===== FIXED T5: xid determinism (baseline: 0xffffff00+n ascending) =====
 | DF3205 T5: 6/6 sequential krpc_call ok; xid sequence + client reserved ports are on the attacker server stdout (baseline expect 0xffffff00+n ascending, fixed expect random)
attacker: mode=dump port=7771 blind=0
attacker: REQ #1 len=60 xid=0x07d0b1bd from 127.0.0.1:1023 (blind prediction for this call: 0xffffff00 differ)
attacker: REQ #2 len=60 xid=0x01e5b8d7 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff01 differ)
attacker: REQ #3 len=60 xid=0xb88a504a from 127.0.0.1:1023 (blind prediction for this call: 0xffffff02 differ)
attacker: REQ #4 len=60 xid=0x6d5d8e23 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff03 differ)
attacker: REQ #5 len=60 xid=0xe974921d from 127.0.0.1:1023 (blind prediction for this call: 0xffffff04 differ)
attacker: REQ #6 len=60 xid=0x77a3ea43 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff05 differ)

===== FIXED T1: wrong-origin spoof (baseline: ATTACKER payload) =====
 | DF3205 T1: krpc_call err=0 payload='SERV' (ATTACKER-PAYLOAD => reply from 127.0.0.2 ACCEPTED; SERVER-PAYLOAD => fix rejected the wrong-origin spoof)
attacker: mode=spoofsrc port=7771 blind=0
attacker: REQ #1 len=60 xid=0x5bcfd035 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff00 differ)
attacker: spoof sent from 127.0.0.2

===== FIXED T4 blind pmap (baseline: port ca fe from blind xid) =====
 | DF3205 T4: krpc_portmap err=0 port bytes 77 77 (baseline: ca fe = attacker-chosen; fixed: 77 77 = follow-up legit answer)
attacker: mode=pmap port=111 blind=1
attacker: REQ #1 len=76 xid=0x19da83be from 127.0.0.1:1023 (blind prediction for this call: 0xffffff00 differ)

===== FIXED T2/T22 short reply (baseline: rpc denied, status=<stale>) =====
 | DF3203 T22 attempt 1: groom done, call err=0 payload='SERV' -> stale rp_status was != 0 and != RPC_PROGMISMATCH: verbatim console line is: rpc denied, status=1515870810 (check dmesg) | DF3203 T22 attempt 2: groom done, call err=0 payload='SERV' -> stale rp_status was != 0 and != RPC_PROGMISMATCH: verbatim console line is: rpc denied, status=1515870810 (check dmesg) | DF3203 T22 attempt 3: groom done, call err=0 payload='SERV' -> stale rp_status was != 0 and != RPC_PROGMISMATCH: verbatim console line is: rpc denied, status=1515870810 (check dmesg)
rpc-denied lines before=0 after=6 (baseline grew by >=1 per attempt)

===== FIXED primer attribution (baseline: value tracks pattern 18/18) =====
rpc-denied lines before=6 after=9 (must NOT grow)

===== FIXED T3 pmis leak (baseline: +50 mbufs) =====
 | DF3204 T3: 50/50 calls returned EBADRPC with an in-bounds 24-byte PROGMISMATCH reply -- each one leaked the reply mbuf (netstat -m delta = +N mbufs that stay)
mbufs before: 8/146632 mbufs in use (current/max):
mbufs after:  8/146632 mbufs in use (current/max):

===== FIXED T33 honest control (must stay flat) =====
 | DF3204 T33 control: 50/50 honest replies ok -- netstat -m delta around this test is the no-leak baseline
mbufs before control: 8/146632 mbufs in use (current/max):
mbufs after control:  8/146632 mbufs in use (current/max):

FIXED-KERNEL SUITE DONE