{
  "finding_id": "DF-2223",
  "guest_uname": "DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #1: Tue Oct 20 23:24:18 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/DFV22X  x86_64",
  "code_hash": "c646506a8cbeda4dcb0ade737617a507fac86cf3d381b7df14e25aad5ab10fae",
  "tested_at": "2026-10-20",
  "verdict": "REPRODUCED / FIX VALIDATED",
  "impact": "denial_of_service",
  "confidence": "certain",
  "reproduce": {
    "build": "sh build.sh (batch harness kernel DFV22X; verbatim linux_pci.c + real linux/pci.h predicate chain)",
    "run": "install DFV22X kernel, reboot, sysctl kern.df22x_run=1 (root), read DF2223 lines from dmesg",
    "expected": "on all 7 real PCI devices: BASELINE LNKCAP rc=-22 with canary 0xa5a5a5a5 UNTOUCHED and consumer width=0x1a derived from uninitialized stack; FIXED dst=0x00000000 and width=0xff deterministic"
  },
  "kernel_refs": ["sys/dev/drm/linux_pci.c:35", "sys/dev/drm/linux_pci.c:36", "sys/dev/drm/include/linux/pci.h:445", "sys/dev/drm/include/linux/pci.h:473", "sys/dev/drm/include/linux/pci.h:608", "sys/dev/drm/include/linux/pci.h:612"],
  "artifacts": [
    {"path": "rig_head.c", "type": "rig-source", "desc": "shared batch rig head"},
    {"path": "rig_mid.c", "type": "rig-source", "desc": "verbatim production includes + fixed prototypes"},
    {"path": "rig_tail.c", "type": "rig-source", "desc": "meter + test sections incl. real-device PCI enumeration with canaried dst"},
    {"path": "build.sh", "type": "build-script", "desc": "provenance chain + fixed-variant extraction + kernel-compile"},
    {"path": "run.sh", "type": "run-script", "desc": "sysctl trigger + dmesg extraction"},
    {"path": "fix.diff", "type": "suggested-fix", "desc": "*dst = 0 on the register-not-implemented path (upstream contract)"},
    {"path": "build.log", "type": "build-log", "desc": "FULL untrimmed nativekernel DFV22X build"},
    {"path": "run.log", "type": "run-log", "desc": "FULL decisive rig output"},
    {"path": "run_section.log", "type": "run-log", "desc": "DF-2223 lines only"},
    {"path": "env.txt", "type": "environment", "desc": "guest env + hashes + PCI topology"},
    {"path": "VERDICT.md", "type": "verdict", "desc": "full narrative incl. honest non-PCIe-hardware limitation"},
    {"path": "README.md", "type": "readme", "desc": "build/run/expected"},
    {"path": "manifest.json", "type": "manifest", "desc": "this file"},
    {"path": "verdict.json", "type": "verdict", "desc": "machine verdict for persist_poc.py"}
  ]
}