DragonFlyBSD Kernel Audit
DF-0751 / live_wedge.txt
← back to finding ↓ download raw
=== DF-0751 LIVE WEDGE EVIDENCE ===
Timestamp of wedge: Sun Jul  5 07:44:49 UTC 2026

vm.sh status: down (guest wedged)
ssh RC: 124 (timeout — kernel unresponsive)
Panic count in boot.log: 0
  -> 0 panics = silent busy-loop hang (NOT a crash)
boot.log last modified: 2026-07-05 07:37:29.007259516 +0000
  -> frozen at boot time; kernel could not write to serial console

=== Sequence ===
1. Built mpls.ko from /usr/src/sys/netproto/mpls (clean source)
2. kldload mpls.ko (registers NETISR_MPLS handler)
3. Injected ONE MPLS frame via bpf write with BIOCSFEEDBACK on vtnet0:
   EtherType 0x8847, label=0, S=0 (bottom-of-stack CLEAR), TTL=64
4. bpf feedback -> if_input -> ether_input -> NETISR_MPLS -> mpls_input
5. mpls_input case 0, MPLS_STACK()==0 -> goto again WITHOUT m_adj
6. mtod returns same label every iteration -> INFINITE LOOP holding mplock
7. Guest hard-wedged. No panic, no dmesg, no ssh. Power-cycle required.