⬢ DragonFlyBSD Kernel Audit
DF-2212 / run.log
← back to finding ↓ download raw 
===== DF-2212 BASELINE run Tue Oct 20 21:57:37 UTC 2026 =====
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #1: Tue Oct 20 21:46:59 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/DFV2212  x86_64
--- control: boot-time verbatim ttm_init() via SYSINIT ---
df_ttm2212: BOOT CHECK: verbatim ttm_init() ran via SYSINIT (module.h:58-59): register_calls=1 device_released=0 (register>0 + value 0 => SUCCESS path => a later ttm_exit() can never pass its wait)
--- rig status before trigger ---
hw.df_ttm2212.status: register_calls=1 unregister_calls=0 device_released=0 exit_done=1 exit_ms=-1 wdog_samples=0 exit_thread=0 tsleepq=0 wmesg=- wchan=0 kill9_mark=0

--- launching trigger (real ttm_exit in caller thread, backgrounded) ---
--- ps snapshot (t=3s) ---
   PID STAT   WCHAN    UCOMM
   878 D0     lwe      sysctl
trigger pid=878
--- sending SIGKILL (with kernel marker) ---
--- ps snapshot (t=6s) ---
   PID STAT   WCHAN    UCOMM
   878 D0     lwe      sysctl
--- SIGKILL sent 3s ago; if the pid is still present it is UNKILLABLE ---
--- ps snapshot (t=33s) ---
   PID STAT   WCHAN    UCOMM
   878 D0     lwe      sysctl
hw.df_ttm2212.status: register_calls=1 unregister_calls=1 device_released=0 exit_done=0 exit_ms=-1 wdog_samples=6 exit_thread=0xfffff8008e100080 tsleepq=1 wmesg=lwe wchan=0xfffff800897a5080 kill9_mark=5963

--- waiting for watchdog to reach its verdict (~t+95s) ---
--- ps snapshot (t=93s) ---
   PID STAT   WCHAN    UCOMM
   878 D0     lwe      sysctl
hw.df_ttm2212.status: register_calls=1 unregister_calls=1 device_released=0 exit_done=0 exit_ms=-1 wdog_samples=16 exit_thread=0xfffff8008e100080 tsleepq=1 wmesg=lwe wchan=0xfffff800897a5080 kill9_mark=5963

--- kernel log (watchdog samples + verdict) ---
df_ttm2212: BOOT CHECK: verbatim ttm_init() ran via SYSINIT (module.h:58-59): register_calls=1 device_released=0 (register>0 + value 0 => SUCCESS path => a later ttm_exit() can never pass its wait)
df_ttm2212: TRIGGER pid=878 (sysctl): calling the REAL ttm_exit() (verbatim ttm_module.c:89-99) in THIS thread - exactly what linker_file_sysuninit() (kern_linker.c:535) does to the kldunload(2) thread of drm.ko
df_ttm2212: stack snapshot at entry to the wait path:
df_ttm2212: KILL9 marker set (kill -9 about to be sent to the blocked trigger process)
df_ttm2212: WATCHDOG sample 1/16 t+5s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 2/16 t+10s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 3/16 t+15s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 4/16 t+20s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 5/16 t+25s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 6/16 t+30s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 7/16 t+35s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 8/16 t+40s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 9/16 t+45s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 10/16 t+50s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 11/16 t+55s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 12/16 t+60s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 13/16 t+65s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 14/16 t+70s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 15/16 t+75s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG sample 16/16 t+80s: exit-thread 0xfffff8008e100080 TDF_TSLEEPQ=YES wmesg="lwe" wchan=0xfffff800897a5080 device_released=0 sigkill_pending=1 kill9_marker=set
df_ttm2212: WATCHDOG VERDICT after 16 samples (~80s): ttm_exit() thread STILL blocked; device_released=0 and no compiled code path in sys/ can ever set it to 1 (only setter is #if 0'd out at ttm_module.c:48-52) -> wait_event can never return; sleep is uninterruptible (no PCATCH)
--- trigger.out (must be EMPTY of an exit line on baseline) ---
hw.df_ttm2212.trigger: 0===== BASELINE run complete Tue Oct 20 21:59:10 UTC 2026 =====