{
  "finding_id": "DF-5747",
  "title": "rfcomm_bind() missing DLC state check - live listener can be re-bound (upstream fixed)",
  "verdict": "reproduced",
  "impact": "none",
  "reproduce": {
    "build": "cd /root/rfup/DF-5747 && ./build.sh",
    "run": "cd /root/rfup/DF-5747 && ./run.sh && dmesg | tail",
    "expected": "[DF-5747] bind #2 (state LISTEN) -> 0 (BUG: live listener mutated; upstream returns EINVAL); fixed build: -> 22 (EINVAL - fixed)"
  },
  "kernel_refs": [
    "sys/netbt/rfcomm_upper.c:103-109",
    "sys/netbt/rfcomm_upper.c:357-373",
    "sys/netbt/rfcomm_dlc.c:92-113"
  ],
  "artifacts": [
    "harness5747.c", "l2cap_stub.c", "Makefile", "build.sh", "run.sh",
    "build.log", "fix_build.log", "setup.log", "run.log", "fix_run.log",
    "env.txt", "fix.diff", "VERDICT.md", "manifest.json", "verdict.json"
  ]
}