{
  "verdict": "reproduced",
  "impact": "panic",
  "finding_id": "DF-3317",
  "reproduce": {
    "build": "cc -O2 -Wall -I/usr/src/sys -o ptb6 ptb6.c",
    "run": "route change -inet6 -host ::1 -ssthresh 1024 && ./ptb6 -p 49161   (inspect-only: ./ptb6 -x ...)",
    "expected": "stock kernel: 'after-PTB : t_maxseg=0 t_maxopd=0', then on close 12x 'tcpcb ...: MSS (0) too small to hold options!' and 'Fatal trap 18: integer divide fault ... Stopped at tcp_close+0x66e: divq %r8,%rax' (system down); patched kernel: t_maxseg unchanged, close returns rc=0"
  },
  "kernel_refs": [
    "sys/netinet/tcp_subr.c:1575",
    "sys/netinet/tcp_subr.c:1582-1590",
    "sys/netinet/tcp_subr.c:1626-1630",
    "sys/netinet/tcp_subr.c:1820-1823",
    "sys/netinet/tcp_subr.c:1852-1871",
    "sys/netinet/tcp_subr.c:1013",
    "sys/netinet6/icmp6.c:1039-1041",
    "sys/netinet6/icmp6.c:1078"
  ],
  "artifacts": [
    "ptb6.c", "build.sh", "run.sh", "run.log", "panic.txt", "panic_console_full.txt", "panic_console_raw.txt", "fix.diff", "fix_build.log.tail", "fix_inspect.log", "fix_run.log", "fix_sanity.log", "env.txt", "VERDICT.md", "verdict.json", "manifest.json"
  ]
}