{
 "verdict": "reproduced",
 "impact": "panic",
 "reproduce": {
  "build": "cc -O1 -o /tmp/race5016 /tmp/race5016.c (in guest)",
  "run": "/tmp/race5016 scroll & /tmp/race5016 realloc &   (both uid 65534)",
  "expected": "kernel destabilization within minutes; wild-write class fault (sc_vtb_bcopy) observed once during the unpriv churn campaign; NOTE: the lwkt_reltokref assertion is a separate generic ioctl-path issue (see notes)"
 },
 "kernel_refs": [
  "sys/dev/misc/syscons/sctermvar.h:425-450",
  "sys/dev/misc/syscons/syscons.h:547-548",
  "sys/dev/misc/syscons/syscons.c:970-1006",
  "sys/dev/misc/syscons/syscons.c:1885-1923",
  "sys/dev/misc/syscons/schistory.c:93-159",
  "sys/dev/misc/syscons/scvidctl.c:163"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "build.sh",
  "env.txt",
  "fix.diff",
  "generic-ioctl-token-assert.txt",
  "manifest.json",
  "offmod2.c",
  "panic-lwkt-token-count-race.log",
  "race5016.c",
  "run.log",
  "run.sh",
  "verdict.json"
 ]
}