=== DF-0768 PATCHED-kernel run (single-fix, 6.5-DEVELOPMENT #1) ===
kern.version: DragonFly 6.5-DEVELOPMENT #1: Thu Jul  9 14:46:24 UTC 2026
kernel sha256: 458d4b059c9683d2099ed921860fc1e4e3c4ffdf2cf0fa89ddeb80888d081329
Trigger (SAME as baseline): unprivileged 'ls -f /mnt' (getdents) as maxx against
  malicious NFSv3 server mounted with -o rdirplus. Reply entry: attrflag=0 then i=0x7FFFFFFD.

--- run output ---
LS_RC=0  (getdents returns cleanly; empty dir -- the malicious entry is rejected by the fix)
outer_rc=0 (ssh completes normally; guest NOT panicked)

--- 4 consecutive triggers on patched kernel: ALL RC=0, guest up each time ---
run 1: RC=0 | guest: up
run 2: RC=0 | guest: up
run 3: RC=0 | guest: up
run 4: RC=0 | guest: up

--- guest status after triggers: UP (no panic, no Fatal trap in boot.log) ---
maxx still runs commands: uid=1001(maxx) ... ALIVE

=== BEFORE/AFTER CONTRAST ===
BASELINE (#0, unpatched):   Fatal trap 12 page fault, fault va 0xfffff7ff8f7a3ff8,
                            Stopped at memmove+0x24f (bcopy from corrupted dpos). Guest DOWN.
PATCHED  (#1, single-fix):  ls returns RC=0, guest UP, no panic. Deterministic over 4 runs.