# DF-3122 baseline — STOCK kernel #0 (6.5-DEVELOPMENT #0, Thu Jul 2 06:02:54 UTC 2026)
# image: a1.img (stage 1 — controlled panic via reloaded-node entry 126 -> hole blk 7)
[root] /root/vntool attach 0 /root/a1.img ; mount -t ext2fs /dev/vn0 /mnt/e2 ; chmod 777 /mnt/e2/d
attached /root/a1.img size=0
MOUNTED-A1
      30                        <- readdir (linear) still parses the crafted blocks
[maxx] stat /mnt/e2/d/zzqq01
<ssh session hung — kernel panic; guest down>
[vm.sh log]
panic: ext2_dirbad: : bad dir ino 12 at offset 7168: mangled entry

cpuid = 1
Trace beginning at frame 0xfffff801189eb2a8
ext2_dirbad() at ext2_dirbad+0x32 0xffffffff82608ee2
ext2_dirbad() at ext2_dirbad+0x32 0xffffffff82608ee2
ext2_search_dirblock() at ext2_search_dirblock+0x194 0xffffffff82609084
ext2_htree_lookup() at ext2_htree_lookup+0x12e 0xffffffff8260622e
ext2_lookup() at ext2_lookup+0x28d 0xffffffff826093fd
vop_old_lookup() at vop_old_lookup+0x50 0xffffffff80709c90
Debugger("panic")
# offset 7168 == 7*1024 == block pointer of crafted entry #126 of the node
# loaded UNVALIDATED by ext2_htree_check_next (ext2_htree.c:144-151).