=== attempt 1 22:41:17 ===
issuing clean shutdown...
waiting for poweroff...
guest not answering (likely DDB on panic); killing qemu pid 158704
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 160972)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100
--- rc=124 status=down ---
login: Fatal user address access from kernel mode from dx at ffffffff8091cb98


Fatal trap 12: page fault while in kernel mode
cpuid = 5; lapic id = 5
fault virtual address	= 0x6ad2a878
fault code		= supervisor read data, page not present
instruction pointer	= 0x8:0xffffffff8091cb98
stack pointer	        = 0x10:0xfffff80118427588
frame pointer	        = 0x10:0xfffff801184275b8
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
=== attempt 2 22:50:08 ===
guest not answering (likely DDB on panic); killing qemu pid 160972
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 161155)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100
[ 10s] cycles=2 drained=168 uid=1001
[ 20s] cycles=3 drained=198 uid=1001
[ 30s] cycles=5 drained=216 uid=1001
[ 40s] cycles=6 drained=249 uid=1001
[ 50s] cycles=7 drained=270 uid=1001
[ 60s] cycles=8 drained=288 uid=1001
[ 70s] cycles=9 drained=306 uid=1001
[ 80s] cycles=10 drained=324 uid=1001
[ 90s] cycles=12 drained=348 uid=1001
[100s] cycles=13 drained=378 uid=1001
[110s] cycles=14 drained=394 uid=1001
[120s] cycles=15 drained=414 uid=1001
[130s] cycles=16 drained=432 uid=1001
[140s] cycles=18 drained=450 uid=1001
[150s] cycles=19 drained=473 uid=1001
[160s] cycles=20 drained=504 uid=1001
[170s] cycles=21 drained=522 uid=1001
[180s] cycles=22 drained=540 uid=1001
[190s] cycles=23 drained=558 uid=1001
[200s] cycles=25 drained=578 uid=1001
[210s] cycles=26 drained=599 uid=1001
[220s] cycles=27 drained=630 uid=1001
[230s] cycles=28 drained=648 uid=1001
[240s] cycles=29 drained=666 uid=1001
[250s] cycles=30 drained=684 uid=1001
[260s] cycles=32 drained=709 uid=1001
[270s] cycles=33 drained=738 uid=1001
[280s] cycles=34 drained=755 uid=1001
[290s] cycles=35 drained=773 uid=1001
[300s] cycles=36 drained=791 uid=1001
[310s] cycles=38 drained=820 uid=1001
[320s] cycles=39 drained=835 uid=1001
[330s] cycles=40 drained=863 uid=1001
[340s] cycles=41 drained=881 uid=1001
race done (timeout after 340s, cycles=41 drained=881)
Segmentation fault (core dumped)
--- rc=139 status=up ---
guest still up (no panic, no win) — resetting for retry
=== attempt 3 22:57:39 ===
issuing clean shutdown...
waiting for poweroff...
guest not answering (likely DDB on panic); killing qemu pid 161155
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 161286)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100
--- rc=124 status=down ---
login: panic: assertion "(sr->flags & SRF_PUTAWAY) == 0" failed in sysref_get at /usr/src/sys/sys/sysref2.h:70
cpuid = 0
Trace beginning at frame 0xfffff801184fb528
reference_dev() at reference_dev+0xa9 0xffffffff8062c829 
reference_dev() at reference_dev+0xa9 0xffffffff8062c829 
v_associate_rdev() at v_associate_rdev+0x31 0xffffffff806f48d1 
devfs_allocv() at devfs_allocv+0x1a0 0xffffffff8091cb80 
devfs_vop_nresolve() at devfs_vop_nresolve+0x185 0xffffffff80922b45 
vop_nresolve() at vop_nresolve+0x53 0xffffffff8070c3c3 
Debugger("panic")

CPU0 stopping CPUs: 0x0000003e
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db> 
=== attempt 4 23:06:30 ===
guest not answering (likely DDB on panic); killing qemu pid 161286
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 161710)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100
--- rc=124 status=down ---
login: Fatal user address access from kernel mode from dx at ffffffff8091cb98


