We have idenitified a race condition where the eviction server can attempt to walk a tree that has a NULL root page and result in a segfault.

The issue is that verify uses a single (exclusively held) handle and switches in root pages from different checkpoints. If the eviction server starts a walk while the root page is being switched it can see a NULL page - which is weird.