Skip to content

DATA's filesystem commits atomically, a directory rename moves whole or not at all, and a full volume still shrinks - #816

Merged
Japabu merged 9 commits into
mainfrom
wt/toyos-dirrename
Oct 10, 2026
Merged

Japabu merged 9 commits into
mainfrom
wt/toyos-dirrename

Conversation

@Japabu

@Japabu Japabu commented Oct 9, 2026 •

Copy link
Copy Markdown
Collaborator

DATA's filesystem commits atomically: every change is one operation that never writes over a node the last commit reaches, a sync is the commit, and a directory rename moves whole or not at all. A full volume still shrinks.

Closes issues/a-directory-rename-on-data-is-not-atomic.md

#808 filed that issue on main and cited it in stage 4 of issues/a-package-is-a-directory-under-apps-and-the-installer-is-a-program.md. The merge of main at 9b691dd (b693474) deletes the file and the citation: stage 4 now ends "and the commit by rename." rg -n 'a-directory-rename-on-data-is-not-atomic' . --hidden -g '!target' -g '!.git' at the merge head prints nothing and exits 1. No other hunk conflicted.

What the defect was, measured first

The issue named fileserver's per-entry rename. That was half of it. A host test (a_directory_rename_is_whole_under_one_name_wherever_the_server_is_killed, below) keeps the first k block writes of a directory rename and its sync, for every k. Run against main's code, 39 of 44 stops tore the volume: 2 left the directory half under each name, and 37 left DATA unmountable. The cause was BadMagic on a root the superblock named that the disk did not hold yet: the cache flushes lowest block first, so block 0's superblock went out before the nodes it names. The format had no commit a kill could not tear, so the fix is in both owners.

What changed, per decision

bcachefs (the interim format): a sync is a shadow-paging commit, and no byte of the layout changes.

  • No node the last commit's tree reaches is written over. btree::own writes a node in place only if the operation in progress took its block. Otherwise it moves the node to a new block and gives the old one up. Insert and delete (which now returns the root) both go through it.
  • Every read-write call is one operation (Mounted::atomic). If it is refused anywhere, the root goes back and every block it took is freed. If it succeeds, what it gave up is given up. split_node's and write_data's own give-backs are deleted, because the rollback covers them.
  • Mounted::rename_all renames a list of names as one operation.
  • The commit: flush everything the new root reaches, write both superblock copies, flush, then free what only the older tree reached. A superblock's bytes lie in its first 512-byte sector. A device that writes a sector whole therefore lands each copy as old or new, and either one names a whole tree. Round 2 deleted the round-1 flush between the two copies (the review's mutation): under the crash model the review asked for, it changed no outcome, and it could not (measured below). Superblock::write is main's again.
  • Frees wait for the commit unless no commit has named the block since it was taken. From the first superblock write on, everything taken counts as named (seal). A commit that is refused after its superblock reached the device therefore keeps both trees until one lands.
  • NODE_RESERVE (16), round 2. The reserve is held against every allocation (Reserve::Keep), a file's data grown outside any operation included (alloc_up_to clamps a run to what the volume spares; tested in round 3), except those of an operation that leaves the tree no larger (Reserve::Draw): a delete, and an update_metadata whose entry grows no longer, which splits no node. A commit gives back whatever such an operation drew. The reserve is therefore whole after every sync, and the round-1 wedge cannot be reached by changes: there, names with no data took the reserve and no delete ever succeeded again. Round 1 held the reserve only against a file's data.
  • A read-write mount counts the bitmap's free bits (BitmapAllocator::count_free, called only by Mounted::<_, ReadWrite>::open). Added in round 2; narrowed to read-write in round 3. It no longer trusts the superblock's count, which after a stop between commits names blocks the bitmap holds taken. This was the review's second road to the wedge. open is now one function per mode, and the read-only one takes the superblock's count, as on main. So the kernel's ROOT mount (kernel/src/rootfs.rs), which never reads the count, reads no bitmap block and gains no refusal.
  • BitmapAllocator::give keeps giving up a run past a bit the device would not clear, round 2. Before, it stopped there and left the rest of the run neither freed nor pending.
  • Formatted is a Mounted with shadowing off, and its own create, symlink and sync are deleted. mkfs bytes are unchanged (the differential is below).

fileserver: a directory rename persists the open files beneath it, hands every entry beneath it and the directory's own marker to rename_all, and moves its name index only once that answers.

The contract, narrowed in round 2 (bcachefs/src/fs.rs's read-write header, data.rs's module header): a kill leaves every name, and each entry's length and extents, as one sync or the other. A file's bytes are not held that way, because fileserver writes over a page the file already holds in place.

Kept, filed:

  • issues/a-write-over-a-files-committed-page-is-not-shadowed.md (new). The in-place page overwrite. Exit: such a write lands in a block no committed entry names, and a stop test over it finds each file's bytes as one sync or the other.
  • issues/a-crash-leaks-the-blocks-of-its-last-commit.md. A stop leaves blocks marked used that no tree names. Round 3 retook the measurement with the run crash.rs makes at this head (the rename, 40 one-block files, the commit, stopped before the first superblock write): 284 used where 190 were. Round 2's number came from an older run that wrote one 9000-byte file. Round 2 adds the frees give, succeed and fail drop when the device refuses a bit, and the exit covers refused writes too.
  • issues/a-full-data-volume-frees-space-only-at-a-commit.md. Round 2 adds the reserve's rule and its limits: at most 16 committed nodes copied by the deletes and shrinks between two commits on a full volume, and a tree deeper than 16 cannot delete there at all. Nothing reads DATA's depth, so 16 is a bound picked, not one measured.
  • issues/a-btree-split-leaves-nodes-holding-a-few-entries.md (new, found on the way, not fixed). On main's crate, 300 names with no data, synced one by one, took 97 blocks where a packed tree needs five. pack splits a full leaf into a full node plus a remainder.

Tests

  • bcachefs/tests/crash.rs is the crash-point model on the crate, with no cache between it and the device. A directory of 62 names is renamed, 40 one-block files are written after it, then a commit. Every block write is a stop. Each stop is tried with the open flush epoch's earlier writes landed and with none of them. The stop's own write lands whole, or, where it hits a block the layout writes in place (a superblock copy or the bitmap), torn at each 512-byte boundary, first k sectors new or last k, skipping tears that leave the block equal to the old or new bytes. Every state is checked twice: as the device holds it, and with block 0 lost, mounting from the backup (round 2). 589 writes and 2356 states: each must mount, keep the 80 names beside the directory byte for byte, and hold the directory whole under exactly one name. A second test refuses each write in turn with the filesystem alive. The answer must equal what it serves, the device must be whole past the refused sync and past 40 changes after it, and the next sync must make the answer durable.
  • bcachefs/tests/integration.rs, round 2:
    • a_volume_full_of_empty_names_still_deletes_and_frees is the review's test, taken further. It fills a 128-block volume with names enough to span leaves, then one-block files until refused, then empty names until a create right after a sync is refused. It then shrinks every file to nothing, deletes every file with no sync between, syncs, and asserts a one-block create is accepted.
    • a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds stops a volume after a 20-block create it never committed, remounts the image, then does the same fill, shrinks and deletes.
    • a_file_grown_past_what_the_volume_spares_leaves_the_reserve (round 3, the review's BLOCKER) is mkfs's one-block f00 on a 128-block volume. Every free block lies in one run straight after it, so a run that grows f00 is contiguous and the entry recording it does not grow. The test grows f00 with resolve_or_alloc_block to page 128, past every block of the volume, and asserts NoSpace. It asserts the extent list is still one extent (the test's premise), records the run with update_metadata, and syncs. It then asserts the superblock's free count is at least NODE_RESERVE and runs shrinks_and_deletes_and_takes_again. Under the review's patch (m12) the grow takes the reserve too, and the update is refused NoSpace { requested: 1, available: 0 }: the round-1 wedge, reached through data. The defect the review described is real in the sense that only the clamp stops it. The clamp was already in the code, so no source changes for it.
    • The review's literal form (delete one one-block file, sync, write one block) cannot hold under any copy-on-write reserve. A create costs its data plus a copy of its path before the sync, while one deleted one-block file gives back one block. The tests assert what the fix promises instead: on a full volume every shrink and delete is accepted, and what they free is taken again after the next sync.
  • userland/fileserver/src/data.rs runs the same through DataVolume and its cache. It kills after every write of a rename plus sync. It refuses every write, checking the disk right after the refused sync and again after the retry. It also covers the issue's own measurement: EntryTooLarge on a 300-byte target now moves nothing.
  • Fixtures that make one-block holes take blocks from the allocator and assert their premise on the bitmap. ONE_BLOCK_FILES_64 is 42 (60 − 16 − 2), because a create's leaf copies are now held to the reserve too. a_renamed_file_keeps_every_extent_it_had fragments a 128-block volume, since 64 left its rename no blocks under the reserve.
  • No new guest test: the host tests reach DataVolume::rename, which is fileserver's whole part. main.rs only forwards the call, and the disks' flush paths are unchanged.

Gates at b693474 (the merge of main at 9b691dd)

Run in one script, each cmd > log 2>&1; echo EXIT=$?. Logs, with home-directory paths scrubbed, start at this comment and run through the ten after it.

gate exit
cargo test -p bcachefs --no-fail-fast 0 (lib 72, crash 2, integration 57, upstream_fixture 2, doc 2)
cargo test -p fileserver --lib 0 (39 passed: this branch's 36 and #807's 3 in rights.rs)
cargo run -- --ci host 0
cargo run -- --build-only 0
cargo test (whole guest suite) 0: 43 passed, 43 total, 104.7 s. uptime load averages 43.62 44.08 29.37 at the start and 43.21 45.28 32.20 at the end

At b028cc8, the round-3 head on main at 8e3a813, the same gates exited 0: guest suite 41 of 41, fileserver 36.

What the merge changed in the crates. git diff b028cc83f b693474e2 -- bcachefs userland/fileserver touches only userland/fileserver/src/{lib.rs,main.rs,rights.rs} (+86 −10), and it is byte-identical to git diff 8e3a81374 origin/main -- bcachefs userland/fileserver (cmp exit 0). Those bytes are #807's (bb09147, 1c8490e): an installed app's view of /apps and /home. No bcachefs byte and no byte of data.rs changed, so this branch's part of what the T14 read at b028cc8 is unchanged.

Checks of high-risk code (filesystem crash consistency)

Every patch was re-run in round 3 at b028cc8, in one script (mutations.log). Each was checked with git apply --check, applied, built, run with cargo test -p bcachefs --no-fail-fast and then cargo test -p fileserver --lib, and reverted. The tree's status was empty after. Every exit below is that run's. m1 to m8, m10 and m11 applied unchanged from round 2. m9 is rewritten for the moved count. m12 is new. The negative control is regenerated against the merge base 8e3a813. Patches, runner and output are in the round-3 evidence comment. The "red" column's counts are round 2's readings; round 3 re-measured the exits. They were not re-run at b693474, whose merge changed no byte of bcachefs or data.rs.

patch bcachefs fileserver red
negative control: bcachefs/src at origin/main, fileserver's rename at main's, this branch's tests 101 101 crash.rs does not compile (rename_all is new); fileserver's three a_directory_rename_* tests are red (39 of 43 refusals tear)
m1 every node written in place 101 101 672 of 1236 states tear; 153 of 156 and 39 of 43 refusals tear; both full-volume tests are red
m2 no flush before the superblock 101 101 2 of 2356 states; 41 of 43 refusals
m3 a committed block free at once 101 0 779 of 2356 states; 32 of 247 refusals
m4 a refused operation keeps its root 101 101 210 of 247 refusals; …_the_format_refuses_part_way_moves_nothing
m5 no seal 101 0 32 of 247 refusals; both full-volume tests
m6 fileserver renames entry by entry 0 101 …_the_format_refuses_part_way_moves_nothing
m7 the root's number written past the first sector (round 2) 101 0 in crash.rs, 4 of 2372 states, only torn backup writes with block 0 lost
m8 the backup written before the flush of the nodes it names (round 2) 101 0 1 of 2360 states, only with block 0 lost
m9 a mount takes the superblock's free count (round 2) 101 0 a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds
m10 a delete keeps the reserve (round 2) 101 0 both full-volume tests
m11 a shrink keeps the reserve (round 2) 101 0 both full-volume tests
m12 alloc_up_to does not clamp a run to what the volume spares (round 3, the review's) 101 0 a_file_grown_past_what_the_volume_spares_leaves_the_reserve: the update is refused NoSpace, available 0

The review's flush mutation was measured on the round-1 sync with this round's crash model, before the flush between the copies was deleted. The mutation is one flush after both superblock copies instead of one between them. crash exited 0 and fileserver exited 0 (mutations-r2a.log, in the comment). It stays green because the model cannot fail on it: a superblock's bytes past its first 122 are zero in every copy, so a sector-aligned tear of one leaves the old copy or the new one. In the same run, m7 and m8 went red only through the new shapes, so the shapes have teeth. The flush between the copies was then deleted rather than kept untested.

The full-volume tests on the round-1 source (bcachefs/src at 3adcf42, this round's tests) exit 101. a_volume_full_of_empty_names_still_deletes_and_frees fails on the shrink of f00 (NoSpace, available 0). a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds fails on the same shrink (NoSpace, available 21: the superblock's count against an empty bitmap). Both are green at the head.

Independent oracle for the commit's premise, and for deleting the flush between the copies. The commit rests on a device writing a superblock's first 512-byte sector whole. The NVMe base specification guarantees that. Identify Controller's AWUPF (Atomic Write Unit Power Fail) is a 0's based count of logical blocks the controller writes atomically across a power failure, so every controller guarantees at least one LBA. An LBA is at least 512 bytes. DATA's only device is NVMe: diskserver drives one NVMe controller, under QEMU and on the T14. So a superblock copy lands old or new, and it does so without a flush between the two copies. The crash model's sector tears are that guarantee taken as the failure boundary. Neither the crash model nor AWUPF bounds a device that breaks the specification.

Independent oracle for the rest. The format has no specification and no second implementation (issues/bcachefs-crate-is-not-bcachefs.md), so the oracle for crash consistency is the crash-point model itself: every write point, out-of-order landing inside a flush epoch, sector tears of in-place blocks, and a mount from the backup, each judged by a fresh mount. For mkfs there is a differential (comment). One scratch binary was built against origin/main's crate (198a9d3) and against this branch's (0c9c05c, whose crate 3b43b83 carries unchanged), over kernel/src (231 files, 24 symlinks) and main's bcachefs/ (21 files, 3 symlinks) on 65536 blocks. sha256 3383376928e3…cea80039 both, cmp exit 0; b4692a62ea0a…592b480cad both, cmp exit 0.

T14

The orchestrator read boot:testcases at 3b43b83: judge EXIT=0, 249 passed, 0 failed, 2 boots. Round 3 changes which mounts read the bitmap, and every boot mounts, so it owed a new reading. The orchestrator read it at b028cc8 (comment): judge EXIT=0, 249 passed, 0 failed, 2 boots, each image's sha256 checked against request.txt. The merge of main changes no byte of bcachefs or data.rs (above). It brings #807's fileserver change, which main's own gates covered, so no new reading is staged.

Unsure

  • NODE_RESERVE = 16 is picked, not measured against DATA's depth (recorded in the full-volume issue).
  • Each operation copies the path it touches unless it took the block, which means extra bitmap and node writes on each close or create on a read-write DATA volume. The T14's test images carry no DATA partition (fileserver: this machine has no DATA partition; /apps, /config, /home and /state are in memory), so the T14 readings ran only boot and ROOT's read-only mount; the guest suite under QEMU is the only device-level run of DATA's read-write path. No timing claim is made.
  • The commit relies on the device honouring a flush and writing a 512-byte sector whole. A device that garbles a sector in flight is outside the model. On such a device the in-place bitmap could be garbled as well.
  • A read-write mount reads every bitmap block, one per 128 MiB of volume, to count free blocks. Nothing measured its cost. The read-only ROOT mount reads none.

Net lines (git diff --shortstat origin/main...HEAD, at b693474 against 9b691dd): 12 files, +1304 −396. By path: bcachefs/src +495 −279 (a few of them btree.rs tests), bcachefs/tests +412 −45, userland/fileserver/src/data.rs +280 −38 (mostly its tests), issues/ +117 −34 (the 34 are the closed issue and its citation).

🤖 Generated with Claude Code

https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C

Japabu and others added 2 commits October 9, 2026 18:37
Verbatim from wt/toyos-pkgrepo (d760336), so the branch that fixes it
closes it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
… commit a kill cannot tear

The issue named fileserver's per-entry rename, and that was half of it. The
other half was the format's: its btree was updated in place and a sync wrote
the superblock (block 0, so first in the cache's lowest-first flush) in the
same flush as the nodes it names. A host test that stops the disk after each
block write of a directory rename and its sync, run on main, tore 39 of 44
stops: 2 left the directory in two halves, 37 left a volume that would not
mount at all (BadMagic on a root the superblock named and the disk did not
yet hold). So the fix is at both owners.

bcachefs (the interim format) now commits by shadow paging, with no change to
a byte of its layout:

- No node the last commit's tree reaches is written over. A node is written
  in place only when the operation in progress took its block; otherwise
  `btree::own` moves it to a new block and gives the old one up, up to a new
  root. Insert and delete both go through it; delete now returns the root.
- Every read-write call is one operation (`Mounted::atomic`): refused
  anywhere, the root goes back and every block it took is freed; succeeded,
  what it gave up is given up. `split_node`'s and `write_data`'s own
  give-backs go, the operation's rollback covers both.
- `Mounted::rename_all` renames a list of names as one operation.
- A sync flushes everything first, then writes the primary superblock and
  flushes, then the backup and flushes: the primary landing is the commit,
  and a torn primary fails its CRC for the backup, still the last commit.
- A block given up is free at once only if no commit has named it since it
  was taken; otherwise it waits for the next commit. From the first
  superblock write on, everything taken counts as named (`seal`), so a
  commit refused after its superblock reached the device keeps both trees
  until one lands.
- A file's data leaves `NODE_RESERVE` (16) blocks free, so a volume its
  files filled can still copy the nodes a delete changes.
- `Formatted` is a `Mounted` with shadowing off, its own create, symlink
  and sync paths gone; mkfs writes the same bytes as before: one image of
  kernel/src (232 files, 24 symlinks) built with main's crate and with
  this one is byte-identical.

fileserver's directory rename persists the open files beneath it, then
hands every entry beneath and the directory's own to `rename_all`, and
moves its index only once that answers.

What this keeps, filed: a crash leaks the blocks taken since the last commit
(issues/a-crash-leaks-the-blocks-of-its-last-commit.md), and a full volume
frees what an unlink gave up only at the next commit
(issues/a-full-data-volume-frees-space-only-at-a-commit.md).

Closes issues/a-directory-rename-on-data-is-not-atomic.md: its exit, a test
that refuses every write of the rename in turn and kills the server at
every one, is fileserver's two new tests and bcachefs/tests/crash.rs.

The test fixtures that made a volume of one-block holes by filling it with
files now take blocks from the allocator directly and assert their premise
on the bitmap: filled with files, the 16 reserved blocks were one free run
and the premise was silently false.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

Mutation and negative-control patches for PR #816, each applied with git apply at 3adcf42, run, and reverted with git apply -R in the same loop (tree clean after). Exits in the PR body.

negative-control-whole-change-reverted

diff --git b/bcachefs/src/alloc_bitmap.rs a/bcachefs/src/alloc_bitmap.rs
index 844e9b324..c6a5db186 100644
--- b/bcachefs/src/alloc_bitmap.rs
+++ a/bcachefs/src/alloc_bitmap.rs
@@ -1,9 +1,5 @@
-use alloc::collections::BTreeMap;
-use alloc::vec::Vec;
-
 use crate::block_io::{BlockBuf, BlockNum, BlockIO, BlockIOExt, BLOCK_SIZE};
 use crate::fs::FsError;
-use crate::superblock::Superblock;
 
 const BITS_PER_BLOCK: u64 = (BLOCK_SIZE * 8) as u64;
 
@@ -26,162 +22,15 @@ pub struct Run {
 ///
 /// The bitmap is stored on disk starting at `bitmap_start` and spanning
 /// `bitmap_blocks` blocks. Each bit represents one block: 1 = used, 0 = free.
-///
-/// **With `shadow` on, no block the last committed tree reaches is written
-/// over or handed out again before the next commit lands** (`fs::commit`): a
-/// btree node is written in place only when the operation in progress took
-/// its block ([`Self::in_place`]), and a block given up is free at once only
-/// if no commit has named it since it was taken (`fresh`); any other waits in
-/// `pending` for the commit. An operation ([`Self::begin`]) gives up its
-/// blocks only when it succeeds, and refused gives back every one it took.
-/// mkfs runs with `shadow` off: nothing it writes is committed until it ends.
 pub struct BitmapAllocator {
     pub bitmap_start: BlockNum,
     pub bitmap_blocks: u64,
     pub total_blocks: u64,
     pub free_blocks: u64,
     pub next_alloc: u64, // cursor — scan starts here, wraps once
-    pub shadow: bool,
-    /// Taken since the last commit's superblock was handed to the device.
-    fresh: Runs,
-    /// Given up, and reached by a tree a mount may still find.
-    pending: Vec<(u64, u32)>,
-    op: Option<Op>,
-}
-
-/// Blocks a file's data never takes while `shadow` is on, so a volume its
-/// files filled can still copy the nodes a delete changes: a rename in a tree
-/// four levels deep copies four, splits four and adds a root for its insert,
-/// and copies four more for its delete.
-pub const NODE_RESERVE: u64 = 16;
-
-/// The operation in progress: what it took, and what it gives up if it succeeds.
-#[derive(Default)]
-struct Op {
-    taken: Runs,
-    given: Vec<(u64, u32)>,
-}
-
-/// Disjoint runs of blocks, by first block, to one past the last.
-#[derive(Default)]
-struct Runs(BTreeMap<u64, u64>);
-
-impl Runs {
-    fn insert(&mut self, start: u64, len: u64) {
-        self.0.insert(start, start + len);
-    }
-
-    fn contains(&self, block: u64) -> bool {
-        self.0.range(..=block).next_back().is_some_and(|(_, &end)| block < end)
-    }
-
-    /// Take `block` out, answering whether it was in.
-    fn remove(&mut self, block: u64) -> bool {
-        let Some((&start, &end)) = self.0.range(..=block).next_back() else { return false };
-        if block >= end {
-            return false;
-        }
-        self.0.remove(&start);
-        if start < block {
-            self.0.insert(start, block);
-        }
-        if block + 1 < end {
-            self.0.insert(block + 1, end);
-        }
-        true
-    }
 }
 
 impl BitmapAllocator {
-    /// The allocator of a mounted volume, as its superblock left it.
-    pub fn open(sb: &Superblock) -> Self {
-        Self {
-            bitmap_start: sb.bitmap_start,
-            bitmap_blocks: sb.bitmap_blocks,
-            total_blocks: sb.block_count,
-            free_blocks: sb.free_blocks,
-            next_alloc: sb.next_alloc,
-            shadow: true,
-            fresh: Runs::default(),
-            pending: Vec::new(),
-            op: None,
-        }
-    }
-
-    /// Begin one operation on the tree, which [`Self::succeed`] or
-    /// [`Self::fail`] ends.
-    pub fn begin(&mut self) {
-        assert!(self.op.replace(Op::default()).is_none(), "an operation began inside another");
-    }
-
-    /// Whether a node at `block` may be written where it is.
-    pub fn in_place(&self, block: BlockNum) -> bool {
-        !self.shadow || self.op.as_ref().is_some_and(|op| op.taken.contains(block.raw()))
-    }
-
-    /// The operation took effect: what it gave up is given up now. A bit the
-    /// device would not clear is a leaked block, and no reason to call an
-    /// operation that took effect refused.
-    pub fn succeed(&mut self, io: &dyn BlockIO) {
-        let op = self.op.take().expect("an operation in progress");
-        for (start, count) in op.given {
-            let _ = self.give(io, start, count);
-        }
-    }
-
-    /// The operation was refused: every block it took is free again, and what
-    /// it would have given up stays its owner's. A bit the device would not
-    /// clear is a leaked block, and the refusal already in hand is the answer.
-    pub fn fail(&mut self, io: &dyn BlockIO) {
-        let op = self.op.take().expect("an operation in progress");
-        for (start, end) in op.taken.0 {
-            for block in start..end {
-                self.fresh.remove(block);
-                let _ = self.set_free(io, BlockNum::new(block));
-            }
-        }
-    }
-
-    /// A superblock naming the tree as it stands may land from here on, so
-    /// nothing taken so far is free at once when given up.
-    pub fn seal(&mut self) {
-        self.fresh = Runs::default();
-    }
-
-    /// Blocks given up that a commit landing makes free.
-    pub fn pending(&self) -> u64 {
-        self.pending.iter().map(|&(_, count)| count as u64).sum()
-    }
-
-    /// A commit landed: the blocks only an older tree reached are free.
-    pub fn committed(&mut self, io: &dyn BlockIO) -> Result<(), FsError> {
-        while let Some((start, count)) = self.pending.pop() {
-            for i in 0..count {
-                if let Err(e) = self.set_free(io, BlockNum::new(start + i as u64)) {
-                    self.pending.push((start + i as u64, count - i));
-                    return Err(e);
-                }
-            }
-        }
-        Ok(())
-    }
-
-    /// Give up `count` blocks from `start`: free now if no commit has named
-    /// them, and otherwise once the next one lands.
-    fn give(&mut self, io: &dyn BlockIO, start: u64, count: u32) -> Result<(), FsError> {
-        for block in start..start + count as u64 {
-            if !self.shadow || self.fresh.remove(block) {
-                self.set_free(io, BlockNum::new(block))?;
-            } else {
-                match self.pending.last_mut() {
-                    Some((at, n)) if *at + *n as u64 == block => *n += 1,
-                    _ => self.pending.push((block, 1)),
-                }
-            }
-        }
-        Ok(())
-    }
-
     /// Where a block's bit lives, and which bit of that byte it is.
     fn bit_of(&self, block: BlockNum) -> (BlockNum, usize, u8) {
         let byte_idx = block.raw() / 8;
@@ -242,20 +91,13 @@ impl BitmapAllocator {
     }
 
     /// Reserve as much of `wanted` as one contiguous run can cover, scanning
-    /// from block `from`: a file's data, which leaves [`NODE_RESERVE`] free.
+    /// from block `from`.
     ///
     /// The run is never empty and may be shorter than asked for, so every
     /// caller has to loop or has to be wrong.
     pub fn alloc_up_to(&mut self, io: &dyn BlockIO, from: u64, wanted: u32) -> Result<Run, FsError> {
-        let spare = match self.shadow {
-            true => self.free_blocks.saturating_sub(NODE_RESERVE),
-            false => self.free_blocks,
-        };
-        if spare == 0 {
-            return Err(FsError::NoSpace { requested: wanted, available: 0 });
-        }
         // A zero-length run would let a caller's loop spin without progress.
-        let wanted = wanted.max(1).min(u32::try_from(spare).unwrap_or(u32::MAX));
+        let wanted = wanted.max(1);
         let (start, len) = self.longest_free_run(io, from % self.total_blocks, wanted)?;
         self.reserve(io, start, len.min(wanted))
     }
@@ -281,10 +123,6 @@ impl BitmapAllocator {
     fn reserve(&mut self, io: &dyn BlockIO, start: u64, len: u32) -> Result<Run, FsError> {
         let start_block = BlockNum::new(start);
         self.set_range_used(io, start_block, len as u64)?;
-        self.fresh.insert(start, len as u64);
-        if let Some(op) = &mut self.op {
-            op.taken.insert(start, len as u64);
-        }
         self.free_blocks -= len as u64;
         self.next_alloc = start + len as u64;
         if self.next_alloc >= self.total_blocks {
@@ -378,21 +216,17 @@ impl BitmapAllocator {
         Ok((start, best_count))
     }
 
-    /// Give up a contiguous range of blocks: inside an operation, once it
-    /// succeeds.
+    /// Free a contiguous range of blocks.
     pub fn free_range(
         &mut self,
         io: &dyn BlockIO,
         start: BlockNum,
         count: u32,
     ) -> Result<(), FsError> {
-        match &mut self.op {
-            Some(op) => {
-                op.given.push((start.raw(), count));
-                Ok(())
-            }
-            None => self.give(io, start.raw(), count),
+        for i in 0..count as u64 {
+            self.set_free(io, BlockNum::new(start.raw() + i))?;
         }
+        Ok(())
     }
 
     /// Initialize bitmap on disk: zero all bitmap blocks, then mark metadata blocks as used.
@@ -414,10 +248,6 @@ impl BitmapAllocator {
             total_blocks,
             free_blocks: total_blocks - metadata_blocks,
             next_alloc: metadata_blocks,
-            shadow: false,
-            fresh: Runs::default(),
-            pending: Vec::new(),
-            op: None,
         };
 
         // Metadata blocks (superblock, bitmap, journal area), and the backup
diff --git b/bcachefs/src/btree.rs a/bcachefs/src/btree.rs
index bafb13be0..59e6ba3d8 100644
--- b/bcachefs/src/btree.rs
+++ a/bcachefs/src/btree.rs
@@ -365,24 +365,15 @@ fn write_entry(b: &mut [u8; BLOCK_SIZE], offset: usize, key: &Key, value: &[u8])
 /// child's subtree, so the answer is the last child whose key is `<= key`,
 /// defaulting to the first — which covers everything below the second key.
 fn find_child(children: &[Child], key: &Key) -> Option<BlockNum> {
-    children.get(child_index(children, key)).map(|c| c.block)
-}
-
-/// [`find_child`]'s answer as an index into `children`.
-fn child_index(children: &[Child], key: &Key) -> usize {
-    children.iter().take_while(|c| c.key <= *key).count().saturating_sub(1)
-}
-
-/// The block a node the operation in progress changed is written to: its
-/// own where [`BitmapAllocator::in_place`] allows, and otherwise a new one,
-/// the old given up.
-fn own(io: &dyn BlockIO, alloc: &mut BitmapAllocator, block: BlockNum) -> Result<BlockNum, FsError> {
-    if alloc.in_place(block) {
-        return Ok(block);
+    let mut chosen = children.first()?.block;
+    for child in children {
+        if child.key <= *key {
+            chosen = child.block;
+        } else {
+            break;
+        }
     }
-    let moved = alloc.alloc_block(io)?;
-    alloc.free_range(io, block, 1)?;
-    Ok(moved)
+    Some(chosen)
 }
 
 /// Search the B+ tree for an exact key match. Returns the leaf entry's value.
@@ -443,48 +434,27 @@ pub fn search_by_hash(
     }
 }
 
-/// Delete an exact key from the B+ tree: the root after it and the old value,
-/// or `None` with nothing written when no entry has the key.
+/// Delete an exact key from the B+ tree. Returns the old value if found.
 /// Does not merge underflowing nodes — just removes the entry from the leaf.
-pub fn delete(
-    io: &dyn BlockIO,
-    alloc: &mut BitmapAllocator,
-    root: BlockNum,
-    key: &Key,
-) -> Result<Option<(BlockNum, Vec<u8>)>, FsError> {
-    delete_recursive(io, alloc, root, Depth::ROOT, key)
-}
+pub fn delete(io: &dyn BlockIO, root: BlockNum, key: &Key) -> Result<Option<Vec<u8>>, FsError> {
+    let mut block = root;
+    let mut depth = Depth::ROOT;
 
-fn delete_recursive(
-    io: &dyn BlockIO,
-    alloc: &mut BitmapAllocator,
-    block: BlockNum,
-    depth: Depth,
-    key: &Key,
-) -> Result<Option<(BlockNum, Vec<u8>)>, FsError> {
-    match Node::read(io, block)? {
-        Node::Leaf(mut entries) => {
-            let Some(pos) = entries.iter().position(|e| e.key == *key) else {
-                return Ok(None);
-            };
-            let old = entries.remove(pos);
-            let at = own(io, alloc, block)?;
-            Node::Leaf(entries).write(io, at)?;
-            Ok(Some((at, old.value)))
-        }
-        Node::Interior { level, mut children } => {
-            let idx = child_index(&children, key);
-            let child = children.get(idx).ok_or(FsError::CorruptedNode(block))?.block;
-            let Some((moved, old)) = delete_recursive(io, alloc, child, depth.descend(block)?, key)? else {
-                return Ok(None);
-            };
-            if moved == child {
-                return Ok(Some((block, old)));
+    loop {
+        match Node::read(io, block)? {
+            Node::Leaf(mut entries) => {
+                let Some(pos) = entries.iter().position(|e| e.key == *key) else {
+                    return Ok(None);
+                };
+                let old = entries.remove(pos);
+                Node::Leaf(entries).write(io, block)?;
+                return Ok(Some(old.value));
+            }
+            Node::Interior { children, .. } => {
+                let next = find_child(&children, key).ok_or(FsError::CorruptedNode(block))?;
+                depth = depth.descend(block)?;
+                block = next;
             }
-            children[idx].block = moved;
-            let at = own(io, alloc, block)?;
-            Node::Interior { level, children }.write(io, at)?;
-            Ok(Some((at, old)))
         }
     }
 }
@@ -529,8 +499,7 @@ fn walk_recursive(
 
 /// Insert a key-value pair into the B+ tree.
 ///
-/// Returns the root block, which changes when the old root was split or
-/// written somewhere new.
+/// Returns the root block, which changes when the old root was split.
 pub fn insert(
     io: &dyn BlockIO,
     alloc: &mut BitmapAllocator,
@@ -539,29 +508,29 @@ pub fn insert(
 ) -> Result<BlockNum, FsError> {
     check_entry_fits(&entry)?;
 
-    let Placed { at, split } = insert_recursive(io, alloc, root, Depth::ROOT, entry)?;
-    if split.is_empty() {
-        return Ok(at);
+    match insert_recursive(io, alloc, root, Depth::ROOT, entry)? {
+        InsertResult::Done => Ok(root),
+        InsertResult::Split(siblings) => {
+            let level = Node::read(io, root)?
+                .level()
+                .checked_add(1)
+                .ok_or(FsError::CorruptedNode(root))?;
+            let old_min_key = min_key(io, root, Depth::ROOT)?;
+            let new_root_block = alloc.alloc_block(io)?;
+
+            let mut children = alloc::vec![Child { key: old_min_key, block: root }];
+            children.extend(siblings);
+            Node::Interior { level, children }.write(io, new_root_block)?;
+
+            Ok(new_root_block)
+        }
     }
-    let level = Node::read(io, at)?
-        .level()
-        .checked_add(1)
-        .ok_or(FsError::CorruptedNode(at))?;
-    let old_min_key = min_key(io, at, Depth::ROOT)?;
-    let new_root_block = alloc.alloc_block(io)?;
-
-    let mut children = alloc::vec![Child { key: old_min_key, block: at }];
-    children.extend(split);
-    Node::Interior { level, children }.write(io, new_root_block)?;
-
-    Ok(new_root_block)
 }
 
-/// Where an insert left a node: its block, and the siblings it split off, in
-/// key order.
-struct Placed {
-    at: BlockNum,
-    split: Vec<Child>,
+enum InsertResult {
+    Done,
+    /// The node split: these follow it, in key order.
+    Split(Vec<Child>),
 }
 
 fn insert_recursive(
@@ -570,7 +539,7 @@ fn insert_recursive(
     block: BlockNum,
     depth: Depth,
     entry: Entry,
-) -> Result<Placed, FsError> {
+) -> Result<InsertResult, FsError> {
     match Node::read(io, block)? {
         Node::Leaf(mut entries) => {
             match entries.binary_search_by(|e| e.key.cmp(&entry.key)) {
@@ -579,24 +548,32 @@ fn insert_recursive(
             }
             write_or_split(io, alloc, block, Node::Leaf(entries))
         }
-        Node::Interior { level, mut children } => {
-            let idx = child_index(&children, &entry.key);
+        Node::Interior { level, children } => {
+            let mut idx = 0;
+            for (i, child) in children.iter().enumerate() {
+                if child.key <= entry.key {
+                    idx = i;
+                } else {
+                    break;
+                }
+            }
             let child_block = children.get(idx).ok_or(FsError::CorruptedNode(block))?.block;
             let deeper = depth.descend(block)?;
 
-            let Placed { at, split } = insert_recursive(io, alloc, child_block, deeper, entry)?;
-            if at == child_block && split.is_empty() {
-                return Ok(Placed { at: block, split });
-            }
-            children[idx].block = at;
-            for sibling in split {
-                let pos = match children.binary_search_by(|c| c.key.cmp(&sibling.key)) {
-                    Ok(i) => i + 1,
-                    Err(i) => i,
-                };
-                children.insert(pos, sibling);
+            match insert_recursive(io, alloc, child_block, deeper, entry)? {
+                InsertResult::Done => Ok(InsertResult::Done),
+                InsertResult::Split(siblings) => {
+                    let mut children = children;
+                    for sibling in siblings {
+                        let pos = match children.binary_search_by(|c| c.key.cmp(&sibling.key)) {
+                            Ok(i) => i + 1,
+                            Err(i) => i,
+                        };
+                        children.insert(pos, sibling);
+                    }
+                    write_or_split(io, alloc, block, Node::Interior { level, children })
+                }
             }
-            write_or_split(io, alloc, block, Node::Interior { level, children })
         }
     }
 }
@@ -606,23 +583,20 @@ fn write_or_split(
     alloc: &mut BitmapAllocator,
     block: BlockNum,
     node: Node,
-) -> Result<Placed, FsError> {
-    let at = own(io, alloc, block)?;
+) -> Result<InsertResult, FsError> {
     if NODE_HEADER_SIZE + node.payload_size() <= BLOCK_SIZE {
-        node.write(io, at)?;
-        return Ok(Placed { at, split: Vec::new() });
+        node.write(io, block)?;
+        return Ok(InsertResult::Done);
     }
-    Ok(Placed { at, split: split_node(io, alloc, at, node)? })
+    split_node(io, alloc, block, node)
 }
 
-/// Split `node` across `block` and new siblings, answering the siblings. The
-/// blocks it took are the operation's, which gives them back if it fails.
 fn split_node(
     io: &dyn BlockIO,
     alloc: &mut BitmapAllocator,
     block: BlockNum,
     node: Node,
-) -> Result<Vec<Child>, FsError> {
+) -> Result<InsertResult, FsError> {
     match node {
         Node::Leaf(entries) => {
             // One entry is not a split problem. Halving by *count* used to
@@ -636,15 +610,28 @@ fn split_node(
 
             let mut nodes = pack(entries);
             let first = nodes.remove(0);
+            let mut blocks = Vec::with_capacity(nodes.len());
+            for _ in &nodes {
+                match alloc.alloc_block(io) {
+                    Ok(sibling) => blocks.push(sibling),
+                    Err(e) => {
+                        for taken in blocks {
+                            alloc.free_range(io, taken, 1)?;
+                        }
+                        return Err(e);
+                    }
+                }
+            }
+            // The siblings first: a failure before `block` is replaced leaves
+            // the tree as it was and blocks nothing names.
             let mut children = Vec::with_capacity(nodes.len());
-            for node in nodes {
-                let sibling = alloc.alloc_block(io)?;
+            for (node, sibling) in nodes.into_iter().zip(blocks) {
                 children.push(Child { key: node[0].key, block: sibling });
                 Node::Leaf(node).write(io, sibling)?;
             }
             Node::Leaf(first).write(io, block)?;
 
-            Ok(children)
+            Ok(InsertResult::Split(children))
         }
         Node::Interior { level, mut children } => {
             if children.len() < 2 {
@@ -662,7 +649,7 @@ fn split_node(
             Node::Interior { level, children }.write(io, block)?;
             Node::Interior { level, children: right }.write(io, right_block)?;
 
-            Ok(alloc::vec![Child { key: split_key, block: right_block }])
+            Ok(InsertResult::Split(alloc::vec![Child { key: split_key, block: right_block }]))
         }
     }
 }
@@ -819,8 +806,9 @@ mod tests {
         );
     }
 
-    /// A split that finds no block for a later sibling fails its operation,
-    /// which gives back the block it took for the earlier: nothing names it.
+    /// A split that finds no block for a later sibling gives back the ones it
+    /// took for the earlier: nothing names them yet, so nothing else frees
+    /// them.
     #[test]
     fn a_split_short_of_a_sibling_gives_back_the_ones_it_took() {
         let io = crate::block_io::VecBlockIO::new(16);
@@ -833,13 +821,10 @@ mod tests {
         let mut middle: Vec<Entry> = (0..40).map(|_| entry(72)).collect();
         middle.insert(20, entry(MAX_ENTRY_SIZE - KEY_HEADER_SIZE));
         assert_eq!(pack(middle.clone()).len(), 3, "two siblings, and a block for one");
-        alloc.begin();
         assert!(matches!(
             split_node(&io, &mut alloc, leaf, Node::Leaf(middle)),
             Err(FsError::NoSpace { .. }),
         ));
-        assert_eq!(alloc.free_blocks, 0, "the first sibling took the last block");
-        alloc.fail(&io);
         assert_eq!(alloc.free_blocks, 1, "the first sibling's block went back");
     }
 
diff --git b/bcachefs/src/fs.rs a/bcachefs/src/fs.rs
index 161112f88..e83a49d17 100644
--- b/bcachefs/src/fs.rs
+++ a/bcachefs/src/fs.rs
@@ -139,10 +139,12 @@ impl FsError {
 pub struct ReadOnly;
 pub struct ReadWrite;
 
-/// A formatted but not yet mounted filesystem. Used for building images
-/// (mkfs): written in place, since nothing it holds is committed before
-/// [`Formatted::into_io`].
-pub struct Formatted<IO: BlockIO>(Mounted<IO, ReadWrite>);
+/// A formatted but not yet mounted filesystem. Used for building images (mkfs).
+pub struct Formatted<IO: BlockIO> {
+    io: IO,
+    sb: Superblock,
+    alloc: BitmapAllocator,
+}
 
 /// A mounted filesystem. Mode is ReadOnly or ReadWrite.
 pub struct Mounted<IO: BlockIO, Mode = ReadWrite> {
@@ -410,8 +412,9 @@ fn decode_leaf_value(value: &[u8], volume_blocks: u64) -> Result<LeafValue, FsEr
 /// Allocate blocks and write `data` into them, returning the extent list.
 ///
 /// The allocator answers with a run that may be shorter than the request, so
-/// covering `data` takes a loop. A run reserved by an earlier turn of that loop
-/// is the operation's, which gives it back if a later turn fails.
+/// covering `data` takes a loop — and a run reserved by an earlier turn of that
+/// loop is a block the bitmap calls taken that no entry names, once a later
+/// turn fails. Every run goes back before the error does.
 fn write_data(
     io: &dyn BlockIO,
     alloc: &mut BitmapAllocator,
@@ -427,7 +430,10 @@ fn write_data(
     let mut data_offset = 0usize;
 
     while remaining > 0 {
-        let run = alloc.alloc_up_to(io, alloc.next_alloc, remaining)?;
+        let run = match alloc.alloc_up_to(io, alloc.next_alloc, remaining) {
+            Ok(run) => run,
+            Err(err) => return Err(give_back(io, alloc, &extents, err)),
+        };
         push_extent(&mut extents, run.start.raw(), run.len);
 
         let mut buf = BlockBuf::zeroed();
@@ -438,7 +444,9 @@ fn write_data(
                 let len = chunk_end - data_offset;
                 buf.0[..len].copy_from_slice(&data[data_offset..chunk_end]);
             }
-            io.write(BlockNum::new(run.start.raw() + i), &buf)?;
+            if let Err(err) = io.write(BlockNum::new(run.start.raw() + i), &buf) {
+                return Err(give_back(io, alloc, &extents, err));
+            }
             data_offset += BLOCK_SIZE;
         }
 
@@ -448,6 +456,24 @@ fn write_data(
     Ok(extents)
 }
 
+/// Hand back the runs a failed [`write_data`] had already reserved, and return
+/// the failure that stopped it.
+///
+/// Best effort by construction: this runs because something has already gone
+/// wrong, and a bitmap write that also fails has no better answer to give than
+/// the error already in hand.
+fn give_back(
+    io: &dyn BlockIO,
+    alloc: &mut BitmapAllocator,
+    extents: &[Extent],
+    err: FsError,
+) -> FsError {
+    for ext in extents {
+        let _ = alloc.free_range(io, BlockNum::new(ext.start_block), ext.block_count);
+    }
+    err
+}
+
 /// Read file data from a list of extents.
 ///
 /// **`size` sizes the `Vec` and `size` is a number off the disk**, so it is
@@ -549,44 +575,84 @@ impl<IO: BlockIO> Formatted<IO> {
 
         sb.write(&io)?;
 
-        Ok(Self(Mounted { io, sb, alloc, _mode: PhantomData }))
+        Ok(Self { io, sb, alloc })
     }
 
     /// Name this filesystem, so a role's kernel argument can select it.
     ///
     /// A separate act from formatting: a volume nothing names is legal, and
-    /// nothing here invents a name for one. Persisted by [`Self::into_io`].
+    /// nothing here invents a name for one. Persisted by [`Self::sync`], which
+    /// [`Self::into_io`] runs.
     pub fn set_uuid(&mut self, uuid: FsUuid) {
-        self.0.sb.uuid = uuid;
+        self.sb.uuid = uuid;
     }
 
     /// Create a file on the formatted filesystem (used during mkfs).
     pub fn create(&mut self, name: &str, data: &[u8], mtime: u64) -> Result<(), FsError> {
-        self.0.create(name, data, mtime)
+        if name.is_empty() || name.len() > MAX_NAME_LEN {
+            return Err(FsError::NameTooLong { len: name.len(), max: MAX_NAME_LEN });
+        }
+
+        let extents = write_data(&self.io, &mut self.alloc, data)?;
+        let value = encode_leaf_value(KeyType::File, name, data.len() as u64, mtime, &extents);
+        let key = make_key(&self.sb.hash_seed, name, KeyType::File);
+        let entry = Entry { key, value };
+
+        self.sb.root_node = btree::insert(&self.io, &mut self.alloc, self.sb.root_node, entry)?;
+
+        Ok(())
     }
 
     /// Create a symlink on the formatted filesystem.
     pub fn create_symlink(&mut self, name: &str, target: &str, mtime: u64) -> Result<(), FsError> {
-        self.0.put(name, KeyType::Symlink, target.as_bytes(), mtime)
+        if name.is_empty() || name.len() > MAX_NAME_LEN {
+            return Err(FsError::NameTooLong { len: name.len(), max: MAX_NAME_LEN });
+        }
+
+        let target_bytes = target.as_bytes();
+        let extents = write_data(&self.io, &mut self.alloc, target_bytes)?;
+        let value = encode_leaf_value(KeyType::Symlink, name, target_bytes.len() as u64, mtime, &extents);
+        let key = make_key(&self.sb.hash_seed, name, KeyType::Symlink);
+        let entry = Entry { key, value };
+
+        self.sb.root_node = btree::insert(&self.io, &mut self.alloc, self.sb.root_node, entry)?;
+
+        Ok(())
+    }
+
+    /// Finalize the filesystem: write superblock with clean flag.
+    pub fn sync(&mut self) -> Result<(), FsError> {
+        self.sb.free_blocks = self.alloc.free_blocks;
+        self.sb.next_alloc = self.alloc.next_alloc;
+        self.sb.set_clean(true);
+        self.sb.write(&self.io)?;
+        self.io.flush()
     }
 
     /// Mount this formatted filesystem for read-write access.
     pub fn mount(self) -> Mounted<IO, ReadWrite> {
-        let mut fs = self.0;
-        fs.alloc.shadow = true;
-        fs
+        Mounted {
+            io: self.io,
+            sb: self.sb,
+            alloc: self.alloc,
+            _mode: PhantomData,
+        }
     }
 
     /// Mount this formatted filesystem for read-only access.
     pub fn mount_readonly(self) -> Mounted<IO, ReadOnly> {
-        let Mounted { io, sb, alloc, .. } = self.0;
-        Mounted { io, sb, alloc, _mode: PhantomData }
+        Mounted {
+            io: self.io,
+            sb: self.sb,
+            alloc: self.alloc,
+            _mode: PhantomData,
+        }
     }
 
     /// Consume and return the underlying IO (for extracting the image bytes).
     pub fn into_io(mut self) -> Result<IO, FsError> {
-        self.0.sync()?;
-        Ok(self.0.io)
+        self.sync()?;
+        Ok(self.io)
     }
 }
 
@@ -596,7 +662,13 @@ impl<IO: BlockIO, Mode> Mounted<IO, Mode> {
     /// Open an existing filesystem from disk.
     pub fn open(io: IO) -> Result<Mounted<IO, Mode>, FsError> {
         let sb = Superblock::read(&io)?;
-        let alloc = BitmapAllocator::open(&sb);
+        let alloc = BitmapAllocator {
+            bitmap_start: sb.bitmap_start,
+            bitmap_blocks: sb.bitmap_blocks,
+            total_blocks: sb.block_count,
+            free_blocks: sb.free_blocks,
+            next_alloc: sb.next_alloc,
+        };
         Ok(Mounted {
             io,
             sb,
@@ -731,9 +803,11 @@ impl<IO: BlockIO, Mode> Mounted<IO, Mode> {
 
     /// Convert back to Formatted state (for testing — insert more files after reading).
     pub fn into_formatted(self) -> Formatted<IO> {
-        let Self { io, sb, mut alloc, .. } = self;
-        alloc.shadow = false;
-        Formatted(Mounted { io, sb, alloc, _mode: PhantomData })
+        Formatted {
+            io: self.io,
+            sb: self.sb,
+            alloc: self.alloc,
+        }
     }
 
     /// Return the extents and file size for a file.
@@ -751,17 +825,6 @@ impl<IO: BlockIO, Mode> Mounted<IO, Mode> {
 
 // --- ReadWrite-only operations ---
 
-/// **Every change is one operation and every sync one commit.** An operation
-/// ([`Mounted::atomic`]) takes effect whole or, refused anywhere, leaves the
-/// tree and the allocator as they were; it never writes over a block the last
-/// commit's tree reaches, but to new blocks up to a new root. A commit
-/// ([`Mounted::sync`]) is the primary superblock naming that root landing on
-/// the device, after everything the root reaches, and before the backup copy:
-/// killed anywhere, the device holds the last commit's tree whole or the new
-/// one whole, a torn primary failing its checksum for the backup, which is the
-/// last commit still. What a kill costs is the blocks taken since the last
-/// commit and those only the old tree reached: marked used, and named by no
-/// tree, until a sweep (`issues/a-crash-leaks-the-blocks-of-its-last-commit.md`).
 impl<IO: BlockIO> Mounted<IO, ReadWrite> {
     /// Create a file, replacing whatever answered to `name`.
     pub fn create(&mut self, name: &str, data: &[u8], mtime: u64) -> Result<(), FsError> {
@@ -773,24 +836,6 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
         self.put(name, KeyType::Symlink, target.as_bytes(), 0)
     }
 
-    /// Run `change` as one operation: whole, or refused with the root and
-    /// every block as they were.
-    fn atomic<T>(&mut self, change: impl FnOnce(&mut Self) -> Result<T, FsError>) -> Result<T, FsError> {
-        let root = self.sb.root_node;
-        self.alloc.begin();
-        match change(self) {
-            Ok(done) => {
-                self.alloc.succeed(&self.io);
-                Ok(done)
-            }
-            Err(e) => {
-                self.sb.root_node = root;
-                self.alloc.fail(&self.io);
-                Err(e)
-            }
-        }
-    }
-
     /// Put `name` on the volume, displacing whatever answered to it.
     ///
     /// The new entry goes in before the old one comes out, for the reason
@@ -815,28 +860,21 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
             return Err(FsError::NameTooLong { len: name.len(), max: MAX_NAME_LEN });
         }
 
-        self.atomic(|fs| {
-            let displaced = match fs.find_by_name(name)? {
-                Some((key, value)) => Some((key, fs.decode(&value)?.extents().to_vec())),
-                None => None,
-            };
-
-            let extents = write_data(&fs.io, &mut fs.alloc, data)?;
-            let value = encode_leaf_value(key_type, name, data.len() as u64, mtime, &extents);
-            let key = make_key(&fs.sb.hash_seed, name, key_type);
-            fs.sb.root_node = btree::insert(&fs.io, &mut fs.alloc, fs.sb.root_node, Entry { key, value })?;
+        let displaced = match self.find_by_name(name)? {
+            Some((key, value)) => Some((key, self.decode(&value)?.extents().to_vec())),
+            None => None,
+        };
 
-            fs.retire_displaced(displaced, key)
-        })
-    }
+        let extents = write_data(&self.io, &mut self.alloc, data)?;
+        let value = encode_leaf_value(key_type, name, data.len() as u64, mtime, &extents);
+        let key = make_key(&self.sb.hash_seed, name, key_type);
+        self.sb.root_node = btree::insert(
+            &self.io, &mut self.alloc,
+            self.sb.root_node,
+            Entry { key, value },
+        )?;
 
-    /// Remove `key`'s entry, if the tree has one.
-    fn remove(&mut self, key: &Key) -> Result<bool, FsError> {
-        let Some((root, _)) = btree::delete(&self.io, &mut self.alloc, self.sb.root_node, key)? else {
-            return Ok(false);
-        };
-        self.sb.root_node = root;
-        Ok(true)
+        self.retire_displaced(displaced, key)
     }
 
     /// Remove the entry the insert of `new_key` did not replace, and free the
@@ -852,9 +890,26 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
     ) -> Result<(), FsError> {
         let Some((old_key, old_extents)) = displaced else { return Ok(()) };
         if old_key != new_key {
-            self.remove(&old_key)?;
+            btree::delete(&self.io, self.sb.root_node, &old_key)?;
+        }
+        for ext in &old_extents {
+            self.alloc.free_range(&self.io, BlockNum::new(ext.start_block), ext.block_count)?;
         }
-        self.free_extents(&old_extents)
+        Ok(())
+    }
+
+    /// Delete a file or symlink by name. Returns true if found and deleted.
+    pub fn delete(&mut self, name: &str) -> Result<bool, FsError> {
+        self.delete_by_name(name)
+    }
+
+    /// Sync filesystem state to disk.
+    pub fn sync(&mut self) -> Result<(), FsError> {
+        self.sb.free_blocks = self.alloc.free_blocks;
+        self.sb.next_alloc = self.alloc.next_alloc;
+        self.sb.set_clean(true);
+        self.sb.write(&self.io)?;
+        self.io.flush()
     }
 
     /// Delete a file/symlink by name, freeing its data blocks. Returns true if found.
@@ -866,57 +921,32 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
     /// caller nothing had happened. It also answers it once for both key
     /// types, where the old shape fell through from File to Symlink after a
     /// non-matching removal and could take two entries out in one call.
-    pub fn delete(&mut self, name: &str) -> Result<bool, FsError> {
-        self.atomic(|fs| {
-            let Some((key, value)) = fs.find_by_name(name)? else { return Ok(false) };
-            let extents = fs.decode(&value)?.extents().to_vec();
-
-            // `find_by_name` reached this key by the descent `btree::delete` is
-            // about to repeat, so an empty removal is not "no such file" — it is a
-            // tree that answers two ways.
-            if !fs.remove(&key)? {
-                return Err(FsError::CorruptedNode(fs.sb.root_node));
-            }
-            fs.free_extents(&extents)?;
-            Ok(true)
-        })
-    }
-
-    /// Commit the tree as it stands: see this block's header.
-    pub fn sync(&mut self) -> Result<(), FsError> {
-        self.io.flush()?;
-        // What the volume holds free once this commit's own frees are made.
-        self.sb.free_blocks = self.alloc.free_blocks + self.alloc.pending();
-        self.sb.next_alloc = self.alloc.next_alloc;
-        self.sb.set_clean(true);
-        // From the first superblock write on, this commit may be what a mount
-        // finds, even where the write is refused.
-        self.alloc.seal();
-        for copy in self.sb.copies() {
-            self.sb.write_at(&self.io, copy)?;
-            self.io.flush()?;
+    fn delete_by_name(&mut self, name: &str) -> Result<bool, FsError> {
+        let Some((key, value)) = self.find_by_name(name)? else { return Ok(false) };
+        let extents = self.decode(&value)?.extents().to_vec();
+
+        // `find_by_name` reached this key by the descent `btree::delete` is
+        // about to repeat, so an empty removal is not "no such file" — it is a
+        // tree that answers two ways.
+        if btree::delete(&self.io, self.sb.root_node, &key)?.is_none() {
+            return Err(FsError::CorruptedNode(self.sb.root_node));
         }
-        self.alloc.committed(&self.io)
+        for ext in &extents {
+            self.alloc.free_range(&self.io, BlockNum::new(ext.start_block), ext.block_count)?;
+        }
+        Ok(true)
     }
 
     /// Rename a file or symlink.
+    ///
+    /// The new entry goes in before the old one comes out, so a crash between
+    /// the two leaves the file under both names rather than under neither. What
+    /// that ordering costs is that the insert *is* the removal of whatever
+    /// `new_name` named — same name and same type is the same key, and
+    /// `btree::insert` replaces on an equal key — so the displaced entry has to
+    /// be read out of the tree before the insert. Asking for it afterwards, by
+    /// name, answers with the file that was just renamed and frees its extents.
     pub fn rename(&mut self, old_name: &str, new_name: &str) -> Result<(), FsError> {
-        self.rename_all(&[(old_name, new_name)])
-    }
-
-    /// Rename every `(old, new)` pair in turn, as one operation: a directory
-    /// is the names beneath it, and moves whole or not at all.
-    pub fn rename_all(&mut self, renames: &[(&str, &str)]) -> Result<(), FsError> {
-        self.atomic(|fs| renames.iter().try_for_each(|&(old, new)| fs.rename_one(old, new)))
-    }
-
-    /// The new entry goes in before the old one comes out. What that ordering
-    /// costs is that the insert *is* the removal of whatever `new_name` named —
-    /// same name and same type is the same key, and `btree::insert` replaces on
-    /// an equal key — so the displaced entry has to be read out of the tree
-    /// before the insert. Asking for it afterwards, by name, answers with the
-    /// file that was just renamed and frees its extents.
-    fn rename_one(&mut self, old_name: &str, new_name: &str) -> Result<(), FsError> {
         // Every other name-taking entry point bounds its name; this one did
         // not, and `user_ptr::MAX_USER_STR` lets 64 KiB of it through.
         if new_name.is_empty() || new_name.len() > MAX_NAME_LEN {
@@ -952,7 +982,7 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
         // extent list. Nothing to delete when the two names share a key — the
         // entry under it is the one the insert just wrote.
         if new_key != old_key {
-            self.remove(&old_key)?;
+            btree::delete(&self.io, self.sb.root_node, &old_key)?;
         }
 
