(In reply to comment #110)
> Alex, I'm still curious, what was the original problem that caused this bug?

Well that was the problem: A couple of different things!

We have an long outstanding issue with TLB poisoning, a couple of bugs related
to dynamically allocating page tables and I think one or two userspace issues
mixed into a single bugreport.