=== RUN ===
DF-0802 BOOTP/DHCP malformed-option panic harness
Reproducing sys/vfs/nfs/bootp_subr.c bootpc_decode_reply() panic() sites
(code is `optional bootp`; not in default X86_64_GENERIC; live trigger = diskless boot)

kernel: panic: bootpc: subnet mask len is 3
[1] V1 TAG_SUBNETMASK len=3          : PANIC (kernel would halt)
kernel: panic: bootpc: Router Len is 5
[2] V2 TAG_ROUTERS len=5             : PANIC (kernel would halt)
kernel: panic: Failed to set rootfs to not-an-ip-and-no-colon
[3] V3 TAG_ROOT bad-host             : PANIC (kernel would halt)
kernel: panic: Failed to set swapfs to not-an-ip-and-no-colon
[4] V4 TAG_SWAP bad-host             : PANIC (kernel would halt)
kernel: panic: bootpc: Expected 4 bytes for swaplen, not 3 bytes
[5] V5 TAG_SWAPSIZE len=3            : PANIC (kernel would halt)
kernel: panic: bootpc: hostname >= 256 bytes
[6] V6 TAG_HOSTNAME len=256          : PANIC (kernel would halt)

6/6 malformed options cause kernel panic() in bootpc_decode_reply.
Each is a single forged BOOTP reply from an unauthenticated network peer.
RUN_EXIT=0