         Ok(())
@@ -966,24 +996,29 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
         size: u64,
         mtime: u64,
     ) -> Result<(), FsError> {
-        self.atomic(|fs| {
-            let (old_key, old_value) = fs.find_by_name(name)?
-                .ok_or(FsError::NotFound)?;
-            let leaf = fs.decode(&old_value)?;
-
-            let new_value = encode_leaf_value(old_key.key_type, leaf.name(), size, mtime, new_extents);
-            let new_entry = Entry { key: old_key, value: new_value };
-
-            // No delete first: the key is unchanged and `btree::insert` replaces
-            // on an equal key. Blocks the caller drops from the extent list are
-            // the caller's to free, through [`Self::free_extents`], after this
-            // records the shortened list.
-            fs.sb.root_node = btree::insert(&fs.io, &mut fs.alloc, fs.sb.root_node, new_entry)?;
-            Ok(())
-        })
+        let (old_key, old_value) = self.find_by_name(name)?
+            .ok_or(FsError::NotFound)?;
+        let leaf = self.decode(&old_value)?;
+
+        let new_value = encode_leaf_value(old_key.key_type, leaf.name(), size, mtime, new_extents);
+        let new_entry = Entry { key: old_key, value: new_value };
+
+        // No delete first. The key is unchanged and `btree::insert` replaces on
+        // an equal key, so the delete bought nothing and cost the file: a
+        // pre-check for `EntryTooLarge` does not cover `insert`'s other
+        // rejection, a split with no free block to split into, and that one
+        // left the entry deleted and never put back. Blocks the caller drops
+        // from the extent list are the caller's to free, through
+        // [`Self::free_extents`], after this records the shortened list.
+        self.sb.root_node = btree::insert(
+            &self.io, &mut self.alloc,
+            self.sb.root_node,
+            new_entry,
+        )?;
+        Ok(())
     }
 
-    /// Give `extents`' blocks back to the allocator. Record first, free second:
+    /// Return `extents`' blocks to the allocator. Record first, free second:
     /// the caller shortens the entry's list before calling this, so a failure
     /// between the two leaks blocks rather than leaving an entry naming freed
     /// ones.
diff --git b/bcachefs/src/superblock.rs a/bcachefs/src/superblock.rs
index d24ec660b..5d78b8e32 100644
--- b/bcachefs/src/superblock.rs
+++ a/bcachefs/src/superblock.rs
@@ -266,19 +266,10 @@ impl Superblock {
 
     /// Write superblock to both block 0 and the backup at the last block.
     pub fn write(&self, io: &dyn BlockIO) -> Result<(), FsError> {
-        self.copies().try_for_each(|copy| self.write_at(io, copy))
-    }
-
-    /// Block 0, which [`Self::read`] tries first, then the backup.
-    pub fn copies(&self) -> impl Iterator<Item = BlockNum> {
-        [BlockNum::new(0), BlockNum::new(self.block_count - 1)].into_iter()
-    }
-
-    /// Write this superblock to one of its [`Self::copies`].
-    pub fn write_at(&self, io: &dyn BlockIO, copy: BlockNum) -> Result<(), FsError> {
         let mut buf = BlockBuf::zeroed();
         self.write_to(&mut buf);
-        io.write(copy, &buf)
+        io.write(BlockNum::new(0), &buf)?;
+        io.write(BlockNum::new(self.block_count - 1), &buf)
     }
 }
 
--- a/userland/fileserver/src/data.rs	2026-10-09 18:00:09
+++ b/userland/fileserver/src/data.rs	2026-10-09 18:00:09
@@ -687,42 +687,38 @@
                 if to.starts_with(&format!("{from}/")) {
                     return Err(SyscallError::InvalidArgument);
                 }
-                // Every entry beneath, and the directory's own, in one
-                // operation of the format's: the directory moves whole or not at all.
+                // One entry at a time: the format has no rename of a prefix,
+                // so a kill in the middle leaves the directory in two halves,
+                // every entry under exactly one of its names.
                 let prefix = format!("{from}/");
                 let moving: Vec<(String, Kind)> = self
                     .names
-                    .get_key_value(from)
-                    .into_iter()
-                    .chain(self.names.range(prefix.clone()..).take_while(|(n, _)| n.starts_with(&prefix)))
+                    .range(prefix.clone()..)
+                    .take_while(|(n, _)| n.starts_with(&prefix))
                     .map(|(n, k)| (n.clone(), *k))
                     .collect();
-                for (name, _) in &moving {
+                for (name, kind) in &moving {
+                    let moved = format!("{to}/{}", &name[prefix.len()..]);
                     if let Some(node) = self.by_path.get(name).copied() {
                         self.persist(node)?;
                     }
-                }
-                let renames: Vec<(String, String)> = moving
-                    .iter()
-                    .map(|(name, kind)| {
-                        let moved = format!("{to}{}", &name[from.len()..]);
-                        match kind {
-                            Kind::Dir => (format!("{name}/"), format!("{moved}/")),
-                            _ => (name.clone(), moved),
-                        }
-                    })
-                    .collect();
-                let pairs: Vec<(&str, &str)> = renames.iter().map(|(a, b)| (a.as_str(), b.as_str())).collect();
-                mapped("rename", from, self.fs.rename_all(&pairs))?;
-                for (name, kind) in moving {
-                    let moved = format!("{to}{}", &name[from.len()..]);
-                    self.names.remove(&name);
-                    self.names.insert(moved.clone(), kind);
-                    if let Some(node) = self.by_path.remove(&name) {
+                    let (on_disk_from, on_disk_to) = match kind {
+                        Kind::Dir => (format!("{name}/"), format!("{moved}/")),
+                        _ => (name.clone(), moved.clone()),
+                    };
+                    mapped("rename", name, self.fs.rename(&on_disk_from, &on_disk_to))?;
+                    self.names.remove(name);
+                    self.names.insert(moved.clone(), *kind);
+                    if let Some(node) = self.by_path.remove(name) {
                         self.open.get_mut(&node).expect("indexed").path = moved.clone();
                         self.by_path.insert(moved, node);
                     }
                 }
+                if self.names.get(from) == Some(&Kind::Dir) {
+                    mapped("rename", from, self.fs.rename(&format!("{from}/"), &format!("{to}/")))?;
+                    self.names.remove(from);
+                    self.names.insert(to.to_string(), Kind::Dir);
+                }
                 Ok(())
             }
         }

m1-every-node-in-place

--- a/bcachefs/src/alloc_bitmap.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/alloc_bitmap.rs	2026-10-09 17:59:56
@@ -116,7 +116,7 @@
 
     /// Whether a node at `block` may be written where it is.
     pub fn in_place(&self, block: BlockNum) -> bool {
-        !self.shadow || self.op.as_ref().is_some_and(|op| op.taken.contains(block.raw()))
+        true || self.op.as_ref().is_some_and(|op| op.taken.contains(block.raw()))
     }
 
     /// The operation took effect: what it gave up is given up now. A bit the

m2-no-flush-before-the-superblock

--- a/bcachefs/src/fs.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/fs.rs	2026-10-09 17:59:56
@@ -884,7 +884,6 @@
 
     /// Commit the tree as it stands: see this block's header.
     pub fn sync(&mut self) -> Result<(), FsError> {
-        self.io.flush()?;
         // What the volume holds free once this commit's own frees are made.
         self.sb.free_blocks = self.alloc.free_blocks + self.alloc.pending();
         self.sb.next_alloc = self.alloc.next_alloc;

m3-committed-blocks-free-at-once

--- a/bcachefs/src/alloc_bitmap.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/alloc_bitmap.rs	2026-10-09 17:59:56
@@ -170,7 +170,7 @@
     /// them, and otherwise once the next one lands.
     fn give(&mut self, io: &dyn BlockIO, start: u64, count: u32) -> Result<(), FsError> {
         for block in start..start + count as u64 {
-            if !self.shadow || self.fresh.remove(block) {
+            if true || self.fresh.remove(block) {
                 self.set_free(io, BlockNum::new(block))?;
             } else {
                 match self.pending.last_mut() {

m4-a-refused-operation-keeps-its-root

--- a/bcachefs/src/fs.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/fs.rs	2026-10-09 17:59:56
@@ -784,7 +784,6 @@
                 Ok(done)
             }
             Err(e) => {
-                self.sb.root_node = root;
                 self.alloc.fail(&self.io);
                 Err(e)
             }

m5-no-seal

--- a/bcachefs/src/fs.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/fs.rs	2026-10-09 17:59:56
@@ -891,7 +891,6 @@
         self.sb.set_clean(true);
         // From the first superblock write on, this commit may be what a mount
         // finds, even where the write is refused.
-        self.alloc.seal();
         for copy in self.sb.copies() {
             self.sb.write_at(&self.io, copy)?;
             self.io.flush()?;

m6-fileserver-renames-entry-by-entry

--- a/userland/fileserver/src/data.rs	2026-10-09 18:00:09
+++ b/userland/fileserver/src/data.rs	2026-10-09 18:00:09
@@ -687,42 +687,38 @@
                 if to.starts_with(&format!("{from}/")) {
                     return Err(SyscallError::InvalidArgument);
                 }
-                // Every entry beneath, and the directory's own, in one
-                // operation of the format's: the directory moves whole or not at all.
+                // One entry at a time: the format has no rename of a prefix,
+                // so a kill in the middle leaves the directory in two halves,
+                // every entry under exactly one of its names.
                 let prefix = format!("{from}/");
                 let moving: Vec<(String, Kind)> = self
                     .names
-                    .get_key_value(from)
-                    .into_iter()
-                    .chain(self.names.range(prefix.clone()..).take_while(|(n, _)| n.starts_with(&prefix)))
+                    .range(prefix.clone()..)
+                    .take_while(|(n, _)| n.starts_with(&prefix))
                     .map(|(n, k)| (n.clone(), *k))
                     .collect();
-                for (name, _) in &moving {
+                for (name, kind) in &moving {
+                    let moved = format!("{to}/{}", &name[prefix.len()..]);
                     if let Some(node) = self.by_path.get(name).copied() {
                         self.persist(node)?;
                     }
-                }
-                let renames: Vec<(String, String)> = moving
-                    .iter()
-                    .map(|(name, kind)| {
-                        let moved = format!("{to}{}", &name[from.len()..]);
-                        match kind {
-                            Kind::Dir => (format!("{name}/"), format!("{moved}/")),
-                            _ => (name.clone(), moved),
-                        }
-                    })
-                    .collect();
-                let pairs: Vec<(&str, &str)> = renames.iter().map(|(a, b)| (a.as_str(), b.as_str())).collect();
-                mapped("rename", from, self.fs.rename_all(&pairs))?;
-                for (name, kind) in moving {
-                    let moved = format!("{to}{}", &name[from.len()..]);
-                    self.names.remove(&name);
-                    self.names.insert(moved.clone(), kind);
-                    if let Some(node) = self.by_path.remove(&name) {
+                    let (on_disk_from, on_disk_to) = match kind {
+                        Kind::Dir => (format!("{name}/"), format!("{moved}/")),
+                        _ => (name.clone(), moved.clone()),
+                    };
+                    mapped("rename", name, self.fs.rename(&on_disk_from, &on_disk_to))?;
+                    self.names.remove(name);
+                    self.names.insert(moved.clone(), *kind);
+                    if let Some(node) = self.by_path.remove(name) {
                         self.open.get_mut(&node).expect("indexed").path = moved.clone();
                         self.by_path.insert(moved, node);
                     }
                 }
+                if self.names.get(from) == Some(&Kind::Dir) {
+                    mapped("rename", from, self.fs.rename(&format!("{from}/"), &format!("{to}/")))?;
+                    self.names.remove(from);
+                    self.names.insert(to.to_string(), Kind::Dir);
+                }
                 Ok(())
             }
         }

@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

Review of #816 at 3adcf42 (round 1). Net git diff --shortstat origin/main...3adcf424e: 9 files, +1050 −358. Production (bcachefs/src and the non-test part of data.rs): about +463 −303. Tests: +532 −55. Issues: +55.

BLOCKER

  • bcachefs/src/fs.rs:895-898, bcachefs/tests/crash.rs:4-9,184-197 — The crash model never tears a write and never mounts from the backup, so nothing tests the backup half of the commit protocol. Every stop lands each 4 KiB write whole or not at all. The primary always parses, so Superblock::read never falls back, and the flush between the primary and the backup protects nothing the oracle checks. The body's claim that a torn primary fails its CRC and the backup is still the last commit (fs.rs:761, body "The commit") has no measurement behind it. Mutation to run: in Mounted::sync, take self.io.flush()?; out of the for copy in self.sb.copies() loop and put it once after the loop. I expect crash.rs and fileserver's three a_directory_rename_* tests to stay green. The model needs one more shape: the stop's write torn at a 512-byte sector boundary (some sectors new, the rest old), at least for writes to blocks 0 and N-1. That mutation must then turn a_directory_rename_is_whole_under_one_name_wherever_the_device_stops red. Without the torn shape, the 1178 stops cannot fail the claim about which superblock copy a mount trusts.
  • bcachefs/src/alloc_bitmap.rs:232-274,249-256; bcachefs/src/btree.rs own — A volume can reach a state where no delete or truncate ever succeeds again, sync or not. On main a delete wrote the leaf in place and needed no block. Now every delete and every update_metadata copies its path through alloc_block/alloc_exact, but NODE_RESERVE is only held against alloc_up_to (file data). So new nodes for names with no data (fileserver's create(path, &[]) at every open(CREATE), and mkdir's path/ entry) take the reserve down to 0. bcachefs/tests/integration.rs's a_metadata_update_that_cannot_be_reinserted… reaches exactly that state with while fs.create("emptyN", b"").is_ok(). Once a sync has freed what was pending, nothing is left to free, and delete gets NoSpace from own, so the volume cannot shrink. There is a second road to the same state: after a crash, free_blocks from the superblock overstates the free space (that issue's own measurement: 322 against 278), so data alone can take the real reserve. The test to add, which I expect red at this head: fill a volume with one-block files until a write is refused; then loop "create empty names until refused, sync" until a create right after a sync is refused; then assert that delete of one file succeeds and, after a sync, a one-block write succeeds. Fix it, for example by holding the reserve against every allocation except the copies a delete or shrink makes. issues/a-full-data-volume-frees-space-only-at-a-commit.md says such a refusal lasts "until fileserver's next sync". That is false of this state, and the state is recorded nowhere.
  • PR body, "Independent oracle" — The mkfs differential has no log at this head. No command, no exit code, no log in the body. logs/mkfs-{base,new}.log and mkfs2-*.log print only "22 files" and "232 files", with no sha256 and no cmp. They are from 17:57, before the head commit (18:38) and before the m1-m5 rounds that followed. "mkfs bytes are unchanged" is the claim that ROOT images, which the kernel parses, did not move. Rerun it at 3adcf42 and post the command, both hashes, the cmp exit and the log.
  • PR body, "T14" — The metal reading is still owed. By the body's own account the change reaches every T14 boot (/state/<service> goes through own and the new commit). metal-stage.log exits 2, which stages the images and touches no machine. This closes when the orchestrator's boot:testcases reading at 3adcf42 is posted.

NOTE

  • userland/fileserver/src/data.rs:23-27, bcachefs/src/fs.rs:754-764 — The contract says a kill leaves the volume as one sync or the other, "whole either way". That holds for names and entries, not for file contents. write (data.rs:551-562) overwrites a page of a committed file in place through the cache. So a kill mid-sync, or a dirty block written out by the cache, leaves that file's committed extents holding some new pages and some old. crash.rs never overwrites a committed page. Narrow the contract to what holds, and file the in-place data overwrite with an exit condition.
  • bcachefs/src/alloc_bitmap.rs:125-143 — succeed and fail throw away set_free's error (let _). In succeed, give's ? also leaves the rest of that run neither freed nor pending. Each of these leaks blocks without a word. Say it in a log line, or record it under issues/a-crash-leaks-the-blocks-of-its-last-commit.md, whose exit then covers it.
  • bcachefs/src/alloc_bitmap.rs:52-56 — NODE_RESERVE = 16 assumes a tree four levels deep and does not grow with depth. Nothing reads DATA's depth (body, "Unsure"). It belongs in the same record as the reserve's other limits.
  • issues/a-directory-rename-on-data-is-not-atomic.md (added in 7429e0a, deleted in 3adcf42) — Neither landing order closes the issue without action in the other branch. Over the branch the file is added and then deleted, a net no-op. If toyos-update verifies a signed package repository and src/publish.rs writes one through it; pkg install <name> waits on an atomic directory rename on DATA #808 (open, not a draft, head 8b7c687) lands first, merging main here keeps toyos-update verifies a signed package repository and src/publish.rs writes one through it; pkg install <name> waits on an atomic directory rename on DATA #808's copy and its citation at issues/a-package-is-a-directory-under-apps-and-the-installer-is-a-program.md:99. The body names only the other order.
  • PR body, "Gates" — the cargo test -p bcachefs --test crash row is backed by crash-5.log (18:34), which predates the head commit. ci-host-4.log (post-commit, EXIT=0, crash.rs at line 630) is what shows it at this head.

SEND BACK

@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

T14 at 3adcf424e, run by the orchestrator: boot:testcases, two boots (testcases-watchdog 79439090…3cfcc7c, testcases c341746f…c53592d, hashes checked), each toyos-metal --fat32-check exit 0; judge EXIT=0, [metal] 249 passed, 0 failed, 2 boot(s); DATA mounted and served on both. This head is superseded by the review's fix round, which owes a new reading.

Japabu and others added 3 commits October 9, 2026 19:55
…crash model tears sectors and mounts from the backup

The review of round 1 found the volume could wedge: every delete and
truncate copies its path through the allocator, NODE_RESERVE was held
only against a file's data, so names with no data (an open(CREATE), a
mkdir) took the reserve down to nothing and, once a sync had freed what
was pending, no delete ever succeeded again. The reserve is now held
against every allocation (`Reserve::Keep`) but those of an operation
that leaves the tree no larger (`Reserve::Draw`): a delete, and an
update whose entry grows no longer, which splits no node. A commit gives
back whatever such an operation drew, so the reserve is whole after every
sync and no state reachable by changes refuses a delete for longer than
the next sync. `a_volume_full_of_empty_names_still_deletes_and_frees` is
red on the round-1 source (the shrink of f00: NoSpace) and green here.

The second road to the same state: after a stop between two commits the
superblock's free count names blocks the bitmap holds taken, so data alone
could take the real reserve. A mount now counts the bitmap's free bits
(`BitmapAllocator::open`); `a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds`
is red on the round-1 source and under a mutation that takes the
superblock's count.

The crash model (`bcachefs/tests/crash.rs`) now lands the stop's write on
a block the layout writes in place (a superblock copy, the bitmap) torn at
every 512-byte sector boundary, first sectors or last, and checks every
state again with block 0 lost, mounting from the backup. Under it the
review's mutation (one flush after both superblock copies, not one
between them) stays green, and has to: a superblock's bytes lie in its
first sector, so a device that writes a sector whole lands each copy old
or new, and no order between the two copies changes what a mount finds.
The flush between them is deleted, and `Superblock::write` is main's
again. Two mutations show the new shapes see what the old did not: the
root's number written past the first sector (red only through a torn
backup with block 0 lost), and the backup written before the flush of
the nodes it names (red only with block 0 lost).

`BitmapAllocator::give` gives up the rest of a run past a bit the device
would not clear, where it stopped; the block it could not free is a leak,
recorded in issues/a-crash-leaks-the-blocks-of-its-last-commit.md with
the frees `succeed` and `fail` drop. The read-write block's contract is
narrowed to names, lengths and extents: a page written over in place is
not shadowed, filed as
issues/a-write-over-a-files-committed-page-is-not-shadowed.md. The
reserve's limits, depth among them, are in
issues/a-full-data-volume-frees-space-only-at-a-commit.md.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
Found while sizing the full-volume test: on main's crate, 300 names with
no data on a 1024-block volume, one sync after each, took 97 blocks where
a packed tree needs five. `pack` fills each node in key order, so a full
leaf splits into a full node and a node of what is left, and hashed keys
land in the full one again. Not this branch's to fix.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

Round 2 evidence for #816 at 3c280aa99. Mutation patches, each applied with git apply at the head, run (cargo test -p bcachefs --no-fail-fast, then cargo test -p fileserver --lib), and reverted with git apply -R in the same script; tree clean after. Exits are in the body.

The runner

#!/bin/bash
# Apply each patch at the head, run the crate's and fileserver's tests, restore.
cd <worktree> || exit 1
M=<scratch>/mutations
L=<scratch>/logs
echo "head $(git rev-parse HEAD)"
for n in negative-control-whole-change-reverted m1-every-node-in-place m2-no-flush-before-the-superblock m3-committed-blocks-free-at-once m4-a-refused-operation-keeps-its-root m5-no-seal m6-fileserver-renames-entry-by-entry m7-the-root-past-the-first-sector m8-the-backup-before-the-nodes-flush m9-a-mount-takes-the-superblocks-count m10-a-delete-keeps-the-reserve m11-a-shrink-keeps-the-reserve; do
  git apply --check $M/$n.patch || { echo "$n: does not apply"; exit 1; }
  git apply $M/$n.patch
  cargo test -p bcachefs --no-fail-fast > $L/$n.final.bcachefs.log 2>&1; b=$?
  cargo test -p fileserver --lib > $L/$n.final.fileserver.log 2>&1; f=$?
  git apply -R $M/$n.patch
  echo "$n bcachefs EXIT=$b fileserver EXIT=$f"
done
git status --porcelain --ignore-submodules=none

Its log

head 3c280aa999778d7b38721abd28dec170d8bb88a0
negative-control-whole-change-reverted bcachefs EXIT=101 fileserver EXIT=101
m1-every-node-in-place bcachefs EXIT=101 fileserver EXIT=101
m2-no-flush-before-the-superblock bcachefs EXIT=101 fileserver EXIT=101
m3-committed-blocks-free-at-once bcachefs EXIT=101 fileserver EXIT=0
m4-a-refused-operation-keeps-its-root bcachefs EXIT=101 fileserver EXIT=101
m5-no-seal bcachefs EXIT=101 fileserver EXIT=0
m6-fileserver-renames-entry-by-entry bcachefs EXIT=0 fileserver EXIT=101
m7-the-root-past-the-first-sector bcachefs EXIT=101 fileserver EXIT=0
m8-the-backup-before-the-nodes-flush bcachefs EXIT=101 fileserver EXIT=0
m9-a-mount-takes-the-superblocks-count bcachefs EXIT=101 fileserver EXIT=0
m10-a-delete-keeps-the-reserve bcachefs EXIT=101 fileserver EXIT=0
m11-a-shrink-keeps-the-reserve bcachefs EXIT=101 fileserver EXIT=0
EXIT=0

m1-every-node-in-place

--- a/bcachefs/src/alloc_bitmap.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/alloc_bitmap.rs	2026-10-09 17:59:56
@@ -116,7 +116,7 @@
 
     /// Whether a node at `block` may be written where it is.
     pub fn in_place(&self, block: BlockNum) -> bool {
-        !self.shadow || self.op.as_ref().is_some_and(|op| op.taken.contains(block.raw()))
+        true || self.op.as_ref().is_some_and(|op| op.taken.contains(block.raw()))
     }
 
     /// The operation took effect: what it gave up is given up now. A bit the

m2-no-flush-before-the-superblock

--- a/bcachefs/src/fs.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/fs.rs	2026-10-09 17:59:56
@@ -884,7 +884,6 @@
 
     /// Commit the tree as it stands: see this block's header.
     pub fn sync(&mut self) -> Result<(), FsError> {
-        self.io.flush()?;
         // What the volume holds free once this commit's own frees are made.
         self.sb.free_blocks = self.alloc.free_blocks + self.alloc.pending();
         self.sb.next_alloc = self.alloc.next_alloc;

m3-committed-blocks-free-at-once

--- a/bcachefs/src/alloc_bitmap.rs
+++ b/bcachefs/src/alloc_bitmap.rs
@@ -201,7 +201,7 @@
     fn give(&mut self, io: &dyn BlockIO, start: u64, count: u32) -> Result<(), FsError> {
         let mut refused = Ok(());
         for block in start..start + count as u64 {
-            if !self.shadow || self.fresh.remove(block) {
+            if true || self.fresh.remove(block) {
                 if let Err(e) = self.set_free(io, BlockNum::new(block)) {
                     refused = refused.and(Err(e));
                 }

m4-a-refused-operation-keeps-its-root

--- a/bcachefs/src/fs.rs	2026-10-09 17:59:56
+++ b/bcachefs/src/fs.rs	2026-10-09 17:59:56
@@ -784,7 +784,6 @@
                 Ok(done)
             }
             Err(e) => {
-                self.sb.root_node = root;
                 self.alloc.fail(&self.io);
                 Err(e)
             }

m5-no-seal

--- a/bcachefs/src/fs.rs
+++ b/bcachefs/src/fs.rs
@@ -906,7 +906,7 @@
         self.sb.set_clean(true);
         // From the first superblock write on, this commit may be what a mount
         // finds, even where the write is refused.
-        self.alloc.seal();
+
         self.sb.write(&self.io)?;
         self.io.flush()?;
         self.alloc.committed(&self.io)

m6-fileserver-renames-entry-by-entry

--- a/userland/fileserver/src/data.rs	2026-10-09 18:00:09
+++ b/userland/fileserver/src/data.rs	2026-10-09 18:00:09
@@ -687,42 +687,38 @@
                 if to.starts_with(&format!("{from}/")) {
                     return Err(SyscallError::InvalidArgument);
                 }
-                // Every entry beneath, and the directory's own, in one
-                // operation of the format's: the directory moves whole or not at all.
+                // One entry at a time: the format has no rename of a prefix,
+                // so a kill in the middle leaves the directory in two halves,
+                // every entry under exactly one of its names.
                 let prefix = format!("{from}/");
                 let moving: Vec<(String, Kind)> = self
                     .names
-                    .get_key_value(from)
-                    .into_iter()
-                    .chain(self.names.range(prefix.clone()..).take_while(|(n, _)| n.starts_with(&prefix)))
+                    .range(prefix.clone()..)
+                    .take_while(|(n, _)| n.starts_with(&prefix))
                     .map(|(n, k)| (n.clone(), *k))
                     .collect();
-                for (name, _) in &moving {
+                for (name, kind) in &moving {
+                    let moved = format!("{to}/{}", &name[prefix.len()..]);
                     if let Some(node) = self.by_path.get(name).copied() {
                         self.persist(node)?;
                     }
-                }
-                let renames: Vec<(String, String)> = moving
-                    .iter()
-                    .map(|(name, kind)| {
-                        let moved = format!("{to}{}", &name[from.len()..]);
-                        match kind {
-                            Kind::Dir => (format!("{name}/"), format!("{moved}/")),
-                            _ => (name.clone(), moved),
-                        }
-                    })
-                    .collect();
-                let pairs: Vec<(&str, &str)> = renames.iter().map(|(a, b)| (a.as_str(), b.as_str())).collect();
-                mapped("rename", from, self.fs.rename_all(&pairs))?;
-                for (name, kind) in moving {
-                    let moved = format!("{to}{}", &name[from.len()..]);
-                    self.names.remove(&name);
-                    self.names.insert(moved.clone(), kind);
-                    if let Some(node) = self.by_path.remove(&name) {
+                    let (on_disk_from, on_disk_to) = match kind {
+                        Kind::Dir => (format!("{name}/"), format!("{moved}/")),
+                        _ => (name.clone(), moved.clone()),
+                    };
+                    mapped("rename", name, self.fs.rename(&on_disk_from, &on_disk_to))?;
+                    self.names.remove(name);
+                    self.names.insert(moved.clone(), *kind);
+                    if let Some(node) = self.by_path.remove(name) {
                         self.open.get_mut(&node).expect("indexed").path = moved.clone();
                         self.by_path.insert(moved, node);
                     }
                 }
+                if self.names.get(from) == Some(&Kind::Dir) {
+                    mapped("rename", from, self.fs.rename(&format!("{from}/"), &format!("{to}/")))?;
+                    self.names.remove(from);
+                    self.names.insert(to.to_string(), Kind::Dir);
+                }
                 Ok(())
             }
         }

m7-the-root-past-the-first-sector

--- a/bcachefs/src/superblock.rs
+++ b/bcachefs/src/superblock.rs
@@ -147,7 +147,7 @@
 
         Ok(Self {
             block_count: read_u64(b, 12),
-            root_node: BlockNum::new(read_u64(b, 24)),
+            root_node: BlockNum::new(read_u64(b, 600)),
             next_alloc: read_u64(b, 36),
             free_blocks: read_u64(b, 44),
             bitmap_start: BlockNum::new(read_u64(b, 52)),
@@ -172,7 +172,7 @@
 
         write_u64(b, 12, self.block_count);
         write_u32(b, 20, BLOCK_SIZE as u32);
-        write_u64(b, 24, self.root_node.raw());
+        write_u64(b, 600, self.root_node.raw());
         // [32..36] pad — the tree's depth used to live here, and drove three
         // recursions against a 128 KiB kernel stack. The descent ends at a
         // `Node::Leaf` now, so the disk has no say in how deep it goes.

m8-the-backup-before-the-nodes-flush

--- a/bcachefs/src/fs.rs
+++ b/bcachefs/src/fs.rs
@@ -899,6 +899,9 @@
 
     /// Commit the tree as it stands: see this block's header.
     pub fn sync(&mut self) -> Result<(), FsError> {
+        let mut backup = BlockBuf::zeroed();
+        self.sb.write_to(&mut backup);
+        self.io.write(BlockNum::new(self.sb.block_count - 1), &backup)?;
         self.io.flush()?;
         // What the volume holds free once this commit's own frees are made.
         self.sb.free_blocks = self.alloc.free_blocks + self.alloc.pending();

m9-a-mount-takes-the-superblocks-count

--- a/bcachefs/src/alloc_bitmap.rs
+++ b/bcachefs/src/alloc_bitmap.rs
@@ -118,7 +118,7 @@
             bitmap_start: sb.bitmap_start,
             bitmap_blocks: sb.bitmap_blocks,
             total_blocks: sb.block_count,
-            free_blocks,
+            free_blocks: sb.free_blocks + 0 * free_blocks,
             next_alloc: sb.next_alloc,
             shadow: true,
             fresh: Runs::default(),

m10-a-delete-keeps-the-reserve

--- a/bcachefs/src/fs.rs
+++ b/bcachefs/src/fs.rs
@@ -882,7 +882,7 @@
     /// types, where the old shape fell through from File to Symlink after a
     /// non-matching removal and could take two entries out in one call.
     pub fn delete(&mut self, name: &str) -> Result<bool, FsError> {
-        self.atomic(Reserve::Draw, |fs| {
+        self.atomic(Reserve::Keep, |fs| {
             let Some((key, value)) = fs.find_by_name(name)? else { return Ok(false) };
             let extents = fs.decode(&value)?.extents().to_vec();
 

m11-a-shrink-keeps-the-reserve

--- a/bcachefs/src/fs.rs
+++ b/bcachefs/src/fs.rs
@@ -984,7 +984,7 @@
         let new_value = encode_leaf_value(old_key.key_type, leaf.name(), size, mtime, new_extents);
         // An entry no longer than the one it replaces splits no node.
         let reserve = match new_value.len() <= old_value.len() {
-            true => Reserve::Draw,
+            true => Reserve::Keep,
             false => Reserve::Keep,
         };
         let new_entry = Entry { key: old_key, value: new_value };

The review's mutation, at the round-1 sync with the new crash model (before the flush between the copies was deleted)

--- a/bcachefs/src/fs.rs
+++ b/bcachefs/src/fs.rs
@@ -898,6 +898,6 @@
         self.alloc.seal();
         for copy in self.sb.copies() {
             self.sb.write_at(&self.io, copy)?;
-            self.io.flush()?;
         }
+        self.io.flush()?;
         self.alloc.committed(&self.io)
     }
r-one-flush-after-both-copies build EXIT=0
r-one-flush-after-both-copies crash EXIT=0
r-one-flush-after-both-copies fileserver EXIT=0
m7-the-root-past-the-first-sector build EXIT=0
m7-the-root-past-the-first-sector crash EXIT=101
m7-the-root-past-the-first-sector fileserver EXIT=0
m8-the-backup-before-the-nodes-flush build EXIT=0
m8-the-backup-before-the-nodes-flush crash EXIT=101
m8-the-backup-before-the-nodes-flush fileserver EXIT=0
 M bcachefs/src/alloc_bitmap.rs
 M bcachefs/src/btree.rs
 M bcachefs/src/fs.rs
 M bcachefs/tests/crash.rs
 M bcachefs/tests/integration.rs

What m7 and m8 turn red, from their crash logs

1 of 2360 stops tear the volume:
stopped at write 554 of 590 (block 511), alone, whole, block 0 lost: the list: BadMagic { expected: [66, 84, 78, 68], got: [0, 0, 0, 0] }
4 of 2372 stops tear the volume:
stopped at write 555 of 589 (block 511), the epoch's writes before it landed, its first 1 sectors, block 0 lost: unmountable: ChecksumMismatch { block: BlockNum(0), stored: 985600850, computed: 1457330728 }
stopped at write 555 of 589 (block 511), the epoch's writes before it landed, its last 7 sectors, block 0 lost: unmountable: ChecksumMismatch { block: BlockNum(0), stored: 1670885067, computed: 267757489 }
stopped at write 555 of 589 (block 511), alone, its first 1 sectors, block 0 lost: unmountable: ChecksumMismatch { block: BlockNum(0), stored: 985600850, computed: 1457330728 }
stopped at write 555 of 589 (block 511), alone, its last 7 sectors, block 0 lost: unmountable: ChecksumMismatch { block: BlockNum(0), stored: 1670885067, computed: 267757489 }

The full-volume tests on the round-1 source (git diff HEAD -- bcachefs/src at 0c9c05c's parent, reverse-applied) and under m9-m11

== wedge-at-3adcf424e
test a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds ... FAILED
test a_volume_full_of_empty_names_still_deletes_and_frees ... FAILED
thread 'a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds' (231920337) panicked at bcachefs/tests/integration.rs:1054:46:
a shrink of a full volume's file: NoSpace { requested: 1, available: 21 }
thread 'a_volume_full_of_empty_names_still_deletes_and_frees' (231920338) panicked at bcachefs/tests/integration.rs:1054:46:
a shrink of a full volume's file: NoSpace { requested: 1, available: 0 }
test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 54 filtered out; finished in 0.02s
== m9-a-mount-takes-the-superblocks-count
test a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds ... FAILED
test a_volume_full_of_empty_names_still_deletes_and_frees ... ok
thread 'a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds' (231921463) panicked at bcachefs/tests/integration.rs:1054:46:
a shrink of a full volume's file: NoSpace { requested: 1, available: 21 }
test result: FAILED. 1 passed; 1 failed; 0 ignored; 0 measured; 54 filtered out; finished in 0.02s
== m10-a-delete-keeps-the-reserve
test a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds ... FAILED
test a_volume_full_of_empty_names_still_deletes_and_frees ... FAILED
thread 'a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds' (231922691) panicked at bcachefs/tests/integration.rs:1058:9:
the delete of f00
thread 'a_volume_full_of_empty_names_still_deletes_and_frees' (231922692) panicked at bcachefs/tests/integration.rs:1058:9:
the delete of f00
test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 54 filtered out; finished in 0.02s
== m11-a-shrink-keeps-the-reserve
test a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds ... FAILED
test a_volume_full_of_empty_names_still_deletes_and_frees ... FAILED
thread 'a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds' (231923817) panicked at bcachefs/tests/integration.rs:1054:46:
a shrink of a full volume's file: NoSpace { requested: 1, available: 0 }
thread 'a_volume_full_of_empty_names_still_deletes_and_frees' (231923818) panicked at bcachefs/tests/integration.rs:1054:46:
a shrink of a full volume's file: NoSpace { requested: 1, available: 0 }
test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 54 filtered out; finished in 0.02s
negative-control-whole-change-reverted (bcachefs/src to origin/main, fileserver's rename to main's; this branch's tests)
diff --git a/bcachefs/src/alloc_bitmap.rs b/bcachefs/src/alloc_bitmap.rs
index 55d1d91c4..c6a5db186 100644
--- a/bcachefs/src/alloc_bitmap.rs
+++ b/bcachefs/src/alloc_bitmap.rs
@@ -1,9 +1,5 @@
-use alloc::collections::BTreeMap;
-use alloc::vec::Vec;
-
 use crate::block_io::{BlockBuf, BlockNum, BlockIO, BlockIOExt, BLOCK_SIZE};
 use crate::fs::FsError;
-use crate::superblock::Superblock;
 
 const BITS_PER_BLOCK: u64 = (BLOCK_SIZE * 8) as u64;
 
@@ -26,195 +22,15 @@ pub struct Run {
 ///
 /// The bitmap is stored on disk starting at `bitmap_start` and spanning
 /// `bitmap_blocks` blocks. Each bit represents one block: 1 = used, 0 = free.
-///
-/// **With `shadow` on, no node the last committed tree reaches is written
-/// over, and no block it reaches is handed out again, before the next commit
-/// lands** (`Mounted::sync`): a btree node is written in place only when the
-/// operation in progress took its block ([`Self::in_place`]), and a block
-/// given up is free at once only if no commit has named it since it was taken
-/// (`fresh`); any other waits in `pending` for the commit. An operation
-/// ([`Self::begin`]) gives up its blocks only when it succeeds, and refused
-/// gives back every one it took.
-/// mkfs runs with `shadow` off: nothing it writes is committed until it ends.
 pub struct BitmapAllocator {
     pub bitmap_start: BlockNum,
     pub bitmap_blocks: u64,
     pub total_blocks: u64,
     pub free_blocks: u64,
     pub next_alloc: u64, // cursor — scan starts here, wraps once
-    pub shadow: bool,
-    /// Taken since the last commit's superblock was handed to the device.
-    fresh: Runs,
-    /// Given up, and reached by a tree a mount may still find.
-    pending: Vec<(u64, u32)>,
-    op: Option<Op>,
-}
-
-/// Blocks only an operation that [`Reserve::Draw`]s may take while `shadow`
-/// is on, so a full volume still copies the nodes a delete or a shrink
-/// changes, as many as sixteen between two commits.
-pub const NODE_RESERVE: u64 = 16;
-
-/// Whether an operation may take the blocks [`NODE_RESERVE`] keeps: only one
-/// that leaves the tree no larger, so a commit gives back all it drew.
-#[derive(Clone, Copy, PartialEq, Eq)]
-pub enum Reserve {
-    Keep,
-    Draw,
-}
-
-/// The operation in progress: what it took, and what it gives up if it succeeds.
-struct Op {
-    reserve: Reserve,
-    taken: Runs,
-    given: Vec<(u64, u32)>,
-}
-
-/// Disjoint runs of blocks, by first block, to one past the last.
-#[derive(Default)]
-struct Runs(BTreeMap<u64, u64>);
-
-impl Runs {
-    fn insert(&mut self, start: u64, len: u64) {
-        self.0.insert(start, start + len);
-    }
-
-    fn contains(&self, block: u64) -> bool {
-        self.0.range(..=block).next_back().is_some_and(|(_, &end)| block < end)
-    }
-
-    /// Take `block` out, answering whether it was in.
-    fn remove(&mut self, block: u64) -> bool {
-        let Some((&start, &end)) = self.0.range(..=block).next_back() else { return false };
-        if block >= end {
-            return false;
-        }
-        self.0.remove(&start);
-        if start < block {
-            self.0.insert(start, block);
-        }
-        if block + 1 < end {
-            self.0.insert(block + 1, end);
-        }
-        true
-    }
 }
 
 impl BitmapAllocator {
-    /// The allocator of a mounted volume, its free count read off the bitmap:
-    /// the superblock's is the last commit's, and a stop after it leaves the
-    /// bitmap holding fewer.
-    pub fn open(io: &dyn BlockIO, sb: &Superblock) -> Result<Self, FsError> {
-        let mut free_blocks = 0;
-        let mut buf = BlockBuf::zeroed();
-        for i in 0..sb.block_count.div_ceil(BITS_PER_BLOCK) {
-            io.read(BlockNum::new(sb.bitmap_start.raw() + i), &mut buf)?;
-            let bits = (sb.block_count - i * BITS_PER_BLOCK).min(BITS_PER_BLOCK);
-            let (whole, rest) = buf.0[..bits.div_ceil(8) as usize].split_at((bits / 8) as usize);
-            free_blocks += whole.iter().map(|b| b.count_zeros() as u64).sum::<u64>();
-            free_blocks += rest.first().map_or(0, |b| (!b & ((1u8 << (bits % 8)) - 1)).count_ones() as u64);
-        }
-        Ok(Self {
-            bitmap_start: sb.bitmap_start,
-            bitmap_blocks: sb.bitmap_blocks,
-            total_blocks: sb.block_count,
-            free_blocks,
-            next_alloc: sb.next_alloc,
-            shadow: true,
-            fresh: Runs::default(),
-            pending: Vec::new(),
-            op: None,
-        })
-    }
-
-    /// Begin one operation on the tree, which [`Self::succeed`] or
-    /// [`Self::fail`] ends.
-    pub fn begin(&mut self, reserve: Reserve) {
-        let op = Op { reserve, taken: Runs::default(), given: Vec::new() };
-        assert!(self.op.replace(op).is_none(), "an operation began inside another");
-    }
-
-    /// What an allocation may take now: every free block, but for those
-    /// [`NODE_RESERVE`] keeps from all but an operation that draws on it.
-    fn spare(&self) -> u64 {
-        match !self.shadow || self.op.as_ref().is_some_and(|op| op.reserve == Reserve::Draw) {
-            true => self.free_blocks,
-            false => self.free_blocks.saturating_sub(NODE_RESERVE),
-        }
-    }
-
-    /// Whether a node at `block` may be written where it is.
-    pub fn in_place(&self, block: BlockNum) -> bool {
-        !self.shadow || self.op.as_ref().is_some_and(|op| op.taken.contains(block.raw()))
-    }
-
-    /// The operation took effect: what it gave up is given up now. A bit the
-    /// device would not clear is a leaked block, and no reason to call an
-    /// operation that took effect refused.
-    pub fn succeed(&mut self, io: &dyn BlockIO) {
-        let op = self.op.take().expect("an operation in progress");
-        for (start, count) in op.given {
-            let _ = self.give(io, start, count);
-        }
-    }
-
-    /// The operation was refused: every block it took is free again, and what
-    /// it would have given up stays its owner's. A bit the device would not
-    /// clear is a leaked block, and the refusal already in hand is the answer.
-    pub fn fail(&mut self, io: &dyn BlockIO) {
-        let op = self.op.take().expect("an operation in progress");
-        for (start, end) in op.taken.0 {
-            for block in start..end {
-                self.fresh.remove(block);
-                let _ = self.set_free(io, BlockNum::new(block));
-            }
-        }
-    }
-
-    /// A superblock naming the tree as it stands may land from here on, so
-    /// nothing taken so far is free at once when given up.
-    pub fn seal(&mut self) {
-        self.fresh = Runs::default();
-    }
-
-    /// Blocks given up that a commit landing makes free.
-    pub fn pending(&self) -> u64 {
-        self.pending.iter().map(|&(_, count)| count as u64).sum()
-    }
-
-    /// A commit landed: the blocks only an older tree reached are free.
-    pub fn committed(&mut self, io: &dyn BlockIO) -> Result<(), FsError> {
-        while let Some((start, count)) = self.pending.pop() {
-            for i in 0..count {
-                if let Err(e) = self.set_free(io, BlockNum::new(start + i as u64)) {
-                    self.pending.push((start + i as u64, count - i));
-                    return Err(e);
-                }
-            }
-        }
-        Ok(())
-    }
-
-    /// Give up `count` blocks from `start`: free now if no commit has named
-    /// them, and otherwise once the next one lands. A block whose bit the
-    /// device would not clear is leaked, and the rest are given up still.
-    fn give(&mut self, io: &dyn BlockIO, start: u64, count: u32) -> Result<(), FsError> {
-        let mut refused = Ok(());
-        for block in start..start + count as u64 {
-            if !self.shadow || self.fresh.remove(block) {
-                if let Err(e) = self.set_free(io, BlockNum::new(block)) {
-                    refused = refused.and(Err(e));
-                }
-            } else {
-                match self.pending.last_mut() {
-                    Some((at, n)) if *at + *n as u64 == block => *n += 1,
-                    _ => self.pending.push((block, 1)),
-                }
-            }
-        }
-        refused
-    }
-
     /// Where a block's bit lives, and which bit of that byte it is.
     fn bit_of(&self, block: BlockNum) -> (BlockNum, usize, u8) {
         let byte_idx = block.raw() / 8;
@@ -280,12 +96,8 @@ impl BitmapAllocator {
     /// The run is never empty and may be shorter than asked for, so every
     /// caller has to loop or has to be wrong.
     pub fn alloc_up_to(&mut self, io: &dyn BlockIO, from: u64, wanted: u32) -> Result<Run, FsError> {
-        let spare = self.spare();
-        if spare == 0 {
-            return Err(FsError::NoSpace { requested: wanted, available: 0 });
-        }
         // A zero-length run would let a caller's loop spin without progress.
-        let wanted = wanted.max(1).min(u32::try_from(spare).unwrap_or(u32::MAX));
+        let wanted = wanted.max(1);
         let (start, len) = self.longest_free_run(io, from % self.total_blocks, wanted)?;
         self.reserve(io, start, len.min(wanted))
     }
@@ -293,10 +105,6 @@ impl BitmapAllocator {
     /// Reserve all of `count` or nothing, for callers that cannot place a
     /// short run. Nothing is marked used unless the whole run is there.
     pub fn alloc_exact(&mut self, io: &dyn BlockIO, count: u32) -> Result<Run, FsError> {
-        let spare = self.spare();
-        if spare < count as u64 {
-            return Err(FsError::NoSpace { requested: count, available: spare });
-        }
         let (start, len) = self.longest_free_run(io, self.next_alloc, count)?;
         if len < count {
             return Err(FsError::NoSpace {
@@ -315,10 +123,6 @@ impl BitmapAllocator {
     fn reserve(&mut self, io: &dyn BlockIO, start: u64, len: u32) -> Result<Run, FsError> {
         let start_block = BlockNum::new(start);
         self.set_range_used(io, start_block, len as u64)?;
-        self.fresh.insert(start, len as u64);
-        if let Some(op) = &mut self.op {
-            op.taken.insert(start, len as u64);
-        }
         self.free_blocks -= len as u64;
         self.next_alloc = start + len as u64;
         if self.next_alloc >= self.total_blocks {
@@ -412,21 +216,17 @@ impl BitmapAllocator {
         Ok((start, best_count))
     }
 
-    /// Give up a contiguous range of blocks: inside an operation, once it
-    /// succeeds.
+    /// Free a contiguous range of blocks.
     pub fn free_range(
         &mut self,
         io: &dyn BlockIO,
         start: BlockNum,
         count: u32,
     ) -> Result<(), FsError> {
-        match &mut self.op {
-            Some(op) => {
-                op.given.push((start.raw(), count));
-                Ok(())
-            }
-            None => self.give(io, start.raw(), count),
+        for i in 0..count as u64 {
+            self.set_free(io, BlockNum::new(start.raw() + i))?;
         }
+        Ok(())
     }
 
     /// Initialize bitmap on disk: zero all bitmap blocks, then mark metadata blocks as used.
@@ -448,10 +248,6 @@ impl BitmapAllocator {
             total_blocks,
             free_blocks: total_blocks - metadata_blocks,
             next_alloc: metadata_blocks,
-            shadow: false,
-            fresh: Runs::default(),
-            pending: Vec::new(),
-            op: None,
         };
 
         // Metadata blocks (superblock, bitmap, journal area), and the backup
diff --git a/bcachefs/src/btree.rs b/bcachefs/src/btree.rs
index 5a616feb1..59e6ba3d8 100644
--- a/bcachefs/src/btree.rs
+++ b/bcachefs/src/btree.rs
@@ -365,24 +365,15 @@ fn write_entry(b: &mut [u8; BLOCK_SIZE], offset: usize, key: &Key, value: &[u8])
 /// child's subtree, so the answer is the last child whose key is `<= key`,
 /// defaulting to the first — which covers everything below the second key.
 fn find_child(children: &[Child], key: &Key) -> Option<BlockNum> {
-    children.get(child_index(children, key)).map(|c| c.block)
-}
-
-/// [`find_child`]'s answer as an index into `children`.
-fn child_index(children: &[Child], key: &Key) -> usize {
-    children.iter().take_while(|c| c.key <= *key).count().saturating_sub(1)
-}
-
-/// The block a node the operation in progress changed is written to: its
-/// own where [`BitmapAllocator::in_place`] allows, and otherwise a new one,
-/// the old given up.
-fn own(io: &dyn BlockIO, alloc: &mut BitmapAllocator, block: BlockNum) -> Result<BlockNum, FsError> {
-    if alloc.in_place(block) {
-        return Ok(block);
+    let mut chosen = children.first()?.block;
+    for child in children {
+        if child.key <= *key {
+            chosen = child.block;
+        } else {
+            break;
+        }
     }
-    let moved = alloc.alloc_block(io)?;
-    alloc.free_range(io, block, 1)?;
-    Ok(moved)
+    Some(chosen)
 }
 
 /// Search the B+ tree for an exact key match. Returns the leaf entry's value.
@@ -443,48 +434,27 @@ pub fn search_by_hash(
     }
 }
 
-/// Delete an exact key from the B+ tree: the root after it and the old value,
-/// or `None` with nothing written when no entry has the key.
+/// Delete an exact key from the B+ tree. Returns the old value if found.
 /// Does not merge underflowing nodes — just removes the entry from the leaf.
-pub fn delete(
-    io: &dyn BlockIO,
-    alloc: &mut BitmapAllocator,
-    root: BlockNum,
-    key: &Key,
-) -> Result<Option<(BlockNum, Vec<u8>)>, FsError> {
-    delete_recursive(io, alloc, root, Depth::ROOT, key)
-}
+pub fn delete(io: &dyn BlockIO, root: BlockNum, key: &Key) -> Result<Option<Vec<u8>>, FsError> {
+    let mut block = root;
+    let mut depth = Depth::ROOT;
 
-fn delete_recursive(
-    io: &dyn BlockIO,
-    alloc: &mut BitmapAllocator,
-    block: BlockNum,
-    depth: Depth,
-    key: &Key,
-) -> Result<Option<(BlockNum, Vec<u8>)>, FsError> {
-    match Node::read(io, block)? {
-        Node::Leaf(mut entries) => {
-            let Some(pos) = entries.iter().position(|e| e.key == *key) else {
-                return Ok(None);
-            };
-            let old = entries.remove(pos);
-            let at = own(io, alloc, block)?;
-            Node::Leaf(entries).write(io, at)?;
-            Ok(Some((at, old.value)))
-        }
-        Node::Interior { level, mut children } => {
-            let idx = child_index(&children, key);
-            let child = children.get(idx).ok_or(FsError::CorruptedNode(block))?.block;
-            let Some((moved, old)) = delete_recursive(io, alloc, child, depth.descend(block)?, key)? else {
-                return Ok(None);
-            };
-            if moved == child {
-                return Ok(Some((block, old)));
+    loop {
+        match Node::read(io, block)? {
+            Node::Leaf(mut entries) => {
+                let Some(pos) = entries.iter().position(|e| e.key == *key) else {
+                    return Ok(None);
+                };
+                let old = entries.remove(pos);
+                Node::Leaf(entries).write(io, block)?;
+                return Ok(Some(old.value));
+            }
+            Node::Interior { children, .. } => {
+                let next = find_child(&children, key).ok_or(FsError::CorruptedNode(block))?;
+                depth = depth.descend(block)?;
+                block = next;
             }
-            children[idx].block = moved;
-            let at = own(io, alloc, block)?;
-            Node::Interior { level, children }.write(io, at)?;
-            Ok(Some((at, old)))
         }
     }
 }
@@ -529,8 +499,7 @@ fn walk_recursive(
 
 /// Insert a key-value pair into the B+ tree.
 ///
-/// Returns the root block, which changes when the old root was split or
-/// written somewhere new.
+/// Returns the root block, which changes when the old root was split.
 pub fn insert(
     io: &dyn BlockIO,
     alloc: &mut BitmapAllocator,
@@ -539,29 +508,29 @@ pub fn insert(
 ) -> Result<BlockNum, FsError> {
     check_entry_fits(&entry)?;
 
-    let Placed { at, split } = insert_recursive(io, alloc, root, Depth::ROOT, entry)?;
-    if split.is_empty() {
-        return Ok(at);
+    match insert_recursive(io, alloc, root, Depth::ROOT, entry)? {
+        InsertResult::Done => Ok(root),
+        InsertResult::Split(siblings) => {
+            let level = Node::read(io, root)?
+                .level()
+                .checked_add(1)
+                .ok_or(FsError::CorruptedNode(root))?;
+            let old_min_key = min_key(io, root, Depth::ROOT)?;
+            let new_root_block = alloc.alloc_block(io)?;
+
+            let mut children = alloc::vec![Child { key: old_min_key, block: root }];
+            children.extend(siblings);
+            Node::Interior { level, children }.write(io, new_root_block)?;
+
+            Ok(new_root_block)
+        }
     }
-    let level = Node::read(io, at)?
-        .level()
-        .checked_add(1)
-        .ok_or(FsError::CorruptedNode(at))?;
-    let old_min_key = min_key(io, at, Depth::ROOT)?;
-    let new_root_block = alloc.alloc_block(io)?;
-
-    let mut children = alloc::vec![Child { key: old_min_key, block: at }];
-    children.extend(split);
-    Node::Interior { level, children }.write(io, new_root_block)?;
-
-    Ok(new_root_block)
 }
 
-/// Where an insert left a node: its block, and the siblings it split off, in
-/// key order.
-struct Placed {
-    at: BlockNum,
-    split: Vec<Child>,
+enum InsertResult {
+    Done,
+    /// The node split: these follow it, in key order.
+    Split(Vec<Child>),
 }
 
 fn insert_recursive(
@@ -570,7 +539,7 @@ fn insert_recursive(
     block: BlockNum,
     depth: Depth,
     entry: Entry,
-) -> Result<Placed, FsError> {
+) -> Result<InsertResult, FsError> {
     match Node::read(io, block)? {
         Node::Leaf(mut entries) => {
             match entries.binary_search_by(|e| e.key.cmp(&entry.key)) {
@@ -579,24 +548,32 @@ fn insert_recursive(
             }
             write_or_split(io, alloc, block, Node::Leaf(entries))
         }
-        Node::Interior { level, mut children } => {
-            let idx = child_index(&children, &entry.key);
+        Node::Interior { level, children } => {
+            let mut idx = 0;
+            for (i, child) in children.iter().enumerate() {
+                if child.key <= entry.key {
+                    idx = i;
+                } else {
+                    break;
+                }
+            }
             let child_block = children.get(idx).ok_or(FsError::CorruptedNode(block))?.block;
             let deeper = depth.descend(block)?;
 
-            let Placed { at, split } = insert_recursive(io, alloc, child_block, deeper, entry)?;
-            if at == child_block && split.is_empty() {
-                return Ok(Placed { at: block, split });
-            }
-            children[idx].block = at;
-            for sibling in split {
-                let pos = match children.binary_search_by(|c| c.key.cmp(&sibling.key)) {
-                    Ok(i) => i + 1,
-                    Err(i) => i,
-                };
-                children.insert(pos, sibling);
+            match insert_recursive(io, alloc, child_block, deeper, entry)? {
+                InsertResult::Done => Ok(InsertResult::Done),
+                InsertResult::Split(siblings) => {
+                    let mut children = children;
+                    for sibling in siblings {
+                        let pos = match children.binary_search_by(|c| c.key.cmp(&sibling.key)) {
+                            Ok(i) => i + 1,
+                            Err(i) => i,
+                        };
+                        children.insert(pos, sibling);
+                    }
+                    write_or_split(io, alloc, block, Node::Interior { level, children })
+                }
             }
-            write_or_split(io, alloc, block, Node::Interior { level, children })
         }
     }
 }
@@ -606,23 +583,20 @@ fn write_or_split(
     alloc: &mut BitmapAllocator,
     block: BlockNum,
     node: Node,
-) -> Result<Placed, FsError> {
-    let at = own(io, alloc, block)?;
+) -> Result<InsertResult, FsError> {
     if NODE_HEADER_SIZE + node.payload_size() <= BLOCK_SIZE {
-        node.write(io, at)?;
-        return Ok(Placed { at, split: Vec::new() });
+        node.write(io, block)?;
+        return Ok(InsertResult::Done);
     }
-    Ok(Placed { at, split: split_node(io, alloc, at, node)? })
+    split_node(io, alloc, block, node)
 }
 
