Comment # 5 on bug 1074917 from Takashi Iwai

Well, I forgot that you're booting with secure boot.  KOTD (kernel-of-the-day)
isn't signed with a proper key, so it won't be bootable with secure boot,
unfortunately.  Can you disable the secure boot temporarily for testing?

Basically you need to download kernel-default-4.4.*.rpm from the following URL:
 
http://download.opensuse.org/repositories/Kernel:/openSUSE-42.2/standard/x86_64/

Then install it via
  zypper in kernel-default-4.4.*.rpm

If it complains about the vendor change, answer to ignore ('i').
Then reboot with this kernel (choose the kernel via GRUB menu) and retest
without nopti option.