=== PATCHED ipfw3.ko (KKASSERT removed) re-run of SAME PoC (3x rulenum=65535 + 1x rulenum=0) ===
run1 (65535): setsockopt rc=0 (returned cleanly -> KKASSERT did NOT fire) ; guest up
run2 (65535): setsockopt rc=0 ; guest up
run3 (65535): setsockopt rc=0 ; guest up
run4 (rulenum=0, all-rules path): setsockopt rc=0 ; guest up
=== guest status after all runs: up ===