PT-2026-96195

OwnedAlloc::drop in place destroys the contained value by hand, then commits the ownership transfer with mem::forgetself — which lives inside into raw and so runs only after the destruction. T::drop is user code and may panic. If it does, the forget is skipped and the still-live OwnedAlloc unwind...