So a INT=0x18 (which is supposed to be reserved???) is happening inside of runproc(), but then a INT=0x0e pagefault happens inside of intrcommon, and then a pagefault happens inside of fault386(), and then a pagefault happens inside of fault386(), and that recurses ~2000 times with the stack growing each time until it overflows all the way into the text area.