login: [harness] hci_unit_harness loaded: hciu_probe, hciuu_setup, hciu_fire, hciu_dump, hcius_fire, hciud_fire
[harness] === setup: attach unit + ACL link #5 ===
[harness] unit 0xfffff801168ac820 link 0xfffff8008fa92240 attached
[harness] === DF-5753: 1500 rounds of [200 SCO sends + production sco_disconnect(pcb,0)] ===
[harness] each send: sco_send() M_SETCTX(m, link); fake controller completes instantly via hci_complete_sco(); sco_disconnect NULLs hl_sco then runs hci_link_free() on this (syscall) thread while netisr hci_intr() walks hci_links matching M_GETCTX -> hci_sco_complete() derefs hl_sco==NULL
[harness] hci_mtap: mid-drain re-injection of 3 events from netisr context (objcache LIFO reuse of just-freed chunks)


Fatal trap 12: page fault while in kernel mode
cpuid = 0; lapic id = 0
fault virtual address	= 0x1c
fault code		= supervisor write data, page not present
instruction pointer	= 0x8:0xffffffff82603407
stack pointer	        = 0x10:0xfffff8008d1f8a38
frame pointer	        = 0x10:0xfffff8008d1f8a60
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= Idle
current thread          = pri 12 
kernel: type 12 trap, code=2

CPU0 stopping CPUs: 0x0000003e
 stopped
Stopped at      hci_sco_complete+0x7:   subl    $0x1,0x1c(%rax)
db>