=== RUN DF-1851 2026-07-20T18:44:52Z ===
DF-1851: hptproc.c:292 size check (32-bit unsigned add)
  nInBufferSize = 0x00000fff (4095)
  nOutBufferSize= 0xfffff001 (4294963201)
  32-bit sum    = 0x00000000 (0)
  sum > PAGE_SIZE (4096)? NO (passes — check bypassed)
  -> kmalloc(0) returns a 0-byte slab
  -> copyin(lpInBuffer, ke_area, 4095) overflows it by 4095 bytes
  This is the FreeBSD-SA-09:11.hptmv class: integer-overflow in size sum.
[exit=0]