# FIX VALIDATION — kernel #1 (patched with fix.diff, built in-guest 13:50-14:03 UTC)
DragonFly dfbsd 6.5-DEVELOPMENT #1: Mon Aug 31 13:50:23 UTC 2026  (vs stock #0)

$ vnconfig -c /dev/vn0 gpt.img; vnconfig -c /dev/vn1 mbr.img
$ ./poc2741 /dev/vn0 info
  dss_nslices (runtime) = 130   (unchanged; header field is informational)
  [info-mode prints the PoC's own arithmetic; the kernel now clamps the
   bcopy to MAX_SLICES records per fix.diff]

$ (./poc2741 /dev/vn1 cross &) + 2x (timeout 35 ./poc2741 /dev/vn0 hammer)
=== status after hammer: 2:08PM up 2 mins   <-- NO PANIC (stock #0 died in <=30s, 2/2)
=== cross2.log: ... 18000000 clean          <-- 18M ioctls, ZERO foreign bytes
=== hammers:  ... 25500000 / ... 25800000   <-- 51M+ overflow attempts survived
=== dmesg: only the usual probe messages

Baseline (stock #0): identical images/binaries -> 2x "Fatal trap 12",
instruction pointer 0x8:0x0, guest dead at db> within ~30 s.