DF-5058 / manifest.json
{ "finding_id": "DF-5058", "title": "Bios submitted to a never-completing mlx controller park on mlx_bioq forever — unkillable D-state issuers and unbounded bioq growth (DF-5048/DF-5026 family, mlx instance)", "verdict": "untested", "impact": "none", "confidence": "certain", "reproduce": { "build": "n/a — hardware-gated (no Mylex DAC960 PCI function on the guest)", "run": "vm.sh run_root 'pciconf -l | grep -i 1069; ls /dev/mlxd*' -> both empty (driver compiled into X86_64_GENERIC:134 but never attaches)", "expected": "On hardware: saturate /dev/mlxd0 with I/O, then fault the controller so accepted commands never complete; once all command slots are BUSY, mlx_getslot returns EBUSY (mlx.c:1739-1742) and every further bio parks on mlx_bioq with no timeout anywhere (mc_timeout set at mlx.c:2086 is explicitly unused) -> biowait sleepers unkillable, bioq unbounded" }, "kernel_refs": [ "sys/dev/raid/mlx/mlx_disk.c:156-190", "sys/dev/raid/mlx/mlx.c:683-693", "sys/dev/raid/mlx/mlx.c:1713-1805", "sys/dev/raid/mlx/mlx.c:2072-2112", "sys/dev/raid/mlx/mlx.c:2122-2167", "sys/dev/raid/mlx/mlx.c:2173-2223", "sys/dev/raid/mlx/mlx.c:977-1044" ], "artifacts": [ "README.md", "VERDICT.md", "env.txt", "fix.diff", "manifest.json", "verdict.json" ] } |