=== baseline crash #1 (race3=2000, fresh vm.sh reset, first guest) === Fatal trap 12: page fault while in kernel mode cpuid = 1; lapic id = 1 fault virtual address = 0x70 fault code = supervisor write data, page not present instruction pointer = 0x8:0xffffffff82609810 stack pointer = 0x10:0xfffff801181ffa50 frame pointer = 0x10:0xfffff801181ffa70 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = Idle current thread = pri 12 kernel: type 12 trap, code=2 CPU1 stopping CPUs: 0x0000003d stopped Stopped at l2cap_request_free+0x70: movq %rdx,0x70(%r13) db> === baseline crash #3 (pristine-reset guest, verbatim sources md5-matched to host sys/) === panic: zone: freeing free entry cpuid = 1 Trace beginning at frame 0xfffff801181b9a20 zerror() at zerror+0x28 0xffffffff809c0f18 zerror() at zerror+0x28 0xffffffff809c0f18 zfree() at zfree+0x232 0xffffffff809c1c52 l2cap_rtx() at l2cap_rtx+0x12 0xffffffff826021a2 r3_rtx_thread() at r3_rtx_thread+0x3c 0xffffffff82600edc Debugger("panic") CPU1 stopping CPUs: 0x0000003d stopped Stopped at Debugger+0x7c: movb $0,0xbdaf09(%rip) db>