DF-3263 run — guest DragonFly dfbsd 6.5-DEVELOPMENT #0 (stock, Jul 2 2026),
6 vCPU, pf.ko module, /dev/pf 0600 root.

# root: load the reversed-port-range rdr rule (pfctl accepts it verbatim)
root# pfctl -f rdr_div0.conf ; echo rc=$?
rc=0
root# pfctl -sn
rdr pass on lo0 inet proto tcp from any to 127.0.0.1 port = 9998 -> 127.0.0.1 port 5001:5000
root# pfctl -e ; pf enabled

# unprivileged user (uid 1001 maxx): plain TCP connect to the rdr'ed port
maxx$ /tmp/trig
trigger: connecting to 127.0.0.1:9998 (rdr port 5001:5000)...
        <-- ssh session dies here: kernel panicked

# serial console (dfbsd-qemu/boot.log -> panic.txt):
Fatal trap 18: integer divide fault while in kernel mode
cpuid = 0; lapic id = 0
instruction pointer     = 0x8:0xffffffff8261389a
kernel: type 18 trap, code=0
Stopped at      pf_get_translation+0x31a:       idivl   %ecx,%eax

vm.sh status -> down (panic; guest at db> prompt)