Guest: DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026
       root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64
       (QEMU/KVM via dfbsd-qemu/vm.sh, 6 vCPU, 4GB)
kern.osreldate = 600519
tpm KMOD: not loaded by default (kldstat -n tpm: not found) - no TPM device
on the guest (QEMU offers tpm-crb but no swtpm backend is installed on the
host, so no ACPI MSFT0101/TPM2 table exists; tpmcrb never attaches).
Reproducer therefore compiles the stock tpm20.c into a KMOD (uafsim) and
stubs only the MMIO transport.
Patched-kernel validation run: DragonFly 6.5-DEVELOPMENT #1: Fri Sep 25
05:52:47 UTC 2026 (fix.diff applied to /usr/src, nativekernel + installkernel).
Compiler: guest base cc (clang-based DragonFly cc).
Vulnerable-run kernel: the stock #0 snapshot; 2/2 panics.
Fixed-run kernel: #1 with fix.diff; 1/1 clean survival, guest stayed up.