Comment 5 for bug 1022561

While this probably is not helping much to find the issue, I want to add that I was able to get a panic once when kexec'ing into the dump kernel (had to set nomodeset to avoid higher resolution textmode):

PANIC: early exception 0d rip 10:ffffffff8103ee66 error 77b cr2 0

The RIP points to the retq (actually a near ret/opcode c3), the 0d is a #GP (general protection) exception. I am not yet sure what the 77b vector exactly means, but it sounds like the return address on the stack may point someplace wrong.