = 0000000000000000 
[  131.541552] Bad pagetable: 000f [#1] SMP 
[  131.541569] Modules linked in: lockd sunrpc bnep bluetooth nf_conntrack_netbios_ns nf_conntrack_broadcast ipt_MASQUERADE ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ebtable_filter ebtables ip6table_filter ip6_tables binfmt_misc snd_hda_codec_realtek arc4 iTCO_wdt iTCO_vendor_support coretemp iwldvm kvm_intel mac80211 kvm snd_hda_intel microcode snd_hda_codec uvcvideo snd_hwdep i2c_i801 videobuf2_vmalloc snd_seq videobuf2_memops snd_seq_device videobuf2_core iwlwifi snd_pcm videodev lpc_ich media cfg80211 mfd_core snd_page_alloc mei e1000e snd_timer uinput thinkpad_acpi snd soundcore rfkill dm_crypt nouveau i915 mxm_wmi i2c_algo_bit sdhci_pci ttm crc32c_intel drm_kms_helper firewire_ohci
[  131.541970]  sdhci drm firewire_core mmc_core crc_itu_t i2c_core wmi video
[  131.541999] Pid: 1961, comm: chrome Not tainted 3.8.4-202.fc18.i686.PAE #1 LENOVO 23923EG/23923EG
[  131.542028] EIP: 0073:[<b4327d18>] EFLAGS: 00210206 CPU: 7
[  131.542049] EIP is at 0xb4327d18
[  131.542062] EAX: 393eb000 EBX: b7916ff4 ECX: 00001000 EDX: 00000055
[  131.542082] ESI: bfdd295c EDI: bfdd295c EBP: bfdd2928 ESP: bfdd2910
[  131.542103]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[  131.542121] Process chrome (pid: 1961, ti=e77ba000 task=e7a532c0 task.ti=e77ba000)

[  131.542151] EIP: [<b4327d18>] 0xb4327d18 SS:ESP 007b:bfdd2910
[  131.739672] ---[ end trace aad0bbcc9b34ad2f ]---
[  131.739674] chrome: Corrupted page table at address 20013000
[  131.739677] *pdpt = 0000000000000000 *pde = 0000000000000000 
[  131.739679] Bad pagetable: 000f [#2] SMP 
[  131.739712] Modules linked in: lockd sunrpc bnep bluetooth nf_conntrack_netbios_ns nf_conntrack_broadcast ipt_MASQUERADE ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ebtable_filter ebtables ip6table_filter ip6_tables binfmt_misc snd_hda_codec_realtek arc4 iTCO_wdt iTCO_vendor_support coretemp iwldvm kvm_intel mac80211 kvm snd_hda_intel microcode snd_hda_codec uvcvideo snd_hwdep i2c_i801 videobuf2_vmalloc snd_seq videobuf2_memops snd_seq_device videobuf2_core iwlwifi snd_pcm videodev lpc_ich media cfg80211 mfd_core snd_page_alloc mei e1000e snd_timer uinput thinkpad_acpi snd soundcore rfkill dm_crypt nouveau i915 mxm_wmi i2c_algo_bit sdhci_pci ttm crc32c_intel drm_kms_helper firewire_ohci
[  131.739715]  sdhci drm firewire_core mmc_core crc_itu_t i2c_core wmi video
[  131.739718] Pid: 1957, comm: chrome Tainted: G      D      3.8.4-202.fc18.i686.PAE #1 LENOVO 23923EG/23923EG
[  131.739720] EIP: 0073:[<b4327d18>] EFLAGS: 00210206 CPU: 3
[  131.739723] EIP is at 0xb4327d18
[  131.739724] EAX: 20013000 EBX: b7916ff4 ECX: 00001000 EDX: 00000053
[  131.739726] ESI: bfdd28f8 EDI: 20013000 EBP: bfdd28c8 ESP: bfdd28b0
[  131.739726]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
[  131.739728] Process chrome (pid: 1957, ti=e968c000 task=ea9932c0 task.ti=e968c000)

[  131.739731] EIP: [<b4327d18>] 0xb4327d18 SS:ESP 007b:bfdd28b0
[  131.739758] ---[ end trace aad0bbcc9b34ad30 ]---

Comment 41 Artem S. Tashkinov 2013-04-10 17:45:23 UTC
Actually I believe most people here are running PAE enabled kernel with over 3.2GB of RAM (where PAE logic actually gets used). In my case I've had this bug with 4/8/16GB of RAM and every time it is the *vanilla* kernel.

I've extensively tested my RAM - it has no errors, and this bug strikes almost immediately after boot.

Like today.

With kernel 3.8.5:

