# Baseline run: `vm.sh run_root 'sh /tmp/trigger.sh'` (stock INVARIANTS kernel
# DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026)
# The ssh channel never returned (guest panicked mid-rebalance and dropped
# into DDB); the serial console (console_full.log) captured the full run.
# Summary of the decisive console lines (see console_full.log / panic.txt):
#
#   HAMMER(POC) mounted clean, no recovery needed
#   rebalance_node: lockroot 0xfffff801166db308 count 31
#   rebalance_node: add count 32          (x17, real leaves)
#   rebalance_node: add count 128         (x14, forged leaves)
#   rebalance_closeout: 8000000021000000: (count update) (parent bound update 1)
#   ... 30 more closeouts incl. forged leaves 0x21004000/0x21005000/...
#   (EDEADLK retries: lockroot re-processed for subsequent parents)
#   rebalance_closeout: 8000000021094000: (count update) (parent bound update 20)
#   panic: assertion "slab->magic == KMALLOC_SLAB_MAGIC && delta != slab->ncount" failed in _kfree_obj at /usr/src/sys/kern/kern_kmalloc.c:942
#   cpuid = 3
#   _kfree_obj() -> fdrop() -> closef() -> kern_close() -> syscall2()
#   Debugger("panic")   -> guest stopped in DDB (vm.sh status: down)