# DF-3466 baseline run (guest DragonFly 6.5-DEVELOPMENT #0 X86_64_GENERIC,
# stock INVARIANTS kernel; run as root; wlan already compiled into the
# base set on this guest, hence the "already loaded" notice)
#
# $ kldload wlan
# kldload: can't load wlan: module already loaded or in kernel
# $ kldload /tmp/poc/DF-3466/ageqpoc.ko
# <session dies -- kldload never returns>
#
# Serial console (dfbsd-qemu/boot.log), decisive lines:
#
# login: ageqpoc: append #1 age=781 (listen-intval 2000)
# ageqpoc: append #1 rc=0 aq_len=1
# ageqpoc: append #2 age=0 (reassoc listen-intval 1) -> relative age 0-781 = -781
# panic: age -781
# cpuid = 0
# Trace beginning at frame 0xfffff8011871d798
# ieee80211_ageq_append() at ieee80211_ageq_append+0xc1 0xffffffff807569e1
# ieee80211_ageq_append() at ieee80211_ageq_append+0xc1 0xffffffff807569e1
# ageqpoc_modevent() at ageqpoc_modevent+0xaa 0xffffffff826000aa
# module_register_init() at module_register_init+0x49 0xffffffff806232e9
# linker_load_file.part.3() at linker_load_file.part.3+0x1b9 0xffffffff80624619
# linker_load_module() at linker_load_module+0x116 0xffffffff80625e16
# Debugger("panic")
#
# CPU0 stopping CPUs: 0x0000003e
#  stopped
# Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
# db>
#
# (full copy in panic.txt; guest required hard reset afterwards)