simid: loaded (softc 0xfffff801175f2f58, 120 bytes, mpu 0xfffff801172a61c0) - open+write /dev/midi*.* then sysctl hw.simid.detach=1 / kldunload
login: simid[sysctl]: mpu401_uninit() returned 6 (FAILURE - m NOT freed, midi cdev STILL LIVE)  <<< emu_midi_detach IGNORES this and returns 0
simid[sysctl]: softc kfree'd (newbus behaviour after detach()==0); mpu401/snd_midi/cdev/callout still alive
simid: UAF: softintr on FREED softc 0xfffff801175f2f58 magic=51d10505 mpu_intr=0xffffffff82627fd0
simid: sprayed + freed 64 x 120-byte M_DEVBUF blocks filled with 0x41
simid: PEEK freed slot 0xfffff801175f2f58: magic=51d10505 mpu_intr=0xffffffff82627fd0
simid: PEEK freed slot 0xfffff801175f2f58: magic=51d10505 mpu_intr=0xffffffff82627fd0