Guest: DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64 stock INVARIANTS kernel #0, hw.ncpu=6 (QEMU/KVM, -smp 6, 4GB) Modules (v1 netgraph, /boot/kernel): netgraph.ko ng_socket.ko ng_async.ko ng_ksocket.ko PoC built with: cc -O2 -Wall -o /root/race2 /root/race2.c QEMU serial console: dfbsd-qemu/boot.log (-serial file:); QEMU monitor unix socket dfbsd-qemu/boot-mon.sock added by this session for register capture on hard lockups (DF-3539 was the first user). Run as root (v1 ng control sockets require caps_priv_check SYSCAP_RESTRICTEDROOT - the trigger is root-gated by design of v1 netgraph).