# DF-5374 fix-validation (patched kernel #3, Sat Oct 3 18:32:37 UTC 2026)
root@dfbsd# ./poc5374 w
[*] DF-5374: opening /dev/targ (clone master)
[+] opened clone fd 3; state=TARG_STATE_OPENED, softc->periph == NULL, no TARGIOCENABLE issued
[*] write(3, ccb) BEFORE enable -> expect NULL-deref panic in targwrite/cam_periph_lock NOW
[-] write returned -1 (errno=6) - NO PANIC
root@dfbsd# ./poc5374 r
[*] DF-5374: opening /dev/targ (clone master)
[+] opened clone fd 3; state=TARG_STATE_OPENED, softc->periph == NULL, no TARGIOCENABLE issued
[*] read(3) BEFORE enable -> expect NULL-deref panic in targread/cam_periph_lock NOW
[-] read returned (errno=6) - NO PANIC
# guest alive; baseline (kernel #0) panicked at targwrite+0x130 (fault va 0x40)