-/// Split `node` across `block` and new siblings, answering the siblings. The
-/// blocks it took are the operation's, which gives them back if it fails.
 fn split_node(
     io: &dyn BlockIO,
     alloc: &mut BitmapAllocator,
     block: BlockNum,
     node: Node,
-) -> Result<Vec<Child>, FsError> {
+) -> Result<InsertResult, FsError> {
     match node {
         Node::Leaf(entries) => {
             // One entry is not a split problem. Halving by *count* used to
@@ -636,15 +610,28 @@ fn split_node(
 
             let mut nodes = pack(entries);
             let first = nodes.remove(0);
+            let mut blocks = Vec::with_capacity(nodes.len());
+            for _ in &nodes {
+                match alloc.alloc_block(io) {
+                    Ok(sibling) => blocks.push(sibling),
+                    Err(e) => {
+                        for taken in blocks {
+                            alloc.free_range(io, taken, 1)?;
+                        }
+                        return Err(e);
+                    }
+                }
+            }
+            // The siblings first: a failure before `block` is replaced leaves
+            // the tree as it was and blocks nothing names.
             let mut children = Vec::with_capacity(nodes.len());
-            for node in nodes {
-                let sibling = alloc.alloc_block(io)?;
+            for (node, sibling) in nodes.into_iter().zip(blocks) {
                 children.push(Child { key: node[0].key, block: sibling });
                 Node::Leaf(node).write(io, sibling)?;
             }
             Node::Leaf(first).write(io, block)?;
 
-            Ok(children)
+            Ok(InsertResult::Split(children))
         }
         Node::Interior { level, mut children } => {
             if children.len() < 2 {
@@ -662,7 +649,7 @@ fn split_node(
             Node::Interior { level, children }.write(io, block)?;
             Node::Interior { level, children: right }.write(io, right_block)?;
 
-            Ok(alloc::vec![Child { key: split_key, block: right_block }])
+            Ok(InsertResult::Split(alloc::vec![Child { key: split_key, block: right_block }]))
         }
     }
 }
@@ -819,8 +806,9 @@ mod tests {
         );
     }
 
-    /// A split that finds no block for a later sibling fails its operation,
-    /// which gives back the block it took for the earlier: nothing names it.
+    /// A split that finds no block for a later sibling gives back the ones it
+    /// took for the earlier: nothing names them yet, so nothing else frees
+    /// them.
     #[test]
     fn a_split_short_of_a_sibling_gives_back_the_ones_it_took() {
         let io = crate::block_io::VecBlockIO::new(16);
@@ -833,13 +821,10 @@ mod tests {
         let mut middle: Vec<Entry> = (0..40).map(|_| entry(72)).collect();
         middle.insert(20, entry(MAX_ENTRY_SIZE - KEY_HEADER_SIZE));
         assert_eq!(pack(middle.clone()).len(), 3, "two siblings, and a block for one");
-        alloc.begin(crate::alloc_bitmap::Reserve::Keep);
         assert!(matches!(
             split_node(&io, &mut alloc, leaf, Node::Leaf(middle)),
             Err(FsError::NoSpace { .. }),
         ));
-        assert_eq!(alloc.free_blocks, 0, "the first sibling took the last block");
-        alloc.fail(&io);
         assert_eq!(alloc.free_blocks, 1, "the first sibling's block went back");
     }
 
diff --git a/bcachefs/src/fs.rs b/bcachefs/src/fs.rs
index 7793060e7..e83a49d17 100644
--- a/bcachefs/src/fs.rs
+++ b/bcachefs/src/fs.rs
@@ -4,7 +4,7 @@ use alloc::vec::Vec;
 use core::marker::PhantomData;
 use core::ops::ControlFlow;
 
-use crate::alloc_bitmap::{BitmapAllocator, Reserve};
+use crate::alloc_bitmap::BitmapAllocator;
 use crate::block_io::{BlockBuf, BlockNum, BlockIO, BlockIOExt, DeviceError, BLOCK_SIZE};
 use crate::btree::{self, Entry, Key, KeyType, Node};
 use crate::superblock::{FsUuid, Superblock};
@@ -139,10 +139,12 @@ impl FsError {
 pub struct ReadOnly;
 pub struct ReadWrite;
 
-/// A formatted but not yet mounted filesystem. Used for building images
-/// (mkfs): written in place, since nothing it holds is committed before
-/// [`Formatted::into_io`].
-pub struct Formatted<IO: BlockIO>(Mounted<IO, ReadWrite>);
+/// A formatted but not yet mounted filesystem. Used for building images (mkfs).
+pub struct Formatted<IO: BlockIO> {
+    io: IO,
+    sb: Superblock,
+    alloc: BitmapAllocator,
+}
 
 /// A mounted filesystem. Mode is ReadOnly or ReadWrite.
 pub struct Mounted<IO: BlockIO, Mode = ReadWrite> {
@@ -410,8 +412,9 @@ fn decode_leaf_value(value: &[u8], volume_blocks: u64) -> Result<LeafValue, FsEr
 /// Allocate blocks and write `data` into them, returning the extent list.
 ///
 /// The allocator answers with a run that may be shorter than the request, so
-/// covering `data` takes a loop. A run reserved by an earlier turn of that loop
-/// is the operation's, which gives it back if a later turn fails.
+/// covering `data` takes a loop — and a run reserved by an earlier turn of that
+/// loop is a block the bitmap calls taken that no entry names, once a later
+/// turn fails. Every run goes back before the error does.
 fn write_data(
     io: &dyn BlockIO,
     alloc: &mut BitmapAllocator,
@@ -427,7 +430,10 @@ fn write_data(
     let mut data_offset = 0usize;
 
     while remaining > 0 {
-        let run = alloc.alloc_up_to(io, alloc.next_alloc, remaining)?;
+        let run = match alloc.alloc_up_to(io, alloc.next_alloc, remaining) {
+            Ok(run) => run,
+            Err(err) => return Err(give_back(io, alloc, &extents, err)),
+        };
         push_extent(&mut extents, run.start.raw(), run.len);
 
         let mut buf = BlockBuf::zeroed();
@@ -438,7 +444,9 @@ fn write_data(
                 let len = chunk_end - data_offset;
                 buf.0[..len].copy_from_slice(&data[data_offset..chunk_end]);
             }
-            io.write(BlockNum::new(run.start.raw() + i), &buf)?;
+            if let Err(err) = io.write(BlockNum::new(run.start.raw() + i), &buf) {
+                return Err(give_back(io, alloc, &extents, err));
+            }
             data_offset += BLOCK_SIZE;
         }
 
@@ -448,6 +456,24 @@ fn write_data(
     Ok(extents)
 }
 
+/// Hand back the runs a failed [`write_data`] had already reserved, and return
+/// the failure that stopped it.
+///
+/// Best effort by construction: this runs because something has already gone
+/// wrong, and a bitmap write that also fails has no better answer to give than
+/// the error already in hand.
+fn give_back(
+    io: &dyn BlockIO,
+    alloc: &mut BitmapAllocator,
+    extents: &[Extent],
+    err: FsError,
+) -> FsError {
+    for ext in extents {
+        let _ = alloc.free_range(io, BlockNum::new(ext.start_block), ext.block_count);
+    }
+    err
+}
+
 /// Read file data from a list of extents.
 ///
 /// **`size` sizes the `Vec` and `size` is a number off the disk**, so it is
@@ -549,44 +575,84 @@ impl<IO: BlockIO> Formatted<IO> {
 
         sb.write(&io)?;
 
-        Ok(Self(Mounted { io, sb, alloc, _mode: PhantomData }))
+        Ok(Self { io, sb, alloc })
     }
 
     /// Name this filesystem, so a role's kernel argument can select it.
     ///
     /// A separate act from formatting: a volume nothing names is legal, and
-    /// nothing here invents a name for one. Persisted by [`Self::into_io`].
+    /// nothing here invents a name for one. Persisted by [`Self::sync`], which
+    /// [`Self::into_io`] runs.
     pub fn set_uuid(&mut self, uuid: FsUuid) {
-        self.0.sb.uuid = uuid;
+        self.sb.uuid = uuid;
     }
 
     /// Create a file on the formatted filesystem (used during mkfs).
     pub fn create(&mut self, name: &str, data: &[u8], mtime: u64) -> Result<(), FsError> {
-        self.0.create(name, data, mtime)
+        if name.is_empty() || name.len() > MAX_NAME_LEN {
+            return Err(FsError::NameTooLong { len: name.len(), max: MAX_NAME_LEN });
+        }
+
+        let extents = write_data(&self.io, &mut self.alloc, data)?;
+        let value = encode_leaf_value(KeyType::File, name, data.len() as u64, mtime, &extents);
+        let key = make_key(&self.sb.hash_seed, name, KeyType::File);
+        let entry = Entry { key, value };
+
+        self.sb.root_node = btree::insert(&self.io, &mut self.alloc, self.sb.root_node, entry)?;
+
+        Ok(())
     }
 
     /// Create a symlink on the formatted filesystem.
     pub fn create_symlink(&mut self, name: &str, target: &str, mtime: u64) -> Result<(), FsError> {
-        self.0.put(name, KeyType::Symlink, target.as_bytes(), mtime)
+        if name.is_empty() || name.len() > MAX_NAME_LEN {
+            return Err(FsError::NameTooLong { len: name.len(), max: MAX_NAME_LEN });
+        }
+
+        let target_bytes = target.as_bytes();
+        let extents = write_data(&self.io, &mut self.alloc, target_bytes)?;
+        let value = encode_leaf_value(KeyType::Symlink, name, target_bytes.len() as u64, mtime, &extents);
+        let key = make_key(&self.sb.hash_seed, name, KeyType::Symlink);
+        let entry = Entry { key, value };
+
+        self.sb.root_node = btree::insert(&self.io, &mut self.alloc, self.sb.root_node, entry)?;
+
+        Ok(())
+    }
+
+    /// Finalize the filesystem: write superblock with clean flag.
+    pub fn sync(&mut self) -> Result<(), FsError> {
+        self.sb.free_blocks = self.alloc.free_blocks;
+        self.sb.next_alloc = self.alloc.next_alloc;
+        self.sb.set_clean(true);
+        self.sb.write(&self.io)?;
+        self.io.flush()
     }
 
     /// Mount this formatted filesystem for read-write access.
     pub fn mount(self) -> Mounted<IO, ReadWrite> {
-        let mut fs = self.0;
-        fs.alloc.shadow = true;
-        fs
+        Mounted {
+            io: self.io,
+            sb: self.sb,
+            alloc: self.alloc,
+            _mode: PhantomData,
+        }
     }
 
     /// Mount this formatted filesystem for read-only access.
     pub fn mount_readonly(self) -> Mounted<IO, ReadOnly> {
-        let Mounted { io, sb, alloc, .. } = self.0;
-        Mounted { io, sb, alloc, _mode: PhantomData }
+        Mounted {
+            io: self.io,
+            sb: self.sb,
+            alloc: self.alloc,
+            _mode: PhantomData,
+        }
     }
 
     /// Consume and return the underlying IO (for extracting the image bytes).
     pub fn into_io(mut self) -> Result<IO, FsError> {
-        self.0.sync()?;
-        Ok(self.0.io)
+        self.sync()?;
+        Ok(self.io)
     }
 }
 
@@ -596,7 +662,13 @@ impl<IO: BlockIO, Mode> Mounted<IO, Mode> {
     /// Open an existing filesystem from disk.
     pub fn open(io: IO) -> Result<Mounted<IO, Mode>, FsError> {
         let sb = Superblock::read(&io)?;
-        let alloc = BitmapAllocator::open(&io, &sb)?;
+        let alloc = BitmapAllocator {
+            bitmap_start: sb.bitmap_start,
+            bitmap_blocks: sb.bitmap_blocks,
+            total_blocks: sb.block_count,
+            free_blocks: sb.free_blocks,
+            next_alloc: sb.next_alloc,
+        };
         Ok(Mounted {
             io,
             sb,
@@ -731,9 +803,11 @@ impl<IO: BlockIO, Mode> Mounted<IO, Mode> {
 
     /// Convert back to Formatted state (for testing — insert more files after reading).
     pub fn into_formatted(self) -> Formatted<IO> {
-        let Self { io, sb, mut alloc, .. } = self;
-        alloc.shadow = false;
-        Formatted(Mounted { io, sb, alloc, _mode: PhantomData })
+        Formatted {
+            io: self.io,
+            sb: self.sb,
+            alloc: self.alloc,
+        }
     }
 
     /// Return the extents and file size for a file.
@@ -751,28 +825,6 @@ impl<IO: BlockIO, Mode> Mounted<IO, Mode> {
 
 // --- ReadWrite-only operations ---
 
-/// **Every change is one operation and every sync one commit.** An operation
-/// ([`Mounted::atomic`]) takes effect whole or, refused anywhere, leaves the
-/// tree and the allocator as they were; it never writes over a node the last
-/// commit's tree reaches, but to new blocks up to a new root. A commit
-/// ([`Mounted::sync`]) is both superblock copies naming that root landing on
-/// the device after everything the root reaches. A superblock's bytes lie in
-/// its first 512-byte sector, which a device writes whole, so killed anywhere
-/// each copy names the last commit's tree whole or the new one whole.
-///
-/// That is true of names, and of each entry's length and extents; not of a
-/// file's bytes. A page written over where the file already holds it
-/// ([`Mounted::resolve_or_alloc_block`]) is written in place, so a kill can
-/// leave a file's committed blocks holding pages from both sides of a write
-/// (`issues/a-write-over-a-files-committed-page-is-not-shadowed.md`). What a
-/// kill costs besides is the blocks taken since the last commit and those only
-/// the old tree reached: marked used, and named by no tree, until a sweep
-/// (`issues/a-crash-leaks-the-blocks-of-its-last-commit.md`).
-///
-/// A delete, and an update whose entry grows no longer, may take the blocks
-/// [`crate::alloc_bitmap::NODE_RESERVE`] keeps from every other change, so a
-/// full volume still shrinks, by as many committed nodes as the reserve holds
-/// between two commits (`issues/a-full-data-volume-frees-space-only-at-a-commit.md`).
 impl<IO: BlockIO> Mounted<IO, ReadWrite> {
     /// Create a file, replacing whatever answered to `name`.
     pub fn create(&mut self, name: &str, data: &[u8], mtime: u64) -> Result<(), FsError> {
@@ -784,28 +836,6 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
         self.put(name, KeyType::Symlink, target.as_bytes(), 0)
     }
 
-    /// Run `change` as one operation: whole, or refused with the root and
-    /// every block as they were.
-    fn atomic<T>(
-        &mut self,
-        reserve: Reserve,
-        change: impl FnOnce(&mut Self) -> Result<T, FsError>,
-    ) -> Result<T, FsError> {
-        let root = self.sb.root_node;
-        self.alloc.begin(reserve);
-        match change(self) {
-            Ok(done) => {
-                self.alloc.succeed(&self.io);
-                Ok(done)
-            }
-            Err(e) => {
-                self.sb.root_node = root;
-                self.alloc.fail(&self.io);
-                Err(e)
-            }
-        }
-    }
-
     /// Put `name` on the volume, displacing whatever answered to it.
     ///
     /// The new entry goes in before the old one comes out, for the reason
@@ -830,28 +860,21 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
             return Err(FsError::NameTooLong { len: name.len(), max: MAX_NAME_LEN });
         }
 
-        self.atomic(Reserve::Keep, |fs| {
-            let displaced = match fs.find_by_name(name)? {
-                Some((key, value)) => Some((key, fs.decode(&value)?.extents().to_vec())),
-                None => None,
-            };
-
-            let extents = write_data(&fs.io, &mut fs.alloc, data)?;
-            let value = encode_leaf_value(key_type, name, data.len() as u64, mtime, &extents);
-            let key = make_key(&fs.sb.hash_seed, name, key_type);
-            fs.sb.root_node = btree::insert(&fs.io, &mut fs.alloc, fs.sb.root_node, Entry { key, value })?;
+        let displaced = match self.find_by_name(name)? {
+            Some((key, value)) => Some((key, self.decode(&value)?.extents().to_vec())),
+            None => None,
+        };
 
-            fs.retire_displaced(displaced, key)
-        })
-    }
+        let extents = write_data(&self.io, &mut self.alloc, data)?;
+        let value = encode_leaf_value(key_type, name, data.len() as u64, mtime, &extents);
+        let key = make_key(&self.sb.hash_seed, name, key_type);
+        self.sb.root_node = btree::insert(
+            &self.io, &mut self.alloc,
+            self.sb.root_node,
+            Entry { key, value },
+        )?;
 
-    /// Remove `key`'s entry, if the tree has one.
-    fn remove(&mut self, key: &Key) -> Result<bool, FsError> {
-        let Some((root, _)) = btree::delete(&self.io, &mut self.alloc, self.sb.root_node, key)? else {
-            return Ok(false);
-        };
-        self.sb.root_node = root;
-        Ok(true)
+        self.retire_displaced(displaced, key)
     }
 
     /// Remove the entry the insert of `new_key` did not replace, and free the
@@ -867,9 +890,26 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
     ) -> Result<(), FsError> {
         let Some((old_key, old_extents)) = displaced else { return Ok(()) };
         if old_key != new_key {
-            self.remove(&old_key)?;
+            btree::delete(&self.io, self.sb.root_node, &old_key)?;
+        }
+        for ext in &old_extents {
+            self.alloc.free_range(&self.io, BlockNum::new(ext.start_block), ext.block_count)?;
         }
-        self.free_extents(&old_extents)
+        Ok(())
+    }
+
+    /// Delete a file or symlink by name. Returns true if found and deleted.
+    pub fn delete(&mut self, name: &str) -> Result<bool, FsError> {
+        self.delete_by_name(name)
+    }
+
+    /// Sync filesystem state to disk.
+    pub fn sync(&mut self) -> Result<(), FsError> {
+        self.sb.free_blocks = self.alloc.free_blocks;
+        self.sb.next_alloc = self.alloc.next_alloc;
+        self.sb.set_clean(true);
+        self.sb.write(&self.io)?;
+        self.io.flush()
     }
 
     /// Delete a file/symlink by name, freeing its data blocks. Returns true if found.
@@ -881,55 +921,32 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
     /// caller nothing had happened. It also answers it once for both key
     /// types, where the old shape fell through from File to Symlink after a
     /// non-matching removal and could take two entries out in one call.
-    pub fn delete(&mut self, name: &str) -> Result<bool, FsError> {
-        self.atomic(Reserve::Draw, |fs| {
-            let Some((key, value)) = fs.find_by_name(name)? else { return Ok(false) };
-            let extents = fs.decode(&value)?.extents().to_vec();
-
-            // `find_by_name` reached this key by the descent `btree::delete` is
-            // about to repeat, so an empty removal is not "no such file" — it is a
-            // tree that answers two ways.
-            if !fs.remove(&key)? {
-                return Err(FsError::CorruptedNode(fs.sb.root_node));
-            }
-            fs.free_extents(&extents)?;
-            Ok(true)
-        })
-    }
-
-    /// Commit the tree as it stands: see this block's header.
-    pub fn sync(&mut self) -> Result<(), FsError> {
-        self.io.flush()?;
-        // What the volume holds free once this commit's own frees are made.
-        self.sb.free_blocks = self.alloc.free_blocks + self.alloc.pending();
-        self.sb.next_alloc = self.alloc.next_alloc;
-        self.sb.set_clean(true);
-        // From the first superblock write on, this commit may be what a mount
-        // finds, even where the write is refused.
-        self.alloc.seal();
-        self.sb.write(&self.io)?;
-        self.io.flush()?;
-        self.alloc.committed(&self.io)
+    fn delete_by_name(&mut self, name: &str) -> Result<bool, FsError> {
+        let Some((key, value)) = self.find_by_name(name)? else { return Ok(false) };
+        let extents = self.decode(&value)?.extents().to_vec();
+
+        // `find_by_name` reached this key by the descent `btree::delete` is
+        // about to repeat, so an empty removal is not "no such file" — it is a
+        // tree that answers two ways.
+        if btree::delete(&self.io, self.sb.root_node, &key)?.is_none() {
+            return Err(FsError::CorruptedNode(self.sb.root_node));
+        }
+        for ext in &extents {
+            self.alloc.free_range(&self.io, BlockNum::new(ext.start_block), ext.block_count)?;
+        }
+        Ok(true)
     }
 
     /// Rename a file or symlink.
+    ///
+    /// The new entry goes in before the old one comes out, so a crash between
+    /// the two leaves the file under both names rather than under neither. What
+    /// that ordering costs is that the insert *is* the removal of whatever
+    /// `new_name` named — same name and same type is the same key, and
+    /// `btree::insert` replaces on an equal key — so the displaced entry has to
+    /// be read out of the tree before the insert. Asking for it afterwards, by
+    /// name, answers with the file that was just renamed and frees its extents.
     pub fn rename(&mut self, old_name: &str, new_name: &str) -> Result<(), FsError> {
-        self.rename_all(&[(old_name, new_name)])
-    }
-
-    /// Rename every `(old, new)` pair in turn, as one operation: a directory
-    /// is the names beneath it, and moves whole or not at all.
-    pub fn rename_all(&mut self, renames: &[(&str, &str)]) -> Result<(), FsError> {
-        self.atomic(Reserve::Keep, |fs| renames.iter().try_for_each(|&(old, new)| fs.rename_one(old, new)))
-    }
-
-    /// The new entry goes in before the old one comes out. What that ordering
-    /// costs is that the insert *is* the removal of whatever `new_name` named —
-    /// same name and same type is the same key, and `btree::insert` replaces on
-    /// an equal key — so the displaced entry has to be read out of the tree
-    /// before the insert. Asking for it afterwards, by name, answers with the
-    /// file that was just renamed and frees its extents.
-    fn rename_one(&mut self, old_name: &str, new_name: &str) -> Result<(), FsError> {
         // Every other name-taking entry point bounds its name; this one did
         // not, and `user_ptr::MAX_USER_STR` lets 64 KiB of it through.
         if new_name.is_empty() || new_name.len() > MAX_NAME_LEN {
@@ -965,7 +982,7 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
         // extent list. Nothing to delete when the two names share a key — the
         // entry under it is the one the insert just wrote.
         if new_key != old_key {
-            self.remove(&old_key)?;
+            btree::delete(&self.io, self.sb.root_node, &old_key)?;
         }
 
         Ok(())
@@ -979,27 +996,29 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
         size: u64,
         mtime: u64,
     ) -> Result<(), FsError> {
-        let (old_key, old_value) = self.find_by_name(name)?.ok_or(FsError::NotFound)?;
+        let (old_key, old_value) = self.find_by_name(name)?
+            .ok_or(FsError::NotFound)?;
         let leaf = self.decode(&old_value)?;
+
         let new_value = encode_leaf_value(old_key.key_type, leaf.name(), size, mtime, new_extents);
-        // An entry no longer than the one it replaces splits no node.
-        let reserve = match new_value.len() <= old_value.len() {
-            true => Reserve::Draw,
-            false => Reserve::Keep,
-        };
         let new_entry = Entry { key: old_key, value: new_value };
 
-        self.atomic(reserve, |fs| {
-            // No delete first: the key is unchanged and `btree::insert` replaces
-            // on an equal key. Blocks the caller drops from the extent list are
-            // the caller's to free, through [`Self::free_extents`], after this
-            // records the shortened list.
-            fs.sb.root_node = btree::insert(&fs.io, &mut fs.alloc, fs.sb.root_node, new_entry)?;
-            Ok(())
-        })
+        // No delete first. The key is unchanged and `btree::insert` replaces on
+        // an equal key, so the delete bought nothing and cost the file: a
+        // pre-check for `EntryTooLarge` does not cover `insert`'s other
+        // rejection, a split with no free block to split into, and that one
+        // left the entry deleted and never put back. Blocks the caller drops
+        // from the extent list are the caller's to free, through
+        // [`Self::free_extents`], after this records the shortened list.
+        self.sb.root_node = btree::insert(
+            &self.io, &mut self.alloc,
+            self.sb.root_node,
+            new_entry,
+        )?;
+        Ok(())
     }
 
-    /// Give `extents`' blocks back to the allocator. Record first, free second:
+    /// Return `extents`' blocks to the allocator. Record first, free second:
     /// the caller shortens the entry's list before calling this, so a failure
     /// between the two leaks blocks rather than leaving an entry naming freed
     /// ones.
--- a/userland/fileserver/src/data.rs	2026-10-09 18:00:09
+++ b/userland/fileserver/src/data.rs	2026-10-09 18:00:09
@@ -687,42 +687,38 @@
                 if to.starts_with(&format!("{from}/")) {
                     return Err(SyscallError::InvalidArgument);
                 }
-                // Every entry beneath, and the directory's own, in one
-                // operation of the format's: the directory moves whole or not at all.
+                // One entry at a time: the format has no rename of a prefix,
+                // so a kill in the middle leaves the directory in two halves,
+                // every entry under exactly one of its names.
                 let prefix = format!("{from}/");
                 let moving: Vec<(String, Kind)> = self
                     .names
-                    .get_key_value(from)
-                    .into_iter()
-                    .chain(self.names.range(prefix.clone()..).take_while(|(n, _)| n.starts_with(&prefix)))
+                    .range(prefix.clone()..)
+                    .take_while(|(n, _)| n.starts_with(&prefix))
                     .map(|(n, k)| (n.clone(), *k))
                     .collect();
-                for (name, _) in &moving {
+                for (name, kind) in &moving {
+                    let moved = format!("{to}/{}", &name[prefix.len()..]);
                     if let Some(node) = self.by_path.get(name).copied() {
                         self.persist(node)?;
                     }
-                }
-                let renames: Vec<(String, String)> = moving
-                    .iter()
-                    .map(|(name, kind)| {
-                        let moved = format!("{to}{}", &name[from.len()..]);
-                        match kind {
-                            Kind::Dir => (format!("{name}/"), format!("{moved}/")),
-                            _ => (name.clone(), moved),
-                        }
-                    })
-                    .collect();
-                let pairs: Vec<(&str, &str)> = renames.iter().map(|(a, b)| (a.as_str(), b.as_str())).collect();
-                mapped("rename", from, self.fs.rename_all(&pairs))?;
-                for (name, kind) in moving {
-                    let moved = format!("{to}{}", &name[from.len()..]);
-                    self.names.remove(&name);
-                    self.names.insert(moved.clone(), kind);
-                    if let Some(node) = self.by_path.remove(&name) {
+                    let (on_disk_from, on_disk_to) = match kind {
+                        Kind::Dir => (format!("{name}/"), format!("{moved}/")),
+                        _ => (name.clone(), moved.clone()),
+                    };
+                    mapped("rename", name, self.fs.rename(&on_disk_from, &on_disk_to))?;
+                    self.names.remove(name);
+                    self.names.insert(moved.clone(), *kind);
+                    if let Some(node) = self.by_path.remove(name) {
                         self.open.get_mut(&node).expect("indexed").path = moved.clone();
                         self.by_path.insert(moved, node);
                     }
                 }
+                if self.names.get(from) == Some(&Kind::Dir) {
+                    mapped("rename", from, self.fs.rename(&format!("{from}/"), &format!("{to}/")))?;
+                    self.names.remove(from);
+                    self.names.insert(to.to_string(), Kind::Dir);
+                }
                 Ok(())
             }
         }

@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

mkfs differential for #816 at 0c9c05c67 (3c280aa99 adds only an issue file): the same files in the same order through origin/main's crate (198a9d3, git archive origin/main bcachefs) and through this branch's, every image written by Formatted::into_io.

Inputs: kernel/src at origin/main (231 files, 24 symlinks, a split tree) and main's bcachefs/ (21 files, 3 symlinks), each on a 65536-block volume.

The scratch binary (one copy per crate, [dependencies] bcachefs = { path = ... })

//! mkfs differential: the same files, in the same order, through a crate's
//! `Formatted`, written as an image. Usage: <dir> <blocks> <out>
use std::path::Path;
use bcachefs::{Formatted, FsUuid, VecBlockIO};

fn walk(root: &Path, dir: &Path, out: &mut Vec<(String, Vec<u8>)>) {
    let mut entries: Vec<_> = std::fs::read_dir(dir).unwrap().map(|e| e.unwrap().path()).collect();
    entries.sort();
    for p in entries {
        if p.is_dir() {
            walk(root, &p, out);
        } else {
            out.push((p.strip_prefix(root).unwrap().to_str().unwrap().to_string(), std::fs::read(&p).unwrap()));
        }
    }
}

fn main() {
    let args: Vec<String> = std::env::args().collect();
    let root = Path::new(&args[1]);
    let blocks: u64 = args[2].parse().unwrap();
    let mut files = Vec::new();
    walk(root, root, &mut files);
    let mut fs = Formatted::format(VecBlockIO::new(blocks)).unwrap();
    for (name, data) in &files {
        fs.create(name, data, 0).unwrap();
    }
    let links: Vec<_> = files.iter().step_by(10).collect();
    for (i, (name, _)) in links.iter().enumerate() {
        fs.create_symlink(&format!("links/{i}"), name, 0).unwrap();
    }
    fs.set_uuid(FsUuid([7; 16]));
    std::fs::write(&args[3], fs.into_io().unwrap().into_vec()).unwrap();
    println!("{} files, {} symlinks", files.len(), links.len());
}

The command

for v in base new; do CARGO_TARGET_DIR=<scratch>/mkfs/target-$v cargo run --release --manifest-path <scratch>/mkfs/mkfs-$v/Cargo.toml -- <scratch>/mkfs/input/kernel/src 65536 <scratch>/mkfs/img-kernel-$v.bin; CARGO_TARGET_DIR=<scratch>/mkfs/target-$v cargo run --release --manifest-path <scratch>/mkfs/mkfs-$v/Cargo.toml -- <scratch>/mkfs/base/bcachefs 65536 <scratch>/mkfs/img-bcachefs-$v.bin; done; shasum -a 256 <scratch>/mkfs/img-*.bin; cmp img-kernel-base.bin img-kernel-new.bin; cmp img-bcachefs-base.bin img-bcachefs-new.bin

The log

head 0c9c05c6787bcecf7e64302c6789b8dc3f7012ba, base 198a9d38e572bbd7664fcec05700fdcb47269d1c
    Blocking waiting for file lock on package cache
     Locking 1 package to latest compatible version
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
   Compiling bcachefs v0.1.0 (<scratch>/mkfs/base/bcachefs)
   Compiling mkfs-base v0.0.0 (<scratch>/mkfs/mkfs-base)
    Finished `release` profile [optimized] target(s) in 1.54s
     Running `<scratch>/mkfs/target-base/release/mkfs-base <scratch>/mkfs/input/kernel/src 65536 <scratch>/mkfs/img-kernel-base.bin`
231 files, 24 symlinks
kernel base EXIT=0
    Finished `release` profile [optimized] target(s) in 0.00s
     Running `<scratch>/mkfs/target-base/release/mkfs-base <scratch>/mkfs/base/bcachefs 65536 <scratch>/mkfs/img-bcachefs-base.bin`
21 files, 3 symlinks
bcachefs base EXIT=0
     Locking 1 package to latest compatible version
   Compiling bcachefs v0.1.0 (<worktree>/bcachefs)
   Compiling mkfs-new v0.0.0 (<scratch>/mkfs/mkfs-new)
    Finished `release` profile [optimized] target(s) in 2.20s
     Running `<scratch>/mkfs/target-new/release/mkfs-new <scratch>/mkfs/input/kernel/src 65536 <scratch>/mkfs/img-kernel-new.bin`
231 files, 24 symlinks
kernel new EXIT=0
    Finished `release` profile [optimized] target(s) in 0.00s
     Running `<scratch>/mkfs/target-new/release/mkfs-new <scratch>/mkfs/base/bcachefs 65536 <scratch>/mkfs/img-bcachefs-new.bin`
21 files, 3 symlinks
bcachefs new EXIT=0
b4692a62ea0ac8a8ab787de8cb5af31af8c5f780969cb7479127cd592b480cad  <scratch>/mkfs/img-bcachefs-base.bin
b4692a62ea0ac8a8ab787de8cb5af31af8c5f780969cb7479127cd592b480cad  <scratch>/mkfs/img-bcachefs-new.bin
3383376928e31116123e59e68303af0bfc9f9523a73c2ae57eba1345cea80039  <scratch>/mkfs/img-kernel-base.bin
3383376928e31116123e59e68303af0bfc9f9523a73c2ae57eba1345cea80039  <scratch>/mkfs/img-kernel-new.bin
cmp kernel EXIT=0
cmp bcachefs EXIT=0

@Japabu Japabu changed the title A directory rename on DATA moves whole or not at all, and a sync is a commit a kill cannot tear DATA's filesystem commits atomically, a directory rename moves whole or not at all, and a full volume still shrinks Oct 9, 2026
@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

T14 at 3b43b834a, run by the orchestrator: boot:testcases, two boots, each image's sha256 checked against request.txt before its flash (testcases-watchdog a03f5d04…a9b5fa, testcases e1c7e13a…e02d9f), each toyos-metal --fat32-check exit 0; judge cargo test --test toyos-build -- --metal --metal-readback <dir> boot:testcases: EXIT=0, [metal] 249 passed, 0 failed, 2 boot(s); every boot created and wrote /state/<service> on DATA through the new commit path.

@Japabu

Japabu commented Oct 9, 2026 •

Copy link
Copy Markdown
Collaborator Author

Review of #816 at 3b43b83 (round 2). Net git diff --shortstat origin/main...3b43b834a: 10 files, +1257 −354. Production (bcachefs/src, and data.rs above its test module): about +493 −296. Tests: about +618 −58. Issues: +116. The production growth is the commit protocol, and I accept it.

Round-1 BLOCKERs

  • CLOSED: the crash model never tore a write or mounted from the backup. crash.rs:187-229 now tears blocks 0, N−1 and the bitmap at every 512-byte boundary, and mounts every state a second time with block 0 lost. The flush mutation I named exits 0 under this model (r-one-flush-after-both-copies.r2a.crash.log: 2 passed). The reason holds in the tree: superblock.rs:165-191 zero-fills the block and writes nothing past byte 122, so every sector tear lands the old copy or the new one. The model has teeth: m7 fails 4 of 2372 states and m8 1 of 2360, and only through a torn backup or a lost block 0 (mutations-r2a.log). Deleting the flush once it had been measured to change nothing is the right answer.
  • CLOSED: the volume could reach a state where no delete or shrink ever succeeds again. Both new tests exit 101 on the round-1 source (wedge-at-3adcf424e.log: NoSpace with 0 available and with 21 available) and pass at the head (wedge-head.log). m9, m10 and m11 each turn them red (mutations-final.log). The literal form of my test cannot hold, and the argument is right: a create pays for its data plus a copy of its path, both held against the reserve, so one freed block cannot buy one. Deleting every file and then creating one after a sync tests the claim instead.
  • CLOSED: the mkfs differential had no log. The comment shows both sha256 sums and cmp exit 0 for both inputs at 0c9c05c. I ran git diff 0c9c05c67 3b43b834a -- bcachefs userland/fileserver: it is empty. The base 198a9d3 is the merge base, and origin/main has not touched bcachefs/ since.
  • CLOSED: the T14 reading was owed. The orchestrator's comment of 18:57Z reads boot:testcases at 3b43b83: judge EXIT=0, 249 passed, 0 failed, 2 boot(s), and both images' sha256 sums match the body's request.txt (e1c7e13a…, a03f5d04…).

BLOCKER

  • bcachefs/src/alloc_bitmap.rs:288 — No test can fail if the reserve's clamp on multi-block data runs is removed. The body claims "the reserve is held against every allocation". Mutation to run: change let wanted = wanted.max(1).min(u32::try_from(spare).unwrap_or(u32::MAX)); to let wanted = wanted.max(1);. I expect cargo test -p bcachefs and cargo test -p fileserver --lib to stay green. Every fill in the suite asks for one block at a time (filled_to_the_last_name, one_block_holes, fragmented). The only multi-block request near the reserve is put's, and its own path copy refuses and rolls it back either way.
    • The defect still lands through resolve_or_alloc_block. It runs outside any operation, so nothing rolls it back. A sparse or multi-page write past a file's end takes every free block, including the reserve. If the new run is contiguous with the file's last extent, the entry does not grow, so update_metadata draws and succeeds, and the next sync commits a volume whose reserve is gone. From then on every delete gets NoSpace from own: the round-1 wedge, reached through data.
    • The test to add: on a volume filled until its spare is k > 0, extend one file with resolve_or_alloc_block to a page more than k past its end, so the run is contiguous; record it with update_metadata; sync; then run shrinks_and_deletes_and_takes_again. It must be green at the head and red under the patch.

NOTE

SEND BACK

Japabu and others added 2 commits October 9, 2026 21:01
…nd only a read-write mount counts the bitmap

The reserve's clamp in `alloc_up_to` had no test that could fail: every
fill in the suite asks for one block at a time. The new test grows a
one-block file, outside any operation, to a page past every block of a
volume whose free blocks all lie in one run after it, so the run is
contiguous and the entry that records it does not grow. With the clamp it
takes what the volume spares and is refused; without it, it takes the
reserve too, and the update that records the run is refused NoSpace.

`BitmapAllocator::open` read every bitmap block on every mount, the
kernel's read-only ROOT mount included, which never reads the free count.
The count moves to `count_free`, which only the read-write `open` calls;
the read-only mount takes the superblock's count, as it did before this
branch, and does no new work and gains no new refusal.

The leak issue's measurement is retaken with the run `crash.rs` makes at
this head: 40 one-block files after the rename, not one 9000-byte file;
284 blocks used where there were 190.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

Round-3 evidence at b028cc8

Paths are scrubbed: <worktree> is the branch's worktree, <scratch> the run's scratch directory.

Mutation matrix (mutations.log)

Runner: each patch git apply --checked, applied, cargo build -p bcachefs, cargo test -p bcachefs --no-fail-fast, cargo test -p fileserver --lib, reverted; the tree's status printed after (empty). m1 to m8, m10 and m11 are the round-2 patches (round-2 evidence) and applied unchanged. m9 is rewritten for the moved count, and m12 is new. The negative control is git diff b028cc83f 8e3a81374 -- bcachefs/src (every crate source file back at the merge base), plus the round-2 control's data.rs hunk unchanged.

head b028cc83f14d122d6629a2defb7b5d790654f2c4
negative-control-whole-change-reverted build EXIT=0 bcachefs EXIT=101 fileserver EXIT=101
m1-every-node-in-place build EXIT=0 bcachefs EXIT=101 fileserver EXIT=101
m2-no-flush-before-the-superblock build EXIT=0 bcachefs EXIT=101 fileserver EXIT=101
m3-committed-blocks-free-at-once build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
m4-a-refused-operation-keeps-its-root build EXIT=0 bcachefs EXIT=101 fileserver EXIT=101
m5-no-seal build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
m6-fileserver-renames-entry-by-entry build EXIT=0 bcachefs EXIT=0 fileserver EXIT=101
m7-the-root-past-the-first-sector build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
m8-the-backup-before-the-nodes-flush build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
m9-a-mount-takes-the-superblocks-count build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
m10-a-delete-keeps-the-reserve build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
m11-a-shrink-keeps-the-reserve build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
m12-data-takes-the-reserve build EXIT=0 bcachefs EXIT=101 fileserver EXIT=0
status after: []
RUN_EXIT=0

m12, the review's clamp mutation

--- a/bcachefs/src/alloc_bitmap.rs
+++ b/bcachefs/src/alloc_bitmap.rs
@@ -285,7 +285,7 @@ impl BitmapAllocator {
             return Err(FsError::NoSpace { requested: wanted, available: 0 });
         }
         // A zero-length run would let a caller's loop spin without progress.
-        let wanted = wanted.max(1).min(u32::try_from(spare).unwrap_or(u32::MAX));
+        let wanted = wanted.max(1);
         let (start, len) = self.longest_free_run(io, from % self.total_blocks, wanted)?;
         self.reserve(io, start, len.min(wanted))
     }

Red under it (m12-data-takes-the-reserve.bcachefs.log); every other test stays green:

99:test a_file_grown_past_what_the_volume_spares_leaves_the_reserve ... FAILED
154:thread 'a_file_grown_past_what_the_volume_spares_leaves_the_reserve' panicked at bcachefs/tests/integration.rs:1087:59:
155:the run recorded: NoSpace { requested: 1, available: 0 }
162:test result: FAILED. 56 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

Green at the head, alone (clamp-test-head.log, EXIT=0) and in the whole crate (bcachefs-head.log, EXIT=0).

m9, rewritten for the read-write count

--- a/bcachefs/src/fs.rs
+++ b/bcachefs/src/fs.rs
@@ -608,9 +608,7 @@ impl<IO: BlockIO> Mounted<IO, ReadWrite> {
     /// Open an existing filesystem from disk, to change; a mount that only
     /// reads never asks how much is free.
     pub fn open(io: IO) -> Result<Self, FsError> {
-        let mut fs = Self::read_superblock(io)?;
-        fs.alloc.count_free(&fs.io)?;
-        Ok(fs)
+        Self::read_superblock(io)
     }
 }
 
146:test a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds ... FAILED
154:thread 'a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds' panicked at bcachefs/tests/integration.rs:1054:46:
162:test result: FAILED. 56 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

The leak issue's measurement, retaken

A scratch test appended to bcachefs/tests/crash.rs, run with cargo test -p bcachefs --test crash scratch_leak_measure -- --nocapture (EXIT=0), then the file restored. It replays crash.rs's run (the rename, 40 one-block files, the commit) up to the write before the first superblock write, and counts the bitmap's used bits:

/// Scratch: the bitmap's used count before the run, and after it stopped just
/// before the first superblock write.
#[test]
fn scratch_leak_measure() {
    let image = staged();
    let used = |img: &[u8]| -> u32 {
        let sb = Superblock::read(&VecBlockIO::from_vec(img.to_vec())).expect("sb");
        let at = sb.bitmap_start.raw() as usize * BLOCK;
        (0..BLOCKS as usize).filter(|&b| img[at + b / 8] & (1 << (b % 8)) != 0).count() as u32
    };
    let mut fs = Mounted::<_, ReadWrite>::open(Logged::new(&image, None)).expect("mount");
    rename(&mut fs).expect("the rename");
    for i in 0..40 {
        fs.create(&format!("after{i}"), &[7; BLOCK], 2).expect("a change after it");
    }
    fs.sync().expect("the commit");
    let log = fs.io().log.replace(Vec::new());
    let first_sb = log.iter().position(|e| matches!(e, Event::Write(b, _) if *b == 0 || *b == BLOCKS - 1)).expect("a superblock write");
    let mut held = image.clone();
    for event in &log[..first_sb] {
        if let Event::Write(block, data) = event {
            let at = *block as usize * BLOCK;
            held[at..at + BLOCK].copy_from_slice(&data[..]);
        }
    }
    let renamed = Want::of(&image).held(held.clone());
    println!("MEASURE renamed {} base used {} held used {} of {}", renamed.is_ok() && !renamed.unwrap(), used(&image), used(&held), BLOCKS);
}
6:MEASURE renamed true base used 190 held used 284 of 512

renamed true here means the directory is whole under its old name, the run's answer for a stop before any superblock lands.

@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

Review of #816 at b028cc8 (round 3). Net git diff --shortstat origin/main...b028cc83f: 10 files, +1303 −362. Since 3b43b83: bcachefs/src +35 −29, one new 22-line test, an issue's measurement retaken, and a merge of main at 8e3a813 that touches no crate or fileserver byte.

Round-2 BLOCKER

  • CLOSED: no test could fail if the reserve's clamp on multi-block data runs was removed. a_file_grown_past_what_the_volume_spares_leaves_the_reserve (integration.rs:1076-1093) is the test I asked for: the run is contiguous with f00 (it asserts this), it goes through resolve_or_alloc_block, it is recorded with update_metadata, and it is synced and then shrunk and deleted. Green at the head (clamp-test-head.log; bcachefs-head.log: integration 57 passed). Red under my exact patch (m12-data-takes-the-reserve.bcachefs.log: panics at integration.rs:1087 with NoSpace { requested: 1, available: 0 }, 56 passed 1 failed), and every other suite stays green. It fails at the record rather than at the reserve assertion, because the path copy has nothing left to draw on. Either way that is the wedge reached through data. Also checked in round 3: the clamp is at alloc_bitmap.rs:293, mutations.log RUN_EXIT=0 with an empty status after, and the negative control and m1 to m11 re-measured with exits matching the body's table.

Round-2 NOTEs

BLOCKER

NOTE

SEND BACK

@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

T14 at b028cc83f, run by the orchestrator: boot:testcases, two boots, each image's sha256 checked against request.txt before its flash (testcases 76ba2071…19de2ca, testcases-watchdog 8ff7ab74…6c98a29), each toyos-metal --fat32-check exit 0; judge cargo test --test toyos-build -- --metal --metal-readback <dir> boot:testcases: EXIT=0, [metal] 249 passed, 0 failed, 2 boot(s).

@Japabu

Japabu commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

Reposted by the orchestrator with the T14's model and firmware strings masked; the text is otherwise the reviewer's (original comment 6087785084, deleted because GitHub keeps edit history).

Review of #816 at b028cc8 (round 4, head unchanged since round 3).

Round-3 BLOCKER

  • CLOSED: the T14 reading at b028cc8. In dirrename/metal-r3/request.txt, staged at b028cc8, the two images hash to testcases 76ba2071…2519de2ca and testcases-watchdog 8ff7ab74…a9d086c98a29. The orchestrator's run log records boot rc=0 for each boot, with the same two sha256s. Each boot log runs toyos-metal … --fat32-check and ends toyos-fat32-check: the log partition's 35651584 bytes check out. boot.txt reads the T14's vendor, product and firmware (masked), for both boots, and both verdict.txt files read passed. In judge.log, from the judge command named in request.txt, the summary is [metal] 249 passed, 0 failed, 2 boot(s), and the run log has judge EXIT=0. This is the condition I set, and it is met.

BLOCKER

None.

NOTE

LAND AFTER NAMED CHANGES

#808 carried issues/a-directory-rename-on-data-is-not-atomic.md and cited
it in stage 4 of the package track. This branch closes it, so the merge
deletes the file and the citation; a search for the bare name finds
nothing. No other conflict.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 logs for #816 at the merge head b693474e2 (merge of origin/main at 9b691dd). Home-directory paths read ~ and <src>. Exits, from run.sh (each cmd > log 2>&1; echo EXIT=$?):

b693474e287a62de87c0f99d2ec4bd13546f8498
bcachefs EXIT=0
fileserver EXIT=0
host EXIT=0
build-only EXIT=0
guest EXIT=0
DONE
start:  8:18  up 10 days, 20:02, 6 users, load averages: 43.62 44.08 29.37
end:    8:20  up 10 days, 20:05, 6 users, load averages: 43.21 45.28 32.20
cargo test -p bcachefs --no-fail-fast
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 3.90s
     Running unittests src/lib.rs (target/debug/deps/bcachefs-dd31ce931b3f7dd7)

running 72 tests
test block_io::image_bounds::a_block_number_whose_byte_offset_wraps_is_refused_and_does_not_panic ... ok
test block_io::image_bounds::a_block_past_the_end_is_refused_rather_than_read ... ok
test block_io::image_bounds::a_block_that_starts_inside_and_ends_outside_is_refused ... ok
test block_io::image_bounds::every_block_the_image_holds_is_served_whole ... ok
test block_io::image_bounds::an_empty_image_holds_no_block_at_all ... ok
test btree::tests::a_descent_gives_up_before_it_runs_out_of_stack ... ok
test btree::tests::an_entry_larger_than_the_payload_is_refused ... ok
test btree::tests::a_crafted_entry_count_never_reaches_the_allocator ... ok
test btree::tests::a_child_pointer_off_the_device_is_refused ... ok
test btree::tests::an_interior_child_shorter_than_a_block_number_is_refused ... ok
test btree::tests::a_split_short_of_a_sibling_gives_back_the_ones_it_took ... ok
test btree::tests::write_to_refuses_an_overfull_node_instead_of_underflowing ... ok
test btree::tests::pack_fills_each_node_in_order_and_none_past_a_block ... ok
test crc32c::tests::known_vectors ... ok
test btree::tests::an_interior_node_with_no_children_is_refused ... ok
test crc32c::tests::zeroes ... ok
test fs::tests::a_bitmap_outside_the_volume_is_refused ... ok
test fs::tests::a_bitmap_too_small_to_cover_the_volume_is_refused ... ok
test fs::tests::a_block_allocated_to_bridge_a_gap_reads_as_zeros ... ok
test fs::tests::a_child_pointer_past_the_end_of_the_device_is_refused ... ok
test fs::tests::a_delete_of_a_name_that_is_not_here_destroys_nothing ... ok
test fs::tests::a_file_naming_more_blocks_than_the_volume_has_is_refused ... ok
test fs::tests::a_file_ending_in_a_hole_still_reads_as_zeros ... ok
test fs::tests::a_page_resolved_against_an_extent_at_the_end_of_the_address_space_is_total ... ok
test fs::tests::a_run_ending_on_the_volumes_last_block_is_accepted ... ok
test fs::tests::a_shortened_record_gives_its_tail_back ... ok
test fs::tests::a_size_inside_the_volume_but_over_the_ceiling_never_reaches_the_allocator ... ok
test fs::tests::a_size_longer_than_the_volume_never_reaches_the_allocator ... ok
test fs::tests::a_superblock_claiming_more_blocks_than_the_device_has_is_refused ... ok
test fs::tests::a_volume_copied_onto_a_larger_device_does_not_mount ... ok
test fs::tests::a_root_that_points_at_itself_is_refused_not_followed ... ok
test fs::tests::an_extent_outside_the_volume_is_refused_before_the_bitmap_is_touched ... ok
test fs::tests::an_extent_past_the_end_of_the_volume_is_refused ... ok
test fs::tests::an_interior_value_too_short_for_a_block_number_is_refused ... ok
test fs::tests::an_untampered_volume_still_mounts_and_reads ... ok
test upstream::bkey::tests::a_field_past_its_unpacked_width_is_refused_not_truncated ... ok
test upstream::bkey::tests::a_field_wider_than_the_one_it_fills_is_refused ... ok
test upstream::bkey::tests::a_key_that_does_not_fit_is_refused ... ok
test upstream::bkey::tests::a_truncated_format_is_refused ... ok
test upstream::bkey::tests::field_fit_vectors ... ok
test fs::tests::is_dir_over_a_corrupt_node_is_refused ... ok
test upstream::bkey::tests::format_vectors ... ok
test upstream::bkey::tests::the_identity_format_is_the_unpacked_one ... ok
test upstream::bkey::tests::the_identity_format_round_trips_a_position ... ok
test upstream::bkey::tests::unpack_vectors ... ok
test upstream::csum::tests::encryption_csum_types_are_refused_by_name ... ok
test upstream::csum::tests::published_check_values ... ok
test fs::tests::is_dir_is_a_name_beneath ... ok
test upstream::csum::tests::xxh64_covers_every_tail ... ok
test upstream::fs::tests::a_crc_entry_states_the_extent_it_covers ... ok
test upstream::fs::tests::a_file_longer_than_its_device_is_refused_without_allocating_it ... ok
test upstream::fs::tests::an_entry_before_the_checksum_does_not_move_the_pointer ... ok
test upstream::fs::tests::an_entry_this_volume_cannot_size_is_refused ... ok
test upstream::fs::tests::dirent_vectors ... ok
test upstream::node::tests::a_node_that_is_not_the_one_asked_for_is_refused ... ok
test upstream::node::tests::the_crafted_node_is_accepted ... ok
test upstream::raw::tests::a_short_window_refuses_by_name ... ok
test upstream::raw::tests::an_offset_that_would_wrap_refuses ... ok
test upstream::raw::tests::bitmask_matches_upstreams_accessor ... ok
test upstream::node::tests::a_key_longer_than_its_bset_is_refused ... ok
test upstream::sb::fixture::a_clean_section_shorter_than_its_header_is_refused ... ok
test upstream::sb::fixture::a_huge_u64s_is_refused_without_allocating_it ... ok
test upstream::node::tests::a_bset_this_filesystem_did_not_write_is_refused ... ok
test upstream::sb::fixture::a_member_bigger_than_its_device_is_refused ... ok
test upstream::sb::fixture::a_volume_without_a_clean_section_is_refused_by_name ... ok
test upstream::sb::fixture::the_crafted_superblock_is_accepted ... ok
test upstream::node::tests::a_bset_longer_than_its_node_is_refused ... ok
test upstream::sb::fixture::the_interim_reader_rejects_bcachefs_s_magic ... ok
test upstream::sb::fixture::a_superblock_that_is_not_this_ones_is_refused ... ok
test upstream::sb::fixture::every_unsupported_format_feature_is_refused_by_name ... ok
test fs::tests::is_dir_over_a_split_root_finds_every_directory ... ok
test fs::tests::a_tree_past_the_ceiling_is_refused_before_it_materialises ... ok

test result: ok. 72 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.92s

     Running tests/crash.rs (target/debug/deps/crash-e98227d3fa9db16d)

running 2 tests
test a_directory_rename_is_whole_under_one_name_whichever_write_is_refused ... ok
test a_directory_rename_is_whole_under_one_name_wherever_the_device_stops ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.54s

