--- DF-2323 decisive run (groom corruption + wild panic tail) ---
kmalloc(2) -> 0xfffff8008d6a0508
kfree(0xfffff8008d6a0508) [tracked]
kfree(0xfffff8008f988a00) [tracked]
=== VPD scenario 'vpd badck2' RETURNED: rocnt=2 ros=0 wcnt=0 w=0 ident=0
tracked-and-still-live blocks: 3
=== VPD scenario 'vpd errfirst' START (vpd_reg=0xc0 stall=32767)
kmalloc(128) -> 0xfffff8008f90d000 M_ZERO
kmalloc(2) -> 0xfffff8008d3a1810
kfree(0xfffff8008d3a1810) [tracked]
kfree(0xfffff8008f90d000) [tracked]
=== VPD scenario 'vpd errfirst' RETURNED: rocnt=0 ros=0 wcnt=0 w=0 ident=0
tracked-and-still-live blocks: 3
=== VPD scenario 'vpd ok' START (vpd_reg=0xc0 stall=32767)
kmalloc(128) -> 0xfffff8008f92ce80 M_ZERO
kmalloc(3) -> 0xfffff8008d580498
kmalloc(2) -> 0xfffff8008d5804a0
krealloc(0xfffff8008f92ce80, 32) flags=0x102 ENTER
krealloc(0xfffff8008f92ce80, 32) -> 0xfffff8008d5c0c80
=== VPD scenario 'vpd ok' RETURNED: rocnt=2 ros=0xfffff8008d5c0c80 wcnt=0 w=0 ident=0
ros[0] kw=PN val='XY'
tracked-and-still-live blocks: 6
groom: canary=0xfffff80116c47480 (live 64B block, 0xCC-filled)
groom: canary 0xfffff80116c47480 planted at victim+8
groom: X=0xfffff8008d5c0b60 (freed -> LIFO head) V=X+32=0xfffff8008d5c0b80
=== VPD scenario 'vpd groom' START (vpd_reg=0xc0 stall=16)
kmalloc(128) -> 0xfffff8008f92ce80 M_ZERO
kmalloc(3) -> 0xfffff8008d5804a8
kmalloc(2) -> 0xfffff8008d5804b0
krealloc(0xfffff8008f92ce80, 32) flags=0x102 ENTER
krealloc(0xfffff8008f92ce80, 32) -> 0xfffff8008d5c0b60
kmalloc(257) -> 0xfffff80116f4d1c0
kfree(0xfffff8008d5804a8) [tracked]
kfree(0xfffff8008d5804b0) [tracked]
kfree(0xfffff80116c47480) [*** UNTRACKED -- NOT OURS ***]
kfree(0xfffff8008d5c0b60) [tracked]
kfree(0xfffff80116f4d1c0) [tracked]
=== VPD scenario 'vpd groom' RETURNED: rocnt=2 ros=0 wcnt=0 w=0 ident=0
tracked-and-still-live blocks: 6
post: kmalloc(64) -> 0xfffff80116c47480 (== canary!); canary bytes now aaaaaaaaaaaaaaaa TWO LIVE OWNERS, SAME MEMORY

--- wild-pointer variant (panic) ---
trap_fatal() at trap_fatal+0x301 0xffffffff80b6e181 
trap_pfault() at trap_pfault+0x431 0xffffffff80b6e761 
calltrap() at calltrap+0x9 0xffffffff80b3258a 
--- trap 000000000000000c, rip = ffffffff80baeaa2, rsp = fffff80117f83690, rbp = fffff80117f836c8 ---
pmap_kvtom() at pmap_kvtom+0x12 0xffffffff80baeaa2 
dfh_run_vpd() at dfh_run_vpd+0x187 0xffffffff80a18b47 
dfh_sysctl_cmd() at dfh_sysctl_cmd+0x292 0xffffffff80a19862 
boot() called on cpu#3
Uptime: 4m6s
Physical memory: 4061 MB
Dumping 553 MB: 538 522 506 490 474 458 442 426 410 394 378 362 346 330 314 298 282 266 250 234 218 202 186 170 154 138 122 106 90 74 58 42 26 10
Dump complete