=== baseline run #1 (stock kernel #0 Jul 2 2026) ===
$ vm.sh run_root 'uname -a; sysctl -n kern.securelevel; kldload /root/df2772.ko'
DragonFly dfbsd 6.5-DEVELOPMENT ... #0: Thu Jul  2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64
-1
(kldload never returns — serial console:)
panic: lost base for relatab
cpuid = 3
Trace beginning at frame 0xfffff801182dd688
link_elf_obj_reloc_local() at link_elf_obj_reloc_local+0x28f 0xffffffff80b921df 
link_elf_obj_reloc_local() at link_elf_obj_reloc_local+0x28f 0xffffffff80b921df 
link_elf_obj_load_file() at link_elf_obj_load_file+0xb6f 0xffffffff80b9342f 
linker_load_file.part.3() at linker_load_file.part.3+0x92 0xffffffff806244f2 
linker_load_module() at linker_load_module+0x116 0xffffffff80625e16 
sys_kldload() at sys_kldload+0xc6 0xffffffff80625f66 
Debugger("panic")

CPU3 stopping CPUs: 0x00000037
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db> 
=== baseline run #2 (fresh vm.sh reset with-src, clean capture) ===
(identical: ssh hangs; serial console as in panic.txt — reproduced)

=== patched run (kernel #1 Sep 1 01:04:57 2026, fix.diff applied) ===
$ vm.sh run_root 'kldload /tmp/df2772.ko; echo RC=$?'
kldload: an error occurred while loading module /tmp/df2772.ko. Please check dmesg(8) for more details.
RC=1
$ dmesg | tail: linker_load_file: Unsupported file type   (x3 for all PoCs)
ALL-SURVIVED; uptime 1 min; 0 panics in console log