     Running tests/integration.rs (target/debug/deps/integration-b9da2c39aca32c0f)

running 57 tests
test a_btree_node_the_device_refuses_is_not_a_node_of_zeros ... ok
test a_filesystems_name_round_trips_through_its_superblock ... ok
test a_refused_sync_stays_refused_through_the_filesystem ... ok
test a_block_zero_the_device_refuses_does_not_fall_through_to_the_backup ... ok
test a_rename_of_a_symlink_stays_a_symlink ... ok
test a_file_renamed_onto_a_symlink_leaves_one_entry ... ok
test a_rename_carries_the_file_to_the_new_name ... ok
test a_data_block_the_device_refuses_is_not_a_page_of_zeros ... ok
test a_rename_onto_itself_keeps_the_file ... ok
test a_file_grown_past_what_the_volume_spares_leaves_the_reserve ... ok
test a_sparse_write_resolves_inside_the_blocks_it_reserved ... ok
test a_value_too_large_for_any_node_is_an_error_not_a_panic ... ok
test a_file_past_the_old_extent_cap_round_trips ... ok
test a_rename_with_no_source_touches_nothing ... ok
test bad_magic_alone_disowns_the_volume ... ok
test a_create_that_runs_out_of_space_leaves_the_old_file_where_it_was ... ok
test a_sequential_file_needs_one_extent ... ok
test a_write_the_device_refuses_is_reported_and_gives_its_blocks_back ... ok
test corrupt_data_block_returns_raw_bytes ... ok
test bad_magic_means_no_copy_claims_the_volume ... ok
test a_renamed_file_keeps_every_extent_it_had ... ok
test crc_verification_on_nodes ... ok
test dangling_symlink_allowed ... ok
test duplicate_filename_overwrites ... ok
test empty_file ... ok
test create_single_small_file ... ok
test every_page_of_a_fragmented_file_owns_a_distinct_block ... ok
test create_multiple_files ... ok
test format_and_mount_empty ... ok
test file_not_found ... ok
test file_mtime_nonexistent ... ok
test large_file_exact_block_boundary ... ok
test format_mount_unmount_create_mount_roundtrip ... ok
test large_file_crosses_block_boundary ... ok
test long_filename_near_entry_limit ... ok
test list_includes_symlinks ... ok
test large_file_single_extent ... ok
test mounted_readwrite_create_and_read ... ok
test filesystem_full_returns_no_space ... ok
test mounted_readwrite_overwrite_file ... ok
test mounted_readwrite_delete ... ok
test mounted_readwrite_overwrite_with_smaller_data ... ok
test mounted_readwrite_double_roundtrip ... ok
test a_rename_onto_an_existing_name_frees_that_file_and_only_it ... ok
test mounted_readwrite_symlink ... ok
test mounted_readwrite_sync_and_reopen ... ok
test zero_length_filename_rejected ... ok
test superblock_backup_recovery ... ok
test rename_bounds_the_new_name ... ok
test read_link ... ok
test a_metadata_update_that_cannot_be_reinserted_leaves_the_entry_alone ... ok
test a_write_that_runs_out_of_space_gives_back_what_it_took ... ok
test many_files_with_large_data ... ok
test entries_of_mixed_size_survive_node_splits ... ok
test a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds ... ok
test a_volume_full_of_empty_names_still_deletes_and_frees ... ok
test incremental_insert_and_read ... ok

test result: ok. 57 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/upstream_fixture.rs (target/debug/deps/upstream_fixture-d7fa786868950279)

running 2 tests
test a_path_the_volume_does_not_hold_reads_back_as_absent ... ok
test the_upstream_volume_reads_back_as_what_upstream_wrote ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests bcachefs

running 2 tests
test bcachefs/src/block_io.rs - block_io::DeviceError (line 62) - compile fail ... ok
test bcachefs/src/block_io.rs - block_io::DeviceError (line 66) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

cargo test -p fileserver --lib
   Compiling toyos v0.18.0 (<src>/toyos-dirrename/toyos)
   Compiling toyos-manifest v0.1.0 (<src>/toyos-dirrename/toyos-manifest)
   Compiling diskserver v0.0.0 (<src>/toyos-dirrename/userland/diskserver)
   Compiling fileserver v0.0.0 (<src>/toyos-dirrename/userland/fileserver)
    Finished `test` profile [optimized + debuginfo] target(s) in 2.50s
     Running unittests src/lib.rs (target/debug/deps/fileserver-eb78af729d24b848)

running 39 tests
test cache::tests::a_write_past_the_disk_is_refused ... ok
test cache::tests::a_write_reaches_the_disk_at_the_flush_and_not_before ... ok
test cache::tests::contiguous_misses_are_one_request_and_a_second_read_is_none ... ok
test cache::tests::dirty_runs_go_out_in_runs ... ok
test data::tests::a_file_reads_back_what_was_written_across_pages_and_holes ... ok
test data::tests::a_file_unlinked_while_open_answers_gone ... ok
test data::tests::a_shrink_zeroes_what_it_cut_and_regrowth_reads_zeros ... ok
test data::tests::a_closed_file_keeps_its_length_across_a_remount ... ok
test data::tests::data_is_one_partition_counted_over_both_sources ... ok
test data::tests::a_rename_moves_an_open_file_and_a_directory_with_its_contents ... ok
test data::tests::directories_are_listed_and_refuse_what_posix_refuses ... ok
test fat::tests::a_device_error_is_io_and_not_not_found ... ok
test data::tests::an_entry_refused_costs_only_its_own_file ... ok
test fat::tests::a_partial_write_over_an_unreadable_block_writes_nothing ... ok
test fat::tests::a_refused_read_is_an_error_and_never_zeros ... ok
test resolve::tests::a_cycle_is_refused_and_not_followed_for_ever ... ok
test resolve::tests::a_link_that_stays_inside_by_going_up_and_back_resolves ... ok
test resolve::tests::a_relative_link_is_read_against_its_own_directory ... ok
test resolve::tests::an_empty_target_names_nothing ... ok
test resolve::tests::no_link_climbs_out_of_the_root ... ok
test resolve::tests::a_plain_path_lands_under_the_root ... ok
test resolve::tests::an_absolute_link_is_handed_back_with_the_rest_of_the_path ... ok
test rights::tests::a_request_the_wire_does_not_have_is_neither ... ok
test rights::tests::every_request_that_writes_changes_the_directory_and_none_that_reads_does ... ok
test resolve::tests::the_last_link_is_left_alone_when_asked ... ok
test rights::tests::an_open_changes_the_directory_by_every_flag_but_read ... ok
test volume::tests::the_anchor_is_the_kernels ... ok
test volume::tests::a_clock_that_always_straddles_is_refused_by_name - should panic ... ok
test writeback::tests::a_sync_that_left_a_file_unwritten_is_due_again ... ok
test data::tests::a_directory_rename_the_format_refuses_part_way_moves_nothing ... ok
test data::tests::a_refused_rename_over_an_open_file_keeps_its_unsynced_writes ... ok
test data::tests::a_write_its_entry_could_not_name_is_refused_and_every_accepted_one_kept ... ok
test cache::tests::at_the_dirty_limit_a_refused_flush_refuses_the_write_and_the_cache_grows_no_larger ... ok
test cache::tests::clean_blocks_are_bounded_and_dirty_ones_are_kept ... ok
test data::tests::every_file_reads_back_as_a_plain_map_of_its_accepted_writes ... ok
test fat::tests::an_unreadable_entry_is_io_and_not_undated ... ok
test fat::tests::a_file_that_will_not_level_costs_only_its_own_file ... ok
test data::tests::a_directory_rename_is_whole_under_one_name_wherever_the_server_is_killed ... ok
test data::tests::a_directory_rename_is_whole_under_one_name_whichever_write_is_refused ... ok

test result: ok. 39 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.31s

cargo run -- --build-only
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.27s
     Running `target/debug/toyos-build --build-only`
06:17:15 external deps changed: cleaning <src>/toyos-dirrename/target/aarch64-unknown-toyos
06:17:16 external deps changed: cleaning <src>/toyos-dirrename/target/x86_64-unknown-toyos
    Blocking waiting for file lock on package cache
    Finished `toyos` profile [optimized + debuginfo] target(s) in 0.47s
   Compiling toyos-update v0.1.0 (<src>/toyos-dirrename/toyos-update)
   Compiling bootloader v0.1.0 (<src>/toyos-dirrename/bootloader)
    Finished `toyos` profile [optimized + debuginfo] target(s) in 7.91s
    Blocking waiting for file lock on package cache
   Compiling toyos-abi v0.16.0 (<src>/toyos-dirrename/toyos-abi)
   Compiling cfg-if v1.0.4
   Compiling typenum v1.20.1
   Compiling subtle v2.6.1
   Compiling zeroize v1.9.0
   Compiling cmov v0.5.3
   Compiling rand_core v0.10.0
   Compiling cpufeatures v0.2.17
   Compiling getrandom v0.4.2 (https://github.com/ToyOSOrg/getrandom?branch=toyos-0.4#f0286c8b)
   Compiling generic-array v0.14.7
   Compiling const-oid v0.10.2
   Compiling num-traits v0.2.19
   Compiling base64ct v1.8.3
   Compiling const-oid v0.9.6
   Compiling cpubits v0.1.0
   Compiling cpufeatures v0.3.0
   Compiling toyos-keymap v0.1.0 (<src>/toyos-dirrename/toyos-keymap)
   Compiling simd-adler32 v0.3.10
   Compiling toyos-font v0.2.0 (<src>/toyos-dirrename/userland/toyos-font)
   Compiling adler2 v2.0.1
   Compiling pin-project-lite v0.2.17
   Compiling crc32fast v1.5.0
   Compiling bitflags v2.11.0
   Compiling miniz_oxide v0.9.1
   Compiling rustcrypto-ff v0.14.0-rc.1
   Compiling memchr v2.8.0
   Compiling ctutils v0.4.2
   Compiling smallvec v1.15.1
   Compiling base16ct v1.0.0
   Compiling log v0.4.29
   Compiling rustcrypto-group v0.14.0-rc.1
   Compiling zerocopy v0.8.47
   Compiling toyos-untrusted v0.1.0 (<src>/toyos-dirrename/toyos-untrusted)
   Compiling opaque-debug v0.3.1
   Compiling bytes v1.12.1
   Compiling arrayvec v0.7.8
   Compiling bytemuck v1.25.0
   Compiling pem-rfc7468 v1.0.0
   Compiling float-cmp v0.9.0
   Compiling libm v0.2.16
   Compiling toyos-wallclock v0.1.0 (<src>/toyos-dirrename/toyos-wallclock)
   Compiling strict-num v0.1.1
   Compiling toyos-net-wire v0.1.0 (<src>/toyos-dirrename/toyos-net-wire)
   Compiling arrayref v0.3.9
   Compiling tracing-core v0.1.36
   Compiling tiny-skia-path v0.12.0
   Compiling kurbo v0.13.0
   Compiling serde_core v1.0.228
   Compiling getrandom v0.2.17 (https://github.com/ToyOSOrg/getrandom?branch=toyos-0.2-sdk-0.12#2092d1cc)
   Compiling rand_core v0.6.4
   Compiling toyos v0.18.0 (<src>/toyos-dirrename/toyos)
   Compiling der v0.8.0
   Compiling flate2 v1.1.10
   Compiling hybrid-array v0.4.8
   Compiling num-integer v0.1.46
   Compiling toyos-manifest v0.1.0 (<src>/toyos-dirrename/toyos-manifest)
   Compiling tracing v0.1.44
   Compiling toyos-inspect v0.1.0 (<src>/toyos-dirrename/toyos-inspect)
   Compiling pem-rfc7468 v0.7.0
   Compiling toyos-transport v0.1.0 (<src>/toyos-dirrename/toyos-blockring/transport)
   Compiling toyos-window v0.20.0 (<src>/toyos-dirrename/userland/toyos-window)
   Compiling miniz_oxide v0.8.9
   Compiling fdeflate v0.3.7
   Compiling toyos-blockhold v0.1.0 (<src>/toyos-dirrename/toyos-blockhold)
   Compiling siphasher v1.0.2
   Compiling futures-core v0.3.32
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling block-padding v0.3.3
   Compiling universal-hash v0.5.1
   Compiling futures-sink v0.3.32
   Compiling digest v0.10.7
   Compiling polyval v0.6.2
   Compiling raw-window-handle v0.6.2 (https://github.com/ToyOSOrg/raw-window-handle?branch=toyos-0.6.2#2a5d102b)
   Compiling inout v0.1.4
   Compiling cipher v0.4.4
   Compiling ghash v0.5.1
   Compiling png v0.18.1
   Compiling futures-channel v0.3.32
   Compiling sha2 v0.10.9
   Compiling hmac v0.12.1
   Compiling svgtypes v0.16.1
   Compiling aead v0.5.2
   Compiling ctr v0.9.2
   Compiling aes v0.8.4
   Compiling spki v0.8.0-rc.4
   Compiling serde v1.0.228
   Compiling ssh-encoding v0.2.0
   Compiling toyos-blockring v0.1.0 (<src>/toyos-dirrename/toyos-blockring)
   Compiling curve25519-dalek v4.1.3
   Compiling curve25519-dalek v5.0.0-pre.6
   Compiling winit v0.30.13 (https://github.com/ToyOSOrg/winit?branch=toyos-0.30.13#f58e1f3b)
   Compiling roxmltree v0.21.1
   Compiling crypto-common v0.2.1
   Compiling block-buffer v0.12.0
   Compiling block-padding v0.4.2
   Compiling crypto-bigint v0.7.3
   Compiling inout v0.2.2
   Compiling sec1 v0.8.1
   Compiling simplecss v0.2.2
   Compiling futures-io v0.3.32
   Compiling spin v0.9.8
   Compiling byteorder v1.5.0
   Compiling imagesize v0.14.0
   Compiling futures-task v0.3.32
   Compiling toyos-gpt v0.1.0 (<src>/toyos-dirrename/toyos-gpt)
   Compiling smol_str v0.2.2
   Compiling xmlwriter v0.1.0
   Compiling pico-args v0.5.0
   Compiling slab v0.4.12
   Compiling dpi v0.1.1 (https://github.com/ToyOSOrg/winit?branch=toyos-0.30.13#f58e1f3b)
   Compiling strength_reduce v0.2.4
   Compiling cursor-icon v1.2.0
   Compiling base64 v0.22.1
   Compiling signature v2.2.0
   Compiling data-url v0.3.2
   Compiling ed25519 v2.2.3
   Compiling transpose v0.2.3
   Compiling futures-util v0.3.32
   Compiling blowfish v0.9.1
   Compiling tiny-skia v0.12.0
   Compiling digest v0.11.1
   Compiling cipher v0.5.1
   Compiling hmac v0.13.0-rc.5
   Compiling universal-hash v0.6.1
   Compiling pbkdf2 v0.13.0-rc.9
   Compiling polyval v0.7.1
   Compiling sha2 v0.11.0-rc.5
   Compiling aes v0.9.0-rc.4
   Compiling ctr v0.10.0-rc.4
   Compiling salsa20 v0.11.0
   Compiling ghash v0.6.0
   Compiling aead v0.6.0-rc.10
   Compiling cbc v0.2.0-rc.4
   Compiling signature v3.0.0-rc.10
   Compiling hkdf v0.13.0-rc.5
   Compiling rfc6979 v0.5.0-rc.5
   Compiling usvg v0.47.0
   Compiling num-bigint-dig v0.8.6
   Compiling lazy_static v1.5.0
   Compiling aes-gcm v0.11.0-rc.3
   Compiling aes-gcm v0.10.3
   Compiling pkcs1 v0.8.0-rc.4
   Compiling cbc v0.1.2
   Compiling chacha20 v0.9.1
   Compiling pbkdf2 v0.12.2
   Compiling blake2 v0.10.6
   Compiling softbuffer v0.4.8 (https://github.com/ToyOSOrg/softbuffer?branch=toyos-0.4.8#b36854df)
   Compiling scrypt v0.12.0-rc.10
   Compiling poly1305 v0.8.0
   Compiling pkcs5 v0.8.0-rc.13
   Compiling socket2 v0.6.3 (https://github.com/ToyOSOrg/socket2?branch=toyos#1d902509)
   Compiling mio v1.2.0 (https://github.com/ToyOSOrg/mio?branch=toyos#d1edcaad)
   Compiling num-iter v0.1.45
   Compiling primal-check v0.3.4
   Compiling toyos-net-ip v0.1.0 (<src>/toyos-dirrename/toyos-net-ip)
   Compiling num-complex v0.4.6
   Compiling password-hash v0.5.0
   Compiling ppv-lite86 v0.2.21
   Compiling pkcs8 v0.11.0-rc.11
   Compiling rand_chacha v0.3.1
   Compiling rgb v0.8.53
   Compiling chacha20 v0.10.0
   Compiling ed25519 v3.0.0-rc.4
   Compiling keccak v0.2.0
   Compiling fiat-crypto v0.3.0
   Compiling rand v0.8.5
   Compiling sha3 v0.11.0
   Compiling rand v0.10.0
   Compiling resvg v0.47.0
   Compiling toyos-net-udp v0.1.0 (<src>/toyos-dirrename/toyos-net-udp)
   Compiling ed25519-dalek v3.0.0-pre.6
   Compiling thiserror v2.0.18
   Compiling cpal v0.18.0 (https://github.com/ToyOSOrg/cpal?branch=toyos-0.18.0#f46381d2)
   Compiling tokio v1.51.1 (https://github.com/ToyOSOrg/tokio?branch=toyos#902fb974)
   Compiling rustfft v6.4.1
   Compiling argon2 v0.5.3
   Compiling ssh-cipher v0.2.0
   Compiling elliptic-curve v0.14.0-rc.29
   Compiling primefield v0.14.0-rc.8
   Compiling crypto-primes v0.7.0
   Compiling futures-executor v0.3.32
   Compiling ed25519-dalek v2.2.0
   Compiling bcrypt-pbkdf v0.10.0
   Compiling sha1 v0.11.0-rc.5
   Compiling kem v0.3.0
   Compiling primeorder v0.14.0-rc.8
   Compiling ecdsa v0.17.0-rc.16
   Compiling diskserver v0.0.0 (<src>/toyos-dirrename/userland/diskserver)
   Compiling module-lattice v0.2.1
   Compiling filepicker-api v0.1.0 (<src>/toyos-dirrename/userland/filepicker-api)
   Compiling toyos-net-tcp v0.1.0 (<src>/toyos-dirrename/toyos-net-shard/tcp)
   Compiling toyos-bootmap v0.1.0 (<src>/toyos-dirrename/toyos-bootmap)
   Compiling toyos-fat32 v0.1.0 (<src>/toyos-dirrename/toyos-fat32)
   Compiling toyos-device-memory v0.1.0 (<src>/toyos-dirrename/toyos-device-memory)
   Compiling p521 v0.14.0-rc.8
   Compiling p256 v0.14.0-rc.8
   Compiling dasp_sample v0.11.0
   Compiling hex v0.4.3
   Compiling rsa v0.10.0-rc.17
   Compiling toyos-elide v0.1.0 (<src>/toyos-dirrename/toyos-elide)
   Compiling toyos-dns v0.1.0 (<src>/toyos-dirrename/toyos-dns)
   Compiling toyos-net-shard v0.1.0 (<src>/toyos-dirrename/toyos-net-shard)
   Compiling toyos-mdns v0.1.0 (<src>/toyos-dirrename/userland/netstack/mdns)
   Compiling calc v0.1.0 (<src>/toyos-dirrename/userland/calc)
   Compiling toyos-acpi v0.1.0 (<src>/toyos-dirrename/toyos-acpi)
   Compiling ml-kem v0.3.0-rc.2
   Compiling generic-array v1.3.5
   Compiling toyos-update v0.1.0 (<src>/toyos-dirrename/toyos-update)
   Compiling futures v0.3.32
   Compiling internal-russh-num-bigint v0.5.0
   Compiling sprite v0.1.0 (<src>/toyos-dirrename/userland/sprite)
   Compiling russh-cryptovec v0.59.0 (https://github.com/ToyOSOrg/russh?branch=toyos#389804d3)
   Compiling toyos-swap v0.1.0 (<src>/toyos-dirrename/toyos-swap)
   Compiling sha1 v0.10.6
   Compiling toyos-dhcp v0.1.0 (<src>/toyos-dirrename/toyos-dhcp)
   Compiling toyos-logstream v0.1.0 (<src>/toyos-dirrename/toyos-logstream)
   Compiling russh-util v0.52.0 (https://github.com/ToyOSOrg/russh?branch=toyos#389804d3)
   Compiling data-encoding v2.10.0
   Compiling md5 v0.7.0
   Compiling toyos-elf v0.1.0 (<src>/toyos-dirrename/toyos-elf)
   Compiling hex-literal v1.1.0
   Compiling rustc-demangle v0.1.27
   Compiling bcachefs v0.1.0 (<src>/toyos-dirrename/bcachefs)
   Compiling toyos-net-node v0.1.0 (<src>/toyos-dirrename/userland/netstack/node)
   Compiling toyos-symbols v0.1.0 (<src>/toyos-dirrename/toyos-symbols)
   Compiling snake v0.1.0 (<src>/toyos-dirrename/userland/snake)
   Compiling doom v0.1.0 (<src>/toyos-dirrename/userland/doom)
   Compiling toyos-aml v0.1.0 (<src>/toyos-dirrename/userland/acpiserver/aml)
   Compiling toyos-i219 v0.1.0 (<src>/toyos-dirrename/toyos-i219)
   Compiling toyos-virtio v0.1.0 (<src>/toyos-dirrename/toyos-virtio)
   Compiling pkg v0.1.0 (<src>/toyos-dirrename/userland/pkg)
   Compiling terminal v0.1.0 (<src>/toyos-dirrename/userland/terminal)
   Compiling fileserver v0.0.0 (<src>/toyos-dirrename/userland/fileserver)
   Compiling inspect v0.1.0 (<src>/toyos-dirrename/userland/inspect)
   Compiling toyos-trace v0.1.0 (<src>/toyos-dirrename/toyos-trace)
   Compiling toyos-desktop v0.1.0 (<src>/toyos-dirrename/userland/compositor/desktop)
   Compiling toyos-mixer v0.1.0 (<src>/toyos-dirrename/userland/soundserver/mixer)
   Compiling toyos-quiesce v0.1.0 (<src>/toyos-dirrename/toyos-quiesce)
   Compiling realfft v3.5.0
   Compiling acpiserver-api v0.1.0 (<src>/toyos-dirrename/userland/acpiserver-api)
   Compiling toyos-tco v0.1.0 (<src>/toyos-dirrename/toyos-tco)
   Compiling toyos-hda v0.1.0 (<src>/toyos-dirrename/toyos-hda)
   Compiling rubato v0.16.2
   Compiling rustysynth v1.3.6
   Compiling toyos-osrelease v0.1.0 (<src>/toyos-dirrename/toyos-osrelease)
   Compiling compositor v0.1.0 (<src>/toyos-dirrename/userland/compositor)
   Compiling supervisor v0.1.0 (<src>/toyos-dirrename/userland/supervisor)
   Compiling trace v0.1.0 (<src>/toyos-dirrename/userland/trace)
   Compiling netstack v0.0.0 (<src>/toyos-dirrename/userland/netstack)
   Compiling soundserver v0.0.0 (<src>/toyos-dirrename/userland/soundserver)
   Compiling symbolize v0.1.0 (<src>/toyos-dirrename/userland/symbolize)
   Compiling p384 v0.14.0-rc.8
   Compiling update v0.1.0 (<src>/toyos-dirrename/userland/update)
   Compiling logkeeper v0.1.0 (<src>/toyos-dirrename/userland/logkeeper)
   Compiling files v0.1.0 (<src>/toyos-dirrename/userland/files)
   Compiling swap v0.1.0 (<src>/toyos-dirrename/userland/swap)
   Compiling toybox v0.1.0 (<src>/toyos-dirrename/userland/toybox)
   Compiling acpiserver v0.1.0 (<src>/toyos-dirrename/userland/acpiserver)
   Compiling editor v0.1.0 (<src>/toyos-dirrename/userland/editor)
   Compiling paint v0.1.0 (<src>/toyos-dirrename/userland/paint)
   Compiling filepicker v0.1.0 (<src>/toyos-dirrename/userland/filepicker)
   Compiling shell v0.1.0 (<src>/toyos-dirrename/userland/shell)
   Compiling proctest v0.1.0 (<src>/toyos-dirrename/userland/proctest)
   Compiling host v0.1.0 (<src>/toyos-dirrename/userland/host)
   Compiling internal-russh-forked-ssh-key v0.6.18+upstream-0.6.7
   Compiling russh v0.60.0 (https://github.com/ToyOSOrg/russh?branch=toyos#389804d3)
   Compiling sshserver v0.0.0 (<src>/toyos-dirrename/userland/sshserver)
    Finished `toyos` profile [optimized + debuginfo] target(s) in 1m 11s
warning: the following packages contain code that will be rejected by a future version of Rust: winit v0.30.13 (https://github.com/ToyOSOrg/winit?branch=toyos-0.30.13#f58e1f3b)
note: to see what the problems were, use the option `--future-incompat-report`, or run `cargo report future-incompatibilities --id 1`
06:18:38 root: adding 'bin/acpiserver' (1003448 bytes)
06:18:38 root: adding 'bin/calc' (1286024 bytes)
06:18:38 root: adding 'bin/compositor' (2581320 bytes)
06:18:38 root: adding 'bin/diskserver' (753552 bytes)
06:18:38 root: adding 'bin/doom' (1830440 bytes)
06:18:38 root: adding 'bin/editor' (788136 bytes)
06:18:38 root: adding 'bin/filepicker' (741392 bytes)
06:18:38 root: adding 'bin/files' (2393120 bytes)
06:18:38 root: adding 'bin/fileserver' (1518728 bytes)
06:18:38 root: adding 'bin/host' (565216 bytes)
06:18:38 root: adding 'bin/inspect' (721928 bytes)
06:18:38 root: adding 'bin/logkeeper' (910576 bytes)
06:18:38 root: adding 'bin/netstack' (2036864 bytes)
06:18:38 root: adding 'bin/paint' (733528 bytes)
06:18:38 root: adding 'bin/pkg' (811088 bytes)
06:18:38 root: adding 'bin/proctest' (686056 bytes)
06:18:38 root: adding 'bin/shell' (792144 bytes)
06:18:38 root: adding 'bin/snake' (997512 bytes)
06:18:38 root: adding 'bin/soundserver' (916496 bytes)
06:18:38 root: adding 'bin/sshserver' (4798712 bytes)
06:18:38 root: adding 'bin/supervisor' (1314736 bytes)
06:18:38 root: adding 'bin/swap' (708296 bytes)
06:18:38 root: adding 'bin/symbolize' (692776 bytes)
06:18:38 root: adding 'bin/terminal' (810416 bytes)
06:18:38 root: adding 'bin/toybox' (1106176 bytes)
06:18:38 root: adding 'bin/trace' (563056 bytes)
06:18:38 root: adding 'bin/update' (800336 bytes)
06:18:38 root: adding 'etc/os-release' (287 bytes)
06:18:38 root: adding 'etc/system.manifest' (2912 bytes)
06:18:38 root: adding 'share/doom1.wad' (4196020 bytes)
06:18:38 root: adding 'share/fonts/JetBrainsMono-Regular-8x16.font' (66404 bytes)
06:18:38 root: adding 'share/fonts/ofl.txt' (4216 bytes)
06:18:38 root: adding 'share/fonts/opensans-bold.ttf' (147264 bytes)
06:18:38 root: adding 'share/fonts/opensans-bolditalic.ttf' (153308 bytes)
06:18:38 root: adding 'share/fonts/opensans-italic.ttf' (153256 bytes)
06:18:38 root: adding 'share/fonts/opensans-regular.ttf' (147528 bytes)
06:18:38 root: adding 'share/hello.rs' (55 bytes)
06:18:38 root: adding 'share/icons/arrow-down-right-bold.svg' (211 bytes)
06:18:38 root: adding 'share/icons/crosshair-simple-bold.svg' (809 bytes)
06:18:38 root: adding 'share/icons/cursor-bold.svg' (560 bytes)
06:18:38 root: adding 'share/icons/file-bold.svg' (293 bytes)
06:18:38 root: adding 'share/icons/folder-bold.svg' (303 bytes)
06:18:38 root: adding 'share/icons/minus-bold.svg' (253 bytes)
06:18:38 root: adding 'share/icons/square-bold.svg' (264 bytes)
06:18:38 root: adding 'share/icons/x-bold.svg' (392 bytes)
06:18:38 root: adding 'share/soundfont.sf2' (15546764 bytes)
06:18:38 root: adding 'share/wallpaper.rgb' (6220808 bytes)
06:18:38 root: symlink 'bin/cat' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/cp' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/echo' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/free' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/grep' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/hexdump' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/locale' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/ls' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/mkdir' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/mv' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/net' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/ps' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/pwd' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/reboot' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/rm' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/screen' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/shutdown' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/spin' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/stats' -> '/system/bin/toybox'
06:18:38 root: symlink 'bin/tone' -> '/system/bin/toybox'
06:18:38 Signed with this checkout's throwaway key SHA256:j/u4RTGsfjfS8P7rEBC4ydVWhAdDxUpG5oIAA7xIJ9E at version 1791613031
06:18:39 Build finished.
Boot image: <src>/toyos-dirrename/target/bootable.img

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo test (whole guest suite), part 01.

cargo test (whole guest suite), part 01
   Compiling toyos-build v0.1.0 (<src>/toyos-dirrename)
    Finished `test` profile [optimized + debuginfo] target(s) in 18.08s
     Running unittests src/lib.rs (target/debug/deps/toyos_build-7ff6da3a5a47ee48)

running 362 tests
test arch::tests::a_guest_of_another_architecture_is_emulated ... ok
test bootlog::record_time_tests::a_records_elapsed_field_is_read_past_whatever_tag_precedes_it ... ok
test bootlog::record_time_tests::the_last_record_is_the_last_line_that_carries_a_time ... ok
test arch::tests::every_target_names_its_own_architecture ... ok
test bootlog::tests::a_long_binarys_record_is_the_prefix_the_kernel_keeps ... ok
test bootlog::tests::a_power_off_is_the_supervisors_stop_naming_a_shutdown ... ok
test bootlog::tests::only_a_declaration_of_the_whole_value_counts ... ok
test arch::tests::every_name_parses_back_to_its_arch_and_nothing_else_does ... ok
test bootlog::tests::a_part_whose_rotation_the_log_does_not_hold_is_a_hole ... ok
test bootlog::tests::a_boot_record_without_the_supervisors_stop_is_not_a_pass ... ok
test bootlog::tests::a_boot_is_handed_back_by_its_done_and_its_last_word ... ok
test bootlog::record_time_tests::the_panel_census_is_read_off_either_channel ... ok
test bootlog::tests::a_boot_that_lost_parts_of_its_own_log_is_told_from_one_that_is_whole ... ok
test bootlog::tests::the_boot_record_is_the_kernels_own_line ... ok
test bootlog::tests::the_loaders_file_is_told_from_logkeepers_however_a_driver_spelled_it ... ok
test bootlog::tests::a_programs_line_is_never_the_kernels ... ok
test build::tests::a_clean_entry_is_the_shipping_kernels ... ok
test build::tests::a_hold_in_front_of_the_save_is_an_entry_the_judge_refuses_to_read ... ok
test build::tests::a_bin_entry_no_name_reaches_is_refused ... ok
test build::tests::a_hold_is_refused_in_a_shipping_entry_however_its_labels_are_spelled ... ok
test build::tests::a_kernel_of_any_other_feature_set_is_not_judged ... ok
test build::tests::a_boot_that_asks_for_no_feature_gets_the_shipping_kernel ... ok
test build::tests::a_kernel_that_does_not_name_exactly_one_entry_is_refused ... ok
test bootlog::tests::the_loader_writes_the_lines_the_host_reads ... ok
test build::tests::a_valued_parameter_is_one_the_kernel_claims_by_prefix ... ok
test build::tests::an_artifact_build_is_not_part_of_a_test_execution_price ... ok
test build::tests::a_case_plan_carries_the_config_and_the_parameters ... ok
test build::tests::debug_mode_declares_only_its_debug_kernel ... ok
test bootlog::tests::the_kernel_writes_the_records_the_host_reads ... ok
test build::tests::every_boot_config_runs_logkeeper ... ok
test build::tests::a_provides_name_is_never_also_a_serves_name ... ok
test build::tests::an_installed_app_receives_only_names_the_supervisor_holds ... ok
test build::tests::every_config_renders_its_manifest ... ok
test build::tests::a_row_starts_only_what_a_launch_can_start ... ok
test build::tests::every_modes_crates_and_the_supervisor_ship ... ok
test build::tests::every_declared_capability_is_one_the_abi_has ... ok
test build::tests::every_receives_names_a_provider ... ok
test assets::tests::the_console_font_covers_the_swiss_german_altgr_layer ... ok
test build::tests::no_actuator_is_also_a_cargo_feature ... ok
test build::tests::no_diag_program_claims_the_screen ... ok
test build::tests::every_device_class_has_at_most_one_claimant ... ok
test build::tests::every_started_program_is_declared ... ok
test build::tests::no_shipped_boot_config_starts_sshserver ... ok
test build::tests::the_actuator_umbrella_is_a_leaf ... ok
test build::tests::the_check_does_not_reach_a_spawner_that_never_spawns ... ok
test build::tests::only_their_holders_may_hold_the_swap_port_and_the_slots ... ok
test build::tests::every_model_control_is_run ... ok
test build::tests::params_read_the_kernels_own_list ... ok
test build::tests::the_pre_flash_gate_clears_a_valued_parameter_and_refuses_an_actuator ... ok
test build::tests::the_kernel_declares_only_the_builds_that_earned_one ... ok
test build::tests::the_log_right_doc_names_exactly_the_manifests_holders ... ok
test build::tests::every_shipped_boot_config_is_covered ... ok
test build::tests::a_boot_config_that_is_not_a_case_is_refused ... ok
test build::tests::a_stamp_that_cannot_be_written_panics ... ok
test buildlock::tests::child_role ... ignored, the competing process for the tests below; never runs on its own
test build::tests::moved_libraries_take_what_was_built_for_them_and_a_moved_compiler_all ... ok

running 1 test

running 1 test

running 1 test

running 1 test

running 1 test
06:18:57 [build-lock] waiting for the build lock (exclusive, queued exclusive phase) — held by other builds in this tree

running 1 test

running 1 test

running 1 test

running 1 test
06:18:57 [build-lock] waiting for the build lock (shared, child) — an exclusive phase is queued ahead of it
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test buildlock::tests::killed_holder_releases_the_lock ... ok

running 1 test
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

06:18:57 [build-lock] waiting for the sysroot lock (using sysroot 6ab9f1eb8f7d3388) — held by pid 80685 (building sysroot 6ab9f1eb8f7d3388), 0s so far
test buildlock::tests::a_released_holder_is_gone ... ok
test buildlock::tests::shared_admits_shared ... ok
test ci::tests::a_carried_jobs_step ... ignored, the driver of the test above; never runs on its own
test buildlock::tests::exclusive_excludes_every_other_acquirer ... ok
test ci::tests::a_hung_step ... ignored, the step of the driver above; never runs on its own
test ci::tests::a_hung_steps_child ... ignored, what the step above spawns; never runs on its own
test ci::tests::a_hung_steps_driver ... ignored, the driver of the tests around it; never runs on its own
test assets::tests::the_system_fonts_ship_with_their_licence ... ok
test ci::tests::a_control_is_judged_by_its_verdict_and_not_its_exit_alone ... ok
test ci::tests::a_job_is_named_and_takes_nothing_after_it ... ok
test ci::tests::a_steps_cargo ... ignored, the driver of the test above; never runs on its own
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test ci::tests::an_app_is_judged_for_every_host_its_fails_does_not_name ... ok

running 1 test
test assets::tests::only_doom_opens_doom_s_assets ... ok
test ci::tests::an_interrupted_drivers_judge ... ignored, the judge of the test above; never runs on its own
test ci::tests::left_behind_refuses_a_tmpdir_that_never_saw_the_lock ... ok
test ci::tests::only_mains_tip_publishes ... ok
test ci::tests::the_declared_version_is_a_version ... ok
test ci::tests::the_host_job_names_what_its_tests_left_behind ... ok
test ci::tests::the_job_names_a_short_root_a_step_left_when_it_died ... ok
test ci::tests::the_required_check_is_a_job_on_every_pull_request ... ok
test ci::tests::the_summary_keeps_the_count_and_the_verdicts ... ok
test ci::tests::the_version_parser_takes_what_qemu_prints_and_refuses_the_rest ... ok
test ci::tests::workflows_run_against_main_on_hosted_runners ... ok
06:18:57 [build-lock] waiting for the build lock (exclusive, clean the crate target) — held by other builds in this tree
test ci::tests::an_interrupt_of_the_driver_ends_the_group_its_step_runs_in ... ok
test assets::tests::a_system_font_ships_as_it_is_and_the_console_font_as_its_raster ... ok
test assets::tests::an_owned_asset_ships_only_where_its_reader_does ... ok
test assets::tests::root_carries_what_the_repository_declares ... ok
test cicache::tests::a_reader_whose_clock_is_not_after_the_entry_is_refused ... ok
06:18:58 [build-lock] still waiting for the build lock (exclusive, queued exclusive phase), 301ms so far — the holder left no readable note
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.31s

test cicache::tests::a_seal_refuses_what_its_save_would_store_above_the_bound ... ok
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.30s


running 1 test
06:18:58 [build-lock] acquired (exclusive, queued exclusive phase) after 310.1ms
06:18:58 [build-lock] acquired (shared, child) after 303.9ms
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.31s

test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.30s

test buildlock::tests::a_queued_exclusive_phase_goes_first ... ok
test cicache::tests::every_spelling_of_code_run_at_build_time_is_found ... ok
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test cicache::tests::only_a_driver_built_in_its_own_target_carries_the_cache ... ok
test cicache::tests::a_seal_dates_every_target_and_refuses_a_written_source ... ok
test buildlock::tests::a_key_being_built_is_waited_for_and_another_key_is_not ... ok
test clippy::tests::the_adopted_set_expands_into_the_shapes_that_name_it ... ok
06:18:58 [build-lock] still waiting for the build lock (exclusive, clean the crate target), 307ms so far — the holder left no readable note
test clang::tests::a_toolchain_carries_the_clang_of_its_llvm_or_is_refused ... ok
test build::tests::a_tree_records_its_commit_its_commit_time_and_whether_it_is_dirty ... ok
test cicache::tests::targets_restored_without_a_manifest_are_refused ... ok
test ci::tests::a_step_of_a_job_that_carries_the_cache_builds_in_its_own_target ... ok
test buildlock::tests::a_lasting_wait_keeps_saying_so ... ok
test compiler::tests::child_role ... ignored, the competing process for the test above; never runs on its own
test compiler::tests::every_compiler_is_built_lean_against_the_host_s_llvm ... ok
06:18:58 [build-lock] still waiting for the build lock (exclusive, clean the crate target), 608ms so far — the holder left no readable note
06:18:58 [build-lock] acquired (exclusive, clean the crate target) after 715.8ms
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.73s

test buildlock::tests::a_clean_cannot_land_inside_a_build ... ok
test cicache::tests::an_entry_built_on_another_runner_is_deleted ... ok
test firmware::tests::a_descriptor_that_does_not_parse_is_refused_by_name ... ok
test firmware::tests::a_glob_matches_a_trailing_star_as_a_prefix_and_refuses_anything_else ... ok
test firmware::tests::a_read_only_templates_copy_is_still_writable ... ok
test firmware::tests::an_earlier_directory_hides_a_later_ones_name_and_a_missing_one_holds_nothing ... ok
test firmware::tests::nothing_fitting_is_refused_naming_what_was_read ... ok
test firmware::tests::the_first_non_secure_uefi_flash_descriptor_for_the_machine_wins ... ok
test firmware::tests::the_machine_is_the_versioned_type_its_alias_resolves_to ... ok
test firmware::tests::the_users_and_the_systems_directories_come_before_qemus_own ... ok
test flags::tests::a_declared_flags_value_is_never_read_as_a_flag ... ok
test flags::tests::a_flag_left_without_its_value_is_refused ... ok
test flags::tests::a_flag_that_reads_one_value_is_refused_when_it_is_written_twice ... ok
test flags::tests::a_repeatable_flag_keeps_every_value_it_was_given ... ok
test flags::tests::an_argument_the_declaration_does_not_expect_is_refused_by_name ... ok
test flags::tests::an_inline_value_is_refused_exactly_where_it_would_be_dropped ... ok
test flags::tests::help_is_the_whole_declared_list ... ok
test hostws::tests::every_crate_in_the_tree_joined_the_workspace_or_was_excluded_by_name ... ok
test hostws::tests::every_member_and_every_exclusion_still_names_a_directory ... ok
test hostws::tests::nothing_that_runs_names_a_target_directory_a_member_does_not_have ... ok
test hostws::tests::the_dead_path_scan_names_the_member_and_ignores_an_excluded_crate ... ok
test hostws::tests::the_dead_path_scan_reads_code_and_not_the_comment_beside_it ... ok
test hostws::tests::the_gate_refuses_a_crate_that_joined_neither_list ... ok
test hostws::tests::the_root_package_is_the_only_default_member ... ok
test hostws::tests::the_walk_reaches_the_tree_and_descends_into_it ... ok
test identity::tests::a_file_that_is_not_rust_is_its_bytes ... ok
test identity::tests::a_literal_is_never_read_as_a_comment ... ok
test identity::tests::a_signature_or_a_value_is_a_change ... ok
test identity::tests::every_doc_comment_in_the_sysroot_crates_is_invisible ... ok
test identity::tests::the_doc_fix_that_cost_a_version_and_a_sysroot_is_neither ... ok
test image::tests::a_damaged_image_is_refused_by_the_reader_that_caught_it ... ok
test image::tests::a_second_build_at_the_boundary_does_not_run_out ... ok
test image::tests::an_image_s_marked_slot_is_signed_over_exactly_what_it_carries ... ok
test image::tests::an_install_makes_its_disk_and_refuses_one_that_exists ... ok
test image::tests::every_declared_path_resolves_inside_the_root_partition ... ok
test image::tests::one_ordering_of_one_set_is_one_image ... ok
test image::tests::root_carries_less_than_an_alignment_unit_of_free_blocks ... ok
test image::tests::the_esp_and_a_slot_carry_what_the_bootloader_looks_for ... ok
test image::tests::the_root_partition_reads_back_as_the_files_the_build_put_in_it ... ok
test image::tests::the_volumes_this_build_writes_break_no_format_rule ... ok
test kernelconsole::tests::a_console_that_ends_mid_line_shows_its_last_line ... ok
test kernelconsole::tests::a_port_the_firmware_left_alone_passes_whole ... ok
test build::tests::the_kernel_resolves_no_libc_for_either_target ... ok
test kernelconsole::tests::a_terminal_is_shown_the_firmware_as_it_came_and_the_kernel_in_colour ... ok
test kernelconsole::tests::nothing_before_the_kernel_passes ... ok
test kernelconsole::tests::the_fused_line_is_the_kernels_first_record_wherever_the_chunks_fall ... ok
test kernelkeys::tests::every_declared_row_names_the_minter_of_its_keys ... ok
test ci::tests::a_steps_cargo_finds_fresh_what_the_jobs_cargo_built ... ok
test kernelkeys::tests::the_scan_reads_a_nested_generic_to_its_balanced_close ... ok
test kernelkeys::tests::the_scan_walks_past_four_measured_forms ... ok

running 1 test
test compiler::tests::a_compiler_is_keyed_by_its_whole_build ... ok
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test keystore::tests::a_stopped_retire_leaves_nothing_at_its_name ... ok
test keystore::tests::a_product_used_again_is_kept ... ok
test keystore::tests::a_sweep_leaves_hidden_names_and_refuses_names_no_key_owns ... ok
test keystore::tests::only_what_key_of_gives_is_a_key ... ok
test libc::tests::the_c_sysroot_names_the_empty_libraries ... ok
test licence::tests::a_cfg_edge_is_walked_and_excepted_only_while_every_edge_in_is_under_it ... ok

running 1 test
test licence::tests::a_committed_file_is_judged_by_its_row_when_it_ships ... ok
test licence::tests::a_disallowed_licence_is_refused_by_name ... ok
test licence::tests::a_font_licence_does_not_reach_a_row_that_is_no_font ... ok
test licence::tests::a_git_dependency_is_judged_like_any_other ... ok
test licence::tests::a_graph_is_walked_over_normal_edges_from_the_shipped_root ... ok
test licence::tests::a_malformed_expression_is_refused_not_guessed ... ok
test licence::tests::a_notice_section_is_judged_when_what_no_row_names_ships ... ok
test licence::tests::a_notice_section_that_disagrees_with_a_row_is_refused ... ok
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered outtest licence::tests::a_notice_section_without_one_spdx_line_or_without_files_is_refused ... ok
; finished in 0.01s

test licence::tests::a_root_the_metadata_does_not_hold_is_refused ... ok
test licence::tests::an_and_passes_only_when_every_part_does ... ok
test licence::tests::an_embed_is_what_a_build_script_or_an_include_names ... ok
test licence::tests::an_exception_matches_by_name_and_licence_and_a_stale_one_reds ... ok
test licence::tests::an_or_passes_when_any_branch_does ... ok
test licence::tests::every_pending_exception_cites_an_issue_that_exists ... ok
test licence::tests::metadata_is_given_the_features_the_build_gives ... ok
test licence::tests::mpl_passes_and_is_named ... ok
test licence::tests::no_guest_target_satisfies_an_only_under_cfg ... ok
test licence::tests::only_a_workspace_member_is_a_documents_own ... ok
test keystore::tests::a_sweep_removes_what_nobody_used_for_the_keep_time_and_nobody_uses ... ok
test kernelkeys::tests::every_hashed_kernel_container_is_declared_with_a_kernel_minted_key ... ok
test llvm::tests::a_build_directory_keeps_no_llvm_of_its_own ... ok
test cicache::tests::a_file_cargo_was_never_told_about_rebuilds_its_package ... ok
test compiler::tests::an_uncommitted_llvm_edit_is_refused ... ok
test compiler::tests::a_compiler_whose_sources_moved_while_it_was_built_is_not_stored ... ok
test compiler::tests::a_compiler_s_build_directory_keeps_no_llvm_of_its_own ... ok
test compiler::tests::a_build_directory_another_llvm_filled_starts_from_nothing ... ok
test llvm::tests::a_staged_llvm_gitlink_is_refused ... ok
test cicache::tests::an_entry_serves_exactly_the_sources_it_was_built_from ... ok
test llvm::tests::an_llvm_is_stamped_with_what_its_fork_s_commit_names ... ok
test llvm::tests::child_role ... ignored, the competing process for the tests below; never runs on its own
test llvm::tests::keyed_and_built ... ignored, the process the environment test runs; never runs on its own

running 1 test

running 1 test
test cicache::tests::code_run_at_build_time_runs_again_on_every_read ... ok
06:19:02 Building LLVM edb8c0a49e4a1de4 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-80622-0/llvm-sweep-stopped-65/a/rust: nobody on this host has

running 1 test
06:19:02 Building LLVM edb8c0a49e4a1de4 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-80622-0/llvm-made-elsewhere-66/b/rust: nobody on this host has

running 1 test
06:19:02 Building LLVM edb8c0a49e4a1de4 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-80622-0/llvm-sweep-68/a/rust: nobody on this host has
06:19:02 Building compiler 7159e1f18b167b33 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-80622-0/compiler-48/a/rust: nobody on this host has
test llvm::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.64s

test llvm::tests::a_placed_llvm_is_read_only ... ok
test llvm::tests::the_key_names_the_host_s_tools ... ok
test llvm::tests::the_llvm_config_turns_every_host_library_off ... ok
test compiler::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.48s

test llvm::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.76s

test kernelconsole::tests::a_relay_waits_out_a_pty_that_would_block ... ok

running 1 test
test llvm::tests::a_stopped_sweep_leaves_no_llvm_that_passes_for_whole ... ok
test llvm::tests::the_caller_s_environment_reaches_neither_the_build_nor_the_key ... ok
test llvm::tests::an_llvm_being_made_elsewhere_is_not_made_again ... ok
test metal::tests::a_boot_entry_is_matched_on_the_partition_its_path_names ... ok
test metal::tests::a_boot_entry_the_firmware_did_not_name_cannot_be_filled_in ... ok
test metal::tests::a_command_line_that_names_no_image_flashes_none ... ok
test metal::tests::a_create_that_moved_the_boot_order_is_refused ... ok
test metal::tests::a_failed_boot_and_a_loop_that_could_not_run_are_different_answers ... ok
test metal::tests::a_node_is_a_whole_scsi_or_nvme_disk_and_nothing_else ... ok
test metal::tests::a_pass_that_reported_and_booted_nothing_is_named_as_that ... ok
test metal::tests::a_readback_directory_holds_nothing_the_last_run_left ... ok
test metal::tests::a_refusal_is_read_back_off_the_drivers_stderr ... ok
test metal::tests::a_sudoers_word_escapes_what_sudoers_reads ... ok
test metal::tests::an_account_name_that_would_widen_the_rule_is_refused ... ok
test metal::tests::an_arm_with_no_ruling_never_reaches_the_stick ... ok
test metal::tests::an_image_admits_only_the_table_the_installed_rule_names ... ok
test metal::tests::an_image_armed_to_stop_itself_owes_a_record_and_no_reboot ... ok
test metal::tests::an_image_with_no_bound_on_its_own_boot_is_refused ... ok
06:19:03 Building compiler ba8f7ad1ae656e39 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-80622-0/compiler-48/a/rust: nobody on this host has
test compiler::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.54s

test llvm::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 1.34s

test llvm::tests::an_llvm_keeps_what_builds_read_and_nothing_else ... ok
test metal::tests::dd_is_believed_only_where_it_states_a_count ... ok
test metal::tests::either_bounds_record_is_a_wedged_boots_pass ... ok
test metal::tests::every_arm_that_stops_this_machine_is_cleared_and_judged_as_one ... ok
test metal::tests::every_ruling_names_a_parameter_the_kernel_declares ... ok
test metal::tests::installing_the_rule_is_not_also_a_boot ... ok
test metal::tests::one_table_feeds_the_rule_and_the_argv ... ok
test metal::tests::the_arguments_name_the_t14_by_default ... ok
test metal::tests::the_bound_the_gate_demands_is_a_bound_the_gate_clears ... ok
test metal::tests::the_deadlines_lateness_is_counted_from_its_arm ... ok
test metal::tests::the_foreign_record_arm_reaches_its_judge_through_the_hang_it_stages ... ok
test metal::tests::the_host_clock_crosses_in_the_boot_file ... ok
test metal::tests::the_identity_is_the_stick_or_it_is_refused ... ok
test metal::tests::the_lid_policy_is_systemds_effective_one ... ok
test metal::tests::the_loops_verdict_crosses_in_the_readback ... ok
test metal::tests::the_machine_crosses_in_the_boot_file ... ok
test metal::tests::the_outside_judges_read_can_write_nothing ... ok
test metal::tests::the_phases_cross_in_the_boot_file ... ok
test metal::tests::the_readback_carries_the_verdict_the_loop_returns ... ok
test metal::tests::the_rule_is_the_command_table_rendered ... ok
test metal::tests::the_ssh_line_carries_the_key_and_nothing_interactive ... ok
test metal::tests::the_wait_outlasts_every_watchdog_a_boot_runs_under ... ok
test metaldevices::tests::a_needle_that_only_appears_in_a_comment_is_not_found ... ok
test metaldevices::tests::the_kernel_writes_the_quiesce_lines_the_host_reads ... ok
test metaldevices::tests::the_shutdowns_own_account_is_read_out_of_the_loaders_file ... ok
test metalimage::tests::a_config_with_no_runner_is_refused_by_name ... ok
test metalimage::tests::every_derived_config_ends_its_own_boot ... ok
test metalimage::tests::nothing_the_config_declared_is_dropped ... ok
test llvm::tests::a_checkout_behind_its_gitlink_is_built_at_the_gitlink ... ok
test metaltimings::tests::a_failing_owners_reading_is_judged_and_not_recorded ... ok
test metaltimings::tests::a_known_machine_outside_its_record_fails_and_keeps_its_record ... ok
test metaltimings::tests::a_known_machine_within_its_record_passes ... ok
test metaltimings::tests::a_machine_is_three_non_empty_lines ... ok
test metaltimings::tests::a_new_name_on_a_known_machine_is_recorded_and_not_failed ... ok
test metaltimings::tests::a_record_survives_the_file_it_is_written_to ... ok
test metaltimings::tests::a_name_recorded_twice_is_refused ... ok
test metaltimings::tests::a_recorded_name_nothing_measured_is_named ... ok
test metaltimings::tests::an_unknown_machine_is_recorded_and_not_judged ... ok
test metaltimings::tests::another_bios_fails_naming_both_and_records_nothing ... ok
test metaltimings::tests::every_committed_record_loads_from_its_own_path ... ok
test miscompile::tests::an_endless_caller_is_not_one_that_returns_true ... ok
test metaltimings::tests::two_machines_sharing_a_file_name_are_refused ... ok
test n2::tests::an_installed_n2_is_not_installed_again ... ok
test publish::tests::a_first_publish_mints_root_one_and_a_machine_accepts_it ... ok
test publish::tests::a_publish_moves_forward_and_renews_a_root_near_its_expiry ... ok
test publish::tests::a_publish_that_would_move_anything_back_is_refused_by_name ... ok
test publish::tests::a_timestamp_naming_the_last_targets_version_is_refused ... ok
test release::tests::a_job_is_told_each_layer_s_entry_and_path ... ok
test publish::tests::two_rows_naming_one_archive_with_other_bytes_are_refused ... ok
test release::tests::a_job_saves_only_what_it_built ... ok
test release::tests::a_landing_during_the_nightly_puts_nothing_up_and_is_no_failure ... ok
test release::tests::a_layer_that_is_not_whole_is_refused ... ok
test release::tests::a_release_is_made_to_carry_these_bytes_and_no_other ... ok
test release::tests::one_sysroot_packs_to_one_digest_and_unpacks_whole ... ok
test release::tests::only_mains_publisher_publishes ... ok
test release::tests::the_glibc_scan_takes_the_newest_version_and_nothing_else ... ok
test release::tests::a_job_lays_out_the_one_sysroot_it_restored ... ok
test sdkversion::tests::a_changed_crate_takes_the_minor_after_the_newest_and_an_unchanged_one_keeps_it ... ok
test sdkversion::tests::a_dependent_whose_newest_names_a_stale_dependency_goes_up_again ... ok
test compiler::tests::one_compiler_per_key_whichever_checkout_names_it ... ok
test sdkversion::tests::every_lockfile_resolves_the_published_crates_from_the_tree ... ok
test sdkversion::tests::every_row_is_a_crate_the_tree_holds_in_dependency_order ... ok
test llvm::tests::an_llvm_is_swept_once_nothing_used_it_for_the_keep_time ... ok
test signing::tests::a_checkouts_throwaway_key_is_minted_once_and_read_back ... ok
test signing::tests::a_key_that_is_not_one_is_refused_by_name ... ok
test signing::tests::an_owner_key_reads_back_and_signs_what_the_loader_verifies ... ok
test signing::tests::an_owner_key_wider_than_0600_is_refused ... ok
test soundfont::tests::doom1_wads_music_selects_the_instruments_it_selects ... ok
test soundfont::tests::the_shipped_bank_carries_nothing_doom_does_not_select ... ok
test soundfont::tests::the_shipped_bank_sounds_every_instrument_the_shipped_wad_selects ... ok
test soundfont::tests::the_shipped_bank_still_carries_its_source_licence ... ok
test sourcegate::tests::a_capability_closing_ends_no_log_poll ... ok
test sourcegate::tests::a_value_is_refused_by_its_shape_and_what_resembles_one_is_not ... ok
test llvm::tests::an_uncommitted_bootstrap_names_no_llvm ... ok
test sourcegate::tests::bus_mastering_is_armed_at_exactly_the_declared_sites ... ok
test sourcegate::tests::every_hand_written_auto_trait_impl_is_declared ... ok
test sdkversion::tests::the_published_manifests_resolve_as_the_forks_name_them ... ok
test sourcegate::tests::nmi_does_not_log ... ok
test sourcegate::tests::no_slice_or_exclusive_reference_is_built_over_a_mapped_page ... ok
test sourcegate::tests::every_host_scratch_is_the_guard ... ok
test sourcegate::tests::the_scan_reaches_the_tree_it_claims_to ... ok
test llvm::tests::two_sdk_versions_are_two_keys ... ok
test llvm::tests::the_key_moves_with_the_llvm_and_only_with_it ... ok
test sysroot::tests::a_std_build_downloads_no_llvm_and_asks_for_no_ninja ... ok
test sysroot::tests::a_std_build_under_the_same_compiler_keeps_no_llvm ... ok
test sysroot::tests::a_compiler_made_again_under_its_key_leaves_all_of_a_crate_stale ... ok
test sysroot::tests::a_switch_that_cannot_remove_records_nothing_and_the_next_one_removes ... ok
test sourcegate::tests::every_committed_binary_file_is_declared ... ok
test sysroot::tests::a_sysroot_records_the_witness_it_was_built_from ... ok
test sysroot::tests::a_sysroot_is_whole_or_it_is_made_again ... ok
test sysroot::tests::a_sysroot_that_cannot_be_made_whole_is_made_once_and_refused ... ok
test sysroot::tests::another_compiler_s_std_build_goes_and_the_same_one_s_stays ... ok
test sdkversion::tests::a_key_moves_with_the_crate_and_its_published_dependencies ... ok
test sysroot::tests::the_libraries_placed_are_the_ones_the_stamp_names ... ok
test metal::tests::coming_back_is_ssh_answering_and_not_its_port ... ok
test compiler::tests::every_source_of_a_compiler_moves_its_key ... ok
test testargs::tests::a_boot_word_names_a_metal_boot_and_nothing_else ... ok
test testargs::tests::a_deleted_flag_is_refused_rather_than_becoming_the_filter ... ok
test testargs::tests::a_flag_left_without_its_value_is_refused_by_name ... ok
test testargs::tests::a_flag_written_twice_is_refused_by_name ... ok
test testargs::tests::a_flags_value_is_not_the_filter ... ok
test testargs::tests::a_readback_directory_alone_selects_no_tier ... ok
test testargs::tests::a_readback_flag_with_no_directory_never_reaches_the_metal_driver ... ok
test testargs::tests::an_inline_value_on_a_flag_that_has_none_is_refused ... ok
test testargs::tests::an_unknown_flag_is_refused_before_metal_decides_a_mode ... ok
test testargs::tests::every_word_that_is_nobodys_value_is_a_filter ... ok
test testargs::tests::metal_and_list_never_drives ... ok
test testargs::tests::metal_list_beside_a_readback_directory_is_refused ... ok
test testargs::tests::metal_refuses_a_filter_that_is_a_flags_name_or_empty ... ok
test testargs::tests::metal_refuses_the_flags_it_reads_nothing_of_by_name ... ok
test testargs::tests::metal_resolves_to_a_mode_that_reaches_the_machine_only_when_asked ... ok
test testargs::tests::the_documented_command_lines_parse ... ok
test testargs::tests::the_filter_is_the_word_that_is_nobodys_value ... ok
test llvm::tests::an_llvm_that_is_not_whole_is_made_again ... ok
test tether::tests::owner ... ignored, the owner `a_tethered_child_dies_with_its_owner` kills; never runs on its own
test tether::tests::parked ... ignored, the tethered child of `owner`; never runs on its own
test tether::tests::a_tethered_child_dies_with_its_owner ... ok
test toolchain::tests::a_bootstrap_run_sees_no_ci_variables ... ok
test toolchain::tests::a_bootstrap_run_leaves_both_lockfiles_as_they_were ... ok
test toolchain::tests::a_fake_bootstrap ... ignored, the bootstrap `a_bootstrap_run_leaves_both_lockfiles_as_they_were` runs; never runs on its own
test toolchain::tests::a_fake_bootstrap_that_reads_ci ... ignored, the bootstrap `a_bootstrap_run_sees_no_ci_variables` runs; never runs on its own
test toolchain::tests::a_fake_bootstrap_that_strips ... ignored, the bootstrap `a_compiler_build_finds_the_llvm_s_objcopy_where_rustc_strips_with_it` runs; never runs on its own
test toolchain::tests::a_link_failure_is_not_a_compile_error ... ok
test toolchain::tests::a_restore_that_cannot_write_leaves_the_file_whole ... ok
test toolchain::tests::a_toolchain_bin_without_cargo_is_one_rustup_narrates ... ok
test toolchain::tests::dep_info_names_the_checkout_std_was_really_built_from ... ok
test toolchain::tests::dep_info_that_cannot_be_read_is_refused ... ok
test toolchain::tests::a_compiler_build_finds_the_llvm_s_objcopy_where_rustc_strips_with_it ... ok
test toolchain::tests::the_first_real_error_is_the_one_reported ... ok
test userlandhost::tests::a_host_declaration_is_read_whole_and_refused_by_name ... ok
test userlandhost::tests::a_manifest_that_switches_tests_off_is_named ... ok
test userlandhost::tests::a_test_attribute_is_a_word_and_not_a_substring ... ok
test userlandhost::tests::every_program_the_images_ship_declares_what_it_is_to_a_host ... ok
test toolchain::tests::freestanding_libraries_that_read_the_worktree_are_refused ... ok
test userlandhost::tests::the_survey_gates_what_cargo_test_runs_and_names_the_rest ... ok
test userlandhost::tests::what_could_hide_a_test_is_a_condition ... ok
test userlandhost::tests::every_userland_test_is_in_the_gate ... ok
test release::tests::the_layers_are_the_stores_the_build_makes ... ok
test llvm::tests::the_runtimes_sources_are_the_commit_s ... ok
test llvm::tests::two_compilers_of_one_llvm_make_it_once ... ok
test sysroot::tests::a_submodule_is_the_commit_its_gitlink_records_checked_out_or_not ... ok
test wallpaper::tests::the_committed_wallpaper_is_the_one_this_file_describes ... ok
test sysroot::tests::a_comment_is_the_same_sysroot_and_a_signature_is_another ... ok
test wallpaper::tests::the_wallpaper_neither_bands_nor_blocks ... ok
Preparing worktree (detached HEAD 91e6426)
HEAD is now at 91e6426 C2
test sysroot::tests::ensure_shallow_fork_initialises_no_submodule_in_a_linked_worktree ... ok
Preparing worktree (detached HEAD c5d5367)
HEAD is now at c5d5367 backtrace, later
Preparing worktree (detached HEAD 2877d23)
HEAD is now at 2877d23 C2
Preparing worktree (detached HEAD 123bf9e)
HEAD is now at 123bf9e backtrace, later
test llvm::tests::what_the_key_does_not_name_is_never_stored ... ok
test sysroot::tests::twelve_builds_at_once_make_and_move_one_fork_checkout ... ok
test ci::tests::a_step_that_goes_quiet_is_ended_with_what_it_spawned_and_names_its_last_line ... ok
test sysroot::tests::a_worktree_pinning_another_fork_commit_gets_its_own_checkout ... ok
test sourcegate::tests::no_tracked_file_identifies_a_machine_or_its_network ... ok
test sysroot::tests::the_primary_s_fork_checkout_is_moved_to_its_pin ... ok

test result: ok. 347 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 11.24s

