DragonFlyBSD Kernel Audit
DF-0850 / run.log
← back to finding ↓ download raw
=== DF-0850 BASELINE REPRODUCTION (unpatched #0 kernel, original ext2fs.ko) ===
Kernel: DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
Image: evil_ext2.img (V1: DIRHASHINDEX + IN_E3INDEX + interior node count=limit=0xFFFF)
Setup: vnconfig vn0 /root/evil_ext2.img; mount -t ext2fs -o ro /dev/vn0 /mnt/df0850
Trigger: stat /mnt/df0850/testdir/f0000_longname_to_force_htree_index_split

Result: KERNEL PANIC (guest down, ssh connection lost)

panic: lockmgr: locking against myself
cpuid = 5
Trace beginning at frame 0xfffff80117abb138
lockmgr_exclusive() at lockmgr_exclusive+0x3e0 0xffffffff80647f30 
lockmgr_exclusive() at lockmgr_exclusive+0x3e0 0xffffffff80647f30 
getblk() at getblk+0xe1 0xffffffff806d6f91 
breadnx() at breadnx+0x284 0xffffffff806d7714 
ext2_blkatoff() at ext2_blkatoff+0x58 0xffffffff8260a1e8 
ext2_htree_find_leaf() at ext2_htree_find_leaf+0x1e5 0xffffffff82605ac5 
Debugger("panic")

Reproduced deterministically (3+ times) on the unpatched kernel.