I realized that the 178000 should have been 0x178000, but your getting the same as I did means that we are running the same code. When I do 'list 0x178000', I get (gdb) list *0x178000 0x178000 is in bootp_input (/usr/src/debug/virtualbox-6.1.36-2.1.x86_64/src/VBox/Devices/Network/slirp/bootp.c:624). Downloading 0.03 MB source file /usr/src/debug/virtualbox-6.1.36-2.1.x86_64/src/VBox/Devices/Network/slirp/bootp.c 619 { 620 LogRel(("NAT: DHCP Inform was ignored no boot client was found\n")); 621 return -1; 622 } 623 624 LogRel(("NAT: DHCP offered IP address %RTnaipv4\n", bc->addr.s_addr)); 625 offReply = dhcp_send_ack(pData, bp, bc, m, /* fDhcpRequest=*/ 0); 626 return offReply; 627 } When the error happens at line 624. It looks as if struct bc->addr is invalid. The code checks bc, but not bc->addr. It will be easy to check the second struct and break out, but it may lead to other problems as this is an effect, not the real cause! At least I have the data for a good bugzilla report at Oracle. Thanks for your help.