     Running unittests src/main.rs (target/debug/deps/toyos_build-5a3e8674ce405827)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/bin/toyos-metal.rs (target/debug/deps/toyos_metal-8875e000caf03e96)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/toyos.rs (target/debug/deps/toyos_build-8a96b3ba11da0171)

06:19:09 running 43 tests, 12 wide

06:19:09   RUN   iommu_virtio_platform
06:19:09   RUN   acpi_lock_given_back_on_one_cpu
06:19:09   RUN   nested_nmi_is_loud
06:19:09   RUN   libc_sockets
06:19:09   RUN   netstack_streams_e1000e
06:19:09   RUN   netstack_socket_churn
06:19:09   RUN   machine_shutdown
06:19:09   RUN   acpi_power_button
06:19:09   RUN   acpi_supply_outlives_holder
06:19:09   BUILD x86_64 netstack_streams of tests/toyos-rust-tests, for netstack_streams_e1000e
06:19:09   BUILD x86_64 netstack_socket_churn of tests/toyos-rust-tests, for netstack_socket_churn
06:19:09   RUN   netstack_streams
06:19:09   RUN   acpi_mediated_access
06:19:09   BUILD x86_64 netstack_streams of tests/toyos-rust-tests, for netstack_streams
06:19:09   RUN   machine_shutdown_short_stop
06:19:09   BUILD x86_64 acpi_mediated of tests/toyos-rust-tests, for acpi_lock_given_back_on_one_cpu
06:19:09   BUILD x86_64 stop_short of tests/toyos-rust-tests, for machine_shutdown_short_stop
06:19:09   BUILD x86_64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for nested_nmi_is_loud
06:19:09   BUILD x86_64 kernel, loader, ROOT of tests/testcases, for machine_shutdown
06:19:09   BUILD x86_64 kernel, loader, ROOT of tests/testcases, for acpi_power_button
06:19:10   BUILD x86_64 kernel, loader, ROOT of tests/netcase, for iommu_virtio_platform
06:19:14 [build-lock] waiting for the build lock (exclusive, clean crate targets against changed external deps) — held by other builds in this tree
06:19:14 [build-lock] waiting for the build lock (shared, test image) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, test image) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, test image) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, a test binary) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, a test binary) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, a test binary) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, the C sysroot) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, a test binary) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] waiting for the build lock (shared, test image) — an exclusive phase is queued ahead of it
06:19:14 [build-lock] acquired (exclusive, clean crate targets against changed external deps) after 387.2ms
06:19:14 external deps changed: cleaning <src>/toyos-dirrename/tests/toyos-rust-tests/target/aarch64-unknown-toyos
06:19:14 external deps changed: cleaning <src>/toyos-dirrename/tests/toyos-rust-tests/target/x86_64-unknown-toyos
06:19:15 [build-lock] acquired (shared, test image) after 1.3s
06:19:15 [build-lock] acquired (shared, test image) after 1.2s
06:19:16 [build-lock] acquired (shared, test image) after 1.3s
06:19:16 [build-lock] acquired (shared, a test binary) after 1.3s
06:19:16 [build-lock] acquired (shared, a test binary) after 1.3s
06:19:16 [build-lock] acquired (shared, a test binary) after 1.3s
06:19:16 [build-lock] acquired (shared, the C sysroot) after 1.3s
06:19:16 [build-lock] acquired (shared, a test binary) after 1.3s
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:17 [build-lock] acquired (shared, test image) after 2.3s
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:17   BUILD x86_64 nodelay_accepted of tests/toyos-rust-tests, for libc_sockets
06:19:17 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:19:21   BUILT x86_64 netstack_streams of tests/toyos-rust-tests, for netstack_streams  (12s)
06:19:21 [build-lock] artifact staging acquired after 4.5s
06:19:21   BUILD x86_64 kernel, loader, ROOT of tests/netcase, for netstack_streams
06:19:21   BUILT x86_64 netstack_streams of tests/toyos-rust-tests, for netstack_streams_e1000e  (12s)
06:19:21 [build-lock] artifact staging acquired after 4.5s
06:19:21   BUILD x86_64 kernel, loader, ROOT of tests/netcase, for netstack_streams_e1000e
06:19:21 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:21   BUILT x86_64 stop_short of tests/toyos-rust-tests, for machine_shutdown_short_stop  (12s)
06:19:21   BUILD x86_64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for machine_shutdown_short_stop
06:19:21 [build-lock] artifact staging acquired after 4.9s
06:19:22   BUILT x86_64 netstack_socket_churn of tests/toyos-rust-tests, for netstack_socket_churn  (13s)
06:19:22 [build-lock] artifact staging acquired after 5.4s
06:19:22   BUILD x86_64 kernel, loader, ROOT of tests/netcase, for netstack_socket_churn
06:19:23 [build-lock] artifact staging acquired after 6.4s
06:19:23 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:25   BUILT x86_64 acpi_mediated of tests/toyos-rust-tests, for acpi_lock_given_back_on_one_cpu  (16s)
06:19:25 [build-lock] artifact staging acquired after 8.8s
06:19:25   BUILD x86_64 kernel boot-actuators,test-actuators, ROOT of tests/acpicase, for acpi_lock_given_back_on_one_cpu
06:19:25   BUILD x86_64 kernel boot-actuators,test-actuators, ROOT of tests/acpicase, for acpi_mediated_access
06:19:25   BUILD x86_64 ROOT of tests/acpicase, for acpi_supply_outlives_holder
06:19:25 [build-lock] artifact staging acquired after 8.8s
06:19:25 [build-lock] artifact staging acquired after 8.1s
06:19:25 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:25 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:27 [build-lock] artifact staging acquired after 5.8s
06:19:27 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:27 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:28 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 1s so far
06:19:28   BUILT x86_64 nodelay_accepted of tests/toyos-rust-tests, for libc_sockets  (11s)
06:19:28   BUILD x86_64 stream_ends_std of tests/toyos-rust-tests, for libc_sockets
06:19:28 [build-lock] artifact staging acquired after 5.2s
06:19:28 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:29 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 1s so far
06:19:32 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 4s so far
06:19:32 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 4s so far
06:19:32 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 4s so far
06:19:33 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 5s so far
06:19:43 [build-lock] artifact staging acquired after 17.1s
06:19:43   BUILT x86_64 kernel, loader, ROOT of tests/testcases, for acpi_power_button  (33s)
06:19:43 [build-lock] artifact staging acquired after 17.3s
06:19:43   BUILT x86_64 kernel, loader, ROOT of tests/testcases, for machine_shutdown  (33s)
06:19:43 [build-lock] artifact staging acquired after 15.9s
06:19:43   BUILT x86_64 kernel, loader, ROOT of tests/netcase, for iommu_virtio_platform  (33s)
06:19:43 [build-lock] artifact staging acquired after 15.7s
06:19:43 [build-lock] artifact staging acquired after 15.3s
06:19:43 [build-lock] artifact staging acquired after 14.7s
06:19:43 [build-lock] artifact staging acquired after 13.7s
06:19:43 [build-lock] artifact staging acquired after 10.7s
06:19:43 [build-lock] artifact staging acquired after 10.7s
06:19:43 [build-lock] artifact staging acquired after 10.7s
06:19:43 [build-lock] artifact staging acquired after 9.8s
06:19:43   BUILT x86_64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for nested_nmi_is_loud  (34s)
06:19:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:43   BUILT x86_64 stream_ends_std of tests/toyos-rust-tests, for libc_sockets  (15s)
06:19:43 [build-lock] artifact staging acquired after 347.5ms
06:19:43   BUILD x86_64 ROOT of tests/netcase, for libc_sockets
06:19:44 [build-lock] artifact staging acquired after 670.8ms
06:19:44   BUILT x86_64 kernel, loader, ROOT of tests/netcase, for netstack_streams_e1000e  (23s)
06:19:44 [build-lock] artifact staging acquired after 964.5ms
06:19:44   BUILT x86_64 kernel boot-actuators,test-actuators, ROOT of tests/acpicase, for acpi_mediated_access  (19s)
06:19:44 [build-lock] artifact staging acquired after 1.2s
06:19:44   BUILT x86_64 kernel, loader, ROOT of tests/netcase, for netstack_socket_churn  (22s)
06:19:45 [build-lock] artifact staging acquired after 1.4s
06:19:45   BUILT x86_64 kernel, loader, ROOT of tests/netcase, for netstack_streams  (24s)
06:19:45 [build-lock] artifact staging acquired after 1.6s
06:19:45   BUILT x86_64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for machine_shutdown_short_stop  (23s)
06:19:45 [build-lock] artifact staging acquired after 2.1s
06:19:45   BUILT x86_64 ROOT of tests/acpicase, for acpi_supply_outlives_holder  (20s)
06:19:45   BUILT x86_64 kernel boot-actuators,test-actuators, ROOT of tests/acpicase, for acpi_lock_given_back_on_one_cpu  (20s)
06:19:47   BUILT x86_64 ROOT of tests/netcase, for libc_sockets  (4s)
06:19:50   [nmi] nested: [nmi] NESTED NMI on cpu 1: a second NMI entered while IST2 was still in use.
06:19:50   PASS  nested_nmi_is_loud  (6s)
06:19:50   RUN   bar_map_again
06:19:50   BUILD x86_64 bar_map_again of tests/toyos-rust-tests, for bar_map_again
06:19:53   [iommu] headless: 3 virtio function(s) behind a unit = true, the audio function 00:04.0 among them
06:19:53   [power] 1 table(s) loaded; [ 9.769 acpiserver] acpiserver: \_S5 handed to the kernel: SLP_TYPa=0 beside [ 9.769 cpu1 kernel] power: S5 is PM1a 0x604 with SLP_TYPa=0, as the acpi claim's holder supplied it
06:19:53   [power] the press: acpiserver: the power button was pressed, on SCI 1 of this boot; asking the supervisor to power off
06:19:53   PASS  acpi_power_button  (11s)
06:19:53   RUN   console_image_boots
06:19:53   BUILD x86_64 ROOT of console, for console_image_boots
06:19:54   BUILT x86_64 bar_map_again of tests/toyos-rust-tests, for bar_map_again  (4s)
06:19:54   BUILD x86_64 ROOT of tests/testcases, for bar_map_again
06:19:54   [power] shutdown: QEMU stopped the guest for guest-shutdown
06:19:54   PASS  machine_shutdown  (11s)
06:19:54   RUN   nvme_disk_keeps_log_and_home
06:19:57   [acpi] [ 8.406 cpu0 kernel] mtrr: the boot processor's range registers: IA32_MTRR_DEF_TYPE 0xc06 and 8 variable pairs
06:19:57   [acpi] [ 8.527 cpu1 kernel] mtrr: cpu1's range registers are off (IA32_MTRR_DEF_TYPE 0x0) and not the boot processor's: every read this CPU makes is uncached
06:19:57   [acpi] [12.187 test-runner pid=8] acpi: an unbound claim was refused its access, the lock and the power-off's sleep type
06:19:57   [acpi] [12.188 test-runner pid=8] acpi: RAM was refused both ways as UsableMemory
06:19:57   [acpi] [12.188 test-runner pid=8] acpi: the RSDP read through as type 9 and its write was refused TableWrite
06:19:57   [acpi] [12.190 test-runner pid=8] acpi: an unlisted register was read and refused its write MemoryType, an unlisted address below 1 MiB was refused UnlistedCached, and the interrupt controllers, the HPET and a function's BAR DeviceMemory
06:19:57   [acpi] [12.193 test-runner pid=8] acpi: the FACS read through as type 10, its write was refused FacsWrite, and the memory after it was written and put back
06:19:57   [acpi] [12.195 test-runner pid=8] acpi: COM1, the CMOS index, the 8259 and the configuration mechanism were refused KernelPort; the i8042's row ClaimedPort; PM1a_CNT read and refused its write ReadOnlyPort; the POST port was written
06:19:57   [acpi] [12.238 test-runner pid=8] acpi: ACPI_ENABLE and ACPI_DISABLE were refused SMI_CMD as KernelCommand and SCI_EN stayed set, a write wider than a byte was refused CommandSpan, every firmware call made was read back from the port and counted on the boot processor, and a storm of them was refused CommandRate
06:19:57   [acpi] [12.240 test-runner pid=8] acpi: the host bridge read as 0x29c08086 by its address and through ECAM, and every write to configuration space was refused ConfigWrite
06:19:57   [acpi] [12.342 test-runner pid=8] acpi: the lock a dead holder left taken read free; it was taken and given back, given back with GBL_RLS where the firmware had asked, and found pending while the firmware owned it
06:19:57   [acpi] [12.342 test-runner pid=8] acpi: a sleep type wider than three bits was refused InvalidArgument, the next holder's replaced a dead one's, and a second under one claim was refused AlreadyExists
06:19:57   [acpi] [12.238 test-runner pid=8] acpi: firmware calls of 0x51, 0x52, 0x53 were asked from the CPUs of x2APIC id [1, 1, 1]; this chipset's SMI_EN reads 0x00000000, APMC_EN clear, so no call interrupts its firmware
06:19:57   [acpi] [12.238 test-runner pid=8] acpi: 8 firmware calls were made before call 6 of the storm was refused
06:19:57   [acpi] [12.216 cpu1 kernel tid=2] acpi: firmware call 0x51 written to SMI_CMD 0xb2 on cpu0, asked from cpu1; the write held cpu0 40194ns, its SMI count unread before the write and unread after; the first of that byte
06:19:57   [acpi] [12.225 cpu1 kernel tid=4] acpi: firmware call 0x52 written to SMI_CMD 0xb2 on cpu0, asked from cpu1; the write held cpu0 4019ns, its SMI count unread before the write and unread after; the first of that byte
06:19:57   [acpi] [12.235 cpu1 kernel tid=6] acpi: firmware call 0x53 written to SMI_CMD 0xb2 on cpu0, asked from cpu1; the write held cpu0 5024ns, its SMI count unread before the write and unread after; the first of that byte
06:19:57   [acpi] [12.236 cpu0 kernel] acpi: firmware call 0x54 written to SMI_CMD 0xb2 on cpu0, asked from cpu0; the write held cpu0 1005ns, its SMI count unread before the write and unread after; the first of that byte
06:19:57   [acpi] [12.236 cpu0 kernel] acpi: firmware call 0x55 written to SMI_CMD 0xb2 on cpu0, asked from cpu0; the write held cpu0 0ns, its SMI count unread before the write and unread after; the first of that byte
06:19:57   [acpi] [12.046 cpu1 kernel] shutdown: no ACPI server supplied S5 — refused
06:19:57   [acpi] [12.406 cpu1 kernel] acpi: the Global Lock given back for a holder that left it taken (the machine is stopping)
06:19:57   [acpi] QEMU stopped the guest for guest-shutdown, on the probe's sleep type and not the keeper's
06:19:57   PASS  acpi_mediated_access  (29s)
06:19:57   RUN   screen_panic_muted
06:19:58   [power] a short stop, then the power-off: stop: 17 of 19 userland thread(s) stopped across 1 cpu(s) in 0 ms of a 0 ms budget over 1 sweep(s), 0 of 0 userland block operation(s) still open; this reset lands wherever the other 2 are
06:19:58   PASS  machine_shutdown_short_stop  (13s)
06:19:58   RUN   screen_fatal_behind_a_painter
06:19:58 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:19:58   [acpi] [12.660 cpu0 kernel] Shutting down.
06:19:58   PASS  netstack_streams_e1000e  (14s)
06:19:58   RUN   screen_fatal_halt_composited
06:19:58   BUILD x86_64 ROOT of tests/panelcase, for screen_fatal_halt_composited
06:19:58   [acpi] QEMU stopped the guest for guest-shutdown, with no claim held, on the sleep type a holder that is gone supplied
06:19:58   PASS  acpi_supply_outlives_holder  (29s)
06:19:58   RUN   screen_loader_clears
06:19:59   PASS  netstack_socket_churn  (14s)
06:19:59   RUN   virt_early_panic
06:19:59   BUILD aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_early_panic
06:19:59 [build-lock] artifact staging acquired after 939.1ms
06:19:59 assets: leaving out assets/soundfont.sf2 — only /system/bin/doom opens it and this image builds no doom
06:19:59 assets: leaving out assets/DOOM1.WAD — only /system/bin/doom opens it and this image builds no doom
06:19:59   BUILT x86_64 ROOT of console, for console_image_boots  (6s)
06:19:59   [acpi] [10.102 cpu0 kernel] mtrr: the boot processor's range registers: IA32_MTRR_DEF_TYPE 0xc06 and 8 variable pairs
06:19:59   [acpi] [12.988 test-runner pid=8] acpi: an unbound claim was refused its access, the lock and the power-off's sleep type
06:19:59   [acpi] [12.989 test-runner pid=8] acpi: RAM was refused both ways as UsableMemory
06:19:59   [acpi] [12.990 test-runner pid=8] acpi: the RSDP read through as type 9 and its write was refused TableWrite
06:19:59   [acpi] [12.991 test-runner pid=8] acpi: an unlisted register was read and refused its write MemoryType, an unlisted address below 1 MiB was refused UnlistedCached, and the interrupt controllers, the HPET and a function's BAR DeviceMemory
06:19:59   [acpi] [12.991 test-runner pid=8] acpi: the FACS read through as type 10, its write was refused FacsWrite, and the memory after it was written and put back
06:19:59   [acpi] [12.992 test-runner pid=8] acpi: COM1, the CMOS index, the 8259 and the configuration mechanism were refused KernelPort; the i8042's row ClaimedPort; PM1a_CNT read and refused its write ReadOnlyPort; the POST port was written
06:19:59   [acpi] [13.023 test-runner pid=8] acpi: ACPI_ENABLE and ACPI_DISABLE were refused SMI_CMD as KernelCommand and SCI_EN stayed set, a write wider than a byte was refused CommandSpan, every firmware call made was read back from the port and counted on the boot processor, and a storm of them was refused CommandRate
06:19:59   [acpi] [13.024 test-runner pid=8] acpi: the host bridge read as 0x29c08086 by its address and through ECAM, and every write to configuration space was refused ConfigWrite
06:19:59   [acpi] [13.025 test-runner pid=8] acpi: the lock a dead holder left taken read free; it was taken and given back, given back with GBL_RLS where the firmware had asked, and found pending while the firmware owned it
06:19:59   [acpi] [13.025 test-runner pid=8] acpi: a sleep type wider than three bits was refused InvalidArgument, the next holder's replaced a dead one's, and a second under one claim was refused AlreadyExists
06:19:59   [acpi] [13.023 test-runner pid=8] acpi: firmware calls of 0x51, 0x52, 0x53 were asked from the CPUs of x2APIC id [0, 0, 0]; this chipset's SMI_EN reads 0x00000000, APMC_EN clear, so no call interrupts its firmware
06:19:59   [acpi] [13.023 test-runner pid=8] acpi: 8 firmware calls were made before call 6 of the storm was refused
06:19:59   [acpi] [13.003 cpu0 kernel] acpi: firmware call 0x51 written to SMI_CMD 0xb2 on cpu0, asked from cpu0; the write held cpu0 40048ns, its SMI count unread before the write and unread after; the first of that byte
06:19:59   [acpi] [13.012 cpu0 kernel] acpi: firmware call 0x52 written to SMI_CMD 0xb2 on cpu0, asked from cpu0; the write held cpu0 2002ns, its SMI count unread before the write and unread after; the first of that byte
06:19:59   [acpi] [13.013 cpu0 kernel] acpi: firmware call 0x53 written to SMI_CMD 0xb2 on cpu0, asked from cpu0; the write held cpu0 0ns, its SMI count unread before the write and unread after; the first of that byte
06:19:59   [acpi] [13.013 cpu0 kernel] acpi: firmware call 0x54 written to SMI_CMD 0xb2 on cpu0, asked from cpu0; the write held cpu0 1001ns, its SMI count unread before the write and unread after; the first of that byte
06:19:59   [acpi] [13.013 cpu0 kernel] acpi: firmware call 0x55 written to SMI_CMD 0xb2 on cpu0, asked from cpu0; the write held cpu0 0ns, its SMI count unread before the write and unread after; the first of that byte
06:19:59   [acpi] [12.955 cpu0 kernel] shutdown: no ACPI server supplied S5 — refused
06:19:59   [acpi] [13.067 cpu0 kernel] acpi: the Global Lock given back for a holder that left it taken (the machine is stopping)
06:19:59   [acpi] QEMU stopped the guest for guest-shutdown, on the probe's sleep type and not the keeper's
06:19:59   PASS  acpi_lock_given_back_on_one_cpu  (13s)
06:19:59   RUN   virt_early_fault
06:19:59   BUILD aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_early_fault
06:19:59   BUILT x86_64 ROOT of tests/testcases, for bar_map_again  (5s)
06:19:59   PASS  netstack_streams  (15s)
06:19:59   RUN   virt_el2_drop
06:19:59   BUILD aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_el2_drop
06:20:01 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:02 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 1s so far
06:20:02   PASS  screen_panic_muted  (6s)
06:20:02   RUN   virt_user_mode
06:20:02   BUILD aarch64 kernel, loader, ROOT of tests/testcases, for virt_user_mode
06:20:03   PASS  libc_sockets  (23s)
06:20:03   RUN   virt_timer_preempts
06:20:03   BUILD aarch64 abuse_readonly_copyout of tests/toyos-rust-tests, for virt_timer_preempts
06:20:03 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 2s so far
06:20:04   [iommu] headless-no-iommu: 2 virtio function(s) behind a unit = false, the audio function 00:04.0 among them; the NIC's claim refused for want of a unit
06:20:05 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 4s so far
06:20:05 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 4s so far
06:20:06   PASS  console_image_boots  (7s)
06:20:06   RUN   virt_irq_storm
06:20:06   BUILD aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_irq_storm
06:20:07   PASS  screen_loader_clears  (9s)
06:20:07   RUN   virt_timer_floor
06:20:07   BUILD aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_timer_floor
06:20:08 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 7s so far
06:20:08   [claims] bar_map_again: two answers held at once map apart, and the later outlives the earlier
06:20:08   [claims] bar_map_again: answered with a handle that maps
06:20:08   [claims] bar_map_again: answered after the refusal with a handle that maps
06:20:08   PASS  bar_map_again  (9s)
06:20:08   RUN   virt_fp_isolation
06:20:08 [build-lock] artifact staging acquired after 6.8s
06:20:08 assets: leaving out assets/soundfont.sf2 — only /system/bin/doom opens it and this image builds no doom
06:20:08 assets: leaving out assets/DOOM1.WAD — only /system/bin/doom opens it and this image builds no doom
06:20:08   BUILT x86_64 ROOT of tests/panelcase, for screen_fatal_halt_composited  (10s)
06:20:09 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 1s so far
06:20:09   PASS  screen_fatal_behind_a_painter  (11s)
06:20:09   RUN   virt_first_entry
06:20:11   [iommu] declined: [ 5.979 cpu0 kernel] virtio-sound: NOT INITIALISED — PCI 00:04.0 refused the feature set 0x100000000 the driver accepted, leaving DEVICE_STATUS=0x3 without FEATURES_OK
06:20:11   PASS  iommu_virtio_platform  (28s)
06:20:11   RUN   virt_unmap_touch
06:20:12 [build-lock] artifact staging acquired after 10.1s
06:20:12 [build-lock] artifact staging acquired after 9.3s
06:20:12 [build-lock] artifact staging acquired after 7.0s
06:20:12 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:12 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:12 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo test (whole guest suite), part 02.

cargo test (whole guest suite), part 02
06:20:12 [build-lock] artifact staging acquired after 7.0s
06:20:12 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:14   BUILT aarch64 abuse_readonly_copyout of tests/toyos-rust-tests, for virt_timer_preempts  (12s)
06:20:14   BUILD aarch64 ring0_timer_in_syscall of tests/toyos-rust-tests, for virt_timer_preempts
06:20:14 [build-lock] artifact staging acquired after 6.3s
06:20:14 [build-lock] artifact staging acquired after 5.6s
06:20:14 [build-lock] artifact staging acquired after 2.2s
06:20:14 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:14 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:15   [disk] after the reboot /home/kept-20944-1791613194277078000/release is the 10 lines of /system/etc/os-release, and /log/2026-10-10-062003.log: test-runner said kept-20944-1791613194277078000
06:20:15   PASS  nvme_disk_keeps_log_and_home  (22s)
06:20:15   RUN   virt_debug_refused
06:20:17   [panic] the fatal report is on the panel and sealed in the black box (14252 bytes)
06:20:17   PASS  screen_fatal_halt_composited  (9s)
06:20:17   RUN   virt_readonly_copyout
06:20:18 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 4s so far
06:20:25 [build-lock] artifact staging acquired after 13.1s
06:20:25   BUILT aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_el2_drop  (26s)
06:20:25   BUILT aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_early_panic  (27s)
06:20:25 [build-lock] artifact staging acquired after 13.3s
06:20:26 [build-lock] artifact staging acquired after 13.4s
06:20:26   BUILT aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_early_fault  (27s)
06:20:26 [build-lock] artifact staging acquired after 11.5s
06:20:26   BUILT aarch64 kernel, loader, ROOT of tests/testcases, for virt_user_mode  (24s)
06:20:26 [build-lock] artifact staging acquired after 11.8s
06:20:26   BUILT aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_timer_floor  (19s)
06:20:27 [build-lock] artifact staging acquired after 9.1s
06:20:27   BUILT aarch64 kernel boot-actuators,test-actuators, loader, ROOT of tests/testcases, for virt_irq_storm  (21s)
06:20:27   PASS  virt_early_panic  (1s)
06:20:27   RUN   virt_ring0_timer_in_syscall
06:20:27   BUILT aarch64 ring0_timer_in_syscall of tests/toyos-rust-tests, for virt_timer_preempts  (12s)
06:20:27   BUILD aarch64 random_draws of tests/toyos-rust-tests, for virt_timer_preempts
06:20:27   PASS  virt_early_fault  (1s)
06:20:27   RUN   virt_mask_windows
06:20:28   PASS  virt_el2_drop  (3s)
06:20:28   RUN   virt_smp
06:20:29   PASS  virt_user_mode  (3s)
06:20:29   RUN   virt_el1_smp
06:20:29   [virt] [ 2.743 cpu0 kernel] timer-floor: PASS span=240 floor=240 ticks: the comparator past the counter it was set from
06:20:29   PASS  virt_timer_floor  (3s)
06:20:29   RUN   virt_failed_ap_leaves_no_hole
06:20:30   BUILT aarch64 random_draws of tests/toyos-rust-tests, for virt_timer_preempts  (4s)
06:20:30   BUILD aarch64 counters_read of tests/toyos-rust-tests, for virt_mask_windows
06:20:30   BUILD aarch64 ROOT of tests/virtjobcase, for virt_timer_preempts
06:20:30   BUILD aarch64 ROOT of tests/virtjobcase, for virt_readonly_copyout
06:20:30   BUILD aarch64 ROOT of tests/virtjobcase, for virt_unmap_touch
06:20:34 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:34 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:34 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:35   BUILT aarch64 counters_read of tests/toyos-rust-tests, for virt_mask_windows  (4s)
06:20:35   BUILD aarch64 trace_read of tests/toyos-rust-tests, for virt_smp
06:20:35 [build-lock] artifact staging acquired after 564.7ms
06:20:36 [build-lock] artifact staging acquired after 1.8s
06:20:36   BUILT aarch64 ROOT of tests/virtjobcase, for virt_unmap_touch  (5s)
06:20:36 [build-lock] artifact staging acquired after 2.0s
06:20:36   BUILT aarch64 ROOT of tests/virtjobcase, for virt_timer_preempts  (6s)
06:20:36   BUILT aarch64 ROOT of tests/virtjobcase, for virt_readonly_copyout  (6s)
06:20:38   BUILT aarch64 trace_read of tests/toyos-rust-tests, for virt_smp  (3s)
06:20:38   BUILD aarch64 ROOT of tests/virtsmpcase, for virt_smp
06:20:38   BUILD aarch64 ROOT of tests/virtsmpcase, for virt_failed_ap_leaves_no_hole
06:20:38   BUILD aarch64 kernel mask-windows, ROOT of tests/virtsmpcase, for virt_mask_windows
06:20:38   BUILD aarch64 ROOT of tests/virtsmpcase, for virt_el1_smp
06:20:39   [virt] [ 2.124 test-runner pid=4] preempt: the counting thread was preempted twice, at counts 1677271 and 2090161
06:20:39   PASS  virt_timer_preempts  (2s)
06:20:39   RUN   virt_fatal_halts_the_others_first
06:20:39   BUILD aarch64 panic_halts_first of tests/toyos-rust-tests, for virt_fatal_halts_the_others_first
06:20:39   [virt] [ 2.452 test-runner pid=7] unmap_touch: 4 reads of a page just unmapped on the unmapping thread, and 4 on another, each ended their process
06:20:39   PASS  virt_unmap_touch  (23s)
06:20:39   RUN   virt_reboot
06:20:39   BUILD aarch64 ROOT of tests/virtrebootcase, for virt_reboot
06:20:39   [virt] [ 2.524 test-runner pid=19] a syscall writes only where its caller could store
06:20:39   PASS  virt_readonly_copyout  (16s)
06:20:39   RUN   virt_off_names_the_cpus_left_on
06:20:39   BUILD aarch64 ROOT of tests/virtsmpcase, for virt_off_names_the_cpus_left_on
06:20:41   [virt] [ 2.786 test-runner pid=6] first_entry: x1-x30 were zero at a new thread's first instruction
06:20:41   PASS  virt_first_entry  (32s)
06:20:41   RUN   virt_reboot_refused_without_psci
06:20:41   BUILD aarch64 ROOT of tests/virtrebootcase, for virt_reboot_refused_without_psci
06:20:41   [virt] [ 2.863 test-runner pid=5] fp_isolation: v0-v31, FPCR and FPSR survived 3 switches to a thread that loads another state
06:20:41   PASS  virt_fp_isolation  (33s)
06:20:41   RUN   virt_jobs_at_el2
06:20:42   [virt] [ 3.374 test-runner pid=17] ring0_timer_in_syscall: the timer interrupted the syscall's body and re-armed a quantum
06:20:42   PASS  virt_ring0_timer_in_syscall  (15s)
06:20:42   RUN   virt_random_differs
06:20:42   [virt] [ 3.406 test-runner pid=16] debug_refused: SYS_DEBUG's double fault and TLB acknowledgement delay were refused
06:20:42   PASS  virt_debug_refused  (27s)
06:20:42   RUN   virt_no_seed_refused
06:20:42 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:42 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:42   [virt] [15.278 cpu0 kernel] irq-storm: PASS sgis=5108800/5108800 ticks=1000: the timer fired through the flood, and every SGI sent was taken
06:20:42   PASS  virt_irq_storm  (16s)
06:20:42 [build-lock] artifact staging acquired after 121.9ms
06:20:42 [build-lock] artifact staging acquired after 122.0ms
06:20:42   BUILT aarch64 ROOT of tests/virtsmpcase, for virt_failed_ap_leaves_no_hole  (4s)
06:20:42 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:42 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:42 [build-lock] artifact staging acquired after 209.5ms
06:20:42   BUILT aarch64 ROOT of tests/virtsmpcase, for virt_el1_smp  (5s)
06:20:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 1s so far
06:20:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 1s so far
06:20:43 [build-lock] artifact staging acquired after 507.1ms
06:20:43   BUILT aarch64 ROOT of tests/virtsmpcase, for virt_smp  (5s)
06:20:43 [build-lock] waiting for the artifact lock (artifact staging) — held by pid 20944 (artifact staging), 0s so far
06:20:43   BUILT aarch64 kernel mask-windows, ROOT of tests/virtsmpcase, for virt_mask_windows  (5s)
06:20:43 [build-lock] artifact staging acquired after 274.6ms
06:20:43   BUILT aarch64 panic_halts_first of tests/toyos-rust-tests, for virt_fatal_halts_the_others_first  (5s)
06:20:43 [build-lock] artifact staging acquired after 607.8ms
06:20:43 [build-lock] artifact staging acquired after 446.4ms
06:20:43   BUILT aarch64 ROOT of tests/virtsmpcase, for virt_off_names_the_cpus_left_on  (4s)
06:20:43   BUILD aarch64 ROOT of tests/virtpaniccase, for virt_fatal_halts_the_others_first
06:20:44   BUILT aarch64 ROOT of tests/virtrebootcase, for virt_reboot  (5s)
06:20:44   BUILT aarch64 ROOT of tests/virtrebootcase, for virt_reboot_refused_without_psci  (3s)
06:20:45   [virt] [ 2.642 test-runner pid=18] random_draws: 8 threads drew 1000 times each and no two draws were alike; one more: 2c17d51b4b64f6a08df7f6f1dfae10eb4ac93759e28f389876dfe9eb833427bf
06:20:46   [virt] [ 4.371 test-runner pid=4] preempt: the counting thread was preempted twice, at counts 2752960 and 5216352
06:20:46   [virt] [ 4.593 test-runner pid=5] fp_isolation: v0-v31, FPCR and FPSR survived 3 switches to a thread that loads another state
06:20:46   [virt] reboot: this machine has no reset this kernel performs — refused, and the job ended exit 1
06:20:46   PASS  virt_reboot_refused_without_psci  (3s)
06:20:47   [virt] [ 4.641 test-runner pid=6] first_entry: x1-x30 were zero at a new thread's first instruction
06:20:47   BUILT aarch64 ROOT of tests/virtpaniccase, for virt_fatal_halts_the_others_first  (4s)
06:20:47   [virt] [ 4.293 test-runner pid=4] unmap_touch: 4 reads of a page just unmapped on the unmapping thread, and 4 on another, each ended their process
06:20:47   [virt] 8 CPUs entered at EL1, started through HVC, and scheduling
06:20:47   [virt] [ 4.149 test-runner pid=4] unmap_touch: 4 reads of a page just unmapped on the unmapping thread, and 4 on another, each ended their process
06:20:47   [virt] 8 CPUs entered at EL2, started through SMC, and scheduling
06:20:47   [virt] [ 4.667 test-runner pid=13] counters_read: every cpu answered for itself, and each counter is a right's
06:20:48   [virt] [ 4.773 test-runner pid=15] trace_read: a wake precedes its pick, a cursor is its reader's own, and the diary is TRACE's
06:20:48   [virt] [ 4.476 test-runner pid=13] counters_read: every cpu answered for itself, and each counter is a right's
06:20:48   [virt] [ 4.580 test-runner pid=15] trace_read: a wake precedes its pick, a cursor is its reader's own, and the diary is TRACE's
06:20:48   [virt] [ 5.720 test-runner pid=7] unmap_touch: 4 reads of a page just unmapped on the unmapping thread, and 4 on another, each ended their process
06:20:48   [virt] [ 5.815 test-runner pid=16] debug_refused: SYS_DEBUG's double fault and TLB acknowledgement delay were refused
06:20:48   [virt] [ 5.841 test-runner pid=17] ring0_timer_in_syscall: the timer interrupted the syscall's body and re-armed a quantum
06:20:48   [virt] stop: 5 of 5 userland thread(s) stopped across 8 cpu(s) in 0 ms of a 2010 ms budget over 1 sweep(s), 0 of 0 userland block operation(s) still open; every CPU but 0x0 called CPU_OFF, then 0x0 SYSTEM_OFF
06:20:48   PASS  virt_el1_smp  (14s)
06:20:48   [virt] stop: 5 of 5 userland thread(s) stopped across 8 cpu(s) in 0 ms of a 2010 ms budget over 1 sweep(s), 0 of 0 userland block operation(s) still open; every CPU but 0x0 called CPU_OFF, then 0x0 SYSTEM_OFF
06:20:48   PASS  virt_smp  (11s)
06:20:48   [virt] [ 2.905 test-runner pid=18] random_draws: 8 threads drew 1000 times each and no two draws were alike; one more: 44cc6ae9a0778bb923fde12b2ae5aa99300df314cd24a8e31649c511b3af4e72
06:20:48   [virt] two boots keyed from the loader's seed printed two draws
06:20:48   PASS  virt_random_differs  (6s)
06:20:48   [virt] [ 6.095 test-runner pid=18] random_draws: 8 threads drew 1000 times each and no two draws were alike; one more: bb5adec2a899bf6f4f212d314b8058799cd570f36867ab6a5ecf195dc6450ba6
06:20:48   [virt] [ 6.228 test-runner pid=19] a syscall writes only where its caller could store
06:20:48   PASS  virt_jobs_at_el2  (7s)
06:20:48   [virt] [ 4.857 test-runner pid=4] unmap_touch: 4 reads of a page just unmapped on the unmapping thread, and 4 on another, each ended their process
06:20:48   [virt] Rebooting., then one SYSTEM_RESET, and QEMU stopped for guest-reset
06:20:48   PASS  virt_reboot  (5s)
06:20:48   [windows] cpu0 irqs_off_ns=1667000 preempt_off_ns=35049000
06:20:48   [windows] cpu1 irqs_off_ns=19383000 preempt_off_ns=17842000
06:20:48   [windows] cpu2 irqs_off_ns=2013000 preempt_off_ns=14337000
06:20:48   [windows] cpu3 irqs_off_ns=3417000 preempt_off_ns=27469000
06:20:48   [windows] cpu4 irqs_off_ns=2176000 preempt_off_ns=8020000
06:20:48   [windows] cpu5 irqs_off_ns=4913000 preempt_off_ns=25270000
06:20:48   [windows] cpu6 irqs_off_ns=50890000 preempt_off_ns=51709000
06:20:48   [windows] cpu7 irqs_off_ns=11106000 preempt_off_ns=11132000
06:20:48   PASS  virt_mask_windows  (12s)
06:20:49   PASS  virt_no_seed_refused  (7s)
06:20:49   [virt] [ 5.278 test-runner pid=4] unmap_touch: 4 reads of a page just unmapped on the unmapping thread, and 4 on another, each ended their process
06:20:50   [virt] [ 7.280 test-runner pid=4] unmap_touch: 4 reads of a page just unmapped on the unmapping thread, and 4 on another, each ended their process
06:20:50   [virt] a non-last AP never started and the dense machine ran its job
06:20:50   PASS  virt_failed_ap_leaves_no_hole  (16s)
06:20:51   [panic] the fatal path on cpu2 left every other CPU halted with interrupts masked
06:20:51   PASS  virt_fatal_halts_the_others_first  (4s)
06:20:54   [virt] [6, 7] left on and named; the rest CPU_OFF, then 0x0 SYSTEM_OFF; 3445 PSCI call(s) traced
06:20:54   PASS  virt_off_names_the_cpus_left_on  (11s)
06:20:54   --- 46 guests, 28 of them not the shipping kernel, 3 kernel build(s): ["", "boot-actuators,test-actuators", "mask-windows"]

06:20:54 host: fastest boot 454 ms against the reference 1424 ms — liveness ceilings paid at 1.00x
06:20:54 host: 14 core(s); a guest wider than that waits vcpus/cores longer again
06:20:54 test result: ok. 43 passed, 43 total (104.7s; workers: 638s building, 548s testing)
     Running tests/checks.rs (target/debug/deps/toyos_checks-cb313cb5cb491f71)

running 39 tests
test checks::a_shared_chunk_stages_every_binary_its_members_name ... ok
test checks::a_run_selects_by_filter ... ok
test checks::metal_boots_last_job_is_behind_every_other ... ok
test checks::a_name_registered_twice_is_refused ... ok
test checks::a_stall_stays_red ... ok
test checks::control_regs_verdict ... ok
test checks::metal_domains_end_below_the_host_bridges ... ok
test checks::metal_claim_spends_one_remapping_entry ... ok
test checks::irq_census_verdict ... ok
test checks::mask_windows_verdict ... ok
test checks::metal_audio_judges ... ok
test checks::metal_rows_run_before_members_under_a_bound_the_members_widen ... ok
test checks::metal_usb_judge ... ok
test checks::metal_list_from_parse_reaches_run_without_the_machine ... ok
test checks::metal_words_take_rows_members_and_whole_boots ... ok
test checks::nvme_image_is_held_by_one_guest ... ok
test checks::psci_power_off_judge ... ok
test checks::run_exit_status ... ok
test checks::nested_nmi_verdict ... ok
test checks::screen_decoder ... ok
test checks::metal_judges_read_the_page_for_what_only_the_page_carries ... ok
test checks::serial_vocabulary ... ok
test checks::suspend_invalidates_a_verdict ... ok
test checks::the_c_corpus_stages_the_expectation_the_host_compares ... ok
test checks::the_foreign_record_judge_demands_the_stop_sealed_done ... ok
test checks::the_xecp_judge_reads_the_t14s_handoff ... ok
test checks::metal_name_measured_twice_is_refused ... ok
test checks::metal_boot_that_lost_parts_of_its_log_judges_no_row ... ok
test checks::metal_name_two_owners_measured_is_refused ... ok
test checks::metal_failing_shared_member_fails_itself_alone ... ok
test checks::metal_cleared_page_owes_no_panel ... ok
test checks::metal_reading_past_its_record_fails_and_moves_nothing ... ok
test checks::metal_run_under_another_bios_fails_and_records_nothing ... ok
test checks::metal_stop_owes_its_record_and_leaves_no_operation_open ... ok
test checks::metal_number_fails_with_its_owner_alone ... ok
test checks::metal_loader_kernel_and_program_count_from_one_zero ... ok
test checks::suspend_detector ... ok
test checks::metal_bound_fires_within_one_period_of_itself ... ok
test checks::suite_split ... ok

test result: ok. 39 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

   Doc-tests toyos_build

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 01.

cargo run -- --ci host, part 01
    Blocking waiting for file lock on package cache
   Compiling toyos-swap v0.1.0 (<src>/toyos-dirrename/toyos-swap)
   Compiling toyos-update v0.1.0 (<src>/toyos-dirrename/toyos-update)
   Compiling toyos-build v0.1.0 (<src>/toyos-dirrename)
    Finished `dev` profile [optimized + debuginfo] target(s) in 11.02s
     Running `target/debug/toyos-build --ci host`

06:09:23 === [ci] the build system
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
   Compiling toyos-build v0.1.0 (<src>/toyos-dirrename)
    Finished `test` profile [optimized + debuginfo] target(s) in 12.27s
     Running unittests src/lib.rs (target/debug/deps/toyos_build-7ff6da3a5a47ee48)

running 362 tests
test arch::tests::a_guest_of_another_architecture_is_emulated ... ok
test arch::tests::every_target_names_its_own_architecture ... ok
test bootlog::record_time_tests::a_records_elapsed_field_is_read_past_whatever_tag_precedes_it ... ok
test bootlog::record_time_tests::the_last_record_is_the_last_line_that_carries_a_time ... ok
test bootlog::tests::a_power_off_is_the_supervisors_stop_naming_a_shutdown ... ok
test bootlog::tests::a_long_binarys_record_is_the_prefix_the_kernel_keeps ... ok
test arch::tests::every_name_parses_back_to_its_arch_and_nothing_else_does ... ok
test bootlog::tests::a_boot_record_without_the_supervisors_stop_is_not_a_pass ... ok
test bootlog::tests::a_boot_is_handed_back_by_its_done_and_its_last_word ... ok
test bootlog::tests::a_part_whose_rotation_the_log_does_not_hold_is_a_hole ... ok
test bootlog::tests::a_boot_that_lost_parts_of_its_own_log_is_told_from_one_that_is_whole ... ok
test bootlog::tests::the_boot_record_is_the_kernels_own_line ... ok
test bootlog::record_time_tests::the_panel_census_is_read_off_either_channel ... ok
test bootlog::tests::only_a_declaration_of_the_whole_value_counts ... ok
test bootlog::tests::a_programs_line_is_never_the_kernels ... ok
test bootlog::tests::the_loaders_file_is_told_from_logkeepers_however_a_driver_spelled_it ... ok
test build::tests::a_clean_entry_is_the_shipping_kernels ... ok
test build::tests::a_hold_in_front_of_the_save_is_an_entry_the_judge_refuses_to_read ... ok
test build::tests::a_hold_is_refused_in_a_shipping_entry_however_its_labels_are_spelled ... ok
test build::tests::a_bin_entry_no_name_reaches_is_refused ... ok
test build::tests::a_boot_that_asks_for_no_feature_gets_the_shipping_kernel ... ok
test build::tests::a_kernel_of_any_other_feature_set_is_not_judged ... ok
test build::tests::a_kernel_that_does_not_name_exactly_one_entry_is_refused ... ok
test bootlog::tests::the_loader_writes_the_lines_the_host_reads ... ok
test build::tests::a_valued_parameter_is_one_the_kernel_claims_by_prefix ... ok
test build::tests::an_artifact_build_is_not_part_of_a_test_execution_price ... ok
test build::tests::a_case_plan_carries_the_config_and_the_parameters ... ok
test build::tests::debug_mode_declares_only_its_debug_kernel ... ok
test bootlog::tests::the_kernel_writes_the_records_the_host_reads ... ok
test build::tests::every_boot_config_runs_logkeeper ... ok
test build::tests::every_config_renders_its_manifest ... ok
test build::tests::a_provides_name_is_never_also_a_serves_name ... ok
test build::tests::an_installed_app_receives_only_names_the_supervisor_holds ... ok
test build::tests::a_row_starts_only_what_a_launch_can_start ... ok
test build::tests::every_modes_crates_and_the_supervisor_ship ... ok
test build::tests::every_declared_capability_is_one_the_abi_has ... ok
test build::tests::every_device_class_has_at_most_one_claimant ... ok
test build::tests::every_receives_names_a_provider ... ok
test build::tests::no_actuator_is_also_a_cargo_feature ... ok
test build::tests::no_diag_program_claims_the_screen ... ok
test assets::tests::the_console_font_covers_the_swiss_german_altgr_layer ... ok
test build::tests::no_shipped_boot_config_starts_sshserver ... ok
test build::tests::params_read_the_kernels_own_list ... ok
test build::tests::every_started_program_is_declared ... ok
test build::tests::the_check_does_not_reach_a_spawner_that_never_spawns ... ok
test build::tests::the_actuator_umbrella_is_a_leaf ... ok
test build::tests::the_kernel_declares_only_the_builds_that_earned_one ... ok
test build::tests::only_their_holders_may_hold_the_swap_port_and_the_slots ... ok
test build::tests::the_pre_flash_gate_clears_a_valued_parameter_and_refuses_an_actuator ... ok
test build::tests::every_model_control_is_run ... ok
test build::tests::the_log_right_doc_names_exactly_the_manifests_holders ... ok
test build::tests::every_shipped_boot_config_is_covered ... ok
test build::tests::a_boot_config_that_is_not_a_case_is_refused ... ok
test build::tests::a_stamp_that_cannot_be_written_panics ... ok
test buildlock::tests::child_role ... ignored, the competing process for the tests below; never runs on its own
test assets::tests::the_system_fonts_ship_with_their_licence ... ok

running 1 test

running 1 test

running 1 test

running 1 test
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s


running 1 test

running 1 test
test assets::tests::only_doom_opens_doom_s_assets ... ok

running 1 test
06:09:36 [build-lock] waiting for the build lock (exclusive, queued exclusive phase) — held by other builds in this tree
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test buildlock::tests::shared_admits_shared ... ok
test ci::tests::a_carried_jobs_step ... ignored, the driver of the test above; never runs on its own
test ci::tests::a_control_is_judged_by_its_verdict_and_not_its_exit_alone ... ok
test ci::tests::a_hung_step ... ignored, the step of the driver above; never runs on its own
test ci::tests::a_hung_steps_child ... ignored, what the step above spawns; never runs on its own
test ci::tests::a_hung_steps_driver ... ignored, the driver of the tests around it; never runs on its own
test ci::tests::a_job_is_named_and_takes_nothing_after_it ... ok

running 1 test
06:09:36 [build-lock] waiting for the sysroot lock (using sysroot 6ab9f1eb8f7d3388) — held by pid 61258 (building sysroot 6ab9f1eb8f7d3388), 0s so far
test buildlock::tests::a_released_holder_is_gone ... ok
test buildlock::tests::killed_holder_releases_the_lock ... ok
test ci::tests::a_steps_cargo ... ignored, the driver of the test above; never runs on its own

running 1 test

running 1 test
test build::tests::moved_libraries_take_what_was_built_for_them_and_a_moved_compiler_all ... ok
test ci::tests::an_app_is_judged_for_every_host_its_fails_does_not_name ... ok
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test buildlock::tests::exclusive_excludes_every_other_acquirer ... ok
test ci::tests::an_interrupted_drivers_judge ... ignored, the judge of the test above; never runs on its own
test ci::tests::left_behind_refuses_a_tmpdir_that_never_saw_the_lock ... ok
test ci::tests::only_mains_tip_publishes ... ok
test ci::tests::the_declared_version_is_a_version ... ok

running 1 test
06:09:36 [build-lock] waiting for the build lock (shared, child) — an exclusive phase is queued ahead of it
test ci::tests::the_host_job_names_what_its_tests_left_behind ... ok
06:09:36 [build-lock] waiting for the build lock (exclusive, clean the crate target) — held by other builds in this tree
test ci::tests::the_job_names_a_short_root_a_step_left_when_it_died ... ok
test ci::tests::the_required_check_is_a_job_on_every_pull_request ... ok
test ci::tests::the_summary_keeps_the_count_and_the_verdicts ... ok
test ci::tests::the_version_parser_takes_what_qemu_prints_and_refuses_the_rest ... ok
test ci::tests::workflows_run_against_main_on_hosted_runners ... ok
test ci::tests::an_interrupt_of_the_driver_ends_the_group_its_step_runs_in ... ok
test assets::tests::root_carries_what_the_repository_declares ... ok
test assets::tests::an_owned_asset_ships_only_where_its_reader_does ... ok
test assets::tests::a_system_font_ships_as_it_is_and_the_console_font_as_its_raster ... ok
test cicache::tests::a_reader_whose_clock_is_not_after_the_entry_is_refused ... ok
test cicache::tests::a_seal_refuses_what_its_save_would_store_above_the_bound ... ok
test cicache::tests::a_seal_dates_every_target_and_refuses_a_written_source ... ok
test cicache::tests::every_spelling_of_code_run_at_build_time_is_found ... ok
test cicache::tests::only_a_driver_built_in_its_own_target_carries_the_cache ... ok
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.31s

test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.30s

06:09:36 [build-lock] still waiting for the build lock (exclusive, queued exclusive phase), 305ms so far — the holder left no readable note

running 1 test
06:09:36 [build-lock] acquired (exclusive, queued exclusive phase) after 307.0ms
06:09:36 [build-lock] acquired (shared, child) after 298.0ms
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.31s

test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.30s

test buildlock::tests::a_queued_exclusive_phase_goes_first ... ok
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test buildlock::tests::a_key_being_built_is_waited_for_and_another_key_is_not ... ok
test clippy::tests::the_adopted_set_expands_into_the_shapes_that_name_it ... ok
06:09:36 [build-lock] still waiting for the build lock (exclusive, clean the crate target), 310ms so far — the holder left no readable note
test ci::tests::a_step_of_a_job_that_carries_the_cache_builds_in_its_own_target ... ok
test clang::tests::a_toolchain_carries_the_clang_of_its_llvm_or_is_refused ... ok
test build::tests::a_tree_records_its_commit_its_commit_time_and_whether_it_is_dirty ... ok
test cicache::tests::targets_restored_without_a_manifest_are_refused ... ok
test build::tests::the_kernel_resolves_no_libc_for_either_target ... ok
test compiler::tests::child_role ... ignored, the competing process for the test above; never runs on its own
test compiler::tests::every_compiler_is_built_lean_against_the_host_s_llvm ... ok
test buildlock::tests::a_lasting_wait_keeps_saying_so ... ok
06:09:36 [build-lock] still waiting for the build lock (exclusive, clean the crate target), 628ms so far — the holder left no readable note
test ci::tests::a_steps_cargo_finds_fresh_what_the_jobs_cargo_built ... ok
test firmware::tests::a_descriptor_that_does_not_parse_is_refused_by_name ... ok
test firmware::tests::a_glob_matches_a_trailing_star_as_a_prefix_and_refuses_anything_else ... ok
test firmware::tests::a_read_only_templates_copy_is_still_writable ... ok
test firmware::tests::an_earlier_directory_hides_a_later_ones_name_and_a_missing_one_holds_nothing ... ok
test firmware::tests::nothing_fitting_is_refused_naming_what_was_read ... ok
test firmware::tests::the_first_non_secure_uefi_flash_descriptor_for_the_machine_wins ... ok
test firmware::tests::the_machine_is_the_versioned_type_its_alias_resolves_to ... ok
test firmware::tests::the_users_and_the_systems_directories_come_before_qemus_own ... ok
test flags::tests::a_declared_flags_value_is_never_read_as_a_flag ... ok
test flags::tests::a_flag_left_without_its_value_is_refused ... ok
test flags::tests::a_flag_that_reads_one_value_is_refused_when_it_is_written_twice ... ok
test flags::tests::a_repeatable_flag_keeps_every_value_it_was_given ... ok
test flags::tests::an_argument_the_declaration_does_not_expect_is_refused_by_name ... ok
test flags::tests::an_inline_value_is_refused_exactly_where_it_would_be_dropped ... ok
test flags::tests::help_is_the_whole_declared_list ... ok
06:09:37 [build-lock] acquired (exclusive, clean the crate target) after 695.4ms
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.71s

test buildlock::tests::a_clean_cannot_land_inside_a_build ... ok
test hostws::tests::every_member_and_every_exclusion_still_names_a_directory ... ok
test hostws::tests::every_crate_in_the_tree_joined_the_workspace_or_was_excluded_by_name ... ok
test hostws::tests::the_dead_path_scan_names_the_member_and_ignores_an_excluded_crate ... ok
test hostws::tests::the_dead_path_scan_reads_code_and_not_the_comment_beside_it ... ok
test hostws::tests::the_gate_refuses_a_crate_that_joined_neither_list ... ok
test hostws::tests::the_root_package_is_the_only_default_member ... ok
test hostws::tests::the_walk_reaches_the_tree_and_descends_into_it ... ok
test identity::tests::a_file_that_is_not_rust_is_its_bytes ... ok
test identity::tests::a_literal_is_never_read_as_a_comment ... ok
test identity::tests::a_signature_or_a_value_is_a_change ... ok
test identity::tests::every_doc_comment_in_the_sysroot_crates_is_invisible ... ok
test identity::tests::the_doc_fix_that_cost_a_version_and_a_sysroot_is_neither ... ok
test hostws::tests::nothing_that_runs_names_a_target_directory_a_member_does_not_have ... ok
test cicache::tests::an_entry_built_on_another_runner_is_deleted ... ok
test image::tests::a_damaged_image_is_refused_by_the_reader_that_caught_it ... ok
test image::tests::a_second_build_at_the_boundary_does_not_run_out ... ok
test image::tests::every_declared_path_resolves_inside_the_root_partition ... ok
test image::tests::one_ordering_of_one_set_is_one_image ... ok
test image::tests::an_image_s_marked_slot_is_signed_over_exactly_what_it_carries ... ok
test image::tests::an_install_makes_its_disk_and_refuses_one_that_exists ... ok
test image::tests::the_esp_and_a_slot_carry_what_the_bootloader_looks_for ... ok
test image::tests::the_volumes_this_build_writes_break_no_format_rule ... ok
test kernelconsole::tests::a_console_that_ends_mid_line_shows_its_last_line ... ok
test kernelconsole::tests::a_port_the_firmware_left_alone_passes_whole ... ok
test image::tests::root_carries_less_than_an_alignment_unit_of_free_blocks ... ok
test kernelconsole::tests::a_terminal_is_shown_the_firmware_as_it_came_and_the_kernel_in_colour ... ok
test kernelconsole::tests::nothing_before_the_kernel_passes ... ok
test kernelconsole::tests::the_fused_line_is_the_kernels_first_record_wherever_the_chunks_fall ... ok
test kernelkeys::tests::every_declared_row_names_the_minter_of_its_keys ... ok
test image::tests::the_root_partition_reads_back_as_the_files_the_build_put_in_it ... ok
test kernelkeys::tests::the_scan_reads_a_nested_generic_to_its_balanced_close ... ok
test kernelkeys::tests::the_scan_walks_past_four_measured_forms ... ok

running 1 test
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test keystore::tests::a_product_used_again_is_kept ... ok
test keystore::tests::a_stopped_retire_leaves_nothing_at_its_name ... ok
test keystore::tests::a_sweep_leaves_hidden_names_and_refuses_names_no_key_owns ... ok

running 1 test
test buildlock::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.01s

