{
 "finding_id": "DF-2967",
 "status": "not_reproduced",
 "reproduced": 0,
 "impact": "denial_of_service",
 "confidence": "likely",
 "verdict": "Mechanism line-confirmed; cannot execute on the stock kernel because the compile-time gate is absent: WDOG_DISABLE_ON_PANIC is not in X86_64_GENERIC (only LINT-family configs; no opt_wdog header exists in the guest kernel objdir), so the kern_shutdown.c panic hook that calls wdog_disable is compiled out - verified against the kernel config source and the built obj tree. The rest of the setup IS present on the guest (ichwd/amdsbwd modules exist and a watchdog registered: wdog: In-kernel automatic watchdog reset enabled at boot), and the self-deadlock path (callout_stop blocking then spin_lock(&wdogmtx) recursion) is consistent with the code. Availability-only. Fix (panicstr-safe wdog_disable using callout_stop_async) compiled into the fix-all kernel.",
 "exploit_chain": "",
 "evidence": "config absence (X86_64_GENERIC has no WDOG_DISABLE_ON_PANIC); guest dmesg shows a registered watchdog; kern_wdog.c:96-177 ordering confirmed",
 "kernel_refs": [
  "sys/kern/kern_wdog.c:96",
  "sys/kern/kern_wdog.c:119",
  "sys/kern/kern_shutdown.c:860"
 ],
 "poc_changes": "cannot be exercised without a custom kernel build; reasoned verification per contract",
 "attempts": 0,
 "guest_uname": "DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:04 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64",
 "runtime_sec": 0,
 "guest_dirty": 0,
 "build_cmd": "(none)",
 "run_cmd": "(none)",
 "code_hash": "",
 "notes": "opt-in kernel option; crash-dump/reboot guarantee loss only",
 "recommended_fix": "panic-safe wdog_disable (skip lock-dependent work when panicstr + callout_stop_async)",
 "fix_status": "not_testable",
 "fix_verdict": "compile-validated in fix-all kernel"
}