{
  "finding_id": "DF-5077",
  "file": "sys/dev/netif/mii_layer/acphy.c",
  "title": "acphy_attach 'no media present' branch skips mii_phy_add_media -> miibus_mediainit calls ifmedia_set on an EMPTY media list -> panic(\"ifmedia_set\") at attach (6th leaf of the DF-4930/4957/4981/5003/5053 family, hub DF-5001)",
  "verdict": "not_reproduced (leaf trigger hardware-gated: zero-media AC101 PHY not emulatable in QEMU); kernel sink panic proven fresh on this guest; fix build+behavior validated",
  "impact": "none (attach/boot-time DoS on faulty hardware; no unprivileged trigger)",
  "reproduce": {
    "build": "sh /root/df5077/build.sh",
    "run": "sh /root/df5077/run.sh",
    "expected": "hw.miihub_fixcheck=1 survives with ifm_cur non-NULL; hw.miihub_fire=1 -> 'ifmedia_set: no match for 0x0/0xfffffff' -> panic(\"ifmedia_set\") trace ifmedia_set<-miihub_fire<-sysctl; guest down in DDB"
  },
  "kernel_refs": ["sys/dev/netif/mii_layer/acphy.c:169", "sys/dev/netif/mii_layer/acphy.c:172", "sys/dev/netif/mii_layer/acphy.c:161", "sys/dev/netif/mii_layer/mii.c:244", "sys/net/if_media.c:174"],
  "artifacts": ["miihub.c", "Makefile", "build.sh", "run.sh", "run.log", "panic.txt", "fix.diff", "fix_build.log", "env.txt", "VERDICT.md", "README.md", "verdict.json", "manifest.json"]
}