test keystore::tests::a_sweep_removes_what_nobody_used_for_the_keep_time_and_nobody_uses ... ok
test keystore::tests::only_what_key_of_gives_is_a_key ... ok
test libc::tests::the_c_sysroot_names_the_empty_libraries ... ok
test licence::tests::a_cfg_edge_is_walked_and_excepted_only_while_every_edge_in_is_under_it ... ok
test licence::tests::a_committed_file_is_judged_by_its_row_when_it_ships ... ok
test licence::tests::a_disallowed_licence_is_refused_by_name ... ok
test licence::tests::a_font_licence_does_not_reach_a_row_that_is_no_font ... ok
test licence::tests::a_git_dependency_is_judged_like_any_other ... ok
test licence::tests::a_graph_is_walked_over_normal_edges_from_the_shipped_root ... ok
test licence::tests::a_malformed_expression_is_refused_not_guessed ... ok
test licence::tests::a_notice_section_is_judged_when_what_no_row_names_ships ... ok
test licence::tests::a_notice_section_that_disagrees_with_a_row_is_refused ... ok
test licence::tests::a_notice_section_without_one_spdx_line_or_without_files_is_refused ... ok
test licence::tests::a_root_the_metadata_does_not_hold_is_refused ... ok
test licence::tests::an_and_passes_only_when_every_part_does ... ok
test licence::tests::an_embed_is_what_a_build_script_or_an_include_names ... ok
test licence::tests::an_exception_matches_by_name_and_licence_and_a_stale_one_reds ... ok
test licence::tests::an_or_passes_when_any_branch_does ... ok
test licence::tests::every_pending_exception_cites_an_issue_that_exists ... ok
test licence::tests::metadata_is_given_the_features_the_build_gives ... ok
test licence::tests::mpl_passes_and_is_named ... ok
test licence::tests::no_guest_target_satisfies_an_only_under_cfg ... ok
test licence::tests::only_a_workspace_member_is_a_documents_own ... ok
test llvm::tests::a_build_directory_keeps_no_llvm_of_its_own ... ok
test kernelkeys::tests::every_hashed_kernel_container_is_declared_with_a_kernel_minted_key ... ok
test cicache::tests::a_file_cargo_was_never_told_about_rebuilds_its_package ... ok
test kernelconsole::tests::a_relay_waits_out_a_pty_that_would_block ... ok
test compiler::tests::a_compiler_is_keyed_by_its_whole_build ... ok
test compiler::tests::a_compiler_whose_sources_moved_while_it_was_built_is_not_stored ... ok
test compiler::tests::an_uncommitted_llvm_edit_is_refused ... ok
test compiler::tests::a_compiler_s_build_directory_keeps_no_llvm_of_its_own ... ok
test llvm::tests::a_staged_llvm_gitlink_is_refused ... ok
test cicache::tests::an_entry_serves_exactly_the_sources_it_was_built_from ... ok
test compiler::tests::a_build_directory_another_llvm_filled_starts_from_nothing ... ok
test llvm::tests::child_role ... ignored, the competing process for the tests below; never runs on its own
test llvm::tests::keyed_and_built ... ignored, the process the environment test runs; never runs on its own
test cicache::tests::code_run_at_build_time_runs_again_on_every_read ... ok

running 1 test
test llvm::tests::an_llvm_is_stamped_with_what_its_fork_s_commit_names ... ok
test llvm::tests::the_key_names_the_host_s_tools ... ok
test llvm::tests::the_llvm_config_turns_every_host_library_off ... ok
test llvm::tests::a_placed_llvm_is_read_only ... ok

running 1 test

running 1 test
06:09:40 Building LLVM edb8c0a49e4a1de4 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-58622-0/ci-host-0/toyos-tmp-61157-0/llvm-sweep-stopped-65/a/rust: nobody on this host has

running 1 test
06:09:40 Building LLVM edb8c0a49e4a1de4 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-58622-0/ci-host-0/toyos-tmp-61157-0/llvm-made-elsewhere-66/b/rust: nobody on this host has
06:09:40 Building compiler 7159e1f18b167b33 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-58622-0/ci-host-0/toyos-tmp-61157-0/compiler-48/a/rust: nobody on this host has
06:09:40 Building LLVM edb8c0a49e4a1de4 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-58622-0/ci-host-0/toyos-tmp-61157-0/llvm-sweep-68/a/rust: nobody on this host has
test compiler::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.43s

test llvm::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.63s

test llvm::tests::the_caller_s_environment_reaches_neither_the_build_nor_the_key ... ok

running 1 test
test llvm::tests::a_checkout_behind_its_gitlink_is_built_at_the_gitlink ... ok
test llvm::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.84s

test llvm::tests::a_stopped_sweep_leaves_no_llvm_that_passes_for_whole ... ok
test metal::tests::a_boot_entry_is_matched_on_the_partition_its_path_names ... ok
test metal::tests::a_boot_entry_the_firmware_did_not_name_cannot_be_filled_in ... ok
test metal::tests::a_command_line_that_names_no_image_flashes_none ... ok
test metal::tests::a_create_that_moved_the_boot_order_is_refused ... ok
test metal::tests::a_failed_boot_and_a_loop_that_could_not_run_are_different_answers ... ok
test metal::tests::a_node_is_a_whole_scsi_or_nvme_disk_and_nothing_else ... ok
test metal::tests::a_pass_that_reported_and_booted_nothing_is_named_as_that ... ok
test metal::tests::a_readback_directory_holds_nothing_the_last_run_left ... ok
test metal::tests::a_refusal_is_read_back_off_the_drivers_stderr ... ok
test metal::tests::a_sudoers_word_escapes_what_sudoers_reads ... ok
test metal::tests::an_account_name_that_would_widen_the_rule_is_refused ... ok
test metal::tests::an_arm_with_no_ruling_never_reaches_the_stick ... ok
test metal::tests::an_image_admits_only_the_table_the_installed_rule_names ... ok
test metal::tests::an_image_armed_to_stop_itself_owes_a_record_and_no_reboot ... ok
test metal::tests::an_image_with_no_bound_on_its_own_boot_is_refused ... ok
06:09:41 Building compiler ba8f7ad1ae656e39 in /private/var/folders/gr/mr4_fg4n34jb417sx1g5cgxc0000gp/T/toyos-tmp-58622-0/ci-host-0/toyos-tmp-61157-0/compiler-48/a/rust: nobody on this host has
test llvm::tests::an_llvm_keeps_what_builds_read_and_nothing_else ... ok
test metal::tests::dd_is_believed_only_where_it_states_a_count ... ok
test metal::tests::either_bounds_record_is_a_wedged_boots_pass ... ok
test metal::tests::every_arm_that_stops_this_machine_is_cleared_and_judged_as_one ... ok
test metal::tests::every_ruling_names_a_parameter_the_kernel_declares ... ok
test metal::tests::installing_the_rule_is_not_also_a_boot ... ok
test metal::tests::one_table_feeds_the_rule_and_the_argv ... ok
test metal::tests::the_arguments_name_the_t14_by_default ... ok
test metal::tests::the_bound_the_gate_demands_is_a_bound_the_gate_clears ... ok
test metal::tests::the_deadlines_lateness_is_counted_from_its_arm ... ok
test metal::tests::the_foreign_record_arm_reaches_its_judge_through_the_hang_it_stages ... ok
test metal::tests::the_host_clock_crosses_in_the_boot_file ... ok
test metal::tests::the_identity_is_the_stick_or_it_is_refused ... ok
test metal::tests::the_lid_policy_is_systemds_effective_one ... ok
test metal::tests::the_loops_verdict_crosses_in_the_readback ... ok
test metal::tests::the_machine_crosses_in_the_boot_file ... ok
test metal::tests::the_outside_judges_read_can_write_nothing ... ok
test metal::tests::the_phases_cross_in_the_boot_file ... ok
test metal::tests::the_readback_carries_the_verdict_the_loop_returns ... ok
test metal::tests::the_rule_is_the_command_table_rendered ... ok
test metal::tests::the_ssh_line_carries_the_key_and_nothing_interactive ... ok
test metal::tests::the_wait_outlasts_every_watchdog_a_boot_runs_under ... ok
test metaldevices::tests::a_needle_that_only_appears_in_a_comment_is_not_found ... ok
test llvm::tests::an_llvm_being_made_elsewhere_is_not_made_again ... ok
test metaldevices::tests::the_shutdowns_own_account_is_read_out_of_the_loaders_file ... ok
test metaldevices::tests::the_kernel_writes_the_quiesce_lines_the_host_reads ... ok
test metalimage::tests::a_config_with_no_runner_is_refused_by_name ... ok
test metalimage::tests::nothing_the_config_declared_is_dropped ... ok
test metaltimings::tests::a_failing_owners_reading_is_judged_and_not_recorded ... ok
test metalimage::tests::every_derived_config_ends_its_own_boot ... ok
test metaltimings::tests::a_known_machine_outside_its_record_fails_and_keeps_its_record ... ok
test metaltimings::tests::a_known_machine_within_its_record_passes ... ok
test metaltimings::tests::a_machine_is_three_non_empty_lines ... ok
test metaltimings::tests::a_new_name_on_a_known_machine_is_recorded_and_not_failed ... ok
test metaltimings::tests::a_record_survives_the_file_it_is_written_to ... ok
test metaltimings::tests::a_recorded_name_nothing_measured_is_named ... ok
test metaltimings::tests::an_unknown_machine_is_recorded_and_not_judged ... ok
test metaltimings::tests::another_bios_fails_naming_both_and_records_nothing ... ok
test metaltimings::tests::a_name_recorded_twice_is_refused ... ok
test metaltimings::tests::every_committed_record_loads_from_its_own_path ... ok
test miscompile::tests::an_endless_caller_is_not_one_that_returns_true ... ok
test metaltimings::tests::two_machines_sharing_a_file_name_are_refused ... ok
test n2::tests::an_installed_n2_is_not_installed_again ... ok
test compiler::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 0.71s

test publish::tests::a_first_publish_mints_root_one_and_a_machine_accepts_it ... ok
test publish::tests::a_publish_moves_forward_and_renews_a_root_near_its_expiry ... ok
test publish::tests::a_publish_that_would_move_anything_back_is_refused_by_name ... ok
test publish::tests::a_timestamp_naming_the_last_targets_version_is_refused ... ok
test release::tests::a_job_is_told_each_layer_s_entry_and_path ... ok
test publish::tests::two_rows_naming_one_archive_with_other_bytes_are_refused ... ok
test release::tests::a_job_saves_only_what_it_built ... ok
test release::tests::a_landing_during_the_nightly_puts_nothing_up_and_is_no_failure ... ok
test release::tests::a_layer_that_is_not_whole_is_refused ... ok
test release::tests::a_release_is_made_to_carry_these_bytes_and_no_other ... ok
test release::tests::a_job_lays_out_the_one_sysroot_it_restored ... ok
test release::tests::only_mains_publisher_publishes ... ok
test release::tests::the_glibc_scan_takes_the_newest_version_and_nothing_else ... ok
test release::tests::one_sysroot_packs_to_one_digest_and_unpacks_whole ... ok
test sdkversion::tests::a_changed_crate_takes_the_minor_after_the_newest_and_an_unchanged_one_keeps_it ... ok
test sdkversion::tests::a_dependent_whose_newest_names_a_stale_dependency_goes_up_again ... ok
test llvm::tests::an_uncommitted_bootstrap_names_no_llvm ... ok
test sdkversion::tests::every_lockfile_resolves_the_published_crates_from_the_tree ... ok
test sdkversion::tests::every_row_is_a_crate_the_tree_holds_in_dependency_order ... ok
test llvm::tests::child_role ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 361 filtered out; finished in 2.03s

test compiler::tests::one_compiler_per_key_whichever_checkout_names_it ... ok
test signing::tests::a_checkouts_throwaway_key_is_minted_once_and_read_back ... ok
test signing::tests::a_key_that_is_not_one_is_refused_by_name ... ok
test signing::tests::an_owner_key_reads_back_and_signs_what_the_loader_verifies ... ok
test signing::tests::an_owner_key_wider_than_0600_is_refused ... ok
test soundfont::tests::doom1_wads_music_selects_the_instruments_it_selects ... ok
test soundfont::tests::the_shipped_bank_carries_nothing_doom_does_not_select ... ok
test soundfont::tests::the_shipped_bank_sounds_every_instrument_the_shipped_wad_selects ... ok
test soundfont::tests::the_shipped_bank_still_carries_its_source_licence ... ok
test sourcegate::tests::a_capability_closing_ends_no_log_poll ... ok
test sourcegate::tests::a_value_is_refused_by_its_shape_and_what_resembles_one_is_not ... ok
test sourcegate::tests::bus_mastering_is_armed_at_exactly_the_declared_sites ... ok
test sdkversion::tests::the_published_manifests_resolve_as_the_forks_name_them ... ok
test sourcegate::tests::every_hand_written_auto_trait_impl_is_declared ... ok
test llvm::tests::an_llvm_is_swept_once_nothing_used_it_for_the_keep_time ... ok
test sourcegate::tests::nmi_does_not_log ... ok
test sourcegate::tests::no_slice_or_exclusive_reference_is_built_over_a_mapped_page ... ok
test sourcegate::tests::every_host_scratch_is_the_guard ... ok
test llvm::tests::the_key_moves_with_the_llvm_and_only_with_it ... ok
test sourcegate::tests::the_scan_reaches_the_tree_it_claims_to ... ok
test sourcegate::tests::every_committed_binary_file_is_declared ... ok
test sysroot::tests::a_std_build_downloads_no_llvm_and_asks_for_no_ninja ... ok
test sysroot::tests::a_std_build_under_the_same_compiler_keeps_no_llvm ... ok
test llvm::tests::two_sdk_versions_are_two_keys ... ok
test sysroot::tests::a_compiler_made_again_under_its_key_leaves_all_of_a_crate_stale ... ok
test sysroot::tests::a_sysroot_is_whole_or_it_is_made_again ... ok
test sysroot::tests::a_sysroot_records_the_witness_it_was_built_from ... ok
test sdkversion::tests::a_key_moves_with_the_crate_and_its_published_dependencies ... ok
test sysroot::tests::a_switch_that_cannot_remove_records_nothing_and_the_next_one_removes ... ok
test sysroot::tests::a_sysroot_that_cannot_be_made_whole_is_made_once_and_refused ... ok
test sysroot::tests::another_compiler_s_std_build_goes_and_the_same_one_s_stays ... ok
test sysroot::tests::the_libraries_placed_are_the_ones_the_stamp_names ... ok
test metal::tests::coming_back_is_ssh_answering_and_not_its_port ... ok
test llvm::tests::an_llvm_that_is_not_whole_is_made_again ... ok
test testargs::tests::a_boot_word_names_a_metal_boot_and_nothing_else ... ok
test testargs::tests::a_deleted_flag_is_refused_rather_than_becoming_the_filter ... ok
test testargs::tests::a_flag_left_without_its_value_is_refused_by_name ... ok
test testargs::tests::a_flag_written_twice_is_refused_by_name ... ok
test testargs::tests::a_flags_value_is_not_the_filter ... ok
test testargs::tests::a_readback_directory_alone_selects_no_tier ... ok
test testargs::tests::a_readback_flag_with_no_directory_never_reaches_the_metal_driver ... ok
test testargs::tests::an_inline_value_on_a_flag_that_has_none_is_refused ... ok
test testargs::tests::an_unknown_flag_is_refused_before_metal_decides_a_mode ... ok
test testargs::tests::every_word_that_is_nobodys_value_is_a_filter ... ok
test testargs::tests::metal_and_list_never_drives ... ok
test testargs::tests::metal_list_beside_a_readback_directory_is_refused ... ok
test testargs::tests::metal_refuses_a_filter_that_is_a_flags_name_or_empty ... ok
test testargs::tests::metal_refuses_the_flags_it_reads_nothing_of_by_name ... ok
test testargs::tests::metal_resolves_to_a_mode_that_reaches_the_machine_only_when_asked ... ok
test testargs::tests::the_documented_command_lines_parse ... ok
test testargs::tests::the_filter_is_the_word_that_is_nobodys_value ... ok
test tether::tests::a_tethered_child_dies_with_its_owner ... ok
test tether::tests::owner ... ignored, the owner `a_tethered_child_dies_with_its_owner` kills; never runs on its own
test tether::tests::parked ... ignored, the tethered child of `owner`; never runs on its own
test toolchain::tests::a_bootstrap_run_leaves_both_lockfiles_as_they_were ... ok
test toolchain::tests::a_bootstrap_run_sees_no_ci_variables ... ok
test toolchain::tests::a_compiler_build_finds_the_llvm_s_objcopy_where_rustc_strips_with_it ... ok
test toolchain::tests::a_fake_bootstrap ... ignored, the bootstrap `a_bootstrap_run_leaves_both_lockfiles_as_they_were` runs; never runs on its own
test toolchain::tests::a_fake_bootstrap_that_reads_ci ... ignored, the bootstrap `a_bootstrap_run_sees_no_ci_variables` runs; never runs on its own
test toolchain::tests::a_fake_bootstrap_that_strips ... ignored, the bootstrap `a_compiler_build_finds_the_llvm_s_objcopy_where_rustc_strips_with_it` runs; never runs on its own
test toolchain::tests::a_link_failure_is_not_a_compile_error ... ok
test toolchain::tests::a_restore_that_cannot_write_leaves_the_file_whole ... ok
test toolchain::tests::a_toolchain_bin_without_cargo_is_one_rustup_narrates ... ok
test toolchain::tests::dep_info_names_the_checkout_std_was_really_built_from ... ok
test toolchain::tests::dep_info_that_cannot_be_read_is_refused ... ok
test toolchain::tests::freestanding_libraries_that_read_the_worktree_are_refused ... ok
test toolchain::tests::the_first_real_error_is_the_one_reported ... ok
test userlandhost::tests::a_host_declaration_is_read_whole_and_refused_by_name ... ok
test userlandhost::tests::a_manifest_that_switches_tests_off_is_named ... ok
test userlandhost::tests::a_test_attribute_is_a_word_and_not_a_substring ... ok
test userlandhost::tests::every_program_the_images_ship_declares_what_it_is_to_a_host ... ok
test userlandhost::tests::every_userland_test_is_in_the_gate ... ok
test userlandhost::tests::the_survey_gates_what_cargo_test_runs_and_names_the_rest ... ok
test userlandhost::tests::what_could_hide_a_test_is_a_condition ... ok
test wallpaper::tests::the_committed_wallpaper_is_the_one_this_file_describes ... ok
test llvm::tests::the_runtimes_sources_are_the_commit_s ... ok
test release::tests::the_layers_are_the_stores_the_build_makes ... ok
test sourcegate::tests::no_tracked_file_identifies_a_machine_or_its_network ... ok
test compiler::tests::every_source_of_a_compiler_moves_its_key ... ok
test wallpaper::tests::the_wallpaper_neither_bands_nor_blocks ... ok
test llvm::tests::two_compilers_of_one_llvm_make_it_once ... ok
test sysroot::tests::a_submodule_is_the_commit_its_gitlink_records_checked_out_or_not ... ok
test sysroot::tests::a_comment_is_the_same_sysroot_and_a_signature_is_another ... ok
Preparing worktree (detached HEAD ef21429)
test sysroot::tests::ensure_shallow_fork_initialises_no_submodule_in_a_linked_worktree ... ok
HEAD is now at ef21429 C2
Preparing worktree (detached HEAD f1978c4)
HEAD is now at f1978c4 C2
Preparing worktree (detached HEAD 1505de8)
HEAD is now at 1505de8 backtrace, later
Preparing worktree (detached HEAD 1505de8)
HEAD is now at 1505de8 backtrace, later
test llvm::tests::what_the_key_does_not_name_is_never_stored ... ok
test sysroot::tests::twelve_builds_at_once_make_and_move_one_fork_checkout ... ok
test sysroot::tests::a_worktree_pinning_another_fork_commit_gets_its_own_checkout ... ok
test sysroot::tests::the_primary_s_fork_checkout_is_moved_to_its_pin ... ok
test ci::tests::a_step_that_goes_quiet_is_ended_with_what_it_spawned_and_names_its_last_line ... ok

test result: ok. 347 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 10.07s

06:09:46 [ci] the build system: cargo test --lib

06:09:46 === [ci] the harness's own checks
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
   Compiling toyos-build v0.1.0 (<src>/toyos-dirrename)
    Finished `test` profile [optimized + debuginfo] target(s) in 4.18s
     Running tests/checks.rs (target/debug/deps/toyos_checks-cb313cb5cb491f71)

running 39 tests
test checks::a_shared_chunk_stages_every_binary_its_members_name ... ok
test checks::a_name_registered_twice_is_refused ... ok
test checks::metal_boots_last_job_is_behind_every_other ... ok
test checks::a_stall_stays_red ... ok
test checks::metal_domains_end_below_the_host_bridges ... ok
test checks::metal_claim_spends_one_remapping_entry ... ok
test checks::irq_census_verdict ... ok
test checks::a_run_selects_by_filter ... ok
test checks::control_regs_verdict ... ok
test checks::mask_windows_verdict ... ok
test checks::metal_rows_run_before_members_under_a_bound_the_members_widen ... ok
test checks::metal_audio_judges ... ok
test checks::metal_list_from_parse_reaches_run_without_the_machine ... ok
test checks::metal_usb_judge ... ok
test checks::metal_words_take_rows_members_and_whole_boots ... ok
test checks::nvme_image_is_held_by_one_guest ... ok
test checks::psci_power_off_judge ... ok
test checks::nested_nmi_verdict ... ok
test checks::run_exit_status ... ok
test checks::metal_judges_read_the_page_for_what_only_the_page_carries ... ok
test checks::screen_decoder ... ok
test checks::serial_vocabulary ... ok
test checks::suspend_invalidates_a_verdict ... ok
test checks::the_c_corpus_stages_the_expectation_the_host_compares ... ok
test checks::the_foreign_record_judge_demands_the_stop_sealed_done ... ok
test checks::the_xecp_judge_reads_the_t14s_handoff ... ok
test checks::metal_name_measured_twice_is_refused ... ok
test checks::metal_failing_shared_member_fails_itself_alone ... ok
test checks::suite_split ... ok
test checks::metal_cleared_page_owes_no_panel ... ok
test checks::metal_boot_that_lost_parts_of_its_log_judges_no_row ... ok
test checks::metal_run_under_another_bios_fails_and_records_nothing ... ok
test checks::metal_name_two_owners_measured_is_refused ... ok
test checks::metal_reading_past_its_record_fails_and_moves_nothing ... ok
test checks::metal_stop_owes_its_record_and_leaves_no_operation_open ... ok
test checks::metal_number_fails_with_its_owner_alone ... ok
test checks::metal_loader_kernel_and_program_count_from_one_zero ... ok
test checks::suspend_detector ... ok
test checks::metal_bound_fires_within_one_period_of_itself ... ok

test result: ok. 39 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

06:09:50 [ci] the harness's own checks: cargo test --test toyos-checks

06:09:50 === [ci] the workspace's host members
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
   Compiling toyos-update v0.1.0 (<src>/toyos-dirrename/toyos-update)
   Compiling toyos-swap v0.1.0 (<src>/toyos-dirrename/toyos-swap)
   Compiling toyos-i219 v0.1.0 (<src>/toyos-dirrename/toyos-i219)
   Compiling toyos-libc-copies v0.1.0 (<src>/toyos-dirrename/tests/libc-arch)
   Compiling toyos-manifest v0.1.0 (<src>/toyos-dirrename/toyos-manifest)
    Finished `test` profile [optimized + debuginfo] target(s) in 2.81s
     Running unittests src/lib.rs (target/debug/deps/bcachefs-dd31ce931b3f7dd7)

running 72 tests
test block_io::image_bounds::a_block_number_whose_byte_offset_wraps_is_refused_and_does_not_panic ... ok
test block_io::image_bounds::a_block_past_the_end_is_refused_rather_than_read ... ok
test block_io::image_bounds::a_block_that_starts_inside_and_ends_outside_is_refused ... ok
test block_io::image_bounds::an_empty_image_holds_no_block_at_all ... ok
test block_io::image_bounds::every_block_the_image_holds_is_served_whole ... ok
test btree::tests::a_descent_gives_up_before_it_runs_out_of_stack ... ok
test btree::tests::a_crafted_entry_count_never_reaches_the_allocator ... ok
test btree::tests::a_child_pointer_off_the_device_is_refused ... ok
test btree::tests::an_entry_larger_than_the_payload_is_refused ... ok
test btree::tests::an_interior_child_shorter_than_a_block_number_is_refused ... ok
test btree::tests::an_interior_node_with_no_children_is_refused ... ok
test btree::tests::a_split_short_of_a_sibling_gives_back_the_ones_it_took ... ok
test btree::tests::write_to_refuses_an_overfull_node_instead_of_underflowing ... ok
test btree::tests::pack_fills_each_node_in_order_and_none_past_a_block ... ok
test crc32c::tests::known_vectors ... ok
test crc32c::tests::zeroes ... ok
test fs::tests::a_bitmap_outside_the_volume_is_refused ... ok
test fs::tests::a_block_allocated_to_bridge_a_gap_reads_as_zeros ... ok
test fs::tests::a_child_pointer_past_the_end_of_the_device_is_refused ... ok
test fs::tests::a_file_ending_in_a_hole_still_reads_as_zeros ... ok
test fs::tests::a_delete_of_a_name_that_is_not_here_destroys_nothing ... ok
test fs::tests::a_bitmap_too_small_to_cover_the_volume_is_refused ... ok
test fs::tests::a_file_naming_more_blocks_than_the_volume_has_is_refused ... ok
test fs::tests::a_page_resolved_against_an_extent_at_the_end_of_the_address_space_is_total ... ok
test fs::tests::a_size_longer_than_the_volume_never_reaches_the_allocator ... ok
test fs::tests::a_run_ending_on_the_volumes_last_block_is_accepted ... ok
test fs::tests::a_superblock_claiming_more_blocks_than_the_device_has_is_refused ... ok
test fs::tests::a_size_inside_the_volume_but_over_the_ceiling_never_reaches_the_allocator ... ok
test fs::tests::a_volume_copied_onto_a_larger_device_does_not_mount ... ok
test fs::tests::an_extent_outside_the_volume_is_refused_before_the_bitmap_is_touched ... ok
test upstream::bkey::tests::a_key_that_does_not_fit_is_refused ... ok
test fs::tests::a_shortened_record_gives_its_tail_back ... ok
test fs::tests::an_untampered_volume_still_mounts_and_reads ... ok
test fs::tests::an_extent_past_the_end_of_the_volume_is_refused ... ok
test fs::tests::an_interior_value_too_short_for_a_block_number_is_refused ... ok
test upstream::bkey::tests::format_vectors ... ok
test upstream::bkey::tests::a_field_past_its_unpacked_width_is_refused_not_truncated ... ok
test fs::tests::is_dir_over_a_corrupt_node_is_refused ... ok
test upstream::bkey::tests::a_field_wider_than_the_one_it_fills_is_refused ... ok
test upstream::bkey::tests::a_truncated_format_is_refused ... ok
test upstream::bkey::tests::field_fit_vectors ... ok
test upstream::bkey::tests::the_identity_format_is_the_unpacked_one ... ok
test upstream::bkey::tests::the_identity_format_round_trips_a_position ... ok
test upstream::bkey::tests::unpack_vectors ... ok
test upstream::csum::tests::encryption_csum_types_are_refused_by_name ... ok
test upstream::csum::tests::xxh64_covers_every_tail ... ok
test upstream::csum::tests::published_check_values ... ok
test upstream::fs::tests::a_crc_entry_states_the_extent_it_covers ... ok
test fs::tests::is_dir_is_a_name_beneath ... ok
test upstream::fs::tests::a_file_longer_than_its_device_is_refused_without_allocating_it ... ok
test upstream::fs::tests::an_entry_before_the_checksum_does_not_move_the_pointer ... ok
test upstream::fs::tests::an_entry_this_volume_cannot_size_is_refused ... ok
test upstream::fs::tests::dirent_vectors ... ok
test fs::tests::a_root_that_points_at_itself_is_refused_not_followed ... ok
test upstream::raw::tests::an_offset_that_would_wrap_refuses ... ok
test upstream::raw::tests::bitmask_matches_upstreams_accessor ... ok
test upstream::raw::tests::a_short_window_refuses_by_name ... ok
test upstream::sb::fixture::a_clean_section_shorter_than_its_header_is_refused ... ok
test upstream::node::tests::a_node_that_is_not_the_one_asked_for_is_refused ... ok
test upstream::node::tests::the_crafted_node_is_accepted ... ok
test upstream::node::tests::a_key_longer_than_its_bset_is_refused ... ok
test upstream::sb::fixture::the_crafted_superblock_is_accepted ... ok
test upstream::node::tests::a_bset_this_filesystem_did_not_write_is_refused ... ok
test upstream::sb::fixture::the_interim_reader_rejects_bcachefs_s_magic ... ok
test upstream::sb::fixture::a_volume_without_a_clean_section_is_refused_by_name ... ok
test upstream::sb::fixture::a_huge_u64s_is_refused_without_allocating_it ... ok
test upstream::sb::fixture::a_superblock_that_is_not_this_ones_is_refused ... ok
test upstream::sb::fixture::a_member_bigger_than_its_device_is_refused ... ok
test upstream::sb::fixture::every_unsupported_format_feature_is_refused_by_name ... ok
test upstream::node::tests::a_bset_longer_than_its_node_is_refused ... ok
test fs::tests::is_dir_over_a_split_root_finds_every_directory ... ok
test fs::tests::a_tree_past_the_ceiling_is_refused_before_it_materialises ... ok

test result: ok. 72 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.95s

     Running tests/crash.rs (target/debug/deps/crash-e98227d3fa9db16d)

running 2 tests
test a_directory_rename_is_whole_under_one_name_whichever_write_is_refused ... ok
test a_directory_rename_is_whole_under_one_name_wherever_the_device_stops ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.53s

     Running tests/integration.rs (target/debug/deps/integration-b9da2c39aca32c0f)

running 57 tests
test a_block_zero_the_device_refuses_does_not_fall_through_to_the_backup ... ok
test a_btree_node_the_device_refuses_is_not_a_node_of_zeros ... ok
test a_create_that_runs_out_of_space_leaves_the_old_file_where_it_was ... ok
test a_file_renamed_onto_a_symlink_leaves_one_entry ... ok
test a_filesystems_name_round_trips_through_its_superblock ... ok
test a_file_past_the_old_extent_cap_round_trips ... ok
test a_refused_sync_stays_refused_through_the_filesystem ... ok
test a_rename_of_a_symlink_stays_a_symlink ... ok
test a_rename_carries_the_file_to_the_new_name ... ok
test a_data_block_the_device_refuses_is_not_a_page_of_zeros ... ok
test a_file_grown_past_what_the_volume_spares_leaves_the_reserve ... ok
test a_rename_onto_itself_keeps_the_file ... ok
test a_rename_onto_an_existing_name_frees_that_file_and_only_it ... ok
test a_rename_with_no_source_touches_nothing ... ok
test a_renamed_file_keeps_every_extent_it_had ... ok
test a_sparse_write_resolves_inside_the_blocks_it_reserved ... ok
test a_value_too_large_for_any_node_is_an_error_not_a_panic ... ok
test a_metadata_update_that_cannot_be_reinserted_leaves_the_entry_alone ... ok
test a_write_the_device_refuses_is_reported_and_gives_its_blocks_back ... ok
test a_sequential_file_needs_one_extent ... ok
test bad_magic_alone_disowns_the_volume ... ok
test bad_magic_means_no_copy_claims_the_volume ... ok
test corrupt_data_block_returns_raw_bytes ... ok
test crc_verification_on_nodes ... ok
test create_single_small_file ... ok
test create_multiple_files ... ok
test dangling_symlink_allowed ... ok
test empty_file ... ok
test duplicate_filename_overwrites ... ok
test every_page_of_a_fragmented_file_owns_a_distinct_block ... ok
test file_mtime_nonexistent ... ok
test a_write_that_runs_out_of_space_gives_back_what_it_took ... ok
test large_file_single_extent ... ok
test file_not_found ... ok
test list_includes_symlinks ... ok
test format_and_mount_empty ... ok
test large_file_exact_block_boundary ... ok
test format_mount_unmount_create_mount_roundtrip ... ok
test large_file_crosses_block_boundary ... ok
test filesystem_full_returns_no_space ... ok
test long_filename_near_entry_limit ... ok
test mounted_readwrite_create_and_read ... ok
test mounted_readwrite_delete ... ok
test mounted_readwrite_double_roundtrip ... ok
test mounted_readwrite_overwrite_file ... ok
test mounted_readwrite_overwrite_with_smaller_data ... ok
test mounted_readwrite_symlink ... ok
test mounted_readwrite_sync_and_reopen ... ok
test read_link ... ok
test rename_bounds_the_new_name ... ok
test entries_of_mixed_size_survive_node_splits ... ok
test zero_length_filename_rejected ... ok
test superblock_backup_recovery ... ok
test many_files_with_large_data ... ok
test a_mount_after_a_stop_counts_the_blocks_its_bitmap_holds ... ok
test a_volume_full_of_empty_names_still_deletes_and_frees ... ok
test incremental_insert_and_read ... ok

test result: ok. 57 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/upstream_fixture.rs (target/debug/deps/upstream_fixture-d7fa786868950279)

running 2 tests
test a_path_the_volume_does_not_hold_reads_back_as_absent ... ok
test the_upstream_volume_reads_back_as_what_upstream_wrote ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/counters_round.rs (target/debug/deps/counters_round-11dfc91978c41ece)

running 1 test
test a_cpu_read_as_answered_is_read_with_its_answer ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/device_irq.rs (target/debug/deps/device_irq-f63df1e817bc26b1)

running 2 tests
test an_idle_record_answers_nothing ... ok
test every_message_is_counted_once ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/dump_request.rs (target/debug/deps/dump_request-a3d8b1ee4322028f)

running 5 tests
test only_a_pass_entered_at_depth_zero_takes_the_request ... ok
test a_request_left_during_a_report_is_still_taken_by_its_end ... ok
test a_request_filed_during_a_report_is_reported ... ok
test one_request_is_taken_once ... ok
test a_request_is_announced_at_most_once ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.43s

     Running tests/i8042_tally.rs (target/debug/deps/i8042_tally-339ba828634795e9)

running 3 tests
test a_counted_interrupt_carries_its_bytes_with_it ... ok
test an_empty_interrupt_is_never_counted_as_one_that_carried ... ok
test the_split_counters_this_replaced_are_read_torn ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/inbox_answer.rs (target/debug/deps/inbox_answer-d8647e410c7f555e)

running 16 tests
test a_watch_during_a_look_that_finds_bytes_answers_alone ... ok
test a_poll_left_standing_still_answers ... ok
test a_submitter_parks_only_with_nothing_it_could_answer ... ok
test a_handle_closed_since_its_watch_is_answered_with_the_refusal ... ok
test a_watch_during_a_look_that_finds_nothing_is_the_handles_one_poll ... ok
test a_poll_fired_as_it_is_renewed_waits_for_the_next_look ... ok
test a_post_answers_for_an_object_with_nothing_to_look_at ... ok
test a_ring_keeps_its_cap_of_polls_and_no_more ... ok
test a_poll_armed_again_does_not_end_the_look ... ok
test a_post_that_lands_after_its_bytes_were_read_answers_nothing ... ok
test a_full_ring_leaves_a_fired_poll_for_the_next_look ... ok
test a_post_with_nothing_to_read_answers_nothing ... ok
test a_replaced_poll_is_withdrawn_from_its_watch ... ok
test a_ring_torn_down_withdraws_every_poll ... ok
test an_ended_source_is_answered_gone_without_a_look ... ok
test a_watch_replaces_a_poll_a_post_already_fired ... ok

test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/log_body_words.rs (target/debug/deps/log_body_words-8dcbe1b063588f6e)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/log_cursor.rs (target/debug/deps/log_cursor-eed329d0c4717dde)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/log_publish.rs (target/debug/deps/log_publish-c6697501cbd6a21f)

running 2 tests
test an_unpublished_slot_answers_for_nothing ... ok
test a_reader_that_finds_a_shard_finds_it_built ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/log_record.rs (target/debug/deps/log_record-a4920ee6befbcd00)

running 7 tests
test a_shard_nothing_has_written_answers_for_nothing ... ok
test a_recycled_slot_does_not_answer_for_the_record_it_replaced ... ok
test the_readable_window_is_exactly_the_last_shard_records ... ok
test a_concurrent_reader_sees_head_grow_and_never_shrink ... ok
test a_committed_record_is_whole_or_absent ... ok
test a_key_and_the_record_it_names_come_from_one_generation ... ok
test a_reader_racing_a_recycle_gets_nothing_rather_than_a_mixture ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 54.73s

     Running tests/log_ring.rs (target/debug/deps/log_ring-bbfc48994aa697bc)

running 3 tests
test a_slot_is_reused_only_after_its_record_was_read ... ok
test a_lane_publishes_whole_and_reuses_only_after_a_read ... ok
test a_published_record_is_whole_and_read_once ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.96s

     Running tests/log_wake.rs (target/debug/deps/log_wake-12a72c067258506f)

running 2 tests
test exactly_one_producer_owns_a_park ... ok
test a_commit_and_an_arm_cannot_both_miss ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/log_zeroed_init.rs (target/debug/deps/log_zeroed_init-0893d8dc88f9dbcd)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/loom_exploration.rs (target/debug/deps/loom_exploration-952781b90d4b7985)

running 2 tests
test loom_runs_a_store_ahead_of_an_earlier_load ... ok
test loom_runs_a_read_modify_write_ahead_of_an_earlier_load ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/loom_mailbox.rs (target/debug/deps/loom_mailbox-b657564e0022bd63)

running 2 tests
test steal_probe_node_is_never_double_linked ... ok
test preempt_disabled_push_keeps_the_queue_drainable ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.14s

     Running tests/loom_park.rs (target/debug/deps/loom_park-5669bd0546449f50)

running 3 tests
test cancel_and_notify_agree_on_who_won ... ok
test a_pre_park_claim_never_posts_a_message ... ok
test a_notify_ends_exactly_one_iteration ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/loom_push.rs (target/debug/deps/loom_push-d59a25112dbf307f)

running 2 tests
test a_push_rings_nobody_when_nobody_is_asleep ... ok
test a_cpu_that_halts_without_seeing_the_surplus_was_pushed ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/loom_retire.rs (target/debug/deps/loom_retire-fedb56bbbe883084)

running 6 tests
test the_retire_chase_reuses_one_node_under_a_racing_migration ... ok
test an_adopting_cpu_always_observes_the_kill_bit ... ok
test a_retire_racing_the_park_commit_always_leaves_someone_to_reap ... ok
test a_wake_and_a_retire_ride_distinct_nodes ... ok
test a_retire_and_a_wake_never_both_claim_a_parked_task ... ok
test the_retire_arm_never_loses_a_parked_task_to_a_racing_wake ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/loom_sleep.rs (target/debug/deps/loom_sleep-f498be1e5fe9034e)

running 2 tests
test a_halted_cpu_with_queued_work_was_kicked ... ok
test a_kicked_cpu_comes_back_and_drains_everything ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.86s

     Running tests/loom_watch.rs (target/debug/deps/loom_watch-ee28bf6faa307918)

running 12 tests
test an_end_racing_a_post_answers_a_poll_once ... ok
test an_end_racing_a_post_in_place_answers_a_poll_once ... ok
test a_bounded_post_racing_a_timeout_reaches_a_live_waiter ... ok
test a_poll_registered_racing_a_post_in_place_completes_exactly_once ... ok
test a_poll_registered_racing_a_post_completes_exactly_once ... ok
test a_revoke_racing_the_wait_loop_ends_it_in_every_arm ... ok
test a_post_racing_a_registration_leaves_nobody_parked ... ok
test a_transition_racing_an_opening_gate_is_never_missed ... ok
test a_poll_on_two_watches_racing_both_posts_completes_exactly_once ... ok
test a_second_post_is_not_lost_to_a_flag_the_waiter_consumed ... ok
test a_fire_racing_a_submitters_park_is_never_lost ... ok
test an_answer_wakes_the_submitter_its_look_hid_the_poll_from has been running for over 60 seconds
test an_answer_wakes_the_submitter_its_look_hid_the_poll_from ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 165.32s

     Running tests/owed_lock.rs (target/debug/deps/owed_lock-82472084fc952815)

running 1 test
test a_turned_away_cpu_holds_the_lock_or_is_answered ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/panic_capture.rs (target/debug/deps/panic_capture-49407ae928806208)

running 5 tests
test two_panicking_cpus_write_one_snapshot ... ok
test a_released_latch_hands_the_snapshot_to_the_next_captor ... ok
test the_owner_refreshes_and_a_second_captor_stays_out ... ok
test a_reader_and_refresh_never_overlap_on_the_snapshot ... ok
test the_unlatched_capture_this_replaced_interleaves_two_reports ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/panic_console_publish.rs (target/debug/deps/panic_console_publish-fe37875c6e2f9122)

running 1 test
test a_snapshot_is_one_publication_whole ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.51s

     Running tests/poll_once.rs (target/debug/deps/poll_once-47fa26b617c9cc3b)

running 2 tests
test a_withdrawal_and_a_post_never_both_take_a_poll ... ok
test a_post_and_a_recheck_answer_a_poll_once ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/reap_gate.rs (target/debug/deps/reap_gate-462174cd688180b2)

running 4 tests
test an_unraised_gate_claims_nothing ... ok
test a_claim_sees_the_enrolled_work ... ok
test a_raise_is_never_dropped ... ok
test one_raise_is_claimed_once ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/serial_lock.rs (target/debug/deps/serial_lock-fa753c944dbedabc)

running 9 tests
test a_lost_try_lock_leaves_the_lock_held ... ok
test a_seize_reenters_its_own_cpus_hold ... ok
test a_burst_beneath_its_own_cpus_fatal_path_is_refused - should panic ... ok
test within_asks_a_silent_attempt_exactly_its_tries ... ok
test a_seize_gives_up_on_a_holder_that_never_lets_go ... ok
test a_burst_waits_out_another_cpus_fatal_path ... ok
test a_seize_takes_a_burst_let_go_inside_the_bound ... ok
test a_seize_and_a_burst_never_overlap ... ok
test two_writers_never_overlap ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/sleep_lock.rs (target/debug/deps/sleep_lock-1a1fca6f3f1ac287)

running 4 tests
test try_lock_observes_the_previous_holders_writes ... ok
test a_queued_contender_is_served_and_named ... ok
test a_parking_contender_observes_the_holders_writes ... ok
test two_holders_never_overlap ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/smp_bringup.rs (target/debug/deps/smp_bringup-cd2a9c8182d7caee)

running 3 tests
test an_ap_that_reads_another_id_is_refused - should panic ... ok
test a_released_machine_is_answering ... ok
test a_committed_count_never_outruns_its_slot ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/ticket_lock.rs (target/debug/deps/ticket_lock-2447e48bc2cede20)

running 3 tests
test try_lock_at_the_wrap_boundary_does_not_panic ... ok
test try_lock_observes_the_previous_owners_writes ... ok
test two_try_locks_do_not_both_succeed ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/tlb_shootdown.rs (target/debug/deps/tlb_shootdown-52849ef51a0854c1)

running 4 tests
test an_initiator_answers_while_it_waits ... ok
test a_nested_serve_is_not_undone_by_the_one_it_interrupted ... ok
test an_acknowledged_flush_postdates_the_page_table_write ... ok
test one_serve_answers_two_concurrent_shootdowns ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.21s

     Running unittests src/lib.rs (target/debug/deps/kernel_sim-ddcd977293e22acb)

running 15 tests
test latency::tests::merging_is_exactly_the_union ... ok
test latency::tests::an_empty_distribution_measures_nothing ... ok
test choice::tests::bytes_wide_draw_uses_two_bytes ... ok
test latency::tests::causes_are_kept_apart ... ok
test choice::tests::bytes_are_the_decisions ... ok
test choice::tests::seeds_differ ... ok
test choice::tests::replay_reproduces_a_recording ... ok
test choice::tests::seeded_is_deterministic ... ok
test choice::tests::bytes_full_range_reachable ... ok
test choice::tests::pct_never_starves_a_lone_step ... ok
test latency::tests::a_losing_maximum_becomes_the_runner_up ... ok
test choice::tests::pct_prefers_the_highest_priority_actor_and_is_stable ... ok
test latency::tests::one_sample_has_no_runner_up ... ok
test latency::tests::the_runner_up_is_the_second_largest_sample ... ok
test choice::tests::zero_options_is_a_bug - should panic ... ok

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 02.

cargo run -- --ci host, part 02
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/main.rs (target/debug/deps/kernel_sim-cb04f5b6dbf474b5)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/deadline_claim_race.rs (target/debug/deps/deadline_claim_race-ae5ba098c0dcbdfd)

running 1 test
test a_claim_between_the_drain_and_the_fire_leaves_the_timer_armed_for_what_is_parked ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/policy.rs (target/debug/deps/policy-c8d6313bf8224213)

running 12 tests
test a_stopped_cpu_stops_taking_work ... ok
test per_thread_shares_lose_the_floor ... ok
test the_share_deficit_is_an_offset_and_not_a_drift ... ok
test a_wakeup_storm_drains_without_serializing ... ok
test an_interactive_wake_waits_out_at_most_the_band_it_is_queued_behind ... ok
test the_two_cures_are_priced_against_the_pull_path ... ok
test a_process_cannot_buy_cpu_by_forking ... ok
test a_runnable_task_waits_at_most_one_dispatch_per_rival ... ok
test without_the_balance_path_a_lopsided_machine_stays_lopsided ... ok
test the_balance_path_drains_the_cpu_an_adversary_loaded ... ok
test a_push_on_surplus_reaches_every_cpu_the_pull_path_left_asleep ... ok
test a_bounded_re_arm_reaches_every_cpu_the_pull_path_left_asleep ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.91s

     Running tests/scenarios.rs (target/debug/deps/scenarios-63544582fcbe5101)

running 25 tests
test corpus_traces_still_do_what_they_were_committed_for ... ok
test old_commit_before_pass_is_caught ... ok
test a_run_replays_exactly ... ok
test a_pass_that_overruns_its_budget_is_recorded ... ok
test blind_spot_needed_the_step_split ... ok
test a_retire_inside_the_registration_window_is_honoured_by_the_core ... ok
test old_steal_port_is_caught ... ok
test shrinking_keeps_the_failure_and_loses_the_noise ... ok
test double_charging_a_share_is_caught ... ok
test the_new_protocol_survives_the_schedule_that_breaks_the_old_one ... ok
test a_pass_inside_the_registration_window_is_caught ... ok
test rt_starving_the_corpse_is_caught ... ok
test per_thread_fair_shares_are_caught ... ok
test the_audio_pipeline_holds_on_one_cpu ... ok
test the_park_sees_claims_that_landed_after_its_commit ... ok
test old_park_keeping_the_lend_is_caught ... ok
test a_retire_completes_inside_its_derived_bound ... ok
test old_migrate_keeping_the_corpse_is_caught ... ok
test the_unwind_gate_lasts_one_chunk_and_not_one_unwind ... ok
test the_fairness_storm_is_measured_and_holds ... ok
test identity_ordering_within_a_share_is_caught ... ok
test an_identity_tiebreak_changes_the_schedule_and_not_the_sibling_split ... ok
test invariant_i13_is_measured_and_holds ... ok
test every_scenario_survives_raw_fuzz_bytes ... ok
test every_scenario_survives_a_seed_sweep ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.29s

     Running unittests src/lib.rs (target/debug/deps/toyos_abi-fe6fb68be58597b7)

running 53 tests
test boot::tests::a_window_holds_an_extent_and_not_merely_its_first_address ... ok
test boot::tests::the_kernel_is_handed_the_windows_firmware_named_and_none_of_the_array_behind_them ... ok
test boot::tests::the_two_readings_of_a_boot_parameter_partition_it ... ok
test clock::tests::the_page_is_four_words ... ok
test clock::tests::the_formula_is_the_kernels ... ok
test counters::tests::a_flag_no_counter_names_is_refused ... ok
test counters::tests::a_present_zero_is_not_an_absent_counter ... ok
test counters::tests::every_shape_of_record_reads_back_as_written ... ok
test counters::tests::counters_are_indexed_by_their_place_and_named_once ... ok
test counters::tests::a_word_under_an_absent_counter_is_refused ... ok
test counters::tests::what_times_a_program_or_is_power_needs_the_trace_right ... ok
test boot::tests::a_count_past_the_array_is_refused_rather_than_clamped - should panic ... ok
test handle::tests::a_bit_no_right_uses_is_not_a_rights_set ... ok
test handle::tests::a_handle_answers_the_slot_and_generation_it_was_made_from ... ok
test handle::tests::a_generation_past_the_field_is_generation_zero_again ... ok
test handle::tests::every_right_in_all_has_a_name_and_every_name_is_in_all ... ok
test handle::tests::nothing_below_the_retirement_generation_can_be_the_invalid_handle ... ok
test handle::tests::generation_zero_is_the_bare_index ... ok
test handle::tests::rights_only_shrink ... ok
test inbox::tests::the_ring_layout_is_what_both_ends_index_by ... ok
test inventory::tests::a_byte_that_names_nothing_is_refused_by_name ... ok
test inventory::tests::a_record_is_one_fixed_width ... ok
test inventory::tests::every_record_round_trips ... ok
test log::tests::a_fresh_cursor_has_read_nothing ... ok
test log::tests::a_length_past_the_bound_is_clamped_and_not_a_panic ... ok
test log::tests::a_non_utf8_body_renders_what_decoded ... ok
test log::tests::a_record_renders_the_same_line_for_every_consumer ... ok
test log::tests::a_wall_clock_goes_through_the_bracket_and_an_empty_one_changes_nothing ... ok
test log::tests::an_undeclared_severity_byte_decodes_to_nothing ... ok
test log::tests::every_sayer_gets_the_one_head ... ok
test log::tests::its_bytes_are_the_fields_and_nothing_between_them ... ok
test log::tests::severities_are_ordered_from_info_to_alert ... ok
test log::tests::the_record_is_the_size_and_shape_both_sides_assume ... ok
test log::tests::untimed_severity_and_elided_are_in_the_line_rather_than_in_a_convention ... ok
test part::tests::a_guid_is_the_uppercase_registry_form_and_nothing_else ... ok
test part::tests::a_guid_survives_the_wire ... ok
test part::tests::the_esp_type_guid_is_the_specification_s_bytes ... ok
test ring::tests::a_scribbled_header_leaves_the_stream_exact ... ok
test ring::tests::the_pipe_capacity_does_not_divide_the_u32_cursor_space ... ok
test syscall::tests::a_devices_entry_is_a_class_or_one_named_function ... ok
test syscall::tests::a_partition_entry_carries_its_guid_in_both_selector_words ... ok
test syscall::tests::a_dirent_of_another_kind_is_a_broken_kernel - should panic ... ok
test ring::tests::a_read_split_across_the_cursor_wrap_returns_what_was_written ... ok
test syscall::tests::a_pci_id_is_four_lowercase_hex_digits_each_and_nothing_else ... ok
test syscall::tests::a_request_writes_back_the_name_it_parsed ... ok
test syscall::tests::an_isa_entry_survives_the_wire_and_nothing_else_decodes ... ok
test syscall::tests::a_short_dirent_is_a_broken_kernel - should panic ... ok
test syscall::tests::module_info_s_bytes_are_the_fields_and_nothing_between_them ... ok
test syscall::tests::every_dirent_is_read_back_whatever_its_size_holds ... ok
test syscall::tests::modules_decodes_every_record_and_its_path ... ok
test syscall::tests::the_selector_survives_the_wire ... ok
test syscall::tests::modules_refuses_a_path_past_the_answer - should panic ... ok
test ring::tests::a_stream_survives_the_cursor_reaching_two_to_the_thirty_two ... ok

test result: ok. 53 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.88s

     Running unittests src/lib.rs (target/debug/deps/toyos_acpi-ed93591cfd9580f5)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/corpus.rs (target/debug/deps/corpus-c5c16e8fc94021eb)

running 37 tests
test a_length_under_the_header_is_refused_even_when_the_caller_needs_nothing ... ok
test a_dsdt_whose_fadt_could_not_be_read_is_refused_as_unread_and_not_as_absent ... ok
test a_dsdt_that_cannot_be_found_is_the_first_block_refused ... ok
test a_length_over_the_ceiling_is_refused_without_walking_it ... ok
test a_century_register_outside_cmos_ram_is_told_apart_from_none ... ok
test a_length_shorter_than_the_fixed_part_is_refused_with_both_numbers ... ok
test a_madt_entry_of_zero_length_halts_the_walk_instead_of_looping ... ok
test a_madt_entry_running_past_the_list_halts_the_walk ... ok
test a_madt_entry_too_short_for_its_own_type_is_not_decoded_as_that_type ... ok
test a_fadt_before_acpi_5_1_says_nothing_about_psci ... ok
test a_revision_1_fadt_long_enough_to_hold_x_dsdt_is_still_read_at_its_32_bit_field ... ok
test an_rsdp_address_the_reader_cannot_reach_is_refused ... ok
test a_fadt_of_the_acpi_1_0_length_is_read_without_its_x_fields ... ok
test a_reset_register_this_kernel_cannot_write_is_refused_by_the_field_that_refused_it ... ok
test reset_fields_are_read_only_from_a_revision_that_defines_them ... ok
test the_crafted_fixed_hardware_decodes_before_any_field_is_broken ... ok
test the_definition_blocks_are_the_dsdt_and_then_each_ssdt_in_the_xsdts_order ... ok
test the_psci_conduit_is_read_off_a_fadt_that_defines_it ... ok
test the_root_pointer_is_refused_one_reason_at_a_time ... ok
test the_sci_defaults_to_level_and_active_low_where_nothing_says_otherwise ... ok
test a_revision_1_fadt_is_read_at_its_32_bit_fields_alone ... ok
test a_revision_that_promises_x_dsdt_over_a_table_that_cannot_hold_it_falls_back ... ok
test a_table_that_does_not_sum_to_zero_is_refused ... ok
test a_trailing_byte_that_cannot_be_an_entry_header_ends_the_walk_quietly ... ok
test an_ecdt_naming_no_port_controller_is_refused_by_name ... ok
test a_fadt_that_ends_before_arm_boot_arch_is_short ... ok
test fixed_hardware_reads_whichever_form_names_a_block ... ok
test fixed_hardware_this_kernel_does_not_serve_is_refused_by_name ... ok
test an_xsdt_entry_pointing_at_nothing_is_skipped_and_the_next_one_is_read ... ok
test a_fadt_too_short_for_the_boot_architecture_flags_is_refused ... ok
test a_length_longer_than_the_mapping_is_refused_before_a_byte_is_read ... ok
test the_values_the_fadt_names_for_smi_cmd_are_each_read_from_their_own_byte ... ok
test the_xsdt_walk_answers_with_its_first_match_and_tries_no_second ... ok
test the_shared_reader_refuses_what_it_does_not_hold ... ok
test two_edits_that_cancel_pass_the_checksum_and_decode_to_the_lie ... ok
test no_single_byte_mutation_of_a_firmwares_descriptor_list_panics_or_runs_away ... ok
test no_single_byte_mutation_of_a_real_table_panics_or_runs_away ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.99s

