=== PATCHED: 6.5-DEVELOPMENT #1 kernel + rebuilt ipfw3_basic.ko (DF-2580 fix applied) ===
kern.version: DragonFly 6.5-DEVELOPMENT #1: Sat Aug  8 08:28:55 UTC 2026
sha256(/boot/kernel/ipfw3_basic.ko) = 206a75c0375b666ee370ef0d18a5b288aaf9cbe2fcc089e23c3bbb73cd324582

[root@dfbsd ~]# /root/poc 73 100000 1    # baseline panic case
[*] setsockopt(IPPROTO_IP, IP_FW_X=49, opcode=73, id=100000) ...
[~] setsockopt returned -1 errno=22 (Invalid argument)
[+] EINVAL -> bounds check is present (FIXED kernel)        <-- FIXED, no panic

[root@dfbsd ~]# /root/poc 73 64 1          # silent-corruption case
[~] setsockopt returned -1 errno=22 (Invalid argument)
[+] EINVAL -> bounds check is present (FIXED kernel)        <-- FIXED

[root@dfbsd ~]# /root/poc 73 -2 1          # negative id
[~] setsockopt returned -1 errno=22 (Invalid argument)
[+] EINVAL -> bounds check is present (FIXED kernel)        <-- FIXED

[root@dfbsd ~]# /root/poc 73 5 1           # valid id (sanity, must still work)
[!] setsockopt returned 0 (NO bounds check) — OOB write happened   <-- valid id ACCEPTED (no false reject)

status after all runs: UP (no panic)
panic signature in boot.log: (none)