Re: [run_timer_softirq] BUG: unable to handle kernel paging reques ...

Linus Torvalds writes: (Summary) In this case, the trapping instruction ends up decoding to In this case, the trapping instruction ends up decoding to 0: 4c 8d 6c c5 90 lea -0x70(%rbp,%rax,8),%r13 5: 49 8b 45 00 mov 0x0(%r13),%rax
9: 48 85 c0 test %rax,%rax

   c: 74 de                je     0xffffffffffffffec
   e: 4d 8b 7d 00          mov    0x0(%r13),%r15
  12: 4d 89 7c 24 08        mov    %r15,0x8(%r12)
  17: 0f 1f 44 00 00        nopl   0x0(%rax,%rax,1)
  1c: 49 8b 07              mov    (%r15),%rax
  1f: 49 8b 57 08          mov    0x8(%r15),%rdx
  23: 48 85 c0              test   %rax,%rax
  26: 48 89 02              mov    %rax,(%rdx)
  29: 74 04                je     0x2f
  2b:* 48 89 50 08          mov    %rdx,0x8(%rax) <-- trapping instruction
  2f: 41 f6 47 2a 20        testb  $0x20,0x2a(%r15)
  34: 49 c7 47 08 00 00 00 movq   $0x0,0x8(%r15)

and %rax has the value 0xffff, so yes, it will trap at 0x10007.