# repo22 G2 Full Manual Regression Report

Started: 2026-08-09 06:07 UTC

Completed: 2026-08-09 07:10 UTC

Baseline: `cd0e985b5ac54a4b7acb7042422329ad1729fb3e`

Branch: `manual-g2-20260809T060709Z`

Guest: FreeBSD 15.0-RELEASE-p8 amd64, QEMU TCG, isolated port 9223

Overlay: `/work/build/repo22-manual-g2-20260809T060709Z-freebsd15-overlay.qcow2`

## Scope and Result

The exact assigned set was executed manually from the numbered Markdown
procedures. No CI, runner, result wrapper, or unassigned TC was used.

| Test | Result | Primary evidence |
|---|---|---|
| TC002 | PASS | Real CRC32C ranges; valid mount; bad covered byte `ERR#97` |
| TC008 | PASS | Bad magic `ERR#22`; 1023-byte provider `ERR#6`; empty md `EINVAL` |
| TC010 | PASS | Qualified 16 TiB sparse provider; exact 64-bit `df` total |
| TC015 | PASS | Bad block size/root/feature returned 22/97/45 |
| TC016 | PASS | Checksum-field-only mutation returned `ERR#97` |
| TC017 | PASS | Raw union fields; short `ERR#6`; qualified sparse mount |
| TC018 | PASS | Exact read at physical offset 17592191561728 |
| TC112 | PASS | Bad magic field returned `ERR#22` before root load |
| TC113 | PASS | Resolved inode `openat` returned `ERR#45` |
| TC114 | PASS | OOB FLAT_PLAIN `read` returned `ERR#97` |
| TC115 | PASS | Future algorithm bit returned `ERR#45` |
| TC116 | PASS | FBT decompressor entry count 1; `read` returned `ERR#5` |
| TC119 | PASS | FLAT_PLAIN changed byte/hash returned without kernel error |

Count: 13 assigned, 13 PASS, 0 KERNEL-FAIL, 0 SHELVED, 0 ENV,
0 duplicate, 0 omitted, 0 extra.

## Build and Guest

Both configurations were built natively in the isolated guest with kernel
`-Werror`, `FREEBSD_SRC=/tmp/repo22-freebsd15-src`, and FreeBSD source
`15.0-RELEASE-p9`. The running guest was `15.0-RELEASE-p8`.

| Configuration | KLD SHA256 | Result |
|---|---|---|
| `WITH_ZSTDIO=0` | `482e9c072c949f0459c422aa1efd9b35a2d99cf90b25bb01e59e00b440b6d0fe` | PASS |
| `WITH_ZSTDIO=1` | `8349c97c7ced253fff32a9e706f29313f309cb63a270e4e39a4501426f2b95c6` | PASS |

The ZSTDIO KLD was loaded as ID 5 and was the only repo22 test KLD. It had the
expected FreeBSD `ZSTD_*` references and no unresolved `bcmp`. The disabled KLD
had neither `ZSTD_*` nor `bcmp` unresolved symbols.

## Fixture Qualification

`tests/prepare_error_fixtures.sh` ran twice in independent empty host
directories with erofs-utils 1.8.6. Both `SHA256SUMS` files were identical and
self-verified. Every field mutation records its exact field/path and old/new
value. Same-size corruption variants preserve provider length; short and empty
providers record their intentionally different lengths.

The helper independently proved the 4096-byte-block checksum forms:

```text
canonical: field 1028 cleared, CRC32C [1024,4096), initial 0xffffffff
kernel:    CRC32C [1032,4096), seed 0x5045b54a
valid control: stored=canonical=kernel=0xf7429681
```

Raw transcripts, build logs, KLDs, guest logs, fixture trees, and the overlay
remain untracked under `/work/build/repo22-manual-g2-20260809T060709Z*`.

## TC002

Result: **PASS**.

Commands: helper `inspect`; `sha256`; dynamic `mdconfig`; valid `mount`/`cmp`;
direct negative `mount`; independent `truss`.

Hashes: valid `eb97860671931c76a171d13caa70ddc2c9731c6cdef1e99b9a3deb580baf70ae`;
bad CRC `3f684e8cb03e3cb20a1920dccf23d9b7b19bc09d5745be04608e195c541ebf73`.
Both were 7622656 bytes. The corruption changed byte 1088 without recomputing
CRC; calculated checksum became `0x202160ab` while stored remained `0xf7429681`.
Valid data matched; bad direct mount rc was 1 and `nmount` returned errno 97.
Cleanup: mount absent and exact md detached.