     Running tests/facs.rs (target/debug/deps/facs-1619c04409e4ea79)

running 5 tests
test a_structure_that_is_no_facs_is_refused_by_name ... ok
test both_transitions_are_the_specifications_own_sequences ... ok
test s4bios_f_is_bit_zero_of_the_flags ... ok
test a_facs_off_its_sixty_four_byte_boundary_is_refused ... ok
test the_wide_address_wins_where_it_is_not_zero_and_the_narrow_one_serves_where_it_is ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/fixtures.rs (target/debug/deps/fixtures-4a7f17fb56a60883)

running 14 tests
test the_fadt_names_the_century_register_the_wall_clock_read ... ok
test a_second_firmwares_bytes_decode_to_that_machines_own_windows ... ok
test the_boot_architecture_flags_come_off_a_revision_that_defines_them ... ok
test the_fadt_names_the_power_block_and_the_dsdt ... ok
test the_fadt_names_the_reset_register_qemu_acts_on ... ok
test the_hpet_table_names_the_window_the_timer_driver_mapped ... ok
test the_madt_names_the_two_cpus_that_boot_and_the_chip_that_interrupts_them ... ok
test the_definition_blocks_of_qemu_are_its_dsdt_alone ... ok
test the_q35_fadt_predates_arm_boot_arch ... ok
test the_q35_madt_names_its_sci_level_and_active_high ... ok
test the_q35_fadt_names_the_fixed_hardware_its_sci_is_served_through ... ok
test the_windows_a_boot_printed_are_what_that_firmwares_own_bytes_say ... ok
test the_xsdt_walk_reaches_every_entry ... ok
test the_mcfg_names_the_ecam_window_the_pci_walk_used ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/iort.rs (target/debug/deps/iort-41214c1b48b4fa19)

running 31 tests
test a_mapping_carries_an_id_by_its_offset_from_the_input_base_and_ends_at_its_last_id ... ok
test a_revision_4_smmu_indexes_its_own_mapping_whenever_a_control_interrupt_is_not_wired ... ok
test a_route_through_an_output_reference_to_a_node_its_source_may_not_reach_is_refused ... ok
test a_node_array_past_the_table_is_refused_as_its_first_node ... ok
test a_node_type_not_decoded_is_answered_by_its_type_and_refuses_nothing ... ok
test a_root_complex_has_no_mapping_of_its_own ... ok
test a_revision_whose_layout_was_not_read_is_refused ... ok
test a_route_through_an_output_reference_that_names_no_node_is_refused ... ok
test a_single_mapping_that_is_not_its_smmus_own_is_refused ... ok
test a_node_revision_whose_layout_was_not_read_is_refused ... ok
test a_node_count_that_overruns_the_table_is_refused_where_the_bytes_end ... ok
test a_node_array_inside_the_header_is_refused ... ok
test a_node_longer_than_the_table_or_shorter_than_its_type_is_refused ... ok
test a_mapping_whose_range_leaves_the_id_space_is_refused ... ok
test a_stream_another_mapping_puts_out_to_the_same_smmu_is_refused ... ok
test a_stream_is_not_judged_alone_past_an_id_array_out_of_its_node ... ok
test a_table_too_short_for_its_own_header_fields_is_refused ... ok
test an_id_array_lying_over_its_nodes_own_fields_is_refused ... ok
test a_stream_the_smmu_maps_nowhere_has_no_its ... ok
test an_id_two_mappings_claim_is_refused_when_it_is_asked_for ... ok
test an_id_array_running_past_its_node_is_refused ... ok
test an_its_group_of_other_than_one_its_is_refused ... ok
test an_its_node_declaring_an_id_array_is_refused ... ok
test an_smmus_own_mapping_index_at_or_past_its_id_array_is_refused ... ok
test the_hardware_gic_boot_routes_bus_zero_through_the_smmu_and_nothing_to_an_its ... ok
test the_hardware_gic_boots_madt_names_no_its ... ok
test the_its_boot_routes_bus_zero_through_the_smmu_to_the_its_and_the_rest_past_it ... ok
test the_its_boots_madt_names_the_its_the_iort_routes_to ... ok
test the_mapping_a_revision_5_smmu_indexes_is_the_units_own_and_routes_no_stream ... ok
test opening_a_table_and_routing_a_requester_each_read_it_a_bounded_number_of_times ... ok
test no_corruption_of_a_published_iort_panics_or_hangs_the_decoder ... ok

test result: ok. 31 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.38s

     Running tests/mapped.rs (target/debug/deps/mapped-55cae07355ade6f9)

running 3 tests
test address_zero_and_a_range_past_every_address_are_refused ... ok
test a_table_past_the_direct_map_is_refused_before_a_byte_is_read ... ok
test an_xsdt_entry_past_the_direct_map_is_skipped ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/resource.rs (target/debug/deps/resource-ee037686f3f75096)

running 11 tests
test a_descriptor_this_decoder_does_not_read_is_refused_by_its_tag ... ok
test a_list_that_runs_off_the_end_of_what_can_be_read_is_refused ... ok
test a_list_with_no_end_tag_stops_at_the_bound ... ok
test a_maximum_that_is_not_the_minimum_plus_the_length_is_refused ... ok
test a_range_the_bridge_consumes_is_not_a_window_it_forwards ... ok
test a_window_of_no_length_is_not_carried ... ok
test a_resource_type_this_decoder_does_not_read_is_refused_by_its_kind ... ok
test a_short_descriptor_is_refused_rather_than_read_past ... ok
test only_the_memory_ranges_of_a_root_bridge_become_windows ... ok
test more_windows_than_there_is_room_for_is_refused_whole ... ok
test a_translated_window_is_refused_rather_than_taken_at_its_minimum ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/thinkpad_t14.rs (target/debug/deps/thinkpad_t14-6c3f06e6d69b6dfb)

running 3 tests
test the_t14s_ecdt_names_the_controller_linux_used ... ok
test the_t14s_fadt_names_the_blocks_linux_served_its_sci_through ... ok
test the_t14s_madt_names_its_sci_level_and_active_high ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_blackbox-233dc461abc742ca)

running 36 tests
test fault_tests::a_fault_round_trips_word_for_word ... ok
test fault_tests::a_fault_survives_the_page_it_is_sealed_into ... ok
test fault_tests::only_a_record_of_the_declared_width_decodes ... ok
test stamp_tests::a_record_belongs_to_the_stick_that_wrote_it ... ok
test stamp_tests::a_records_date_cannot_be_changed_under_it ... ok
test stamp_tests::an_unstamped_page_reads_as_no_date ... ok
test tests::a_length_past_the_page_is_refused ... ok
test tests::a_break_is_told_by_what_the_driver_says_and_by_who_said_it ... ok
test tests::a_page_nobody_wrote_carries_nothing ... ok
test tests::a_boot_with_no_break_says_so_in_one_line ... ok
test tests::a_multi_line_record_is_never_entered_part_way ... ok
test tests::a_report_that_fills_the_page_still_leaves_the_account_its_room ... ok
test tests::a_cleared_page_is_not_harvested_twice ... ok
test tests::a_report_that_fits_carries_no_drop_line ... ok
test tests::a_sealed_page_comes_back_as_what_went_in ... ok
test tests::a_window_with_no_boundary_keeps_none_of_it ... ok
test tests::an_account_cut_off_mid_line_is_readable_to_the_last_whole_line ... ok
test tests::an_armed_page_with_nothing_in_it_is_still_a_state ... ok
test tests::every_line_is_covered_once_its_last_fragment_arrives ... ok
test tests::lines_that_fit_their_room_are_kept_and_nothing_is_said ... ok
test tests::no_state_can_be_read_as_another ... ok
test tests::an_over_long_run_of_records_is_cut_at_a_boundary ... ok
test tests::every_state_has_a_word_of_its_own ... ok
test tests::a_storm_keeps_the_first_break_and_counts_what_it_dropped ... ok
test tests::a_cut_report_says_how_many_records_it_dropped ... ok
test tests::one_flipped_bit_anywhere_refuses_the_whole_page ... ok
test tests::a_ring_that_moved_between_the_walks_leaves_no_line_out_of_place ... ok
test tests::the_address_is_found_in_a_raw_parameter_buffer ... ok
test tests::the_head_is_kept_and_the_tail_fills_what_is_left ... ok
test tests::the_parameter_round_trips_the_address_it_names ... ok
test tests::the_section_is_the_usb_stacks_records_from_the_first_break_on_oldest_first ... ok
test tests::the_section_under_a_sealed_report_leaves_the_account_its_reserve ... ok
test tests::the_driver_says_a_break_the_way_the_section_finds_one ... ok
test tests::the_first_line_that_does_not_fit_drops_itself_and_every_later_one ... ok
test tests::saying_what_was_dropped_never_runs_the_page_over ... ok
test tests::the_line_that_counts_the_dropped_fits_the_room_it_was_given ... ok

test result: ok. 36 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/lib.rs (target/debug/deps/toyos_blockhold-2c59279906453074)

running 9 tests
test tests::a_block_has_one_holder ... ok
test tests::a_clean_release_leaves_nothing ... ok
test tests::a_loss_outlives_the_hold_that_wrote_it ... ok
test tests::a_write_after_the_loss_finds_it ... ok
test tests::a_holder_is_the_hold_of_exactly_that_span ... ok
test tests::writes_an_earlier_flush_made_durable_are_not_lost ... ok
test tests::a_write_released_unflushed_is_lost_to_the_next_holder ... ok
test tests::a_writer_silent_since_the_loss_is_told_when_another_flushes_first ... ok
test tests::every_interleaving_tells_each_loss_to_the_blocks_it_touched ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (target/debug/deps/toyos_blockring-e59e68baa3f5367e)

running 20 tests
test client::tests::a_write_given_up_poisons_every_later_flush ... ok
test client::tests::what_was_on_the_wire_at_the_end_is_refused_and_what_was_not_waits ... ok
test client::tests::a_second_answer_for_one_tag_is_a_violation ... ok
test client::tests::nothing_goes_out_before_a_session ... ok
test entry::tests::a_completion_survives_its_words_and_refuses_what_it_does_not_define ... ok
test entry::tests::a_request_outside_its_bounds_is_refused_by_tag ... ok
test entry::tests::a_request_survives_its_words ... ok
test model::tests::a_used_page_reads_fresh_once_a_servers_ends_are_made_over_it ... ok
test model::tests::states_named_alike_act_alike ... ok
test client::tests::a_lost_flush_reissues_then_asks_again ... ok
test client::tests::overlapping_writes_go_out_again_in_order ... ok
test server::tests::a_flush_after_a_loss_answers_lost_once ... ok
test server::tests::a_reset_answers_in_the_order_taken ... ok
test server::tests::a_reset_answers_once_and_the_late_device_answer_is_dropped ... ok
test server::tests::a_tag_in_flight_twice_is_refused_unissued ... ok
test wire::tests::opened_and_refusal_survive_their_bytes_and_nothing_else_decodes ... ok
test model::tests::the_model_reaches_the_end_it_should ... ok
test model::tests::the_model_reaches_a_write_given_up ... ok
test model::tests::what_a_flush_calls_durable_is_on_the_medium ... ok
test model::tests::every_request_is_answered_exactly_once ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.18s

     Running unittests src/lib.rs (target/debug/deps/toyos_bootmap-22b269a37e3ab679)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/aarch64_direct_map.rs (target/debug/deps/aarch64_direct_map-6e4ee97640c4b179)

running 9 tests
test a_map_with_no_memory_ends_at_zero ... ok
test an_end_below_its_start_is_refused ... ok
test a_start_off_a_page_is_refused ... ok
test a_reserved_page_inside_ram_is_left_out_of_its_block ... ok
test a_page_wholly_memory_is_one_block ... ok
test memory_is_mapped_and_a_register_is_not ... ok
test off_a_page_is_refused ... ok
test past_the_window_is_refused ... ok
test runtime_services_data_is_left_out_and_acpi_tables_are_not ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/direct_map.rs (target/debug/deps/direct_map-36cb8608940d8e17)

running 11 tests
test an_empty_map_is_the_boot_map ... ok
test an_unsorted_map_is_read_whole ... ok
test every_type_the_pmm_hands_out_is_mapped ... ok
test memory_past_the_window_is_refused_by_name ... ok
test memory_above_4_gib_is_mapped_to_its_end_in_whole_pages ... ok
test a_range_past_the_window_that_is_not_memory_is_not_refused ... ok
test no_other_type_reaches_past_the_boot_map ... ok
test acpi_tables_above_the_last_ram_are_mapped ... ok
test the_captured_map_is_usable_where_its_boot_said ... ok
test the_pmm_hands_out_exactly_the_types_uefi_gives_the_os ... ok
test the_reserved_hole_below_1_tib_is_not_mapped ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plan.rs (target/debug/deps/plan-059f128f59d79140)

running 22 tests
test a_base_off_the_page_is_refused_rather_than_rounded_down ... ok
test a_loader_inside_the_low_map_adds_nothing ... ok
test a_loader_across_a_page_is_both_pages ... ok
test a_loader_above_the_low_map_adds_its_own_directory_of_plain_memory ... ok
test a_framebuffer_above_the_low_map_adds_its_own_directory ... ok
test a_loader_beside_the_scanout_shares_its_directory ... ok
test a_map_typed_scanout_off_a_small_page_is_refused ... ok
test a_page_that_is_part_memory_is_refused_by_address ... ok
test a_range_no_map_can_hold_is_refused_by_name ... ok
test a_map_typed_loader_is_memory ... ok
test a_framebuffer_that_straddles_the_low_maps_end_is_mapped_from_both_arms ... ok
test the_aarch64_descriptors_carry_the_attribute_index_the_mair_names ... ok
test the_high_half_slot_is_the_top_nine_bits_of_phys_offset ... ok
test uncacheable_is_pat_entry_three_and_plain_memory_is_entry_zero ... ok
test a_map_typed_plan_is_memory_where_firmware_says_write_back_and_a_device_elsewhere ... ok
test a_framebuffer_inside_the_low_map_adds_no_directory ... ok
test a_machine_with_no_framebuffer_is_the_low_map_and_nothing_else ... ok
test a_framebuffer_that_straddles_a_gib_claims_both ... ok
test a_scanout_inside_memory_is_typed_as_the_scanout ... ok
test a_loader_no_map_can_hold_is_refused_by_name ... ok
test a_framebuffer_at_the_boundary_is_outside_the_low_map ... ok
test a_scanout_carved_out_of_ram_splits_the_pages_it_shares ... ok

test result: ok. 22 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_cpuvuln-5700bd7ff46f21af)

running 63 tests
test hwp::tests::the_tcg_model_is_refused ... ok
test tests::a_blacklist_row_for_stepping_zero_stands_before_its_any_stepping_row ... ok
test hwp::tests::the_request_is_the_minimum_ratio_the_highest_level_and_the_preference ... ok
test counters::tests::the_tcg_model_has_none ... ok
test counters::tests::an_amd_with_leaf_6_has_aperf_and_mperf_and_no_smi_count ... ok
test hwp::tests::a_cpu_outside_family_6_is_refused_by_name ... ok
test counters::tests::the_t14_has_what_linux_counted_on_it ... ok
test hwp::tests::a_missing_register_refuses_the_whole_request_by_name ... ok
test hwp::tests::the_t14_is_declared_with_its_notification ... ok
test tests::a_comet_lake_guest_cannot_know_its_hosts_smt ... ok
test tests::a_blacklist_row_matches_only_its_steppings ... ok
test tests::a_bad_microcode_row_is_its_model_and_its_stepping ... ok
test counters::tests::a_guest_counts_no_smis ... ok
test tests::a_guest_cannot_know_its_gds_mitigation ... ok
test counters::tests::an_intel_model_off_the_list_counts_no_smis ... ok
test tests::a_guest_with_verw_clear_mitigates_tsa ... ok
test tests::a_milan_kvm_guest_gives_the_tags_lines ... ok
test tests::a_retpoline_guest_leaves_bhi_to_retpolines_only_with_rrsba_disabled ... ok
test tests::a_retpoline_guest_without_rrsba_leaves_bhi_to_retpolines ... ok
test tests::a_tsa_row_keyed_by_a_model_nibble_of_8_or_more_is_read ... ok
test tests::a_turin_kvm_guest_gives_the_tags_lines ... ok
test tests::a_zen2_guest_has_no_ibpb_brtype ... ok
test tests::alder_lake_mitigates_bhi_in_hardware ... ok
test tests::amd_0x15_to_0x17_take_ssbd_from_the_ls_cfg_probe ... ok
test tests::amd_stibp_always_on_is_strict_without_the_untrained_return_thunk ... ok
test tests::an_intel_guest_cannot_know_its_mitigations_or_its_hosts_smt ... ok
test tests::an_amd_cpu_with_feat_ctl_is_a_contradiction - should panic ... ok
test tests::a_native_zen3_without_its_probe_is_a_contradiction - should panic ... ok
test tests::a_hygon_cpu_without_its_ls_cfg_probe_is_a_contradiction - should panic ... ok
test tests::an_unknown_vendors_retbleed_is_unmitigated ... ok
test tests::autoibrs_leaves_stibp_to_select ... ok
test tests::an_msbds_only_cpu_reports_its_smt_as_mitigated ... ok
test tests::bad_microcode_drops_the_controls_only_beside_one_of_them ... ok
test tests::bad_microcode_is_intel_family_6s ... ok
test tests::centaur_family_5_has_only_itlb_multihit ... ok
test tests::comet_lake_clears_cpu_buffers_by_mds_no_and_fb_clear ... ok
test tests::comet_lake_varies_one_fact_at_a_time ... ok
test tests::family_and_model_are_derived_as_arch_x86_lib_derives_them ... ok
test tests::firmware_can_lock_the_gds_mitigation ... ok
test tests::hygon_without_smt_and_with_ibpb_brtype_has_srso_smt_disabled ... ok
test tests::hygon_decides_as_linux_does ... ok
test tests::itlb_multihit_reads_what_feat_ctl_left_of_vmx ... ok
test tests::only_amd_and_hygon_are_probed ... ok
test tests::rtm_absent_from_cpuid_is_rtm_off ... ok
test tests::rfds_is_cleared_only_with_rfds_clear ... ok
test tests::rtm_always_abort_decides_tsx_first ... ok
test tests::srbds_is_tsx_disabled_only_without_rtm_and_mmio ... ok
test tests::spectre_bad_microcode_includes_its_bound ... ok
test tests::srso_user_kernel_no_mitigates_only_the_vm_exit ... ok
test tests::the_t14_with_arch_capabilities_read_as_zero ... ok
test tests::the_first_matching_blacklist_row_decides ... ok
test tests::the_t14s_no_bits_each_rule_out_their_bug ... ok
test tests::the_t14s_facts_give_its_lines_and_its_spec_ctrl ... ok
test tests::the_t14s_facts_are_linuxs_reading_of_it ... ok
test tests::tsa_is_ruled_out_only_by_both_its_no_bits ... ok
test tests::zen1_by_btc_no_ssb_no_and_ibpb ... ok
test tests::zen2_selects_by_smt ... ok
test tests::zen1_forces_stibp_from_the_untrained_return_thunk ... ok
test tests::zen3_by_srso_no_and_an_enumerated_ibpb_brtype ... ok
test tests::zen3_native_reads_its_probe_and_its_tsa_microcode ... ok
test tests::zen4_reads_its_row_of_the_tsa_microcode_table ... ok
test tests::zhaoxin_without_spectre_v2_sets_up_no_ibpb ... ok
test tests::the_tcg_models_signature_gives_its_lines ... ok

test result: ok. 63 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_device_memory-c371b2b03a73bcf2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_dhcp-bafcabb9fc8c9713)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ack.rs (target/debug/deps/ack-49c542e77a101715)

running 8 tests
test s_dhcp_dh_015_rapid_commit ... ok
test s_dhcp_dh_016_an_ack_without_rapid_commit_while_selecting ... ok
test s_dhcp_dh_017_a_rapid_ack_answers_a_request_too ... ok
test s_dhcp_dh_011_an_ack_is_probed_first ... ok
test s_dhcp_dh_018_the_lease_runs_from_the_first_request ... ok
test s_dhcp_dh_012_verified_configures ... ok
test s_dhcp_dh_014_every_decline_waits_ten_seconds ... ok
test s_dhcp_dh_013_a_conflict_declines ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/lease.rs (target/debug/deps/lease-35f10df30fc859ed)

running 19 tests
test s_dhcp_dh_029_a_nak_while_requesting ... ok
test s_dhcp_dh_020_renew_rebind_expire ... ok
test s_dhcp_dh_031_a_late_timer_rebinds_once ... ok
test s_dhcp_dh_028_a_nak_from_another_server ... ok
test s_dhcp_dh_023_reconfigured ... ok
test s_dhcp_dh_027_a_nak_while_renewing ... ok
test s_dhcp_dh_022_extended ... ok
test s_dhcp_dh_032_a_later_timer_expires ... ok
test s_dhcp_dh_026_rebinding_takes_any_server ... ok
test s_dhcp_dh_024_an_ack_for_another_address ... ok
test s_dhcp_dh_025_an_ack_from_another_server ... ok
test s_dhcp_dh_030_a_nak_loop_is_slowed ... ok
test s_dhcp_dh_021_t2_alone_means_rebinding_at_t1 ... ok
test s_dhcp_dh_019_the_first_renew ... ok
test s_dhcp_dh_034_an_infinite_lease ... ok
test s_dhcp_dh_035_a_ten_second_lease ... ok
test s_dhcp_dh_033_timer_options ... ok
test s_dhcp_dh_036_a_lease_that_expired_while_probed ... ok
test s_dhcp_dh_037_each_renewal_has_its_own_xid ... ok

test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/link.rs (target/debug/deps/link-3206abe1f547eb83)

running 10 tests
test s_dhcp_dh_070_link_up_while_selecting ... ok
test s_dhcp_dh_071_link_up_while_probing ... ok
test s_dhcp_dh_067_an_unanswered_reboot_keeps_the_lease ... ok
test s_dhcp_dh_066_the_reboot_is_refused ... ok
test s_dhcp_dh_076_the_link_went_down_while_probing ... ok
test s_dhcp_dh_065_the_reboot_is_acknowledged ... ok
test s_dhcp_dh_072_an_address_lost_in_use ... ok
test s_dhcp_dh_068_the_lease_expires_while_rebooting ... ok
test s_dhcp_dh_069_a_reboot_ack_for_another_address ... ok
test s_dhcp_dh_064_link_up_with_a_lease ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/parse.rs (target/debug/deps/parse-e9d3378615f2ecec)

running 26 tests
test s_dhcp_dh_042_another_transaction ... ok
test s_dhcp_dh_041_another_clients_reply ... ok
test s_dhcp_dh_040_the_hardware_type ... ok
test s_dhcp_dh_043_bootp_is_refused ... ok
test s_dhcp_dh_039_not_a_reply ... ok
test s_dhcp_dh_046_no_end ... ok
test s_dhcp_dh_047_a_repeated_message_type ... ok
test s_dhcp_dh_050_an_overloaded_file_field ... ok
test s_dhcp_dh_049_split_options_are_joined ... ok
test s_dhcp_dh_044_past_end_and_padding ... ok
test s_dhcp_dh_045_an_option_past_its_field ... ok
test s_dhcp_dh_048_option_lengths ... ok
test s_dhcp_dh_051_overload_misused ... ok
test s_dhcp_dh_053_a_foreign_client_identifier ... ok
test s_dhcp_dh_052_message_types ... ok
test s_dhcp_dh_054_the_server_identifier ... ok
test s_dhcp_dh_056_the_lease_time ... ok
test s_dhcp_dh_055_yiaddr_must_be_a_host ... ok
test s_dhcp_dh_058_network_and_broadcast_yiaddr ... ok
test s_dhcp_dh_057_the_mask ... ok
test s_dhcp_dh_059_the_first_usable_router ... ok
test s_dhcp_dh_060_at_most_three_resolvers ... ok
test s_dhcp_dh_063_a_refused_offer_then_another ... ok
test s_dhcp_dh_061_identity_while_requesting ... ok
test s_dhcp_dh_062_offers_nobody_asked_for ... ok
test s_dhcp_dh_038_truncated ... ok

test result: ok. 26 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/props.rs (target/debug/deps/props-ad1dc5ab60e095ea)

running 2 tests
test s_dhcp_dh_074_prop_every_message_is_built_one_way ... ok
test s_dhcp_dh_073_prop_invariants ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/stack.rs (target/debug/deps/stack-c85f569b53db936f)

running 2 tests
test s_dhcp_dh_007_either_framing_of_the_offer ... ok
test s_dhcp_dh_075_the_acquisition_exception_ends_with_an_address ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/tx.rs (target/debug/deps/tx-76e510ba10e25106)

running 9 tests
test s_dhcp_dh_005_secs_saturates ... ok
test s_dhcp_dh_004_jitter_offsets ... ok
test s_dhcp_dh_003_the_discover_schedule ... ok
test s_dhcp_dh_008_the_request_repeats_the_discovers_secs ... ok
test s_dhcp_dh_010_a_slow_offer_still_counts ... ok
test s_dhcp_dh_009_four_requests_then_start_over ... ok
test s_dhcp_dh_002_the_host_name ... ok
test s_dhcp_dh_006_the_request ... ok
test s_dhcp_dh_001_the_first_discover ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_dma-54049e6a6738179b)

running 17 tests
test tests::a_refusal_names_its_numbers ... ok
test tests::a_u32_at_size_minus_one_is_refused ... ok
test tests::a_natural_offset_from_a_natural_base_is_aligned ... ok
test tests::a_refused_register_names_its_numbers ... ok
test tests::a_u32_at_size_minus_four_is_allowed ... ok
test tests::a_zero_length_access_lands_at_the_end_and_no_further ... ok
test tests::an_access_of_no_width_is_refused ... ok
test tests::an_access_that_straddles_two_registers_is_refused ... ok
test tests::an_empty_region_admits_only_an_empty_access ... ok
test tests::an_empty_window_admits_no_register ... ok
test tests::an_offset_inside_the_region_does_not_make_the_access_inside_it ... ok
test tests::an_offset_plus_length_that_wraps_is_refused ... ok
test tests::an_offset_that_wraps_its_own_width_is_refused ... ok
test tests::an_unaligned_volatile_access_is_refused ... ok
test tests::the_base_is_part_of_the_question ... ok
test tests::the_last_whole_register_is_inside_the_window ... ok
test tests::the_whole_region_is_inside_itself ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_dns-a0d3e445ce9eaa6c)

running 62 tests
test tests::a_lookup_whose_every_server_failed_says_how ... ok
test tests::a_lookup_with_no_server_does_not_start ... ok
test tests::a_chain_exactly_at_the_bound_is_followed ... ok
test tests::a_late_answer_to_an_earlier_query_still_ends_the_lookup ... ok
test tests::a_lookup_whose_newest_query_is_not_waited_for_wakes_at_the_next_servers_turn ... ok
test tests::a_lookup_whose_last_query_reached_nobody_waits_for_the_answers_still_read ... ok
test tests::a_lookup_that_then_reached_neither_server_waits_for_an_older_querys_answer ... ok
test tests::a_server_known_unreached_is_asked_again_a_wait_after_that_and_the_lookup_waits_for_its_turn ... ok
test tests::a_real_reply_with_two_addresses_gives_both_in_order ... ok
test tests::a_lookup_whose_newest_query_reached_nobody_waits_for_an_older_querys_answer ... ok
test tests::a_loop_of_aliases_ends_at_the_bound ... ok
test tests::a_server_failure_asks_the_next_server_at_once ... ok
test tests::a_reported_query_the_caller_then_knows_reached_nobody_is_let_go ... ok
test tests::a_server_failure_before_an_alias_is_not_the_aliases_failure ... ok
test tests::a_server_named_twice_is_one_server_and_is_asked_once_a_wait_whatever_is_reported ... ok
test tests::a_server_not_reached_is_not_asked_again_at_once_because_another_failed ... ok
test tests::a_server_that_answered_with_a_failure_is_what_a_lookup_that_then_reached_nobody_reports ... ok
test tests::a_truncated_reply_ends_the_lookup_by_name ... ok
test tests::an_older_query_that_reached_nobody_asks_nobody_and_ends_nothing ... ok
test tests::aliases_are_counted_across_the_names_a_lookup_asks ... ok
test tests::an_older_query_that_reached_nobody_does_not_hurry_the_next_server ... ok
test tests::every_prefix_of_a_real_reply_is_dropped_or_reads_as_the_whole ... ok
test tests::records_of_another_class_or_type_are_passed_over ... ok
test tests::reports_and_another_servers_failures_hurry_no_server_that_has_not_answered_and_end_no_lookup_early ... ok
test tests::rfc1034_3_6_2_a_chain_is_followed_in_any_order ... ok
test tests::rfc1034_3_6_2_a_real_chain_of_aliases_is_followed_to_its_address ... ok
test tests::rfc1034_5_3_3_a_chain_that_ends_without_an_address_is_asked_again_at_its_end ... ok
test tests::rfc1035_2_3_4_a_label_is_63_bytes_and_a_name_255 ... ok
test tests::rfc1035_2_3_4_a_name_built_past_255_bytes_by_pointers_is_refused ... ok
test tests::rfc1035_2_3_4_an_owner_of_255_bytes_is_read_and_one_of_256_is_refused ... ok
test tests::rfc1035_3_3_1_an_alias_record_is_one_name ... ok
test tests::rfc1035_3_4_1_an_address_record_is_four_bytes ... ok
test tests::rfc1035_4_1_1_a_query_is_one_header_and_one_question_for_a_in_in ... ok
test tests::rfc1035_4_1_1_a_query_or_another_opcode_is_no_reply ... ok
test tests::rfc1035_4_1_1_every_rcode_is_named ... ok
test tests::rfc1035_4_1_3_a_record_or_a_count_past_the_end_is_malformed ... ok
test tests::rfc1035_4_1_4_a_pointer_that_does_not_point_back_is_refused ... ok
test tests::rfc1035_4_1_4_a_pointer_to_a_prior_name_is_read ... ok
test tests::rfc1035_4_1_4_the_two_reserved_label_types_are_refused ... ok
test tests::rfc1035_4_2_1_a_query_that_reached_nobody_is_not_waited_for_and_the_next_server_is_asked_at_once ... ok
test tests::rfc1035_4_2_1_a_server_not_reached_is_asked_again_in_its_turn_a_wait_later ... ok
test tests::rfc1035_4_2_1_every_server_is_asked_before_any_again_and_the_lookup_ends_after_its_rounds ... ok
test tests::rfc1035_4_2_1_no_server_is_asked_again_at_once_a_lookup_that_reached_none_ends ... ok
test tests::rfc1035_5_1_a_name_off_the_wire_is_written_with_every_odd_byte_escaped ... ok
test tests::rfc1123_2_1_a_name_is_letters_digits_hyphens_and_nothing_else ... ok
test tests::rfc2181_10_1_two_aliases_for_one_name_are_malformed ... ok
test tests::rfc2181_5_4_1_an_address_for_a_name_not_asked_is_not_read ... ok
test tests::rfc2181_9_a_truncated_reply_is_refused_whatever_it_carries ... ok
test tests::rfc2308_2_2_a_name_with_no_address_is_an_empty_answer ... ok
test tests::rfc2308_nxdomain_and_nodata_end_the_lookup_apart ... ok
test tests::rfc4343_names_compare_without_regard_to_case ... ok
test tests::rfc5452_9_1_a_reply_is_read_only_for_its_id_and_its_question ... ok
test tests::rfc5452_9_1_only_the_asked_server_port_and_id_are_read ... ok
test tests::rfc5452_9_2_an_id_is_drawn_for_a_query_that_is_sent_and_for_nothing_else ... ok
test tests::rfc8085_5_2_a_report_of_an_older_query_asks_nobody ... ok
test tests::rfc6761_6_4_a_real_invalid_name_does_not_exist ... ok
test tests::rfc8085_5_2_a_reported_query_is_still_read_and_the_next_server_is_asked_at_once ... ok
test tests::rfc8085_5_2_reports_alone_end_no_lookup_and_ask_no_server_twice_inside_a_wait ... ok
test tests::every_pair_of_bytes_in_the_header_and_question_is_read_soundly ... ok
test tests::random_bytes_are_never_an_answer_to_an_id_they_do_not_carry ... ok
test tests::every_byte_of_a_real_reply_set_to_every_value_is_read_soundly ... ok
test tests::random_answer_sections_behind_a_valid_question_are_read_soundly ... ok

test result: ok. 62 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running unittests src/lib.rs (target/debug/deps/toyos_elf-1dee33cd8b2d3927)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/crafted.rs (target/debug/deps/crafted-5e6c5e5f64fbcab9)

running 31 tests
test a_file_with_no_load_segment_is_refused ... ok
test a_header_one_byte_short_is_too_small ... ok
test a_file_extent_that_overflows_is_refused ... ok
test a_header_naming_a_vaddr_outside_the_image_is_refused_by_name ... ok
test a_program_header_count_past_the_buffer_is_refused ... ok
test a_program_header_offset_inside_the_file_header_is_refused_by_name ... ok
test a_section_table_the_loader_cannot_index_is_dropped_not_refused ... ok
test a_program_header_offset_that_overflows_is_refused ... ok
test a_program_header_size_that_is_not_56_is_refused ... ok
test a_segment_extent_that_overflows_is_refused ... ok
test a_table_no_segment_holds_whole_is_absent ... ok
test a_vaddr_below_every_segment_has_no_file_offset ... ok
test a_zero_size_tls_segment_is_present_not_absent ... ok
test an_empty_file_is_too_small ... ok
test an_entry_point_outside_the_image_is_refused ... ok
test an_extrapolated_file_offset_that_overflows_has_no_answer ... ok
test an_image_for_the_other_machine_is_refused_and_one_for_this_machine_is_not ... ok
test class_endianness_version_type_and_machine_are_each_refused_by_name ... ok
test filesz_above_memsz_is_refused_for_load_and_for_tls ... ok
test no_program_headers_is_refused ... ok
test only_a_tls_segment_with_bytes_is_occupied ... ok
test segment_flags_survive_the_parse ... ok
test segments_that_share_a_page_are_an_overlap ... ok
test the_file_bytes_behind_a_vaddr_are_the_containing_segments ... ok
test the_load_segment_count_is_bounded_and_the_bound_is_generous ... ok
test the_magic_is_checked ... ok
test the_program_header_table_is_where_its_segment_places_it ... ok
test the_stack_after_an_image_is_aligned_wherever_the_image_ends ... ok
test the_writable_window_spans_every_writable_segment ... ok
test tls_alignment_is_a_power_of_two_within_a_page_or_it_is_refused ... ok
test tls_bss_may_extend_past_the_image ... ok

test result: ok. 31 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/fuzz.rs (target/debug/deps/fuzz-3b69a54ee7aafce0)

running 2 tests
test no_note_segment_panics_the_build_id_read ... ok
test every_derived_address_lies_inside_the_image_or_the_image_is_refused ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.77s

     Running tests/note.rs (target/debug/deps/note-afcd23549fb7d2d4)

running 13 tests
test a_build_id_of_the_wrong_type_is_none ... ok
test a_build_id_under_another_name_is_none ... ok
test a_descriptor_of_0_or_past_32_bytes_is_no_build_id ... ok
test a_header_with_no_readable_table_lists_no_note ... ok
test a_lone_build_id_is_read ... ok
test a_note_running_past_its_segment_names_none ... ok
test an_alignment_no_note_section_has_names_none ... ok
test an_eight_aligned_segment_pads_to_eight ... ok
test the_constant_is_the_gabis ... ok
test the_build_id_after_an_unpadded_name_is_found ... ok
test the_first_of_two_build_ids_is_the_answer ... ok
test every_pt_note_is_listed_wherever_its_bytes_are ... ok
test no_build_id_note_names_none ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/real.rs (target/debug/deps/real-405aa2c1d23718ba)

running 2 tests
test a_linked_binary_parses_to_what_readelf_says ... ok
test an_lld_binarys_build_id_is_what_object_and_readelf_read ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/tables.rs (target/debug/deps/tables-c3231c6816106e1a)

running 42 tests
test a_bucket_below_the_symbol_offset_is_the_symbol_offset ... ok
test a_chain_naming_a_symbol_the_table_does_not_hold_resolves_to_nothing ... ok
test a_bucket_pointing_past_the_chain_array_yields_no_symbol_count ... ok
test a_chain_index_below_the_symbol_offset_ends_the_lookup ... ok
test a_chain_that_never_terminates_yields_no_symbol_count ... ok
test a_dynamic_table_with_no_null_terminator_stops_at_the_buffer ... ok
test a_consistent_table_finds_its_symbol_and_counts_it ... ok
test a_name_offset_past_the_string_table_is_empty ... ok
test a_hash_header_that_cannot_be_used_is_refused ... ok
test a_name_that_is_not_utf8_matches_nothing ... ok
test a_read_table_inside_the_write_window_is_refused_by_name ... ok
test a_read_table_on_a_page_of_the_write_window_is_refused ... ok
test a_symbol_index_at_the_edge_of_the_bytes_reads_nothing ... ok
test a_relocation_form_a_rela_loader_would_not_apply_is_refused ... ok
test a_relocation_crossing_a_fill_page_is_refused_only_for_a_chunked_writer ... ok
test a_symbol_index_is_bounded_by_the_whole_entries_of_its_table ... ok
test a_symbol_index_past_the_table_is_refused_except_for_relative ... ok
test a_symbol_section_whose_link_names_nothing_is_no_symbol_section ... ok
test a_symbol_table_that_cannot_be_read_names_nothing ... ok
test a_symbol_with_no_size_owns_everything_above_it ... ok
test a_tag_is_absent_or_present_never_zero_meaning_absent ... ok
test a_table_needs_both_of_its_tags_and_a_non_zero_size ... ok
test a_trailing_partial_relocation_is_not_a_relocation ... ok
test a_truncated_section_table_names_the_sections_it_covers ... ok
test an_aarch64_tls_descriptor_is_refused_by_name ... ok
test an_address_resolves_to_the_function_that_contains_it ... ok
test an_executable_s_reservation_is_had_only_through_its_refusals ... ok
test an_empty_symbol_table_answers_every_question_with_nothing ... ok
test an_alias_pair_resolves_to_the_one_that_carries_a_size ... ok
test an_unterminated_name_is_the_rest_of_the_string_table ... ok
test counts_are_per_kind_over_every_table ... ok
test data_symbols_and_zero_valued_ones_name_no_frame ... ok
test dladdr_names_the_symbol_glibc_names ... ok
test each_machine_reads_its_own_relocation_numbers ... ok
test every_written_type_is_validated_and_no_other_is ... ok
test everything_after_dt_null_is_ignored ... ok
test one_byte_past_a_sized_symbol_is_not_that_symbol ... ok
test lookups_skip_undefined_symbols_and_the_null_entry ... ok
test rela_dyn_is_found_by_shape_and_only_by_shape ... ok
test relocation_types_map_to_the_width_the_writers_use ... ok
test the_symbol_count_is_the_hash_tables_or_the_gap ... ok
test validation_refuses_a_write_outside_the_window_by_name ... ok

test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/tls.rs (target/debug/deps/tls-d5beb1df92b2f1d9)

running 11 tests
test a_size_no_allocation_can_hold_has_no_plan ... ok
test a_module_lands_on_its_own_declared_alignment ... ok
test a_tpoff_no_segment_or_word_holds_is_refused ... ok
test an_alignment_that_is_not_a_power_of_two_has_no_plan ... ok
test modules_are_placed_in_order_with_the_first_at_zero ... ok
test each_machine_has_its_own_variant ... ok
test the_dtv_is_never_overwritten_by_tls_data ... ok
test tpoff_carries_the_addend ... ok
test the_executables_extent_is_its_size_rounded_to_its_alignment ... ok
test variant_i_agrees_with_what_lld_linked ... ok
test variant_i_puts_the_first_module_where_its_linker_put_it ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_elide-ec7866da0b8a7d1f)

running 12 tests
test limit::tests::a_quiet_site_is_never_limited ... ok
test limit::tests::a_storm_is_said_to_its_burst_counted_after_and_reported_once ... ok
test tests::a_head_cut_inside_a_character_stops_before_it ... ok
test tests::a_tail_cut_inside_a_character_drops_its_remainder ... ok
test tests::a_tail_wider_than_the_value_keeps_all_of_it ... ok
test tests::a_value_that_fits_is_untouched ... ok
test tests::both_ends_survive_and_the_count_is_exact ... ok
test tests::no_length_and_no_width_produces_invalid_utf8 ... ok
test tests::one_byte_past_what_is_kept_elides ... ok
test tests::nothing_renders_wider_than_widest ... ok
test tests::the_chunking_a_value_arrives_in_does_not_change_it ... ok
test limit::tests::racing_sites_count_exactly ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_fat32-9a543f2935caa0c2)

running 18 tests
test dir::tests::a_write_time_keeps_the_even_second ... ok
test name::tests::anything_else_needs_one ... ok
test name::tests::basis_truncates_and_uppercases ... ok
test name::tests::checksum_rotates_and_is_not_constant ... ok
test name::tests::candidates_are_distinct_and_well_formed ... ok
test name::tests::groups_pad_with_terminator_then_filler ... ok
test name::tests::exact_multiple_of_thirteen_has_no_terminator ... ok
test name::tests::lone_surrogates_decode_to_a_name_rather_than_failing ... ok
test name::tests::plain_uppercase_names_need_no_long_entry ... ok
test name::tests::long_name_comparison_is_ascii_case_insensitive ... ok
test name::tests::rejects_names_past_the_format_limit ... ok
test name::tests::rejects_what_fat_cannot_store ... ok
test time::tests::seconds_round_down_to_two ... ok
test time::tests::zero_entry_has_a_time ... ok
test name::tests::hash_tails_differ_between_long_names ... ok
test time::tests::clamps_instead_of_wrapping ... ok
test time::tests::every_representable_day_round_trips ... ok
test time::tests::every_bit_pattern_decodes ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/host_read.rs (target/debug/deps/host_read-054ce0316637f8c4)

running 10 tests
test extents_cover_the_file_and_point_at_its_bytes ... ok
test missing_paths_are_not_found_rather_than_anything_else ... ok
test a_four_kib_cluster_volume_reads_the_same ... ok
test lowercase_short_names_survive ... ok
test subdirectories_list_independently ... ok
test walk_sees_exactly_what_the_host_wrote ... ok
test lookup_ignores_case ... ok
test the_volume_label_is_not_a_file ... ok
test every_file_reads_back_byte_for_byte ... ok
test reads_land_correctly_at_every_offset_and_length ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/host_write.rs (target/debug/deps/host_write-5850e42c39a4048a)

running 21 tests
test files_crossing_cluster_boundaries_are_intact ... ok
test appending_extends_the_chain ... ok
test our_own_reader_agrees_with_the_host_on_our_own_volume ... ok
test creating_an_existing_name_in_another_case_is_refused ... ok
test empty_directories_are_removable_and_full_ones_are_not ... ok
test a_log_file_written_a_line_at_a_time ... ok
test same_entry_is_case_insensitive_identity ... ok
test a_chain_that_outran_its_entry_is_reconciled ... ok
test rename_repoints_a_moved_directorys_parent ... ok
test a_directory_grows_into_further_clusters ... ok
test rename_moves_a_file_between_directories ... ok
test colliding_short_names_stay_unique ... ok
test the_host_sees_the_timestamp_we_stamped ... ok
test the_host_accepts_a_volume_we_populated ... ok
test sparse_writes_zero_the_gap ... ok
test truncation_releases_clusters_and_the_host_agrees ... ok
test every_fat_copy_stays_in_step ... ok
test four_kib_clusters_write_correctly ... ok
test a_chain_no_entry_reaches_is_reconciled ... ok
test deleted_clusters_come_back ... ok
test a_full_volume_refuses_cleanly ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.69s

     Running tests/hostile.rs (target/debug/deps/hostile-c6039959a84466df)

running 33 tests
test a_bad_signature_is_not_a_volume ... ok
test a_refused_flush_is_io ... ok
test a_directory_tree_cycle_terminates ... ok
test a_long_name_with_a_wrong_checksum_falls_back_to_the_short_one ... ok
test a_fat_too_small_for_its_clusters_is_refused ... ok
test a_cluster_that_links_to_itself_is_refused ... ok
test a_crafted_entry_can_still_be_deleted ... ok
test a_crafted_zero_size_entry_cannot_write_outside_the_volume ... ok
test a_longer_cycle_is_bounded_rather_than_endless ... ok
test a_stale_handle_over_a_reused_empty_slot_is_refused ... ok
test a_directory_entry_pointing_outside_the_volume_is_refused ... ok
test a_device_that_fails_mid_read_reports_it ... ok
test a_volume_too_small_for_fat32_is_refused ... ok
test a_write_through_a_dead_handle_allocates_nothing ... ok
test a_stale_handle_is_refused ... ok
test impossible_names_are_refused_not_mangled ... ok
test a_chain_link_outside_the_volume_is_refused ... ok
test a_volume_larger_than_its_device_is_truncated ... ok
test lone_surrogates_in_a_long_name_produce_a_name ... ok
test the_caller_limit_is_the_named_directorys_and_not_the_volumes ... ok
test the_caller_limit_refuses_rather_than_truncates ... ok
test the_corpus_is_a_volume_we_can_read ... ok
test nonsense_long_name_ordinals_do_not_break_the_scan ... ok
test writes_past_the_format_limit_are_refused ... ok
test removing_a_cyclic_chain_never_leaves_an_entry_naming_free_clusters ... ok
test a_cyclic_directory_chain_terminates ... ok
test truncating_a_cyclic_chain_does_not_free_the_clusters_it_keeps ... ok
test every_illegal_bpb_field_is_refused ... ok
test a_directory_longer_than_the_entry_bound_is_refused ... ok
test an_empty_file_is_not_a_corrupt_directory ... ok
test random_damage_to_directory_entries_never_panics ... ok
test random_damage_to_the_metadata_never_panics ... ok
test every_boot_sector_byte_can_be_anything ... ok

test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s

     Running tests/refused_writes.rs (target/debug/deps/refused_writes-ad10e0710e1ba982)

running 20 tests
test a_remove_reports_a_corrupt_chain_under_the_name_it_erased ... ok
test a_remove_whose_free_the_device_fails_answers_ok_and_the_next_call_the_failure ... ok
test a_stop_that_refuses_every_retry_for_a_while_leaks_nothing ... ok
test every_refused_write_of_a_long_name_create_is_undone ... ok
test every_refused_write_of_a_remove_dir_leaves_nothing_behind ... ok
test every_refused_write_of_a_rename_is_undone ... ok
test an_unlanded_rollback_is_the_answer ... ok
test every_refused_read_of_a_truncation_to_zero_is_retried_to_the_same_end ... ok
test every_refused_read_of_a_truncation_is_retried_to_the_same_end ... ok
test every_refused_write_of_a_directory_growth_is_undone ... ok
test a_call_that_refused_nothing_keeps_the_free_count ... ok
test every_refused_write_of_a_truncation_is_carried_through ... ok
test every_refused_write_of_a_truncation_to_zero_is_carried_through ... ok
test every_refused_write_of_a_first_allocation_is_undone ... ok
test the_deepest_repair_reaches_its_bound_and_no_further ... ok
test every_refused_write_of_a_nested_create_dir_is_undone ... ok
test every_refused_write_of_a_remove_leaves_nothing_behind ... ok
test every_refused_write_of_an_append_is_undone ... ok
test every_refused_write_of_an_append_and_its_sync_converges ... ok
test a_stop_at_any_write_leaves_only_the_named_windows ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s

     Running tests/replace_rename.rs (target/debug/deps/replace_rename-26aeae76b6ebf7eb)

running 2 tests
test source_move_failure_restores_destination_before_any_free ... ok
test a_failed_rollback_names_where_the_destination_went ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_fat32_check-9b00a76f29be5a2b)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/teeth.rs (target/debug/deps/teeth-e08b231553914a95)

running 66 tests
test a_cluster_past_the_formats_ceiling ... ok
test a_cluster_that_is_not_a_power_of_two_sectors ... ok
test a_boot_sector_that_does_not_jump ... ok
test a_chain_link_that_is_not_a_cluster ... ok
test a_boot_sector_without_its_signature ... ok
test a_chain_link_into_the_bad_cluster_mark ... ok
test a_chain_that_links_back_into_itself ... ok
test a_directory_entry_carrying_a_size ... ok
test a_directory_entry_naming_no_cluster ... ok
test a_fat_too_small_for_the_clusters_it_must_describe ... ok
test a_file_holding_more_clusters_than_its_size_needs ... ok
test a_fat32_volume_claiming_a_fixed_root_directory ... ok
test a_dot_dot_naming_the_root_cluster_instead_of_zero ... ok
test a_fat32_volume_counting_sectors_in_the_sixteen_bit_field ... ok
test a_fat32_volume_sizing_its_fat_in_the_sixteen_bit_field ... ok
test a_dot_entry_naming_someone_elses_cluster ... ok
test a_file_whose_size_needs_more_clusters_than_it_holds ... ok
test a_fat_one_that_is_not_an_end_of_chain_mark ... ok
test a_free_count_that_is_not_the_free_count ... ok
test a_long_name_entry_ahead_of_the_dot_entries ... ok
test a_long_name_entry_with_a_type_the_format_reserves ... ok
test a_free_count_the_writer_left_unknown ... ok
test a_long_name_entry_naming_a_cluster ... ok
test a_long_name_run_that_does_not_reach_ordinal_one ... ok
test a_long_name_run_of_more_entries_than_a_long_name_has ... ok
test a_long_name_run_that_does_not_begin_with_the_last_entry_flag ... ok
test a_long_name_run_no_short_entry_follows ... ok
test a_long_name_run_whose_ordinals_do_not_count_down ... ok
test a_media_byte_the_format_does_not_define ... ok
test a_fat_copy_left_behind_by_a_write ... ok
test a_dot_entry_in_the_root_directory ... ok
test a_fat_zero_that_does_not_carry_the_media_byte ... ok
test a_long_name_run_whose_checksum_is_not_its_short_names ... ok
test a_fat_of_no_sectors ... ok
test a_report_that_stops_enumerating_says_it_stopped ... ok
test a_next_free_hint_that_is_not_a_cluster ... ok
test a_root_cluster_that_is_not_a_cluster ... ok
test a_file_system_version_this_specification_does_not_define ... ok
test a_reserved_entry_byte_carrying_something_nothing_defines ... ok
test a_second_volume_label_in_the_root ... ok
test a_tree_deeper_than_the_walk_follows ... ok
test a_subdirectory_that_does_not_begin_with_dot ... ok
test a_sector_size_the_format_does_not_define ... ok
test a_volume_of_no_sectors ... ok
test a_volume_label_outside_the_root_directory ... ok
test a_volume_with_too_few_clusters_to_be_fat32 ... ok
test a_volume_shorter_than_its_boot_sector_says ... ok
test an_fsinfo_sector_outside_the_reserved_region ... ok
test a_volume_that_is_all_metadata ... ok
test a_volume_flagged_as_having_met_a_disk_error ... ok
test an_active_fat_the_volume_does_not_have ... ok
test a_volume_flagged_as_not_cleanly_unmounted ... ok
test an_fsinfo_without_its_struct_signature ... ok
test fewer_bytes_than_a_boot_sector ... ok
test an_entry_naming_a_cluster_outside_the_volume ... ok
test an_orphaned_ring_of_clusters ... ok
test an_fsinfo_without_its_lead_signature ... ok
test an_fsinfo_without_its_trail_signature ... ok
test no_fat_at_all ... ok
test the_lowercase_name_bits_are_not_a_complaint ... ok
test clusters_allocated_and_reachable_from_nothing ... ok
test no_reserved_sectors_at_all ... ok
test the_fixture_is_clean ... ok
test an_unfinished_fixture_is_not_clean ... ok
test two_files_holding_one_cluster ... ok
test two_entries_in_one_directory_with_the_same_short_name ... ok

test result: ok. 66 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (target/debug/deps/toyos_gicv3-85668e2fdba4881c)

running 0 tests

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 03.

cargo run -- --ci host, part 03
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/gicv3.rs (target/debug/deps/gicv3-a7593114838353de)

running 9 tests
test sgi_names_aff0_by_range_and_bit ... ok
test affinity_drops_mpidr_flags_between_aff2_and_aff3 ... ok
test sgi_to_every_other_cpu_is_irm_and_the_intid_alone ... ok
test sgi_to_cpu_zero_is_bit_zero_of_range_zero ... ok
test unpacking_puts_each_field_back_and_no_flag ... ok
test walk_steps_over_virtual_lpi_frames ... ok
test walk_steps_two_frames_without_them ... ok
test walk_stops_at_the_last ... ok
test walk_stops_at_the_region_end ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (target/debug/deps/toyos_gpt-1688af75d0970822)

running 7 tests
test guid::tests::esp_type_guid_round_trips ... ok
test crc32::tests::streaming_matches_one_shot ... ok
test guid::tests::toyos_root_text_is_the_type_guid ... ok
test guid::tests::zero_is_zero ... ok
test crc32::tests::catalogue_check_value ... ok
test crc32::tests::not_castagnoli ... ok
test tests::the_block_sizes_parsed_are_the_declared_range ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mutate.rs (target/debug/deps/mutate-5f160bce851bb0fc)

running 1 test
test a_resealed_table_with_any_value_bent_never_panics_and_hands_back_only_partitions ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.42s

