BumpPtrAllocator::Reset should also poison the first slab which doesn't get deallocated.