Kernel panic: ... in module "pf" due to a NULL pointer dereference

Hello.

I use PF on Solaris 11.3.5.6.0 at sun4v sparc SUNW,Sun-Fire-T2000. When I try to delete PF (pfctl -k 10.10.10.10) state from states, system down with kernel panic. Below some info about kernel panic

> ::status                            
debugging crash dump vmcore.0 (64-bit, non-DEBUG) from router-new
operating system: 5.11 11.3 (sun4v)
usr/src version: 37843:73160471f302:0.175.3.5.0.4.0:S11.3SRU5.4+0
usr/closed version: 2902:9c0e467f5fc6:0.175.3.5.0.4.0:S11.3SRU5.4+0
image uuid: b1bc4ece-ddb3-4059-bfce-9b6bec7d4c66
panic message: BAD TRAP: type=31 rp=2a1051b2770 addr=20 mmu_fsr=0 occurred in module "pf" due to a NULL pointer dereference
complete: yes, all pages present as configured
dump content: kernel [LOADED,UNVERIFIED] (core kernel pages)
              zfs [MISSING] (ZFS metadata (ZIO buffers))
panicking PID: 4749 (not dumped)
>::panicinfo
             cpu                7
          thread      40642fc7540
         message BAD TRAP: type=31 rp=2a1051b2770 addr=20 mmu_fsr=0 occurred in module "pf" due to a NULL pointer dereference
          tstate       9980001602
              g1         ffffffff
              g2                0
              g3                0
              g4          a050478
              g5                1
              g6                0
              g7      40642fc7540
              o0                2
              o1      2a1051b2a80