Fatal trap 12: page fault while in kernel mode
cpuid = 2; lapic id = 2
fault virtual address	= 0x6ad2ae6c
fault code		= supervisor read data, page not present
instruction pointer	= 0x8:0xffffffff8091cb98
stack pointer	        = 0x10:0xfffff80118517588
frame pointer	        = 0x10:0xfffff801185175b8
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
=== attempt 5 23:15:32 ===
guest not answering (likely DDB on panic); killing qemu pid 161710
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 161923)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100
[ 10s] cycles=2 drained=972 uid=1001
[ 20s] cycles=3 drained=1458 uid=1001
[ 30s] cycles=5 drained=2134 uid=1001
[ 40s] cycles=6 drained=2564 uid=1001
[ 50s] cycles=7 drained=2933 uid=1001
[ 60s] cycles=8 drained=3302 uid=1001
[ 70s] cycles=9 drained=3671 uid=1001
[ 80s] cycles=10 drained=4040 uid=1001
[ 90s] cycles=12 drained=4587 uid=1001
[100s] cycles=13 drained=4943 uid=1001
[110s] cycles=14 drained=5516 uid=1001
[120s] cycles=15 drained=5885 uid=1001
[130s] cycles=16 drained=6254 uid=1001
[140s] cycles=17 drained=6623 uid=1001
[150s] cycles=19 drained=7277 uid=1001
[160s] cycles=20 drained=7730 uid=1001
[170s] cycles=21 drained=8099 uid=1001
[180s] cycles=22 drained=8440 uid=1001
[190s] cycles=23 drained=8677 uid=1001
[200s] cycles=25 drained=8928 uid=1001
[210s] cycles=26 drained=9300 uid=1001
[220s] cycles=27 drained=9569 uid=1001
[230s] cycles=28 drained=9792 uid=1001
[240s] cycles=29 drained=10015 uid=1001
[250s] cycles=30 drained=10238 uid=1001
[260s] cycles=32 drained=10684 uid=1001
[270s] cycles=33 drained=10907 uid=1001
[280s] cycles=34 drained=11129 uid=1001
[290s] cycles=35 drained=11352 uid=1001
[300s] cycles=36 drained=11575 uid=1001
[310s] cycles=38 drained=11799 uid=1001
[320s] cycles=39 drained=12223 uid=1001
[330s] cycles=40 drained=12467 uid=1001
[340s] cycles=41 drained=12690 uid=1001
race done (timeout after 340s, cycles=41 drained=12690)
Segmentation fault (core dumped)
--- rc=139 status=up ---
guest still up (no panic, no win) — resetting for retry
=== attempt 6 23:23:03 ===
issuing clean shutdown...
waiting for poweroff...
guest not answering (likely DDB on panic); killing qemu pid 161923
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 162365)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100
--- rc=124 status=down ---
login: panic: assertion "(sr->flags & SRF_PUTAWAY) == 0" failed in sysref_get at /usr/src/sys/sys/sysref2.h:70
cpuid = 2
Trace beginning at frame 0xfffff8011850f528
reference_dev() at reference_dev+0xa9 0xffffffff8062c829 
reference_dev() at reference_dev+0xa9 0xffffffff8062c829 
v_associate_rdev() at v_associate_rdev+0x31 0xffffffff806f48d1 
devfs_allocv() at devfs_allocv+0x1a0 0xffffffff8091cb80 
devfs_vop_nresolve() at devfs_vop_nresolve+0x185 0xffffffff80922b45 
vop_nresolve() at vop_nresolve+0x53 0xffffffff8070c3c3 
Debugger("panic")

CPU2 stopping CPUs: 0x0000003b
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db> 
=== attempt 7 23:31:54 ===
guest not answering (likely DDB on panic); killing qemu pid 162365
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 162547)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100
--- rc=124 status=down ---
login: panic: assertion "(sr->flags & SRF_PUTAWAY) == 0" failed in sysref_get at /usr/src/sys/sys/sysref2.h:70
cpuid = 4
Trace beginning at frame 0xfffff80118483528
reference_dev() at reference_dev+0xa9 0xffffffff8062c829 
reference_dev() at reference_dev+0xa9 0xffffffff8062c829 
v_associate_rdev() at v_associate_rdev+0x31 0xffffffff806f48d1 
devfs_allocv() at devfs_allocv+0x1a0 0xffffffff8091cb80 
devfs_vop_nresolve() at devfs_vop_nresolve+0x185 0xffffffff80922b45 
vop_nresolve() at vop_nresolve+0x53 0xffffffff8070c3c3 
Debugger("panic")

CPU4 stopping CPUs: 0x0000002f
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db> 
=== attempt 8 23:40:55 ===
guest not answering (likely DDB on panic); killing qemu pid 162547
down
reverting qcow2 to snapshot: with-src
booting guest headless (daemonized)...
waiting for ssh (dfbsd-maxx)...
up (pid 162727)
BUILD_OK
DF-3017 weaponization v5: uid=1001 euid=1001 fakeops=0x40000000 sc=0x40000100