# Guest environment (audit QEMU/KVM target, dfbsd-qemu/vm.sh)
uname -a:
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64

# HARDWARE GATE (why no in-kernel reproduction is possible on this guest):
pciconf -l (complete bus):
hostb0@pci0:0:0:0:    class=0x060000 card=0x11001af4 chip=0x12378086 rev=0x02
isab1@pci0:0:1:0:     class=0x060100 card=0x11001af4 chip=0x70008086 rev=0x00
atapci0@pci0:0:1:1:   class=0x010180 card=0x11001af4 chip=0x70108086 rev=0x00
none0@pci0:0:1:3:     class=0x068000 card=0x11001af4 chip=0x71138086 rev=0x03
vgapci0@pci0:0:2:0:   class=0x030000 card=0x11001af4 chip=0x11111234 rev=0x02   <- QEMU std VGA, not AMD DCE11
virtio_pci0@pci0:0:3:0: class=0x020000 card=0x00011af4 chip=0x10001af4
virtio_pci1@pci0:0:4:0: class=0x010000 card=0x00021af4 chip=0x10011af4

- No LSI/Avago/SAS HBA on the bus: mps(4) (and mpr(4)) never attach; every
  mps_mapping.c path is dormant. Exercising the mapping engine requires an
  mps-compatible IOC (real HBA, PCI passthrough, or a malicious emulator).
- No AMD GPU: the amdgpu/dc stack (dce110_timing_generator.c) never leaves
  probe-time register probing of an absent ASIC.
- kldstat: kernel + ehci.ko + xhci.ko only; no mps.ko/amdgpu.ko loaded.
- Compiler: DragonFly cc 8.3 (base). Guest is the intentional no-SMAP/SMEP/
  KASLR exploitation target; the limitation here is absent hardware, not
  hardening.