DF-0749 trigger start (id=65535) on UNPATCHED #0 kernel
------------------------------------------------------------
[+] DF-0749 trigger start (id=65535)
net.filters_default_to_accept: 0 -> 1
STILL_ALIVE id=65535
RUN_EXIT=0

NOTE: "STILL_ALIVE" was emitted because the rule-add (setsockopt)
returned successfully and ssh flushed its buffered output before the
next inbound packet hit the matcher.  Within ~1-2 s of the rule being
installed, the next packet (loopback ping) drove the OOB read at
check_mac_from_lookup+0x37 and the kernel panicked.  The ssh session
was then severed and `vm.sh status` -> down.

The definitive proof is in panic.txt: 
    Fatal trap 12: page fault while in kernel mode
    Stopped at      check_mac_from_lookup+0x37:     movq    (%rax),%rbx

Reproduced twice on fresh vm.sh reset with-src boots.