FIX VALIDATION — kernel: DragonFly 6.5-DEVELOPMENT #1: Wed Oct  7 00:21:51 UTC 2026
                     (clean-source /usr/src + fix.diff, make nativekernel + installkernel)

$ kldload /root/DF-5530/sink/bpfdetach_null.ko
SINK_RC=0
$ dmesg | tail -3
DF5530: calling bpfdetach() on not-bpf-attached usbus0 (simulating usbpf_clone_destroy() winning the usb_pf.c:157->177 window)
bpfdetach: usbus0 was not attached
DF5530: bpfdetach() returned (not reached on vulnerable kernel)
(vm.sh status -> up; NO panic — baseline faulted at VA 0x20 in bpfdetach)

$ kldload /root/DF-5530/df5530_race.ko
RACE_LOADED_FIXED_KERNEL
$ dmesg | grep -E "DF5530|RACE_RESULT" | tail -3
DF5530: racing... 239s elapsed
RACE_RESULT=NOHIT (no panic in 240s; see VERDICT.md)
(vm.sh status -> up — baseline panicked at usbpf_clone_destroy+0xf in <45 s)

$ ifconfig usbus0 create && ifconfig usbus0 destroy && echo CLONE_OK_AFTER_FIX
usbus0: flags=800001<UP,PROXY> metric 0 mtu 0
	groups: usbus
CLONE_OK_AFTER_FIX