## TC008

Result: **PASS**.

Commands: `wc -c`, `sha256`, dynamic `mdconfig`, direct `mount`, and `truss`
for each attachable provider.

Hashes: bad magic `d1bc3aec03c58dae1b74b54d895c0a72e5b3088f05907ab2f6a0cb8dc38a615f`;
1023-byte provider `5724796860baa23469b3118eff2567c96a0b64b7dadaf99eafb7ba3c65b9aa56`;
empty provider `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`.
Bad magic returned errno 22. The 1023-byte md attached and mount returned errno
6. The zero-byte provider was rejected by `mdconfig` with `EINVAL`. Cleanup:
zero mounts and md units after all three subcases.

## TC010

Result: **PASS**, not SHELVED.

Commands: copy qualified prefix, `truncate -s 17592193667072`, `stat`, dynamic
`mdconfig`, `diskinfo`, `mount`, `df -kT`, `df -iT`, and `cmp`.

Prefix hash: `d3ffadc6fc9e73f85a8a5973b4ac5ee2a2da57b4e8baeccd259fa4325a2146cf`.
Fields were `blocks_hi=1`, `blocks_lo=1861`, `rootnid_8b=36`, and
`total_blocks=4294969157`. The sparse file allocated 15232 UFS blocks while
GEOM reported all 17592193667072 bytes. `df -k` total and Used were exactly
17179876628; Avail was zero. Cleanup: unmounted, md detached, sparse provider
removed. The former environmental issue is now RESOLVED.

## TC015

Result: **PASS**.

Commands: evidence/hash/length checks; three dynamic md attachments; direct
mount status followed by independent `truss` errno capture.

Hashes: bad block size `b5c52c44ace6f693e39161102acde157efec2fce34eb4fef198681dfc7942b58`;
bad root `9cdd61eb99b2e7f45d2505b3b95d6427f8f636e117b5ffabed064a3f83997d55`;
unknown feature `95d19a490c38657a8c579a10f1f12088ab43c1819aa9b37ae86b841bb26a592a`.
All were 7622656 bytes with recomputed valid CRC. Direct mount rc was 1 for
each; `nmount` returned 22, 97, and 45 respectively. Cleanup: zero mounts/md.

## TC016

Result: **PASS**.

Commands: field evidence, `sha256`, `wc -c`, direct mount, and `truss`.

Hash: `04249f6b7d9b7322c171f1727408130d23cb0b83709aad7a4b77b39358a8dfe6`.
The 7622656-byte image changed only checksum `0xf7429681 -> 0xf7429680`.
Direct mount rc was 1 and `nmount` returned errno 97. Cleanup: no mount/md.

## TC017

Result: **PASS** with both negative guard and positive dynamic coverage.

Commands: raw `od` at offsets 1038/1060/1136; small-prefix mount; sparse
provider creation; `diskinfo`; positive mount; `cmp`; `df -kT`.

Hash: `d3ffadc6fc9e73f85a8a5973b4ac5ee2a2da57b4e8baeccd259fa4325a2146cf`.
Raw values were high 1, low 1861, root 36. The short prefix returned errno 6.
The qualified provider mounted and reported exactly 17179876628 one-KiB
blocks. Cleanup: unmounted, detached, sparse provider removed.

## TC018

Result: **PASS** with real I/O above 16 TiB.

Commands: sparse provider creation; high-offset `dd`; two raw `read_probe`
calls; low-decoy and high-source `cmp`/hash; dynamic md mount and mounted hash.

Prefix hash: `cfd86ed1e39528d958e32819282c7fd87191f80a25d9575078dad473f40563a8`.
The inode encoded `startblk_hi=1`, low 1347, combined block 4294968643, and
physical offset 17592191561728. The original low payload at 5517312 was zeroed:
its hash was `6a4875ddaceaa91fb3369f0f6d962f77442daf1b1d97733457d12bcabdf79441`.
Raw high and mounted hashes both matched source
`25eb31e024bc60745d68a5f7318753951804c7858b576cb698a4260af4a334a3`.
Cleanup: unmounted, detached, sparse provider and probe outputs removed.

## TC112

Result: **PASS**.

Commands: raw magic `od`, hash/length, direct mount, and `truss`.

Hash: `d1bc3aec03c58dae1b74b54d895c0a72e5b3088f05907ab2f6a0cb8dc38a615f`.
Magic was `0x21444142`; provider length remained 7622656. The canonical CRC was
invalid as required after changing magic, while the unchanged production
suffix checksum still matched `0xf7429681`. Direct rc was 1 and `nmount`
returned errno 22. Cleanup: no mount/md.

