== guest uname ==
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026    root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64

== shipped modules ==
ng_lmi.ko         -- the OLD ng_lmi (sys/netgraph/lmi/ng_lmi.c) -- milder race
netgraph.ko       -- OLD netgraph base
ng_socket.ko      -- OLD netgraph socket

== NOT shipped (DF-0565 target) ==
netgraph7 base .ko -- absent
ng7_lmi.ko (would conflict with ng_lmi.ko on name) -- absent

To enable: options NETGRAPH7 (sys/conf/options:284) + NETGRAPH7_LMI in
custom kernel. Default X86_64_GENERIC does NOT include these.

== Hardening status (audit guest) ==
INVARIANTS ON  (X86_64_GENERIC default)
SMAP/SMEP OFF  (CPU features 0x1783fbfd lack leaf-7 SMAP/SMEP bits)
KASLR     OFF  (vm.randomize_mmap=0)

== race-trigger attempt on shipped ng_lmi (milder variant) ==
500 create+destroy iterations, 60s: no panic. Race window ~1us, LMI_ticker
interval 10s, per-iter hit prob ~1e-7. Would need ~1e7 iters for likely hit.