IPv6 prefix modifcation crashing OPNsense

[jaykumar2005]

I have a working IPv6 setup with /64 prefix delegation from ISP, but any attempt to change "Prefix delegation size" with "Send prefix hint" crashes the firewall. I am able to consistently reproduce this, every time I attempt to change these values, routes crashes and reboots.

Code Select Expand

Versions
OPNsense 25.7.4-amd64
FreeBSD 14.3-RELEASE-p2
OpenSSL 3.0.17

Code Select Expand

[44893]
[44893]
[44893] Fatal trap 12: page fault while in kernel mode
[44893] cpuid = 0; apic id = 00
[44893] fault virtual address = 0x10
[44893] fault code = supervisor read data, page not present
[44893] instruction pointer = 0x20:0xffffffff80e054e6
[44893] stack pointer         = 0x28:0xfffffe0145ffca70
[44893] frame pointer         = 0x28:0xfffffe0145ffcb90
[44893] code segment = base 0x0, limit 0xfffff, type 0x1b
[44893] = DPL 0, pres 1, long 1, def32 0, gran 1
[44893] processor eflags = interrupt enabled, resume, IOPL = 0
[44893] current process = 87956 (tailscaled)
[44893] rdi: fffff8000baba000 rsi: 000000000000001c rdx: 0000000000000010
[44893] rcx: 00000000ffffffff  r8: 00000000000000fd  r9: 000000006529fcfd
[44893] rax: 0000000000000000 rbx: fffff8000baba000 rbp: fffffe0145ffcb90
[44893] r10: fffff8072ff77b18 r11: fffff8013fe18970 r12: fffffe0145ffcb30
[44893] r13: fffff8021286cd80 r14: fffffe0145ffcb30 r15: fffff80612e18a80
[44893] trap number = 12
[44893] panic: page fault
[44893] cpuid = 0
[44893] time = 1759394699
[44893] KDB: stack backtrace:
[44893] db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0145ffc7c0
[44893] vpanic() at vpanic+0x161/frame 0xfffffe0145ffc8f0
[44893] panic() at panic+0x43/frame 0xfffffe0145ffc950
[44893] trap_pfault() at trap_pfault+0x3da/frame 0xfffffe0145ffc9a0
[44893] calltrap() at calltrap+0x8/frame 0xfffffe0145ffc9a0
[44893] --- trap 0xc, rip = 0xffffffff80e054e6, rsp = 0xfffffe0145ffca70, rbp = 0xfffffe0145ffcb90 ---
[44893] in6_selectsrc() at in6_selectsrc+0x636/frame 0xfffffe0145ffcb90
[44893] in6_selectsrc_socket() at in6_selectsrc_socket+0x41/frame 0xfffffe0145ffcbd0
[44893] in6_pcbconnect() at in6_pcbconnect+0x1b3/frame 0xfffffe0145ffcc50
[44893] tcp6_connect() at tcp6_connect+0x69/frame 0xfffffe0145ffcc90
[44893] tcp6_usr_connect() at tcp6_usr_connect+0x32e/frame 0xfffffe0145ffcd20
[44893] soconnectat() at soconnectat+0xb1/frame 0xfffffe0145ffcd60
[44893] kern_connectat() at kern_connectat+0xed/frame 0xfffffe0145ffcdc0
[44893] sys_connect() at sys_connect+0x81/frame 0xfffffe0145ffce00
[44893] amd64_syscall() at amd64_syscall+0x117/frame 0xfffffe0145ffcf30
[44893] fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0145ffcf30
[44893] --- syscall (98, FreeBSD ELF64, connect), rip = 0x49c0ff, rsp = 0x87082f3e8, rbp = 0x87082f3e8 ---
[44893] KDB: enter: panic
panic.txt0600001215067435613  7143 ustarrootwheelpage faultversion.txt0600007515067435613  7547 ustarrootwheelFreeBSD 14.3-RELEASE-p2 stable/25.7-n271676-ab2281de1853 SMP
OPNsense (c) 2014-2025 De