DF-0189
TOCTOU race in /dev/klog single-open enforcement
Summary
logopen(:98-100) check-then-set on log_open with no atomic/lock. Two root processes concurrent open both pass. Double callout register, double SIGIO, reader cursor races. 0600 root:wheel device limits to root.