=== baseline run on unpatched 6.5-DEVELOPMENT #0 (cmd_data missing) ===
=== stdout from PoC was: ===
[*] create 'df2448dev': rv=0 (ok)
[*] sending 'reload' ioctl WITHOUT 'cmd_data' key...
[*] expect: kernel panic -- NULL deref in prop_array_iterator
=== kernel panic signature from dfbsd-qemu/boot.log: ===
Fatal user address access from kernel mode from dm_nulldata_dere at ffffffff809d9a7b
Fatal trap 12: page fault while in kernel mode
cpuid = 2; lapic id = 2
fault virtual address	= 0x40
fault code		= supervisor write data, page not present
instruction pointer	= 0x8:0xffffffff809d9a7b
stack pointer	        = 0x10:0xfffff80116a7e618
frame pointer	        = 0x10:0xfffff80116a7e638
current process		= 882
kernel: type 12 trap, code=2
Stopped at      prop_array_iterator+0x1b:       lock cmpxchgl   %edx,0x40(%rdi)
=== guest is DOWN after this run (panic) ===