Guest: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
       kernel: /usr/obj/usr/src/sys/X86_64_GENERIC, x86_64, QEMU/KVM
pf:    pf.ko kernel module (kldload), /dev/pf crw------- root:wheel (pf_ioctl.c:3360 make_dev 0600)
       securelevel: -1 (so only the FWRITE gate on the fd applies)
src:   /usr/src/sys/net/pf/pf_ioctl.c sha256 bb2f85633d3a01689875e218cc9248de0d36e267a9df2193e1b0930ea8251a73
       (identical to audited repo tree)
userland headers: /usr/include/net/pf/pfvar.h (struct sizes: pfioc_rule=3000,
       pfioc_pooladdr=1136, pf_rule=936, pf_pooladdr=88, pf_pool=72, pf_addr_wrap=48)
baseline kernel: #0 stock; fix validation: stock kernel + rebuilt pf.ko module
       (350392 bytes, /usr/obj/usr/src/sys/net/pf/pf.ko)