[*] target=/boot loops=16
[*] sizeof(ufs_args)=448 export_args=384
[+] done: vfs_setpublicfs UAF path reached ok=16 fail=0 (of 16)
[+] vfs_setpublicfs() ran the buggy :2261-vput -> :2269-VOP_PATHCONF path 16 time(s); on a non-DEBUG
    kernel the unlocked-VOP races silently -- check serial console for a vnlru-reclaim UAF panic.
RUN_EXIT=0
--- guest alive ---
 1:06AM  up 25 mins, 0 users, load averages: 0.00, 0.00, 0.00