=== guest uname ===
DragonFly 6.5-DEVELOPMENT #3: Mon Jul 20 11:27:22 UTC 2026
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #3: Mon Jul 20 11:27:22 UTC 2026
    root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64

=== compiler version (guest) ===
cc 8.3 [DragonFly] Release/2019-02-22 (Free Software Foundation, Inc.)

=== PCI devices present (QEMU) ===
hostb0@pci0:0:0:0:   Intel 440FX - 82441FX PMC [Natoma]
isab1@pci0:0:1:0:    Intel 82371SB PIIX3 ISA [Natoma/Triton II]
atapci0@pci0:0:1:1:  Intel 82371SB PIIX3 IDE [Natoma/Triton II]
none0@pci0:0:1:3:    Intel 82371AB/EB/MB PIIX4 ACPI
vgapci0@pci0:0:2:0:  VGA display controller (0x11111234 - QEMU std)
virtio_pci0@pci0:0:3:0: Red Hat Virtio network device
virtio_pci1@pci0:0:4:0: Red Hat Virtio block device
NO Brooktree bt848, NO LSI SAS (mpr/mps) PCI devices present.

=== device nodes ===
ls: /dev/bktr*: No such file or directory
ls: /dev/mpr*: No such file or directory
ls: /dev/mps*: No such file or directory
no_dev_nodes

=== maxx user group membership ===
operator:*:5:root                  # maxx is NOT in operator group
uid=1001(maxx) gid=1001(maxx) groups=1001(maxx)

=== kldstat (kernel + loadable modules) ===
Id Refs Address                Size Name
 1    5 0xffffffff80200000  1b00528 kernel   # main kernel (has all 3 fixes)
 2    1 0xffffffff81d01000    76020 ehci.ko
 3    1 0xffffffff81d77800    85ff0 xhci.ko
(bktr/mpr/mps are compiled into the main kernel via device bktr/mpr/mps;
 mpr/mps showed as built-in via "module_register: module pci/mpr already
 exists!" on first boot -- they live in kernel #1 not as .ko)

=== SHA-256 of patched kernel binary ===
SHA256 (/boot/kernel/kernel) = 1d424193a329983f63b413d37e2e89c531ab4d3d854295f7227d11b847869e1c

=== live fix symbols in patched kernel (proof all 3 fixes compiled in) ===
ffffffff80651e70 T caps_priv_check_td
ffffffff80597d30 t mpr_user_pass_thru   # DF-1326 path - fixed
ffffffff805b0c10 t mps_user_pass_thru   # DF-1359 path - fixed

=== INVARIANTS / hardening state ===
default X86_64_GENERIC kernel => options INVARIANTS compiled in
SMAP / SMEP / KASLR / KPTI: OFF (per audit-environment table)

=== triggering preconditions NOT met on this guest ===
* DF-1215 needs /dev/bktr0 (mode 0444) — PCI bt848 hardware absent
* DF-1326 needs /dev/mprN (mode 0640 root:operator) — LSI SAS HBA absent
* DF-1359 needs /dev/mpsN (mode 0640 root:operator) — LSI SAS HBA absent
On real hardware with the matching PCI device, the driver auto-attaches and
the device node is created; the bug would then be live-reachable.