=== DF-0599 baseline run on UNPATCHED kernel 6.5-DEVELOPMENT #0 ===
guest: DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026  x86_64
modules loaded: smbfs.ko + libmchain.ko + libiconv.ko ; 0 iconv cspairs registered
trigger (run as root, /dev/nsmb is mode 0700):
  $ kldload smbfs
  $ ./panic
output:
[*] DF-0599: issuing SMBIOC_OPENSESSION with localcs="BOGUSCS-9" (size=488)
<< ssh session died here (rc=124); guest went down; kernel panicked >>

=== serial console (dfbsd-qemu/boot.log) panic signature ===
login: netsmb_dev: loaded
Fatal user address access from kernel mode from panic at ffffffff82609ab8


Fatal trap 12: page fault while in kernel mode
cpuid = 0; lapic id = 0
fault virtual address	= 0x58
fault code		= supervisor write data, page not present
instruction pointer	= 0x8:0xffffffff82609ab8
stack pointer	        = 0x10:0xfffff801181e74d8
frame pointer	        = 0x10:0xfffff801181e74f8
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 848
current thread          = pri 6 (CRIT)
kernel: type 12 trap, code=2

CPU0 stopping CPUs: 0x0000003e
 stopped
Stopped at      smb_iod_request+0x58:   lock xaddl      %edx,0x58(%rbx)
db>