#!/bin/sh
# DF-0692 run: unprivileged MLD join/leave hammer racing mld6_fasttimeo.
# Expected (bug present, race won): kernel panic "fatal trap 12" page-fault in
#   mld6_fasttimeo / IN6_NEXT_MULTI dereferencing freed/poisoned in6m.
#   On this no-querier guest the race window is too narrow to win reliably —
#   see VERDICT.md "Why it did not fire live". Source-level trace confirms the bug.
set -e
cd "$(dirname "$0")"
echo "DF-0692: MLD fasttimeo UAF race hammer (unprivileged)"
echo "watch dfbsd-qemu/boot.log for 'fatal trap' in mld6_fasttimeo"
./mld_race