[*] DF-2436 dm_target_crypt_destroy uninitialized-heap-use
[*] trigger: reload crypt table with iv_mode="bogusiv" (not in ivgens)
[*]     -> priv published at dm_target_crypt.c:513 with raw heap
[*]        in ivgen/crypto_session/status_str/read_mpipe/write_mpipe
[*]     -> destroy reads them: mpipe_done KKASSERT / garbage deref
[*] firing reload with invalid iv_mode (priv published, then notsup)...
<<< ssh did not return (timeout 120s); guest PANICKED in mpipe_done >>>
<<< boot.log (findings/poc/DF-2436/panic.txt) captured the panic signature >>>
<<< vm.sh status => down >>>