{
  "finding_id": "DF-3310",
  "title": "wg_socket_init() port-roam: lockinit() on a live, possibly held lock and unsynchronized soclose/socket-pointer swap",
  "verdict": "not_reproduced",
  "impact": "none",
  "confidence": "certain (code defect) / race not hit dynamically",
  "reproduce": {
    "build": "cd findings/poc/DF-3310 && sh build.sh   (in-guest; cc 8.3)",
    "run": "sh run.sh  (root; see README for the 3-phase transcript)",
    "expected": "positive = WEDGE_DETECTED from raceB2.sh probe or a hang of 'ifconfig wgX destroy'; observed: ~8900 port changes across async/sync UDP configs, all clean"
  },
  "kernel_refs": [
    "sys/net/wg/if_wg.c:974",
    "sys/net/wg/if_wg.c:976",
    "sys/net/wg/if_wg.c:982",
    "sys/net/wg/if_wg.c:1145",
    "sys/net/wg/if_wg.c:1063",
    "sys/net/wg/if_wg.c:2557",
    "sys/kern/kern_lock.c:1300"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "wgtool.c", "setupB.sh", "raceB.sh",
    "raceB2.sh", "build.sh", "run.sh", "run.log", "run.2.log", "run.3.log",
    "env.txt", "fix.diff", "manifest.json", "verdict.json"
  ]
}