=== panic signature 1 (ID-hash rehash; reproduced 3x on unfixed module) ===
panic: hashdestroy: hash not empty
cpuid = 0
Trace beginning at frame 0xfffff8008d1f89f0
hashdestroy() at hashdestroy+0x3a 0xffffffff8066555a 
hashdestroy() at hashdestroy+0x3a 0xffffffff8066555a 
ng_make_node_common() at ng_make_node_common+0x21f 0xffffffff82600c9f 
ngc_attach() at ngc_attach+0x121 0xffffffff8260a0b1 
netmsg_service_loop() at netmsg_service_loop+0xe9 0xffffffff807464a9 
Debugger("panic")
CPU0 stopping CPUs: 0x0000003e
 stopped
Stopped at      Debugger+0x7c:  movb $0,0xbdaf09(%rip)
db> 

=== panic signature 2 (name-hash rehash; 1x, after ID-rehash fix applied) ===
panic: hashdestroy: hash not empty
cpuid = 0
Trace beginning at frame 0xfffff80117d9f9c0
hashdestroy() at hashdestroy+0x3a 0xffffffff8066555a 
hashdestroy() at hashdestroy+0x3a 0xffffffff8066555a 
ng_name_node() at ng_name_node+0x265 0xffffffff82600675 
ng_apply_item() at ng_apply_item+0x43e 0xffffffff82601d9e 
ngthread() at ngthread+0x18 0xffffffff82603498 
Debugger("panic")
...

=== related corruption observed during accumulation (unfixed) ===
panic: assertion "(((intptr_t)chunk ^ (intptr_t)z) & ZoneMask) == 0" failed in chunk_mark_allocated at /usr/src/sys/kern/kern_slaballoc.c:1659
chunk_mark_allocated() ... _kmalloc() ... in_setpeeraddr() ...
(heap corruption consistent with list double-insertion UAF when a
double-inserted node is later freed/removed from only one list)