DF-5375 / run.patched.log
# DF-5375 fix-validation (patched kernel #3, targsim rig loaded) root@dfbsd# ./poc5375 [*] DF-5375: targsim bus=2; open+enable target mode [+] target mode enabled; injecting func_code=XPT_SCSI_IO (0x901) via write() [*] write() queued opcode -> targstart -> targsendccb -> xpt_action -> SIM completes -> targdone panic NOW [-] write returned -1 (errno=22) - no panic? [-] still alive - NOT reproduced # guest alive; baseline (kernel #0) panicked: targdone: impossible xpt opcode 0x901