{
  "finding_id": "DF-3479",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "see ../DF-3480 harness (btsbx.ko + df3478_drive); patched module via build.sh",
    "run": "listener on psm 0x1234 (./df3478_drive 5 1) then: sysctl -w debug.btsbx_cmd=1; sysctl -w debug.btsbx_cmd=2",
    "expected": "baseline: panic 'assertion ... so->so_refs == 2 ... failed in sonewconn_faddr' from ng_btsocket_l2cap_input on the SWI task. patched: handshake completes, accept() returns."
  },
  "kernel_refs": [
    "sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap.c:1961",
    "sys/kern/uipc_socket2.c:404",
    "sys/netinet/in_pcb.c:295"
  ],
  "artifacts": ["README.md", "panic.txt", "fix.diff", "build.sh", "run.sh", "verdict.json", "manifest.json"]
}