>>> Kernel build for X86_64_GENERIC started on Thu Jul  9 08:30:53 UTC 2026
Kernel build directory is /usr/obj/usr/src/sys/X86_64_GENERIC
[...]
--- _SUBDIR_all_ipfw3_layer2 ---
===> net/ipfw3_layer2
--- ip_fw3_layer2.o ---
cc  -O2 -pipe   -D_KERNEL -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes
    -Wmissing-prototypes -Wpointer-arith -Wcast-qual  -Wold-style-definition
    -Wmissing-include-dirs  -Wno-pointer-sign -Winit-self -Wundef
    -Wno-unused-but-set-variable -std=gnu11 -Werror -DKLD_MODULE -nostdinc
    -I. -Idragonfly -I/usr/obj/usr/src/sys/X86_64_GENERIC
    -I/usr/obj/usr/src/sys/X86_64_GENERIC/include -Idragonfly/../include
    -DHAVE_KERNEL_OPTION_HEADERS
    -include /usr/obj/usr/src/sys/X86_64_GENERIC/opt_global.h -g
    -Wold-style-declaration -fno-common -ffreestanding -fno-stack-protector
    -fno-strict-aliasing -fno-strict-overflow -fno-asynchronous-unwind-tables
    -fno-omit-frame-pointer -mcmodel=kernel -mno-red-zone -mno-mmx -mno-sse
    -msoft-float -mno-fp-ret-in-387 -mindirect-branch=thunk-inline
    -c /usr/src/sys/net/ipfw3_layer2/ip_fw3_layer2.c
--- _SUBDIR_all_ipfw3 ---
--- ipfw3.ko ---
cc -Wl,--build-id=sha1 -nostdlib -Wl,--hash-style=sysv   -r -Wl,-d -o ipfw3.ko ip_fw3.o ip_fw3_set.o
--- _SUBDIR_all_ipfw3_layer2 ---
--- ipfw3_layer2.ko ---
cc -Wl,--build-id=sha1 -nostdlib -Wl,--hash-style=sysv   -r -Wl,-d -o ipfw3_layer2.ko ip_fw3_layer2.o
[...]
--------------------------------------------------------------
>>> Kernel build for X86_64_GENERIC completed on Thu Jul  9 08:37:44 UTC 2026
--------------------------------------------------------------
=== NK_DONE rc=0 ===
Thu Jul  9 08:37:44 UTC 2026

NOTES:
- Full build log on guest: /root/nk_fix2.log (35568 lines).
- Patched file: sys/net/ipfw3_layer2/ip_fw3_layer2.c (DF-0749 bounds check applied).
- Compiled cleanly with -Werror (no warnings).
- ipfw3_layer2.ko rebuilt; installed to /boot/kernel/ipfw3_layer2.ko
  (sha256: 584567ab56a23a630db86127791f8f285903660be092c9ed767e1fbfd5f0f1b8).
- Kernel itself re-linked (functionally identical source; kern.version bumped #0 -> #1).