# stock kernel, serial console capture:
DF2890: OOB READ idx=998273 (v_page_count=998273): &pga[i]=0xfffff80047a04080 word0=0x0
DF2890: OOB READ idx=998274 (v_page_count=998273): &pga[i]=0xfffff80047a04100 word0=0x0
DF2890: OOB READ idx=998275 (v_page_count=998273): &pga[i]=0xfffff80047a04180 word0=0x0
DF2890: OOB READ idx=998276 (v_page_count=998273): &pga[i]=0xfffff80047a04200 word0=0x0
DF2890: v_page_count=998273 array=0xfffff80040028000..0xfffff80047a04000; candidate start=998269 phys=0xf3b9d000 size=0xf3bc1000(998337 pages)
DF2890: :331 pre-check (phys+size > high) with high=BUS_SPACE_MAXADDR: phys+size=0x1e775e000 -> PASSES (check passes, loop runs to 1996606)
DF2890: wrap case: size=-(phys)|... phys+size wraps below high -> also PASSES. in-bounds iters=3 OOB reads=4