Thu Sep 10 07:33:42 UTC 2026


DragonFly/x86_64 (dfbsd) (ttyd0)



login: Fatal user address access from kernel mode from trigger_changead at ffffffff82607d31


Fatal trap 12: page fault while in kernel mode
cpuid = 1; lapic id = 1
fault virtual address	= 0x0
fault code		= supervisor read data, page not present
instruction pointer	= 0x8:0xffffffff82607d31
stack pointer	        = 0x10:0xfffff80118483690
frame pointer	        = 0x10:0xfffff80118483738
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1090
current thread          = pri 6 
kernel: type 12 trap, code=0

CPU1 stopping CPUs: 0x0000003d
 stopped
Stopped at      pf_addrcpy+0x11:        movl    (%rsi),%eax
db> 
=== variant 2 (datapath): af=AF_UNSPEC removal empties pool without ioctl panic;
    DIOCSTART then one UDP packet to 127.0.0.1:65001 matches the NAT rule ===
(serial tail; panic header scrolled out of the console ring)
Stopped at      pf_map_addr+0x76:       movzbl  0x28(
=== variant 2 (datapath): af=AF_UNSPEC removal empties pool without ioctl panic;
    DIOCSTART then one UDP packet to 127.0.0.1:65001 matches the NAT rule ===
(serial tail; panic header scrolled out of the console ring)
Stopped at      pf_map_addr+0x76:       movzbl  0x28(%rbx),%ecx
db>
(rbx == rpool->cur == NULL; deref at NULL+0x28 inside pf_map_addr,
 sys/net/pf/pf.c:2693/2712)