untrusted comment: verify with openbsd-80-base.pub
RWSMSt0erHTctUw6y3t7MClUx4vA6oARjOV295MWp1AeaJjd8kMfWvxiLfIqQZWmmDlCAygloJ605uARRyCOPs44C/LluNEgjg0=

OpenBSD 8.0 errata 008, November 5, 2026:

If pf is configured with FQ-CoDel queueing, sustained traffic
overloading a queue could crash the kernel.

Apply by doing:
    signify -Vep /etc/signify/openbsd-80-base.pub -x 008_pffq.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install a new kernel:
    KK=`sysctl -n kern.osversion | cut -d# -f1`
    cd /usr/src/sys/arch/`machine`/compile/$KK
    make obj
    make config
    make
    make install

Index: sys/net/fq_codel.c
===================================================================
RCS file: /cvs/src/sys/net/fq_codel.c,v
diff -u -p -r1.21 fq_codel.c
--- sys/net/fq_codel.c	13 Aug 2026 09:01:49 -0000	1.21
+++ sys/net/fq_codel.c	26 Oct 2026 10:42:14 -0000
@@ -461,7 +461,16 @@ codel_dequeue(struct codel *cd, struct c
 		case DROPPING:
 			m = codel_commit(cd, m);
 			ml_enqueue(free_ml, m);
-			cd->drops++;
+
+			/*
+			 * Prevent counter wrap. Once drops saturates, lower
+			 * ldrops to preserve the delta for grace-period reuse,
+			 * until the delta itself saturates
+			 */
+			if (cd->drops < USHRT_MAX)
+				cd->drops++;
+			else if (cd->ldrops > 0)
+				cd->ldrops--;
 
 			*dpkts += 1;
 			*dbytes += m->m_pkthdr.len;