## TC113

Result: **PASS**.

Commands: structured path inspection; mount/control `cmp`; direct and trussed
`read_probe expect-error ... 45`; second control `cmp`.

Hash: `28d972c4065927326607fcd51dabff81cc88a28e2343f6056e55d04418172814`.
Resolved NID 52 at inode offset 1664 changed format `0x0001 -> 0x8001` with
valid CRC and equal provider length. `openat` returned errno 45; unaffected data
remained exact. Cleanup: clean unmount and md detach.

## TC114

Result: **PASS**.

Commands: path inspection; mount/control `cmp`; direct and trussed
`read_probe expect-error ... 97`; second control `cmp`.

Hash: `2afcb9dde4c8eaf30bb2541d00be36f726f5cf151d887e0d999803b3993285ed`.
NID 54 field offset 1744 changed start block `1349 -> 1861`, equal to declared
blocks, with valid CRC and equal media size. Target `read` returned errno 97;
control remained exact. Cleanup: clean unmount and md detach.

## TC115

Result: **PASS**.

Commands: raw field `od`, hash/length, direct mount, and `truss`.

Hash: `a8d7d9cf0abcf34a5cd2366059c0294e08fdd20d02ed3b5b21005ddf78c69029`.
`available_compr_algs` at byte 1106 changed `0x0000 -> 0x8000`; CRC was
recomputed and media remained 716800 bytes. Direct rc was 1 and `nmount`
returned errno 45. Cleanup: no mount/md.

## TC116

Result: **PASS** with direct decompressor-path proof.

Commands: parsed `dump.erofs -e` evidence; failed userspace extraction record;
mount/control `cmp`; FBT enumeration and count; direct/trussed `read_probe`.

Hash: `f442785ea7cdbdc3f64b2ff89ea04942460cbdc5bea5615cbed237029edda8d8`.
The equal-length 716800-byte image changed 64 bytes at 4128, wholly inside the
parsed first physical extent `[4096,69632)`. Mount succeeded, excluding the
media-size precheck. `fbt:erofs-zstdio:z_erofs_decompress:entry` counted one
call for the target command, and `read` returned errno 5. Control remained
exact. Cleanup: unmounted/detached; `dtraceall` and dependencies unloaded.

## TC119

Result: **PASS** with the revised real integrity semantics.

Commands: path/field evidence; image/source hashes; mount; complete mounted
hash; two one-byte `read_probe` calls; byte compare; control `cmp`.

Hash: `74b54f998481f9e55b30f2393ee780e3b46144157a54b4dc0fc0c044c160bb5a`.
The equal-length image flipped `/plain.bin` file offset 257 at provider byte
5525761 from `0x00` to `0x80`; the valid superblock CRC remained unchanged.
Source hash was `5647f05ec18958947d32874eeb788fa396a05d0bab7c1b71f112ceb7e9b31eee`;
mounted hash was `e98bb2acaecb24ab86112478bc8cc1e3668c127b449fe2e664dc4804f9477d81`.
Reads succeeded, the target byte differed, and control matched. Cleanup: clean
unmount and md detach.

## Harness Notes

Four incomplete attempts were discarded and are not PASS evidence:

1. TC002 repeated host Python inspection in a guest without Python and exited
   before md attachment.
2. TC002 initially trusted `truss` wrapper status; the qualified run separated
   direct mount rc from syscall tracing because FreeBSD `truss -o` returned 0
   around a failing mount.
3. TC008 had a stray patch marker after its second subcase; trap cleanup ran and
   the complete three-subcase command was repeated.
4. TC010 initially asserted the `df` Used column was free blocks; the qualified
   run used the correct `f_bfree=0` interpretation and repeated all steps.

## Final Cleanup

Per-TC cleanup ended with zero EROFS mounts and zero md providers. Global dmesg
changed from 102 to 104 lines; both new lines were the expected
`md0: truncating fractional last sector by 511 bytes` from TC008. New panic,
fatal trap, page fault, general-protection fault, and double-fault count was
zero. The exact test KLD unloaded successfully, leaving zero EROFS modules.
The guest shut down normally and QEMU PID 285696 exited after 12 seconds. Port
9223 no longer has a VM process.

## Issues

No kernel issue was found and no TC remains SHELVED. The former TC010 provider
issue is retained as a resolved record in
`issues/TC010-48bit-statfs-large-provider.md`.