$ python3 craft.py df3048.img
Creating regular file ... df3048.img
icount=1024 bcount=4096 fdb=1 bsize=1024 bpg=8192 ipg=1024 isize=128 gcount=1
itable=20 root dir block=148
patched entry at dir off 24 name=b'lost+found' ino -> 0x40000002 (cg=(ino-1)/ipg=1048576)
OK wrote df3048.img

$ cc -O2 -o /root/vntool /root/vntool.c
BUILD-OK

$ kldload ext2fs
$ /root/vntool attach 0 /root/df3048.img
attached /root/df3048.img size=0
$ mkdir -p /mnt/e2
$ mount -t ext2fs -o ro /dev/vn0 /mnt/e2 && echo MOUNT-OK
MOUNT-OK
$ ls /mnt/e2
lost+found
$ echo BEFORE-STAT
BEFORE-STAT
$ stat /mnt/e2/lost+found
<ssh session dies -- kernel panic, console shows:>
panic: assertion "obj != NULL" failed in vm_object_hold_shared at /usr/src/sys/vm/vm_object.c:330
cpuid = 0
Trace beginning at frame 0xfffff801179e2fc8
vm_object_hold_shared() at vm_object_hold_shared+0x3f
vm_fault() at vm_fault+0x408
trap_pfault() at trap_pfault+0x9a
trap() at trap+0x17c
calltrap() at calltrap+0x9
--- trap 000000000000000c, rip = ffffffff82601960, ... ---
e2fs_gd_get_i_tables() at e2fs_gd_get_i_tables
Debugger("panic")
db>