+ set -x
+ date
Fri Sep 11 03:32:18 UTC 2026
+ kldload pf.ko
+ cat
+ pfctl -F all
+ pfctl -f /tmp/df3340.conf
+ pfctl -e
+ sleep 2
+ nc 127.0.0.1 8080
+ echo '--- states at t+2s (expect SYN_PROXY / PROXY:DST):'
+ pfctl -s state
--- states at t+2s (expect SYN_PROXY / PROXY:DST):
all tcp 127.0.0.1:8080 <- 127.0.0.1:1309       PROXY:DST
+ sleep 12
[CONNECTION DIED HERE -- kernel panicked into DDB during the sleep,
 roughly 5-7 s after the connect(); the "SURVIVED" echo never ran]

--- serial console (dfbsd-qemu/boot.log tail) ---
panic: thread 0xfffff800905f5f80 cpu2 is not within netisr_ncpus 6
cpuid = 2
Trace beginning at frame 0xfffff80117b53740
ip_output() at ip_output+0x64e 0xffffffff807b387e 
ip_output() at ip_output+0x64e 0xffffffff807b387e 
pf_send_tcp() at pf_send_tcp+0x4f3 0xffffffff8260bca3 
pf_unlink_state() at pf_unlink_state+0xc6 0xffffffff8260bde6 
pf_purge_expired_states() at pf_purge_expired_states+0x89 0xffffffff8260be79 
pf_purge_thread() at pf_purge_thread+0xb4 0xffffffff8260bfc4 
Debugger("panic")

CPU2 stopping CPUs: 0x0000003b
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db>