DragonFly 6.5-DEVELOPMENT #0 (audit baseline) -> #0 rebuilds 2026-07-10
root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
uname -a: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0 ... x86_64
kern.version (unpatched baseline): DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
kern.version (full-fix kernel):    DragonFly 6.5-DEVELOPMENT #0: Fri Jul 10 13:01:29 UTC 2026
cc: 8.3 [DragonFly] Release/2019-02-22
make: bmake

Kernel config: X86_64_GENERIC (options FFS, SOFTUPDATES, UFS_DIRHASH, INVARIANTS on by default).
FFS is built into the kernel (ffs_blkfree/ffs_mount/ffs_mountfs are live symbols in /boot/kernel/kernel).

Relevant sysctls / state:
  vfs.usermount = 0            (unprivileged user cannot mount -> cannot reach TRIM path)
  mount -o trim via mount_ufs: REJECTED for non-CAM-da devices (sbin/mount_ufs/mount_ufs.c:101
                                gates on kern.cam.da.<unit>.trim_enabled; the QEMU guest has no
                                `da` disk, only vbd0/vn).
  Direct mount(2) syscall with MNT_TRIM: ACCEPTED by the kernel (vfs_syscalls.c:378-385 sets
                                mp->mnt_flag |= MNT_TRIM with NO device-capability check).
  INVARIANTS: ON on GENERIC (X86_64_GENERIC).  Slab poisoning (WEIRD_ADDR) + KKASSERT active.

Devices:
  vbd0  (virtblk)   - root disk (hammer2). Not a CAM `da` device.
  vn0   (vnode)     - FREEBLKS completed as synchronous no-op (sys/dev/disk/vn/vn.c:304).
  asyncd0 (KLD)     - the test harness disk added by this PoC; async FREEBLKS via 2s callout.

No SMAP / no SMEP / no KASLR on this guest (irrelevant here: DF-0793 is not an escalation).