{
 "finding_id": "DF-4656",
 "poc_id": "DF-4656",
 "status": "untested",
 "reproduced": 0,
 "impact": "Each occurrence permanently strands one CAM_SIM_QUEUED ccb / devq slot; repeated occurrences wedge all I/O to the controller until reboot",
 "confidence": "certain",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "Completion gated on the FAILED flag which the ENOMEM bounce-buffer path never sets and the callback never runs - error!=0 skips xpt_done while the request is freed. Complete-on-any-error fix.",
 "kernel_refs": [
  "sys/dev/raid/twa/tw_osl_cam.c:336",
  "sys/dev/raid/twa/tw_osl_cam.c:341"
 ],
 "verdict": "not_run: needs 3ware hardware + memory pressure + unaligned I/O; trace-certain",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable: no 3ware hardware on guest",
 "fix_evidence": "fix in finding markdown"
}