Fix baked path corruption: defrag read a stale lonely-buffer pointer