# Fixed kernel (#1 Mon Sep 7 12:28:26 UTC 2026, fix.diff v2) -- exact same PoC
$ sh /tmp/mkimage.sh          -> MKIMAGE-OK
$ /tmp/patch_leaf ...         -> PATCHED: dataoff=a000000022000000 len=65536 crc=fc7ab732 nodecrc=dac290b9
$ sh /tmp/trigger.sh
MOUNTED -- running hammer reblock
reblock start 8000000000000000:0000
free level 0/8388608
Reblock /mnt failed: Invalid argument          <- new guard rejects the forged record
Reblocked:
    0/0 B-Tree nodes
    0/0 B-Tree bytes
    0/0 data elements
    0/0 data bytes
REBLOCK_RC=0
TRIGGER-DONE                                    <- no trap; guest alive
$ dmesg | grep -A1 "illegal data range"
hammer_blockmap_getfree: a000000022000000 -> 7340032
hammer_reblock_helper: D 7340032/0
HAMMER: reblock a000000022000000/65536: illegal data range
$ grep -c "Fatal trap" /var/log/messages
0