login: dfdiag: mps diag replica loaded (shared trio, per-type sizes, free-without-NULL — mps_user.c:1314-1621)
dfdiag: register: overwriting LIVE shared trio (old buffer=0xfffff80118624000, old size=0) — real driver leaks it
panic: memory chunk 0xfffff80116c67000 is already free!
cpuid = 2
Trace beginning at frame 0xfffff80117df95f8
chunk_mark_free() at chunk_mark_free+0xae 0xffffffff80655dbe 
chunk_mark_free() at chunk_mark_free+0xae 0xffffffff80655dbe 
_kfree() at _kfree+0x262 0xffffffff806580e2 
dfdiag_ioctl_devsw() at dfdiag_ioctl_devsw+0x502 0xffffffff826005b2 
dev_dioctl() at dev_dioctl+0x65 0xffffffff8062cdb5 
devfs_fo_ioctl() at devfs_fo_ioctl+0x95 0xffffffff80921bb5 
Debugger("panic")

CPU2 stopping CPUs: 0x0000003b
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db>