#!/bin/sh
# DF-2750 PoC run (run on the guest as root)
# Expected on vulnerable kernel:
#   lkmc: rounds=N hits=K healed=K bad_count=0000000008000000
#   lkmc: DEFECT REPRODUCED: ...
# K>0 proves the concurrent-release lost wakeup (waiter asleep on free lock).
set -ex
kldload /usr/src/sys/modules/lkmc/lkmc.ko
sysctl -w debug.lkmc=20000
sleep 1
dmesg | tail -8
kldunload lkmc