Apr 10 12:50:57 localhost kernel: [ 2530.480682] chrome: Corrupted page table at address 34a03000
Apr 10 12:50:57 localhost kernel: [ 2530.480687] *pdpt = 0000000000000000 *pde = 0000000000000000
Apr 10 12:50:57 localhost kernel: [ 2530.480692] Bad pagetable: 000f [#1] PREEMPT SMP
Apr 10 12:50:57 localhost kernel: [ 2530.480695] Modules linked in: vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) ipv6 nf_conntrack_ftp nf_conntrack_netb
ios_ns nf_conntrack_broadcast xt_LOG xt_limit nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_tcpudp xt_pkttype ipt_ULOG xt_owner xt_multiport ipta
ble_filter ip_tables x_tables w83627ehf adt7475 hwmon_vid binfmt_misc fuse hid_generic uvcvideo videobuf2_core videodev videobuf2_vmalloc videobuf2_memops sn
d_usb_audio snd_usbmidi_lib snd_rawmidi usbhid hid fan coretemp kvm_intel kvm aesni_intel ablk_helper cryptd lrw aes_i586 xts gf128mul microcode pcspkr i2c_i
801 sr_mod cdrom sg xhci_hcd snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss sn
d_mixer_oss snd_pcm snd_timer snd snd_page_alloc ehci_pci ehci_hcd e1000e nvidia(PO) evdev
Apr 10 12:50:57 localhost kernel: [ 2530.480758] Pid: 6114, comm: chrome Tainted: P           O 3.8.5-ic #5 System manufacturer System Product Name/P8P67 PRO
Apr 10 12:50:57 localhost kernel: [ 2530.480761] EIP: 0073:[<b42dcd18>] EFLAGS: 00010202 CPU: 1
Apr 10 12:50:57 localhost kernel: [ 2530.480765] EIP is at 0xb42dcd18
Apr 10 12:50:57 localhost kernel: [ 2530.480767] EAX: 34a03000 EBX: b78cbff4 ECX: 00001000 EDX: 00000057
Apr 10 12:50:57 localhost kernel: [ 2530.480769] ESI: bf894d50 EDI: 34a03000 EBP: bf894d08 ESP: bf894cf0
Apr 10 12:50:57 localhost kernel: [ 2530.480771]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
Apr 10 12:50:57 localhost kernel: [ 2530.480774] Process chrome (pid: 6114, ti=cc136000 task=ccadbb10 task.ti=cc136000)
Apr 10 12:50:57 localhost kernel: [ 2530.480775]
Apr 10 12:50:57 localhost kernel: [ 2530.480777] EIP: [<b42dcd18>] 0xb42dcd18 SS:ESP 007b:bf894cf0
Apr 10 12:50:57 localhost kernel: [ 2530.480783] ---[ end trace 71406aaad5321207 ]---


Also I believe this bug has nothing to do with DRM actually. I'm running proprietary NVIDIA drivers, I have no DRM modules at all:

# lsmod | grep drm
<empty>

I think this bug should be moved upstream to https://bugzilla.kernel.org Fedora kernel or Fedora kernel patches do not play any role.

Comment 42 Artem S. Tashkinov 2013-04-10 17:52:17 UTC
Reported upstream: https://bugzilla.kernel.org/show_bug.cgi?id=56461

Comment 43 Artem S. Tashkinov 2013-04-10 19:19:01 UTC
> Linus Torvalds wrote:

Ok, that's just insane.

The "Corrupted page table" message happens when the error code has the PF_RSVD
bit set. And indeed, the error code seems to be 000f, so it has all of the
PROT/WRITE/USER/RSVD bits set (but not PF_INSTR).

And the *pgd value is 0, which should never happen, I think. For PAE, we always
fill in the top-level entries, and they aren't allowed to be non-present, iirc.
It's been too long since I worked with PAE to remember. That may explain the
RSVD bit.

Can you add some printouts to dump_pagetable(), please?

Add a line at the top of the CONFIG_X86_PAE case that says something like

  printk("pgd=%p pgd_offset=%p\n", pgd, pgd_offset(tsk->active_mm, address));

to see if the problem is that we've screwed up cr3-vs-active_mm somehow.

Then, change the "pgd_val()" in the printk("*pdpt = ..) thing into
"native_pgd_val()", in case the virtualization stuff has screwed up the value.

********************************************************************************

Please apply the patch and report your results (preferably at https://bugzilla.kernel.org/show_bug.cgi?id=56461#add_comment).

Comment 44 Artem S. Tashkinov 2013-04-10 19:30:53 UTC
Created attachment 733859 [details]
fault.c patch

Here's the patch.

Comment 45 Artem S. Tashkinov 2013-04-11 09:06:57 UTC
Ingo wrote:

Is there anyone building vanilla kernels who can reproduce this reliably enough
so that the bug can be bisected, or at least narrowed down to a particular -rc or
so?

Thanks,

    Ingo

Report your results here: https://bugzilla.kernel.org/show_bug.cgi?id=56461

Comment 46 Artem S. Tashkinov 2013-04-15 02:03:26 UTC
This bug must be fixed in 3.9-rc7:

https://lkml.org/lkml/2013/4/14/107

Comment 47 Stanislaw Gruszka 2013-04-15 10:25:56 UTC
Here is exact commit which claim to fix the problem:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1de14c3c5cbc9bb17e9dcc648cda51c0c85d54b9

It is not marked to -stable.

Comment 48 Josh Boyer 2013-04-16 15:37:19 UTC
I've backported that to 3.8.x.  Below is a scratch build.  I would appreciate it if people could test this after it finishes building:

http://koji.fedoraproject.org/koji/taskinfo?taskID=5259015

Comment 49 Mikhail 2013-04-19 15:15:58 UTC
Kernel  3.8.8-202 also included this patch?

With attached kernel http://koji.fedoraproject.org/koji/taskinfo?taskID=5259015 this bug not appear.

Comment 50 Josh Boyer 2013-04-19 16:35:34 UTC
(In reply to comment #49)
> Kernel  3.8.8-202 also included this patch?
> 
> With attached kernel
> http://koji.fedoraproject.org/koji/taskinfo?taskID=5259015 this bug not
> appear.

Yes.  The patch was pulled into the upstream 3.8.8 release.  Thanks for letting us know.

Comment 51 Artem S. Tashkinov 2013-04-19 20:10:07 UTC
BTW, Linus promised that with this patch landed, the performance would suffer.

Can anyone run any tests you like to see if it's indeed the case?


Note You need to log in before you can comment on or make changes to this bug.