DF-3922 / manifest.json
{ "finding_id": "DF-3922", "title": "hptmv hpt_timeout (takes driver_lock) vs fOsCommandDone callout_stop under driver_lock - synchronous callout_stop creates AB-BA permanent wedge", "verdict": "not_reproduced (hardware-gated race; mechanics source-certain)", "impact_potential": "permanent kernel/storage wedge (DoS) via giant CAM MP-lock contagion", "reproduce": { "build": "n/a", "run": "RR1820: sustained I/O; race a command completion against its 20 s timeout", "expected": "system storage wedge: threads stuck in 'costp' and lockmgr on driver_lock; NOT runnable on audit guest" }, "kernel_refs": ["sys/dev/raid/hptmv/entry.c:2625", "sys/dev/raid/hptmv/entry.c:2669", "sys/dev/raid/hptmv/entry.c:2865", "sys/dev/raid/hptmv/entry.c:2910", "sys/kern/kern_timeout.c:1091", "sys/kern/kern_timeout.c:920"], "artifacts": ["README.md", "VERDICT.md", "fix.diff", "env.txt", "manifest.json", "verdict.json"] } |