{
  "finding_id": "DF-5582",
  "title": "smbacpi: detach does not quiesce in-flight GSBUS address-space handler dispatches (freed handler-object/ContextMutex/softc under the running handler)",
  "verdict": "reproduced",
  "impact": "panic",
  "confidence": "certain",
  "reproduce": {
    "build": "stage pack to guest /root/df5582; sh build.sh (iasl SSDT, rig kld, trigger)",
    "run": "sh run.sh race",
    "expected": "stock: parked_at_detach=1 then panic (spin_lock_ex AcpiOsSignalSemaphore indefinite wait, or chunk_mark_free slab assertion); fixed kernel: parked_at_detach=0, STILL ALIVE"
  },
  "kernel_refs": [
    "sys/bus/smbus/smbacpi/smbacpi.c:268-276",
    "sys/contrib/dev/acpica/source/components/events/evregion.c:399-447",
    "sys/contrib/dev/acpica/source/components/events/evxfregn.c:290-408"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "verdict.json", "manifest.json",
    "df5582.dsl", "df5582_rig.c", "Makefile.rig", "trigger.c",
    "build.sh", "run.sh",
    "build.log", "run.control.log", "run.race.stock.log", "run.race.fixed.log",
    "panic.txt", "panic.spin.txt",
    "fix.diff", "env.txt"
  ]
}