[harness] === DF-5761: sco_pcb newconn-walk UAF ===
[harness] WALK thread = hci_sco_newconn() (netisr ctx); CLOSE thread = sco_detach() (syscall ctx)
[harness] 4 listening SCO pcbs on the global sco_pcb list
[harness] threads started; first newconn() sleeps so the CLOSE thread detaches underneath it
[harness] newconn(): sleeping 300ms (sonewconn window) -- CLOSE thread may now sco_detach() the pcbs under the walk


Fatal trap 12: page fault while in kernel mode
cpuid = 5; lapic id = 5
fault virtual address	= 0x18
fault code		= supervisor read data, page not present
instruction pointer	= 0x8:0xffffffff826095c9
stack pointer	        = 0x10:0xfffff801182bba40
frame pointer	        = 0x10:0xfffff801182bba90
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= Idle
current thread          = pri 12 
kernel: type 12 trap, code=0

CPU5 stopping CPUs: 0x0000001f
 stopped
Stopped at      hci_sco_newconn+0x99:   movq    0x18(%rax),%rax
db>