=== FIXED HARNESS RUN (after fix) ===
DF-0802 BOOTP/DHCP malformed-option panic harness
Reproducing sys/vfs/nfs/bootp_subr.c bootpc_decode_reply() panic() sites
(code is `optional bootp`; not in default X86_64_GENERIC; live trigger = diskless boot)

[1] V1 TAG_SUBNETMASK len=3          : no-panic
[2] V2 TAG_ROUTERS len=5             : no-panic
[3] V3 TAG_ROOT bad-host             : no-panic
[4] V4 TAG_SWAP bad-host             : no-panic
[5] V5 TAG_SWAPSIZE len=3            : no-panic
[6] V6 TAG_HOSTNAME len=256          : no-panic

0/6 malformed options cause kernel panic() in bootpc_decode_reply.
Each is a single forged BOOTP reply from an unauthenticated network peer.
RUN_EXIT=1