Guest (baseline, stock kernel #0):
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
(compiled with INVARIANTS: debug.use_weird_array sysctl present and honored)

Guest (fix-validation, kernel #1 rebuilt in-guest with fix.diff):
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #1: Wed Sep  9 16:33:56 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
make -j6 nativekernel: BUILD_RC=0, 0 errors; make installkernel: INSTALL_RC=0

Relevant state at test time:
  debug.use_weird_array: 0 -> 1 for crash runs (kfree poison 0xdeadc0de;
    bit 23 of the poison == NFSSTA_DISMNT 0x00800000)
  nfs server: rpcbind + mountd + nfsd -t -u -n 4 (in-kernel NFS server)
  export: /tmp -maproot=root ; mount: 127.0.0.1:/tmp on /mnt/nfspoc (nfs, tcp)
  cc: DragonFly base clang/gcc frontend
  nfssvc syscall number: 155 (sys/kern/syscalls.master:226)