RUNNING: ./df1096 on DragonFly 6.5-DEVELOPMENT #0 (unpatched baseline), default qemu64 CPU (NO XSAVE) EXPECTATION: program completes cleanly (FXRSTOR path; XSAVE header ignored) PROGRAM OUTPUT: OK: handler ran, FP instruction completed, no panic. This means the kernel took the FXRSTOR branch (cpu_xsave=0) and ignored the crafted XSAVE header. The bug is still present at npx.c:416-417 (header not validated); to demonstrate the panic the guest must run on an XSAVE-capable CPU. RUN_EXIT=0 VM STATUS AFTER RUN: up