DF-3385 environment
===================

uname -a (baseline / stock, panic reproduced):
  DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64

uname -a (single-fix kernel, fix validation):
  DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #1: Fri Sep 11 23:03:53 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
  (make -j6 nativekernel KERNCONF=X86_64_GENERIC  -> rc=0, ~4 min warm obj)
  (make installkernel KERNCONF=X86_64_GENERIC    -> rc=0)

ALTQ configuration of the kernel (sys/config/X86_64_GENERIC lines 42-49):
  options ALTQ / ALTQ_CBQ / ALTQ_RED / ALTQ_RIO / ALTQ_HFSC / ALTQ_PRIQ / ALTQ_FAIRQ
  (all disciplines compiled in; pf itself loaded as a KLD: kldload pf.ko)

sysctl kern.securelevel: -1  (insecure; no securelevel gate on pf ioctls)

Trigger interface: vtnet0 (virtio, default route via 10.0.2.2)

Trigger requirements: root (all /dev/pf ioctls need it) + one packet of
traffic.  Classified as privileged local DoS (same bucket as DF-0441).