{
  "finding_id": "DF-3501",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "sh setup_guest.sh",
    "run": "sysctl -n debug.fecdrive=create; sysctl -n debug.fecdrive='add vtnet0'; sysctl -n debug.fecdrive='add lo0'; sysctl -n debug.dumpif=lo0; sysctl -n debug.fecdrive='addg gif1'; ifconfig fec1; sysctl -n debug.fecdrive='addg gif0'; ifconfig gif0",
    "expected": "dumpif lo0 tail+0 = 0000563412005452 (vtnet0 MAC) and tail+16 = fec node pointer after 'add lo0'; ifconfig fec1 -> ether f0:2d:0a:4f:00:f8 (gif_psrc leak); ifconfig gif0 -> Fatal trap 9 GPF at gif_ioctl+0x9f"
  },
  "kernel_refs": ["sys/netgraph/fec/ng_fec.c:378", "sys/netgraph/fec/ng_fec.c:379", "sys/netgraph/fec/ng_fec.c:388", "sys/netgraph/fec/ng_fec.c:404", "sys/net/if_loop.c:111", "sys/net/gif/if_gif.h:51"],
  "artifacts": ["README.md", "VERDICT.md", "run.log", "leak_sample.txt", "panic.txt", "fecdrive.c", "Makefile", "dumpif.c", "setup_guest.sh", "fix.diff", "verdict.json", "manifest.json"]
}
