Guest: DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64 (stock, INVARIANTS) QEMU/KVM single-tenant guest via dfbsd-qemu/vm.sh (reset with-src before each decisive run; panics captured with `vm.sh log`). Trigger class: root-supplied crafted ET_EXEC .ko (kldload is SYSCAP_NOKLD-gated). Loader: sys/kern/link_elf.c (class "elf64", EXEC-format KLD loader) — link_elf_load_file(), NOT link_elf_obj.c (ET_REL, DF-2771/2772/2773).