     Running tests/oracle.rs (target/debug/deps/oracle-21195d4b2f2024ba)

running 3 tests
test both_readers_spell_the_types_alike ... ok
test on_tables_uefi_lays_out_both_readers_agree_entry_for_entry ... ok
test on_bent_tables_every_disagreement_is_a_named_difference ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/parse.rs (target/debug/deps/parse-7e7c8abeb42665bb)

running 43 tests
test a_backwards_partition_is_refused ... ok
test a_backup_retry_leaves_no_slot_of_the_primary ... ok
test a_device_with_no_room_for_a_table ... ok
test a_damaged_primary_falls_back_to_a_good_backup ... ok
test a_list_leaves_no_slot_it_did_not_fill ... ok
test a_list_is_every_used_entry_in_order ... ok
test a_four_kibibyte_block_device_parses ... ok
test a_partition_outside_the_disk_is_refused ... ok
test a_tiny_entry_array_cannot_buy_the_backup_header ... ok
test a_billion_entries_is_refused_not_read ... ok
test a_partition_over_the_table_is_refused ... ok
test a_type_scan_lists_every_entry_of_that_type ... ok
test a_type_scan_over_a_damaged_array_is_refused ... ok
test a_read_that_does_not_happen_is_an_error ... ok
test a_type_scan_says_how_many_it_could_not_hand_back ... ok
test a_valid_primary_that_lacks_the_guid_is_not_retried_against_the_backup ... ok
test a_usable_range_reaching_the_backup_gpt_is_refused ... ok
test an_array_lba_near_the_top_of_the_range_does_not_wrap ... ok
test absent_guid_is_not_found_and_says_how_many_there_were ... ok
test a_zero_guid_matches_nothing ... ok
test an_honest_table_on_a_floored_device_view_parses ... ok
test both_copies_damaged_is_refused_by_name ... ok
test block_sizes_outside_the_supported_range ... ok
test an_overlapping_neighbour_is_refused ... ok
test header_must_claim_lba_one ... ok
test header_reserved_word ... ok
test finds_the_partition_by_unique_guid ... ok
test header_revision ... ok
test header_signature ... ok
test each_guid_finds_its_own_entry ... ok
test hybrid_mbr_is_refused ... ok
test no_protective_mbr ... ok
test header_size_bounds ... ok
test one_flipped_bit_in_the_header ... ok
test entry_size_must_be_a_power_of_two_multiple_of_128_that_fits_a_block ... ok
test one_flipped_bit_in_the_entry_array ... ok
test the_array_ends_where_the_header_says ... ok
test the_array_may_not_sit_on_the_header_or_past_the_usable_range ... ok
test the_array_ceiling_is_where_it_says_it_is ... ok
test usable_range_must_be_a_range_inside_the_device ... ok
test two_entries_claiming_the_target_guid_are_refused ... ok
test zero_entries_is_refused ... ok
test no_byte_of_the_table_can_panic_the_parser ... ok

test result: ok. 43 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s

     Running unittests src/lib.rs (target/debug/deps/toyos_hda-d8e32426ac3fcbc4)

running 88 tests
test caps::tests::an_unsoldered_pin_still_calls_itself_a_speaker ... ok
test caps::tests::a_widget_type_keeps_the_nibble_it_was_decoded_from ... ok
test caps::tests::both_laptop_output_pins_can_power_an_external_amplifier ... ok
test caps::tests::qemu_s_converter_offers_it_too ... ok
test caps::tests::eight_channel_display_audio_decodes_its_channel_count ... ok
test caps::tests::the_converter_amp_has_gain_and_cannot_mute ... ok
test caps::tests::the_internal_speaker_is_fixed_and_the_jack_is_a_jack ... ok
test caps::tests::the_laptop_s_speaker_pin_has_a_connection_list_and_an_output_amp ... ok
test caps::tests::the_laptop_s_speaker_dac_decodes_as_a_stereo_converter ... ok
test caps::tests::the_pin_amp_can_mute_and_has_no_gain ... ok
test caps::tests::the_laptop_s_vendor_widget_is_the_one_with_processing_coefficients ... ok
test caps::tests::the_laptop_s_converter_offers_what_this_pipeline_plays ... ok
test config::tests::a_hop_shared_by_two_pins_is_powered_once ... ok
test config::tests::qemus_path_writes_its_amplifier_on_the_converter_and_none_on_the_pin ... ok
test config::tests::the_converter_learns_the_format_and_the_tag_last ... ok
test config::tests::both_machines_offer_the_one_rate_this_driver_asks_for ... ok
test config::tests::every_widget_on_the_path_that_has_a_power_state_is_told_d0 ... ok
test config::tests::a_converter_that_does_not_offer_the_rate_is_a_refusal_and_not_a_substitution ... ok
test config::tests::the_laptop_s_speaker_is_told_to_power_its_external_amplifier ... ok
test config::tests::the_two_halves_of_the_laptop_s_volume_control_are_written_where_they_exist ... ok
test config::tests::nothing_in_the_sequence_ever_sets_the_mute_bit ... ok
test graph::tests::a_function_type_keeps_the_byte_it_was_decoded_from ... ok
test config::tests::the_jack_is_told_to_drive_headphones_and_the_speaker_is_not ... ok
test graph::tests::a_list_shorter_than_it_declared_is_refused ... ok
test graph::tests::a_long_form_entry_carries_sixteen_bits ... ok
test graph::tests::a_long_form_node_past_the_node_space_is_refused ... ok
test graph::tests::a_range_entry_expands_from_the_entry_before_it ... ok
test graph::tests::a_range_longer_than_the_bound_is_refused_rather_than_truncated ... ok
test graph::tests::a_range_that_runs_backwards_is_not_a_range ... ok
test fixture::tests::the_laptop_fixture_carries_both_codecs_and_every_widget ... ok
test fixture::tests::the_speaker_pin_round_trips_through_the_log_format ... ok
test graph::tests::a_range_with_nothing_before_it_is_refused ... ok
test graph::tests::a_six_entry_mixer_list_spans_two_responses ... ok
test graph::tests::the_laptop_s_headphone_pin_names_two_converters ... ok
test graph::tests::the_laptop_s_speaker_pin_names_one ... ok
test path::tests::a_connection_naming_a_node_outside_the_group_is_refused_by_name ... ok
test fixture::tests::the_converters_keep_their_rates ... ok
test fixture::tests::every_pin_in_the_fixture_has_a_configuration_default ... ok
test path::tests::a_cycle_is_a_refusal_and_not_a_hang ... ok
test path::tests::a_selector_on_the_way_is_told_which_input_to_take ... ok
test path::tests::a_speaker_outranks_a_line_out_whatever_order_the_nodes_are_in ... ok
test path::tests::an_unwired_speaker_pin_does_not_win_by_coming_first ... ok
test path::tests::a_speaker_pin_with_no_converter_behind_it_is_refused ... ok
test path::tests::qemu_has_no_speaker_and_binds_its_line_out ... ok
test path::tests::only_one_of_the_laptop_s_five_speaker_labelled_pins_is_a_candidate ... ok
test path::tests::display_audio_alone_is_a_refusal_naming_it ... ok
test path::tests::the_display_codec_does_not_win_when_it_comes_first ... ok
test probe::tests::a_group_that_is_not_audio_is_kept_and_not_walked ... ok
test probe::tests::a_subordinate_range_running_off_the_node_space_is_refused_by_name ... ok
test path::tests::the_laptop_picks_its_internal_speaker_and_the_jack_that_shares_a_converter ... ok
test probe::tests::a_widget_count_past_the_bound_costs_the_widgets_past_it_and_nothing_else ... ok
test probe::tests::walking_qemus_two_codecs_binds_the_line_out ... ok
test path::tests::the_pin_amp_the_laptop_offers_is_the_one_that_can_mute ... ok
test stream::tests::a_buffer_that_would_wrap_the_address_space_is_refused ... ok
test stream::tests::a_built_format_decodes_back_to_the_rate_it_was_asked_for ... ok
test probe::tests::a_codec_statests_named_and_the_link_does_not_carry_is_named_not_skipped ... ok
test stream::tests::a_divided_rate_uses_the_divisor_field ... ok
test stream::tests::a_driver_that_slept_a_whole_lap_is_told_the_mask_cannot_place_the_engine ... ok
test stream::tests::a_last_index_outside_the_ring_is_refused ... ok
test stream::tests::a_mask_names_the_period_the_engine_returns_to_first ... ok
test stream::tests::a_mask_that_is_not_one_run_is_refused_rather_than_placed ... ok
test stream::tests::a_multiplied_rate_uses_the_multiplier_field ... ok
test stream::tests::a_period_count_past_the_mask_is_refused_rather_than_masked_short ... ok
test probe::tests::the_walked_laptop_binds_the_same_speaker_the_parsed_one_does ... ok
test stream::tests::a_position_inside_the_period_still_being_played_marks_nothing_new ... ok
test stream::tests::a_position_past_the_buffer_is_not_an_index ... ok
test stream::tests::a_rate_the_field_cannot_express_is_refused_and_not_rounded ... ok
test stream::tests::a_ring_with_nothing_to_wrap_to_is_refused ... ok
test stream::tests::a_run_that_wraps_does_not_start_at_its_lowest_bit ... ok
test stream::tests::an_unrepresentable_width_or_channel_count_is_refused ... ok
test stream::tests::completion_marks_every_period_between_two_positions ... ok
test stream::tests::completion_wraps_the_ring ... ok
test stream::tests::every_rate_linux_tabulates_encodes_to_the_number_linux_tabulates ... ok
test stream::tests::forty_eight_kilohertz_is_the_other_base ... ok
test stream::tests::the_pipeline_s_own_shape_builds_a_ring ... ok
test stream::tests::the_rate_this_pipeline_plays_encodes_as_the_forty_four_one_base ... ok
test stream::tests::widths_and_channel_counts_land_in_their_own_fields ... ok
test verb::tests::a_range_running_past_the_node_space_is_refused ... ok
test verb::tests::all_ones_is_not_a_response ... ok
test verb::tests::an_address_and_a_node_print_the_way_a_dump_names_them ... ok
test verb::tests::long_verb_puts_its_payload_under_a_four_bit_verb ... ok
test verb::tests::present_reports_every_codec_and_not_the_first ... ok
test verb::tests::short_verb_is_the_probe_s_encoding ... ok
test verb::tests::statests_bit_15_is_not_an_address ... ok
test verb::tests::the_laptop_s_widget_range_decodes_to_its_own_nodes ... ok
test verb::tests::zero_subordinates_is_no_range_at_all ... ok
test probe::tests::walking_the_laptop_reaches_the_graph_its_own_log_describes ... ok
test stream::tests::every_position_completed_can_report_reads_back_as_the_run_it_walked ... ok

test result: ok. 88 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_i219-34ecf7da27a76327)

running 90 tests
test tests::a_flag_that_never_comes_does_not_stop_the_reset ... ok
test tests::a_claim_that_stops_answering_is_handed_up_and_not_read_as_quiet ... ok
test tests::a_frame_arrives_whole ... ok
test tests::a_frame_longer_than_a_transmit_buffer_is_refused_and_not_truncated ... ok
test tests::a_grant_that_never_comes_is_refused_by_name_and_the_request_withdrawn ... ok
test tests::a_buffer_given_back_out_of_turn_does_not_carry_the_tail_over_an_older_one ... ok
test tests::a_frame_goes_out_whole ... ok
test tests::a_flag_the_part_already_let_go_is_not_written_again ... ok
test tests::a_flag_another_agent_holds_is_neither_asked_over_nor_cleared ... ok
test tests::a_lying_length_is_refused_and_the_frames_behind_it_still_arrive ... ok
test tests::a_link_drop_does_not_lose_the_ring ... ok
test tests::a_part_is_told_which_vector_each_cause_uses ... ok
test tests::a_part_that_does_not_take_ivar_is_refused ... ok
test tests::a_part_that_does_not_take_rctl_is_refused ... ok
test tests::a_full_transmit_ring_answers_room_0 ... ok
test tests::a_ladder_stopped_on_smbus_leaves_the_mac_off_it ... ok
test tests::a_grant_that_comes_late_inside_the_bound_is_taken ... ok
test tests::a_multicast_group_sets_the_one_table_bit_its_address_hashes_to ... ok
test tests::a_part_with_no_station_address_is_refused ... ok
test tests::a_partner_on_an_unconfigured_phy_raises_no_link ... ok
test tests::a_phy_in_reach_is_asked_once_and_left_powered ... ok
test tests::a_phy_left_in_loopback_or_configured_by_hand_raises_no_link ... ok
test tests::a_part_that_takes_none_of_the_datasheets_latitudes_is_brought_up_the_same_way ... ok
test tests::a_link_that_is_down_has_no_room ... ok
test tests::a_master_that_never_goes_quiet_does_not_stop_the_bring_up ... ok
test tests::a_phy_that_is_not_the_one_this_map_describes_is_refused_by_its_identifier ... ok
test tests::a_phy_left_in_low_power_link_up_links_at_a_gigabit ... ok
test tests::a_refused_descriptor_does_not_carry_the_tail_over_a_frame_still_held ... ok
test tests::a_register_nothing_decodes_is_refused_and_never_written ... ok
test tests::a_part_that_grants_over_the_engines_standing_bit_is_brought_up ... ok
test tests::a_reset_that_never_finishes_is_refused ... ok
test tests::a_phy_reset_restores_the_defaults_and_not_the_state_the_claim_inherited ... ok
test tests::a_phy_left_out_of_reach_is_climbed_to_before_the_reset ... ok
test tests::a_platform_that_asks_for_low_power_link_up_in_d0a_gets_it ... ok
test tests::a_release_over_a_window_of_ones_writes_nothing ... ok
test tests::a_mac_that_keeps_its_phy_down_is_a_phy_no_cycle_reaches ... ok
test tests::a_seeded_workload_loses_nothing_and_invents_nothing ... ok
test tests::a_window_or_grant_too_small_is_refused ... ok
test tests::a_spurious_interrupt_costs_a_pass_and_nothing_else ... ok
test tests::a_window_that_reads_ones_is_refused ... ok
test tests::a_ring_never_written_back_is_refused ... ok
test tests::bring_up_programs_what_the_initialization_sections_name ... ok
test tests::causes_are_acknowledged_by_writing_them_back ... ok
test tests::every_reading_of_the_other_two_ownership_bits_names_who_stands_beside_the_flag ... ok
test tests::a_request_registered_while_the_engine_holds_it_is_still_granted ... ok
test tests::frames_come_up_in_order_under_batched_and_reordered_write_back ... ok
test tests::a_phy_no_rung_reaches_is_refused_after_the_reset ... ok
test tests::a_phy_reset_the_firmware_blocks_is_never_issued ... ok
test tests::a_ring_a_link_change_left_full_stays_the_parts ... ok
test tests::host_wake_up_left_armed_is_cleared_behind_the_reset ... ok
test tests::every_ask_carries_the_parts_own_word_and_keeps_the_pace ... ok
test tests::null_descriptor_padding_is_not_a_frame ... ok
test tests::ones_inside_the_grant_wait_do_not_leave_the_request_standing ... ok
test tests::ones_on_the_way_out_do_not_leave_the_flag_standing ... ok
test tests::ones_through_the_whole_release_bound_write_nothing ... ok
test tests::quiesce_stops_what_a_previous_holder_left_running ... ok
test tests::one_pass_hands_up_at_most_its_budget ... ok
test tests::refusals::a_descriptor_with_nothing_in_it_is_refused ... ok
test tests::refusals::a_descriptor_without_end_of_packet_is_refused ... ok
test tests::refusals::a_frame_the_hardware_reported_an_error_on_is_refused ... ok
test tests::refusals::more_bytes_than_the_buffer_holds_is_refused ... ok
test tests::the_82574s_own_phy_register_map_is_refused_by_name ... ok
test tests::the_driver_and_the_macs_statistics_count_the_same_frames ... ok
test tests::the_link_going_away_and_coming_back_is_seen ... ok
test tests::the_oem_bits_carry_the_platforms_d0a_policy_and_nothing_else ... ok
test tests::an_mdi_read_the_part_could_not_complete_is_refused_by_name ... ok
test tests::the_head_register_does_run_ahead_of_memory ... ok
test tests::a_written_back_descriptor_returns_room ... ok
test tests::the_oem_bits_restart_follows_the_control_restart_where_a_phy_reset_is_allowed ... ok
test tests::the_receiver_reporting_on_itself_is_counted ... ok
test tests::the_phy_is_brought_up_and_the_mac_sees_the_link_it_raises ... ok
test tests::the_refusal_names_each_agent_standing_beside_the_flag ... ok
test tests::the_refusal_names_the_last_reading_before_the_deadline ... ok
test tests::an_mdi_transaction_that_never_reports_ready_is_refused_by_name ... ok
test tests::the_pchs_mac_gets_its_three_registers_and_the_82574_none ... ok
test tests::what_one_power_reading_decides ... ok
test tests::an_interconnect_in_transition_is_waited_out_and_never_written_over ... ok
test tests::what_the_wake_and_the_full_reset_write ... ok
test tests::transmit_descriptors_are_reclaimed_under_batched_write_back ... ok
test tests::the_ownership_claim_leaves_the_rest_of_the_register_standing ... ok
test tests::the_power_step_is_what_lets_an_mdi_cycle_run_at_all ... ok
test tests::the_phy_is_found_at_whichever_address_answers_its_identifier ... ok
test tests::the_transmit_cause_is_armed_only_when_asked ... ok
test tests::a_descriptors_fields_are_read_only_after_an_observe_that_follows_the_load_that_found_dd ... ok
test tests::the_advertised_abilities_are_what_the_link_resolves_to ... ok
test tests::the_word_to_the_firmware_goes_with_the_driver ... ok
test tests::no_two_accesses_to_the_arbitration_are_nearer_than_the_pace ... ok
test tests::the_interface_is_given_back_on_every_path_that_took_it ... ok
test tests::a_tail_register_is_written_only_after_a_publish_that_follows_the_last_descriptor_store ... ok
test tests::a_burst_past_the_ring_leaves_whole_on_the_room_it_is_told ... ok

test result: ok. 90 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running unittests src/lib.rs (target/debug/deps/toyos_inspect-f58f964bd2fd297e)

running 25 tests
test path::tests::a_path_is_refused_by_name ... ok
test render::tests::json_is_one_flat_object_with_typed_values ... ok
test render::tests::a_line_is_path_equals_value ... ok
test selector::tests::a_malformed_selector_is_refused_by_name ... ok
test kernel::tests::an_absent_counter_has_no_path ... ok
test kernel::tests::a_stale_cpu_says_so_and_an_unread_one_says_only_that ... ok
test dev::tests::the_header_is_read_at_the_kernels_offsets ... ok
test selector::tests::a_pathological_selector_is_answered_in_polynomial_time ... ok
test invocation::tests::a_command_line_is_one_optional_selector_and_one_optional_flag ... ok
test kernel::tests::every_counter_a_record_carries_is_a_path_the_grammar_accepts ... ok
test kernel::tests::a_cpu_two_records_name_is_refused_by_its_path ... ok
test dev::tests::every_record_renders_to_paths_the_grammar_accepts ... ok
test selector::tests::a_selector_reaches_only_the_owners_it_can_name ... ok
test dev::tests::a_star_never_lines_up_the_parts_of_an_address ... ok
test tests::every_owner_root_is_one_valid_segment_and_distinct ... ok
test selector::tests::a_star_is_one_or_more_whole_segments ... ok
test wire::tests::a_malformed_answer_is_refused_by_name ... ok
test dev::tests::a_path_two_records_render_to_is_refused_by_name ... ok
test wire::tests::a_snapshot_round_trips ... ok
test wire::tests::an_answer_for_another_owner_is_refused ... ok
test wire::tests::an_owner_cannot_put_a_path_outside_the_grammar - should panic ... ok
test wire::tests::an_owner_cannot_put_a_second_line_in_a_value - should panic ... ok
test wire::tests::an_owner_cannot_answer_one_path_twice - should panic ... ok
test wire::tests::an_owner_that_answers_past_one_frame_is_told_so ... ok
test wire::tests::every_truncation_is_refused ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_its-19d0b13c69263954)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/encodings.rs (target/debug/deps/encodings-641e75abe325d634)

running 21 tests
test a_devices_events_are_at_least_two_and_no_more_than_the_its_has_bits_for ... ok
test a_collection_is_one_the_its_holds_or_its_table_does ... ok
test a_redistributor_is_named_as_the_its_asks_by_number_or_by_address ... ok
test a_table_is_given_flat_valid_and_counted_in_its_own_pages ... ok
test a_redistributor_that_reads_other_bits_back_has_no_lpis_of_the_layout ... ok
test a_table_is_sized_in_its_own_pages_for_the_entries_it_must_hold ... ok
test a_table_register_says_what_it_backs_and_how_it_is_read ... ok
test an_its_without_physical_lpis_is_refused ... ok
test an_event_is_one_its_devices_table_holds ... ok
test an_lpi_is_an_intid_from_8192_that_the_tables_and_the_distributor_both_count ... ok
test an_lpi_layout_is_inside_the_distributors_intids ... ok
test an_lpis_configuration_is_its_priority_a_set_bit_and_its_enable ... ok
test an_offset_register_names_a_command_by_its_offset_field_alone ... ok
test each_command_holds_its_number_and_parameters_where_its_figure_has_them ... ok
test inv_and_discard_hold_a_device_and_an_event_and_nothing_else ... ok
test the_command_queue_is_counted_in_4_kib_pages_and_holds_one_command_fewer ... ok
test the_configuration_table_starts_at_intid_8192_and_the_pending_table_at_zero ... ok
test the_its_registers_sit_where_tables_12_33_and_12_34_have_them ... ok
test the_redistributors_base_registers_name_the_two_tables ... ok
test the_redistributors_lpi_registers_sit_where_table_12_27_has_them ... ok
test the_type_register_says_how_wide_an_its_is ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_keymap-d6d5366800ae26a6)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/compose.rs (target/debug/deps/compose-85f070a533090403)

running 17 tests
test altgr_layer ... ok
test composition ... ok
test dead_keys_emit_nothing_when_pressed ... ok
test dead_then_other_dead ... ok
test dead_then_space_and_doubled ... ok
test dedicated_umlauts ... ok
test fallthrough ... ok
test german_is_unchanged_by_the_dead_key_work ... ok
test iso_key ... ok
test modifiers_do_not_break_composition ... ok
test only_swiss_german_has_dead_keys ... ok
test qwertz ... ok
test reset_drops_pending ... ok
test swiss_german_mac_is_untouched ... ok
test unknown_layout_is_named_as_unknown ... ok
test us_is_the_default_and_still_types_ascii ... ok
test worst_case_fallthrough_fits_max_emit ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/detect.rs (target/debug/deps/detect-0e8242c4002bb92e)

running 9 tests
test inconsistent_first_press_is_unrecognized ... ok
test candidates_narrow ... ok
test every_layout_is_reachable ... ok
test legends_are_renderable ... ok
test the_qwertz_three_take_two ... ok
test question_table_is_well_formed ... ok
test inconsistent_second_press_is_unrecognized ... ok
test us_takes_one_press ... ok
test never_confident_without_evidence ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/tables.rs (target/debug/deps/tables-be2af0c72a3f1e53)

running 1 test
test golden ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/translate.rs (target/debug/deps/translate-fefbf29b6fa572e2)

running 10 tests
test an_escape_sequence_does_not_depend_on_the_layout ... ok
test an_undefined_key_does_not_consume_a_pending_diacritic ... ok
test a_control_code_is_the_key_position_not_the_letter ... ok
test an_unknown_name_leaves_the_layout_alone ... ok
test changing_layout_drops_a_pending_diacritic ... ok
test arrows_and_page_keys_send_escape_sequences ... ok
test the_default_layout_is_us ... ok
test ctrl_makes_control_codes_of_the_letter_row ... ok
test the_swiss_german_gates_own_sequence ... ok
test two_translators_do_not_share_a_pending_diacritic ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_libc_copies-ee3949aad8583456)

running 48 tests
test descriptor_requests::each_descriptor_keeps_its_own_close_on_exec_mark ... ok
test descriptor_requests::fcntl_reads_an_int_argument_from_the_lower_half_of_its_register ... ok
test dladdr_symbols::an_image_holds_its_load_segment_and_starts_at_its_page ... ok
test dladdr_symbols::either_count_reaches_the_symbol_at_its_address ... ok
test errno_codes::every_code_libc_answers_with_is_errno_h_s ... ok
test exact_hex::tests::the_formats_corners_and_ties_round_to_their_bits ... ok
test descriptor_requests::f_dupfd_meets_its_floor_holding_one_duplicate_at_most ... ok
test fparts_differential::logb_is_the_host_libraries_and_a_zero_its_pole ... ok
test fparts_differential::modf_is_the_host_libraries ... ok
test internet_addresses::a_buffer_too_short_for_the_text_is_refused_as_the_host_refuses_it ... ok
test internet_addresses::a_number_past_32_bits_or_without_digits_is_no_address ... ok
test internet_addresses::a_number_with_a_zero_before_another_digit_is_no_dotted_quad ... ok
test internet_addresses::a_sockaddr_holds_its_port_and_address_in_network_order ... ok
test internet_addresses::another_family_is_refused_as_the_host_refuses_it ... ok
test internet_addresses::an_address_is_truncated_to_the_callers_buffer_as_the_host_truncates_it ... ok
test internet_addresses::an_address_is_written_as_the_host_writes_it ... ok
test link_requests::readlink_refuses_an_empty_buffer_and_one_no_ssize_t_counts ... ok
test listing_reader::a_name_fits_d_name_with_its_nul_or_is_refused ... ok
test listing_reader::an_answer_is_asked_again_until_it_fits ... ok
test memory_refusals::a_length_names_the_pages_it_reaches_into ... ok
test memory_refusals::madvise_takes_linuxs_hints_and_refuses_its_discard ... ok
test memory_refusals::mmap_refuses_what_the_kernel_cannot_map_and_nothing_else ... ok
test memory_refusals::posix_madvise_takes_its_five_and_only_them ... ok
test poll_requests::a_descriptor_named_twice_is_watched_once_for_both_interests ... ok
test poll_requests::each_descriptor_named_once_has_its_own_watch ... ok
test signal_masks::each_how_changes_the_mask_as_posix_says ... ok
test signal_masks::sigaddset_adds_its_signal_alone ... ok
test signal_masks::the_full_set_holds_every_signal ... ok
test socket_options::an_options_value_crosses_as_the_hosts_does ... ok
test stream_ends::a_read_of_zero_is_the_peers_fin_only_while_the_send_pipe_is_read ... ok
test stream_ends::a_write_the_send_pipe_refuses_for_its_reader_is_a_reset ... ok
test strtonum_differential::the_grammar_s_corners_read_as_judged ... ok
test tests::the_square_roots_are_the_correctly_rounded_ones ... ok
test text_differential::every_signal_signal_h_numbers_has_glibcs_text ... ok
test text_differential::strnlen_is_the_host_libraries ... ok
test utf8_differential::a_refusal_starts_the_next_character_afresh ... ok
test tests::a_disjoint_copy_agrees_either_way ... ok
test tests::every_fill_agrees_with_fill ... ok
test strtonum_differential::random_integers_read_as_the_host_s ... ok
test long_double::strtold_widens_as_compiler_builtins_does ... ok
test prototypes::every_prototype_is_a_definition_and_every_definition_is_declared ... ok
test tests::every_copy_agrees_with_copy_within ... ok
test strtonum_differential::random_decimal_numbers_round_as_the_host_s ... ok
test exact_hex::tests::it_rounds_as_the_machine_does ... ok
test utf8_differential::every_sequence_to_four_bytes_agrees_with_from_utf8 ... ok
test internet_addresses::a_dotted_quad_reads_as_the_host_reads_it ... ok
test strtonum_differential::random_hexadecimal_numbers_round_as_ieee_754_rounds_them ... ok
test internet_addresses::numbers_and_dots_read_as_the_host_reads_them ... ok

test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running unittests src/lib.rs (target/debug/deps/toyos_logstream-eba0d135b9885853)

running 19 tests
test tests::a_kernel_record_and_its_continuation_are_no_programs ... ok
test tests::a_control_byte_is_written_and_never_passed ... ok
test tests::a_continuation_wears_its_kernel_records_severity_across_a_programs_line ... ok
test tests::a_head_names_severity_thread_and_process_and_reads_back ... ok
test tests::a_line_past_the_bound_is_let_go_in_pieces_and_nothing_is_lost ... ok
test tests::a_program_line_reads_back_as_it_was_written ... ok
test tests::a_program_lines_time_is_read_inside_its_head_and_nowhere_else ... ok
test tests::a_reader_is_never_left_inside_a_line_even_by_an_eviction ... ok
test tests::a_records_time_is_read_inside_its_bracket_and_nowhere_else ... ok
test tests::a_registration_round_trips_and_a_malformed_one_is_refused ... ok
test tests::a_screen_shows_the_consoles_line_from_either_form ... ok
test tests::a_reader_at_any_offset_gets_the_bytes_after_it_in_order ... ok
test tests::a_tag_is_one_word_of_the_names_charset_and_no_other_sayers ... ok
test tests::every_sayers_head_reads_back_and_nothing_else_does ... ok
test tests::lines_are_whole_however_the_writes_split_them ... ok
test tests::no_text_makes_a_line_another_writers ... ok
test tests::the_colour_is_the_heads_and_the_text_never_acts ... ok
test tests::the_kernels_first_record_is_found_after_whatever_came_before ... ok
test tests::what_is_let_go_is_whole_lines_and_is_counted ... ok

test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_manifest-59b28a8000e6c464)

running 28 tests
test launch::tests::an_authority_reads_back_as_written ... ok
test launch::tests::what_encode_cannot_have_written_is_refused ... ok
test launch::tests::nothing_listed_is_nothing_started_and_apps_names_no_row ... ok
test package::tests::a_manifest_cannot_name_a_binary_outside_its_own_directory ... ok
test launch::tests::a_caller_starts_what_its_row_lists_and_swap_and_update_only_in_a_login_session ... ok
test package::tests::a_path_the_normalizer_would_change_is_not_canonical_and_classifies_as_nothing ... ok
test package::tests::a_listing_shows_only_what_the_supervisor_would_start_and_never_more_than_the_bound ... ok
test package::tests::what_a_shell_resolves_is_what_the_launcher_accepts ... ok
test launch::tests::a_sessions_launches_spend_its_one_share ... ok
test package::tests::what_the_installer_writes_is_what_the_supervisor_reads ... ok
test package::tests::a_field_that_is_not_one_is_refused_by_name ... ok
test package::tests::a_launch_path_names_one_package_or_none ... ok
test tests::a_device_class_name_is_the_abi_s ... ok
test tests::a_name_that_would_not_survive_the_round_trip_is_refused ... ok
test tests::a_package_row_is_connectors_and_nothing_else ... ok
test tests::a_package_named_after_a_declared_row_is_refused ... ok
test tests::a_package_s_home_is_its_own_folder ... ok
test tests::a_package_s_view_is_its_own_directory_read_only_and_its_own_folder ... ok
test tests::a_role_is_one_of_the_three_and_its_directories_are_fixed ... ok
test tests::a_row_that_serves_a_port_and_is_no_service_is_refused ... ok
test tests::logread_carries_both_halves_of_reading_a_stream_that_never_blocks ... ok
test tests::a_syscap_set_always_carries_transfer_and_never_an_invented_right ... ok
test tests::records_attach_to_the_program_above_them ... ok
test tests::the_process_roster_is_its_own_name_and_its_own_bit ... ok
test tests::a_service_s_home_is_its_state_and_every_other_row_s_the_session_s ... ok
test tests::every_declared_row_sees_the_whole_tree_read_write ... ok
test tests::the_same_manifest_renders_to_the_same_bytes ... ok
test tests::what_the_build_writes_is_what_the_supervisor_reads ... ok

test result: ok. 28 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_microcode-5176b74db00fc682)

running 16 tests
test tests::a_damaged_extended_table_is_refused ... ok
test tests::a_header_or_loader_version_other_than_1_is_refused ... ok
test tests::a_revision_is_signed ... ok
test tests::a_size_zero_off_its_granule_or_inside_out_is_refused ... ok
test tests::a_file_cut_short_is_refused ... ok
test tests::a_t14_below_it_loads_its_data_which_follows_the_header ... ok
test tests::an_empty_file_is_refused ... ok
test tests::a_malformed_update_after_a_good_one_refuses_the_file ... ok
test tests::a_flipped_bit_anywhere_in_header_or_data_is_refused ... ok
test tests::another_platform_or_stepping_is_not_named ... ok
test tests::an_extended_signature_names_a_cpu_the_header_does_not ... ok
test tests::any_multiple_of_1024_is_a_total_size ... ok
test tests::the_msrs_are_read_where_the_sdm_puts_them ... ok
test tests::the_t14_runs_intels_newest_update_for_its_cpu ... ok
test tests::the_newest_update_naming_the_cpu_is_chosen_wherever_it_sits ... ok
test tests::an_extended_signature_in_intels_file_names_its_cpu ... ok

test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_net_ip-c801da0b197750b4)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/acd.rs (target/debug/deps/acd-be07b930c6f2e90d)

running 18 tests
test s_ip_acd_005_a_simultaneous_prober ... ok
test s_ip_acd_006_our_own_probe_reflected ... ok
test s_ip_acd_003_an_answer_to_our_probe ... ok
test s_ip_acd_002_a_tentative_address_is_no_source ... ok
test s_ip_acd_011_a_second_conflict_inside_the_interval_loses ... ok
test s_ip_acd_012_a_second_conflict_after_the_interval_is_defended ... ok
test s_ip_acd_010_one_defence ... ok
test s_ip_acd_001_the_ruled_schedule ... ok
test s_ip_acd_014_a_renewal_is_not_probed ... ok
test s_ip_acd_007_the_conflict_window_ends_with_announce_wait ... ok
test s_ip_acd_004_an_announcement_of_our_candidate ... ok
test s_ip_acd_013_an_announcing_address_answers_probes ... ok
test s_ip_acd_008_ten_conflicts_rate_limit_new_candidates ... ok
test s_ip_acd_009_ten_quiet_minutes_lift_the_limit ... ok
test s_ip_acd_015_link_down_abandons_probing ... ok
test s_ip_acd_016_link_up_announces_without_probing ... ok
test s_ip_acd_017_detection_starts_at_the_first_announcement ... ok
test s_ip_acd_018_a_full_control_queue_holds_probes_and_announcements ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/addr.rs (target/debug/deps/addr-2969d417ac93c511)

running 38 tests
test s_ip_addr_003_not_unicast ... ok
test s_ip_addr_006_eight_addresses ... ok
test s_ip_addr_004_network_and_broadcast_forms ... ok
test rfc_3927_a_link_local_address_is_no_gateway_of_a_routable_interface ... ok
test rfc_3927_2_6_2_the_edges_of_the_link_local_prefix_are_no_destination ... ok
test s_ip_addr_002_prefix_lengths_0_and_33 ... ok
test s_ip_addr_005_one_address_one_interface ... ok
test rfc_3927_2_6_2_a_link_local_source_still_sends_by_the_router_or_nowhere ... ok
test rfc_3927_the_edges_of_the_link_local_prefix_are_no_source ... ok
test s_ip_addr_001_an_added_address_becomes_a_connected_route ... ok
test s_ip_addr_007_what_is_for_us ... ok
test rfc_3927_2_6_2_a_link_local_destination_is_on_the_link ... ok
test rfc_3927_2_6_2_a_datagram_to_a_link_local_host_is_resolved_and_sent_to_it ... ok
test s_ip_addr_009_the_strong_model ... ok
test s_ip_addr_008_slash_31_and_32 ... ok
test s_ip_addr_010_limited_broadcast_needs_no_address ... ok
test s_ip_addr_011_a_tentative_address_is_not_ours_yet ... ok
test s_ip_addr_012_no_classful_broadcast ... ok
test s_ip_addr_013_announcing_is_usable ... ok
test s_ip_rte_001_a_connected_destination ... ok
test s_ip_addr_014_removal_withdraws_route_and_gateway ... ok
test s_ip_rte_002_the_default_gateway ... ok
test s_ip_rte_003_no_gateway ... ok
test s_ip_rte_004_longest_prefix ... ok
test s_ip_rte_005_gateways_are_on_link_unicast_hosts ... ok
test s_ip_rte_006_invalid_and_local_destinations ... ok
test s_ip_rte_007_limited_broadcast_needs_one_interface ... ok
test s_ip_rte_008_multicast_ttl_is_the_callers ... ok
test s_ip_rte_009_subnet_broadcast_needs_no_arp ... ok
test s_ip_rte_010_the_source_of_the_next_hops_prefix ... ok
test s_ip_rte_011_a_bound_source_picks_its_interface ... ok
test s_ip_rte_012_only_the_acquiring_source_is_unspecified ... ok
test s_ip_rte_013_a_failed_gateway_is_passed_over ... ok
test s_ip_rte_014_with_no_good_gateway ... ok
test s_ip_rte_015_what_moves_the_generation ... ok
test s_ip_rte_016_no_forwarding ... ok
test s_ip_rte_017_lookups_send_nothing ... ok
test s_udp_us_021_ip_no_link_broadcast_without_the_datagrams_permission ... ok

test result: ok. 38 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/clk.rs (target/debug/deps/clk-40b80d9643fcd680)

running 10 tests
test s_ip_clk_008_announce_wait_counts_from_the_hand_off ... ok
test s_ip_clk_010_a_deadline_saturates ... ok
test s_ip_clk_005_a_jump_owes_one_request ... ok
test s_ip_clk_004_a_jump_fires_a_reachable_entry_once ... ok
test s_ip_clk_007_a_regressed_clock_is_the_latest ... ok
test s_ip_clk_001_a_send_arms_the_retransmission ... ok
test s_ip_clk_002_nothing_fires_before_its_deadline ... ok
test s_ip_clk_009_a_jump_refills_a_bucket_to_its_cap ... ok
test s_ip_clk_003_firing_more_often_changes_nothing ... ok
test s_ip_clk_006_prop_one_secret_one_run ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/icmp.rs (target/debug/deps/icmp-efd627dba5d40261)

running 54 tests
test s_icmp_038_each_error_goes_to_its_transport ... ok
test s_icmp_036_a_quote_from_someone_else ... ok
test s_icmp_035_record_route_is_not_returned ... ok
test s_icmp_033_all_the_data_comes_back ... ok
test s_icmp_040_576_bytes_at_most ... ok
test s_icmp_034_no_answer_to_a_group ... ok
test s_icmp_041_the_quote_is_as_received ... ok
test s_icmp_032_b_answers_a ... ok
test s_icmp_037_a_quote_of_a_later_fragment ... ok
test s_icmp_039_the_generated_port_unreachable ... ok
test s_icmp_026_a_timestamp_reply_is_unsupported ... ok
test s_icmp_023_a_redirect_is_refused ... ok
test s_icmp_024_a_timestamp_request_is_refused ... ok
test an_error_whose_next_hop_became_a_broadcast_is_refused_and_counted ... ok
test s_icmp_042_an_error_for_no_socket_is_not_answered ... ok
test s_icmp_043_no_error_about_a_broadcast ... ok
test s_icmp_044_no_error_about_a_link_broadcast ... ok
test s_icmp_045_no_error_about_a_fragment ... ok
test s_icmp_046_no_error_to_a_source_that_is_no_host ... ok
test s_ip_echo_001_the_mirror_of_the_request ... ok
test s_ip_echo_002_dscp_copied_ecn_cleared ... ok
test s_ip_echo_003_an_off_link_requester_is_answered_through_the_gateway ... ok
test s_ip_echo_004_the_reply_carries_no_options ... ok
test s_ip_echo_005_sixteen_replies_wait ... ok
test s_ip_echo_007_a_tentative_address_does_not_answer ... ok
test s_ip_echo_006_an_echo_reply_is_counted ... ok
test s_ip_icd_001_a_port_unreachable_for_udp ... ok
test s_ip_icd_002_fragmentation_needed_for_tcp ... ok
test s_ip_echo_008_echo_is_not_rate_limited ... ok
test s_ip_icd_003_an_error_to_a_broadcast ... ok
test s_ip_icd_004_a_quote_from_a_tentative_address ... ok
test s_ip_icd_005_a_quote_of_icmp ... ok
test s_ip_icd_006_quotes_of_igmp_and_others ... ok
test s_ip_icd_007_time_exceeded ... ok
test s_ip_icd_008_parameter_problem ... ok
test s_ip_icd_009_an_unassigned_code ... ok
test s_ip_icd_010_a_redirect_moves_no_route ... ok
test s_ip_icg_001_protocol_unreachable ... ok
test s_ip_icd_012_a_resolution_failure_is_local ... ok
test s_ip_icg_003_suppression_takes_no_token ... ok
test s_ip_icd_011_prop_the_shared_classification ... ok
test s_ip_icg_002_port_unreachable ... ok
test s_ip_icg_004_refusals_are_silent ... ok
test s_ip_icg_007_short_datagrams_are_quoted_whole ... ok
test s_ip_icg_006_an_unknown_protocol_to_a_broadcast ... ok
test s_ip_icg_008_a_malformed_router_alert_is_dropped_silently ... ok
test s_ip_rl_001_ten_then_limited ... ok
test s_ip_rl_006_prop_colliding_destinations_share_a_bucket ... ok
test s_ip_rl_002_one_token_per_100_ms ... ok
test s_ip_rl_003_another_destination_has_its_own_bucket ... ok
test s_ip_rl_007_suppressed_requests_spend_nothing ... ok
test s_ip_icg_005_prop_only_echo_replies_and_unreachables ... ok
test s_ip_rl_005_the_global_bucket_refills_at_100_a_second ... ok
test s_ip_rl_004_the_global_burst_is_drawn ... ok

test result: ok. 54 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/igmp.rs (target/debug/deps/igmp-81e84a492f5454e2)

running 35 tests
test s_igmp_024_ttl_2_is_accepted ... ok
test s_ip_igm_001_a_join_is_reported_twice ... ok
test s_igmp_025_a_general_query_to_our_address ... ok
test s_ip_igm_006_all_hosts_is_never_reported ... ok
test s_ip_igm_008_a_sooner_general_response_suffices ... ok
test s_igmp_023_no_router_alert_is_refused ... ok
test s_igmp_029_joining_all_hosts_sends_nothing ... ok
test s_ip_igm_003_a_leave_is_reported_twice ... ok
test s_ip_igm_005_membership_is_counted ... ok
test s_ip_igm_004_a_leave_replaces_the_join ... ok
test s_ip_igm_002_joins_before_and_after_the_first_address ... ok
test s_ip_igm_007_a_general_query_is_answered_later ... ok
test s_ip_igm_009_a_group_query ... ok
test s_ip_frg_001_a_fragment_is_refused_and_logged ... ok
test s_ip_igm_010_a_query_for_a_group_not_joined ... ok
test s_ip_igm_011_a_group_and_source_query ... ok
test s_ip_igm_012_too_many_sources_make_a_group_response ... ok
test s_ip_igm_015_a_group_query_to_another_group ... ok
test s_ip_igm_014_general_query_destinations ... ok
test s_ip_igm_013_queries_need_router_alert ... ok
test s_ip_igm_017_a_v2_querier ... ok
test s_ip_igm_018_a_join_in_v2_mode ... ok
test s_ip_igm_019_another_hosts_report_suppresses_ours ... ok
test s_ip_igm_016_the_robustness_is_learned ... ok
test s_ip_igm_020_a_v1_query_is_refused ... ok
test s_ip_igm_021_v2_mode_ends ... ok
test s_ip_igm_022_a_v2_group_query_in_v3_mode ... ok
test s_ip_igm_023_the_last_reporter_leaves ... ok
test s_ip_igm_025_thirty_two_groups ... ok
test s_ip_igm_024_other_hosts_reports_are_ignored_in_v3 ... ok
test s_ip_igm_027_one_report_for_every_group ... ok
test s_ip_igm_026_link_flap ... ok
test s_ip_igm_028_the_join_byte_for_byte ... ok
test s_ip_mod_001_one_line_per_rule_per_10_s ... ok
test s_ip_mod_002_ordinary_refusals_are_not_logged ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/io.rs (target/debug/deps/io-ee89e63f3f058ea0)

running 52 tests
test s_eth_014_a_priority_tag_is_untagged ... ok
test s_eth_032_broadcast_destinations_go_to_the_broadcast_mac ... ok
test s_eth_010_type_0600_is_unknown ... ok
test s_eth_012_lldp ... ok
test s_eth_033_a_unicast_destination_is_never_link_broadcast ... ok
test s_eth_022_another_hosts_mac ... ok
test s_eth_011_ipv6 ... ok
test s_eth_023_group_macs_follow_membership ... ok
test s_ip_021_first_fragment ... ok
test s_ip_002_minimal_datagram_is_an_unknown_protocol ... ok
test s_ip_020_df_and_mf_is_a_fragment ... ok
test s_eth_025_our_own_source ... ok
test s_eth_019_9100_is_not_a_tag ... ok
test s_eth_024_vlans_are_refused ... ok
test s_ip_022_last_fragment ... ok
test s_ip_023_largest_offset ... ok
test s_ip_026_ttl_one_is_delivered ... ok
test s_ip_035_the_mtu_bounds_a_send ... ok
test s_ip_029_other_protocols ... ok
test s_ip_025_ttl_zero_is_delivered ... ok
test s_ip_in_001_frame_before_destination ... ok
test s_ip_in_002_unicast_in_a_group_frame ... ok
test s_ip_in_003_a_group_destination_in_our_frame ... ok
test s_ip_in_004_martian_destinations ... ok
test s_ip_in_005_invalid_sources ... ok
test s_ip_in_006_destination_before_source ... ok
test s_ip_in_007_our_own_source_on_any_interface ... ok
test s_ip_in_008_fragments_before_options ... ok
test s_ip_in_009_what_a_transport_is_handed ... ok
test s_ip_out_002_ttl ... ok
test s_ip_out_003_tos ... ok
test s_ip_out_004_the_mtu ... ok
test s_ip_out_005_link_destinations ... ok
test s_ipo_015_stream_id_is_delivered ... ok
test s_ipo_016_security_option_is_delivered ... ok
test s_ipp_001_loose_source_route ... ok
test s_ip_out_008_released_datagrams_wait_at_the_head_of_their_queue ... ok
test s_ipp_002_strict_source_route ... ok
test s_ip_out_006_the_control_queue_is_bounded ... ok
test s_ipp_004_our_address_and_another ... ok
test s_ipp_003_record_route_is_ignored ... ok
test s_ipp_005_broadcast_forms ... ok
test s_ipp_006_joined_groups ... ok
test s_ipp_009_our_own_source ... ok
test s_ipp_007_invalid_sources ... ok
test s_ipp_008_unspecified_only_for_igmp ... ok
test s_ipp_010_loopback_destination ... ok
test s_ipp_011_unicast_in_a_broadcast_frame ... ok
test s_ip_out_001_prop_every_datagram_is_atomic ... ok
test s_ipp_013_an_unknown_protocol_to_all ... ok
test s_ipp_012_an_unknown_protocol_to_us ... ok
test s_udp_022_the_mtu_refuses_1473_bytes ... ok

test result: ok. 52 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/nbr.rs (target/debug/deps/nbr-9caf15a2b2e51d89)

running 23 tests
test s_ip_nbr_004_a_request_for_another_host ... ok
test s_arp_017_a_group_sender_mac ... ok
test s_ip_nbr_003_a_request_for_us ... ok
test rfc_3927_2_6_2_a_link_local_sender_is_a_neighbour ... ok
test s_ip_nbr_007_an_unknown_router_moving ... ok
test s_ip_nbr_005_a_known_host_asking_for_another ... ok
test s_ip_nbr_009_locktime ... ok
test s_ip_nbr_006_an_unsolicited_reply ... ok
test rfc_3927_the_edges_of_the_link_local_prefix_are_no_senders ... ok
test s_ip_nbr_002_prefix_edges_are_no_senders ... ok
test s_ip_nbr_010_a_second_answer_is_locked_out ... ok
test s_arp_018_invalid_sender_addresses ... ok
test s_arp_016_the_sender_mac_is_what_is_learned ... ok
test s_ip_nbr_008_a_known_router_moving ... ok
test s_ip_nbr_001_our_own_mac_as_sender ... ok
test s_ip_nbr_011_an_unsolicited_same_mac_extends_nothing ... ok
test s_ip_nbr_012_an_off_link_sender_is_answered_not_cached ... ok
test s_ip_nbr_013_a_probe_is_answered_and_not_cached ... ok
test s_ip_nbr_014_a_reply_for_another_target_asserts ... ok
test s_ip_nbr_015_a_broadcast_reply_is_still_solicited ... ok
test s_ip_nbr_017_a_tentative_address_is_not_answered ... ok
test s_ip_nbr_016_the_strong_model_for_arp ... ok
test s_ip_nbr_018_fifty_mac_changes_one_line ... ok

test result: ok. 23 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/nud.rs (target/debug/deps/nud-ed41191709b01b0e)

running 35 tests
test s_ip_nud_006_reachable_goes_stale_silently ... ok
test s_ip_nud_009_advice_ends_delay ... ok
test s_ip_nud_012_unreachable_is_quiet_without_traffic ... ok
test s_ip_nud_002_three_requests_then_failed ... ok
test s_ip_nud_013_a_moved_router_answers ... ok
test s_ip_nud_003_release_keeps_arrival_order ... ok
test s_ip_nud_001_resolution_releases_the_datagram ... ok
test s_ip_nud_007_positive_advice_moves_the_confirmation ... ok
test s_ip_nud_008_delay_probe_unreachable ... ok
test s_ip_nud_010_a_reply_confirms_probe ... ok
test s_ip_nud_014_failed_is_held_down ... ok
test rfc_4861_7_2_2_a_silent_next_hop_holds_up_no_other ... ok
test s_ip_nud_004_overflow_drops_the_oldest ... ok
test s_ip_nud_015_an_assertion_revives_failed ... ok
test s_ip_nud_011_unreachable_backs_off_while_traffic_flows ... ok
test s_ip_nud_017_negative_advice_probes ... ok
test s_ip_nud_018_negative_advice_leaves_probe_incomplete_and_failed ... ok
test s_ip_nud_016_requests_are_spaced ... ok
test s_ip_nud_005_the_interface_holds_at_most_64 ... ok
test s_ip_nud_019_positive_advice_needs_a_mac ... ok
test s_ip_nud_020_advice_lands_on_the_gateway ... ok
test s_ip_nud_021_stale_is_deleted_when_idle ... ok
test s_ip_nud_023_link_down_drops_the_table ... ok
test s_ip_nud_024_requests_speak_from_the_prompting_source ... ok
test s_ip_nud_026_a_flow_moves_stale_to_delay ... ok
test s_ip_nud_025_a_flow_waits_outside ... ok
test s_ip_nud_031_a_request_queued_before_the_lifetime_is_not_idle ... ok
test s_ip_nud_031_a_request_queued_after_the_lifetime_is_not_idle ... ok
test s_ip_nud_031_a_request_queued_at_the_backoff_deadline_is_not_idle ... ok
test s_ip_nud_030_released_datagrams_keep_their_entry ... ok
test s_ip_nud_030_an_entry_whose_lifetime_runs_stays_as_it_drains ... ok
test s_ip_nud_027_prop_reachable_time_is_drawn_every_two_hours ... ok
test s_ip_nud_022_a_full_table_evicts_in_order ... ok
test s_ip_nud_022_a_send_a_full_table_refused_is_told_of_room ... ok
test s_ip_nud_029_released_datagrams_are_evicted_last ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (target/debug/deps/toyos_net_shard-0bab575736dd687a)

running 3 tests
test tests::a_resolved_next_hop_wakes_the_senders_that_waited_for_it_and_no_other ... ok
test tests::a_connection_freed_in_the_round_leaves_it ... ok
test tests::the_head_freed_in_its_turn_ends_the_turn ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/acquisition.rs (target/debug/deps/acquisition-fbb1627be06dce30)

running 5 tests
test the_acquisition_socket_hears_a_datagram_to_an_address_not_yet_held ... ok
test a_second_acquisition_socket_is_refused_its_port ... ok
test the_acquisition_socket_sends_from_no_address_to_the_limited_broadcast ... ok
test a_removed_address_takes_its_gateway_and_answers_nothing ... ok
test only_the_acquisition_socket_names_its_source ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/drr.rs (target/debug/deps/drr-acd2166a1bb12cf3)

running 6 tests
test a_connection_that_takes_a_freed_slot_takes_one_turn ... ok
test s_shard_drr_001_a_negative_deficit_is_repaid ... ok
test s_shard_drr_001_a_turn_spans_opportunities_on_one_quantum ... ok
test s_shard_drr_003_ip_and_owed_resets_go_first_and_the_round_resumes ... ok
test s_shard_drr_002_a_bulk_flow_starves_no_other_beyond_its_quantum ... ok
test a_sender_leaves_the_round_with_its_last_datagram ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/egress.rs (target/debug/deps/egress-69c0e7315913fa05)

running 19 tests
test s_hs_035_shard_a_directed_broadcast_is_not_a_unicast_remote ... ok
test s_ip_nud_024_shard_a_segments_request_prefers_its_source ... ok
test s_hs_034_shard_a_child_whose_peer_never_answers_gives_up ... ok
test s_ip_nud_009_shard_an_acknowledgment_ends_delay ... ok
test s_pl_014_shard_an_established_flow_with_no_route_records_host_unreachable ... ok
test s_pl_014_shard_a_failed_flow_is_asked_once_while_another_sends ... ok
test s_pl_012_shard_a_connect_waits_for_its_next_hop_and_then_leaves ... ok
test s_ip_nud_020_shard_a_stalled_connect_reverifies_the_gateway ... ok
test s_ip_nud_026_shard_a_segment_to_a_stale_neighbour_moves_it_to_delay ... ok
test s_ip_out_007_an_arp_request_goes_before_a_ready_segment ... ok
test s_pl_014_shard_an_established_flow_records_host_unreachable ... ok
test s_pl_013_shard_a_connect_to_no_one_fails_at_once_as_host_unreachable ... ok
test s_pl_013_shard_a_connect_with_no_route_fails_at_once ... ok
test s_pl_015_shard_a_reset_for_no_socket_waits_for_its_next_hop ... ok
test s_pl_015_shard_a_reset_to_a_peer_that_never_answers_is_dropped ... ok
test s_pl_015_shard_a_reset_with_no_route_is_dropped ... ok
test s_pl_015_shard_an_owed_reset_waits_for_its_next_hop ... ok
test s_pl_015_shard_a_time_wait_ack_waits_for_its_next_hop ... ok
test s_ip_nud_022_shard_a_flow_refused_by_a_full_table_asks_again_once_an_entry_may_go ... ok

test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/icmp.rs (target/debug/deps/icmp-7758a870ba217e7d)

running 4 tests
test s_ic_001_shard_port_unreachable_refuses_a_connect ... ok
test s_ic_008_shard_time_exceeded_is_soft ... ok
test s_ic_009_shard_parameter_problem_is_soft ... ok
test s_ic_012_shard_fragmentation_needed_without_an_mtu_is_ignored ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/log.rs (target/debug/deps/log-cbca7fafe4805818)

running 3 tests
test s_udp_us_020_shard_sending_to_this_host_is_logged ... ok
test s_ip_mod_001_shard_one_line_per_rule_per_10_s ... ok
test s_mod_005_shard_one_line_per_rule_per_10_s ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/net.rs (target/debug/deps/net-382d1f9ee1185812)

running 5 tests
test s_net_006_a_dark_link ... ok
test s_net_003_reordering_below_the_threshold ... ok
test s_net_001_sack_repairs_every_50th ... ok
test s_net_004_duplicates_are_reported_by_dsack ... ok
test s_pl_011_many_up ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.57s

     Running tests/udp.rs (target/debug/deps/udp-ba243de60f7d2006)

running 12 tests
test s_udp_us_021_shard_a_datagram_accepted_for_the_router_is_no_broadcast_after_a_renewal_widens_the_prefix ... ok
test s_udp_us_021_shard_a_datagram_that_waited_for_a_host_is_asked_its_route_again_and_keeps_its_permission ... ok
test s_udp_us_035_shard_no_socket_is_a_port_unreachable ... ok
test s_udp_us_027_shard_a_failed_next_hop_drops_what_waited_for_it_and_tells_no_unconnected_socket ... ok
test s_udp_us_021_shard_a_datagram_accepted_for_a_host_is_no_broadcast_after_a_renewal_narrows_the_prefix ... ok
test a_waiting_datagram_whose_link_returns_before_an_opportunity_waits_anew_and_leaves ... ok
test s_udp_us_046_shard_a_port_unreachable_refuses_the_connected_socket_once ... ok
test s_ip_icd_012_shard_a_resolution_failure_reaches_the_connected_socket ... ok
test s_udp_us_021_shard_a_datagram_carries_the_permission_of_its_call ... ok
test s_udp_us_024_shard_a_waiting_datagram_whose_route_goes_is_dropped ... ok
test s_udp_us_026_shard_a_datagram_waits_in_its_socket_for_its_next_hop_and_holds_back_no_other ... ok
test s_udp_us_025_shard_what_waits_for_a_next_hop_is_bounded_by_its_sockets_queue ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_net_tcp-99e833a79442f590)

running 27 tests
test cc::tests::s_cc_010_congestion_events ... ok
test cc::tests::s_cc_014_flight_not_cwnd_at_a_timeout ... ok
test cc::tests::s_cc_007_slow_start_stops_at_ssthresh ... ok
test cc::tests::s_cc_013_application_limited_time_is_skipped ... ok
test cc::tests::s_cc_008_the_epoch_after_a_timeout ... ok
test cc::tests::s_cc_009_cubic_values ... ok
test cc::tests::s_cc_011_reno_friendly_region ... ok
test cc::tests::s_cc_015_prop_avoidance_growth_is_bounded ... ok
test rtt::tests::s_rt_001_first_sample ... ok
test rtt::tests::s_rt_002_later_sample ... ok
test rtt::tests::s_rt_003_the_200_ms_floor ... ok
test rtt::tests::s_rt_004_the_60_s_ceiling ... ok
test rtt::tests::s_rt_012_appendix_g_weights ... ok
test tx::tests::s_lr_015_the_scoreboard_keeps_the_lowest_64 ... ok
test props::s_op_025_prop_timestamps_on_every_segment ... ok
test props::s_rx_026_prop_sacked_bytes_are_delivered ... ok
test props::s_mod_004_prop_urgent_is_never_sent ... ok
test props::s_prop_008_nothing_happens_before_a_deadline ... ok
test props::s_rt_017_prop_no_retransmission_before_an_rto ... ok
test props::s_prop_005_the_scoreboard_stays_above_snd_una ... ok
test props::s_prop_002_delivered_data_is_a_prefix ... ok
test props::s_prop_001_snd_una_at_or_before_snd_nxt ... ok
test props::s_prop_004_the_right_edge_never_retreats ... ok
test props::s_prop_001_snd_una_at_or_before_snd_nxt_whatever_the_next_hop_answers ... ok
test props::s_prop_007_pipe_is_bounded ... ok
test props::s_prop_006_totality_against_an_adversary ... ok
test props::s_prop_003_end_of_stream_after_every_byte ... ok

test result: ok. 27 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.95s

     Running tests/acceptability.rs (target/debug/deps/acceptability-08bd6146f17e566f)

running 27 tests
test s_ac_009_exact_rst ... ok
test s_ac_011_rst_outside_the_window ... ok
test s_ac_013_syn_is_challenged ... ok
test s_ac_006_empty_segment_beyond_the_window ... ok
test s_ac_010_inexact_rst_is_challenged ... ok
test s_ac_014_syn_beyond_the_window ... ok
test s_ac_001_in_order_text_is_acknowledged_late ... ok
test s_ac_007_front_trim ... ok
test s_ac_012_challenge_acks_are_limited ... ok
test s_ac_015_retransmitted_synack ... ok
test s_ac_002_at_the_right_edge ... ok
test s_ac_019_text_without_ack ... ok
test s_ac_018_data_with_the_old_ack_is_no_duplicate ... ok
test s_ac_016_ack_of_unsent_data ... ok
test s_ac_017_rfc5961_lower_bound ... ok
test s_ac_022_max_snd_wnd ... ok
test s_ac_021_a_window_may_shrink ... ok
test s_ac_005_zero_window_rst ... ok
test s_ac_008_back_trim ... ok
test s_ac_020_old_segments_do_not_update_the_window ... ok
test s_ac_025_ack_half_the_space_away ... ok
test s_ac_027_rst_payload_is_ignored ... ok
test s_ac_023_one_ack_per_receive_pass ... ok
test s_ac_026_rst_with_fin ... ok
test s_ac_024_text_after_the_peer_fin ... ok
test s_ac_003_zero_window_probe ... ok
test s_ac_004_zero_window_pure_ack ... ok

test result: ok. 27 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/close.rs (target/debug/deps/close-90a513e18443bf8e)

running 32 tests
test s_cl_006_the_fin_is_retransmitted ... ok
test s_cl_009_a_retransmitted_fin_in_close_wait ... ok
test s_cl_005_the_fin_rides_on_data ... ok
test s_cl_001_active_close ... ok
test s_cl_010_a_retransmitted_fin_restarts_time_wait ... ok
test s_cl_007_half_close ... ok
test s_cl_015_data_for_an_orphan ... ok
test s_cl_008_sending_in_close_wait ... ok
test s_cl_013_an_orphan_behind_a_shut_window ... ok
test s_cl_012_the_orphan_bound ... ok
test s_cl_011_an_orphan_in_fin_wait_2 ... ok
test s_cl_016_close_with_unread_data ... ok
test s_cl_004_fin_acknowledging_ours ... ok
test s_cl_017_time_wait_is_60_s ... ok
test s_cl_002_passive_close ... ok
test s_cl_003_simultaneous_close ... ok
test s_cl_019_reopening_by_sequence_number ... ok
test s_cl_018_reopening_from_time_wait_by_timestamp ... ok
test s_cl_020_rst_in_time_wait_is_ignored ... ok
test s_cl_024_abort ... ok
test s_cl_022_syn_in_time_wait_without_a_listener ... ok
test s_cl_026_no_time_wait_after_a_reset ... ok
test s_cl_028_close_in_syn_sent ... ok
test s_cl_027_the_reset_stub ... ok
test s_cl_031_rst_in_close_wait ... ok
test s_cl_029_shutdown_read ... ok
test s_cl_025_abort_without_rst ... ok
test s_cl_030_last_ack_waits_for_the_fin ... ok
test s_cl_032_rst_in_last_ack_and_closing ... ok
test s_cl_014_a_user_keeps_a_shut_window_open ... ok
test s_cl_021_a_failed_reopening_returns_to_time_wait ... ok
test s_cl_023_time_wait_is_bounded ... ok

test result: ok. 32 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/congestion.rs (target/debug/deps/congestion-a0156dbb7474d796)

running 7 tests
test s_cc_006_no_growth_when_not_cwnd_limited ... ok
test s_cc_004_one_segment_after_two_syn_retransmissions ... ok
test s_cc_001_ten_segments ... ok
test s_cc_002_ten_segments_with_timestamps ... ok
test s_cc_003_ten_segments_of_536 ... ok
test s_cc_005_slow_start ... ok
test s_cc_012_restart_after_idle ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/egress.rs (target/debug/deps/egress-962cbeb65a3d5e7e)

running 25 tests

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 04.

cargo run -- --ci host, part 04
test s_pl_009_a_handshake_gives_up_without_credit ... ok
test s_pl_009_give_up_without_credit ... ok
test a_freed_connection_leaves_no_turn_behind ... ok
test s_ka_002_a_segment_cancels_a_probe_still_owed ... ok
test s_ka_003_probes_that_cannot_leave_still_give_up ... ok
test s_hs_034_a_child_whose_synack_cannot_leave_gives_up ... ok
test s_pl_003_unsent_is_not_in_flight ... ok
test s_pl_007_credit_bounds_an_opportunity ... ok
test s_pl_002_no_expiry_for_a_retransmission_that_never_left ... ok
test s_pl_004_owed_acks_collapse ... ok
test s_pl_001_the_timer_starts_at_hand_off ... ok
test s_pl_006_a_segment_carries_the_state_of_its_moment ... ok
test s_pl_008_resets_go_first ... ok
test s_pl_005_at_most_three_duplicate_acks_are_held ... ok
test s_pl_012_a_connection_freed_while_waiting_leaves_no_turn_behind ... ok
test s_pl_012_a_window_update_offers_nothing_until_it_leaves ... ok
test s_pl_012_a_flow_builds_nothing_while_its_next_hop_is_pending ... ok
test s_pl_012_an_ack_owed_in_syn_received_waits_for_its_next_hop ... ok
test s_pl_010_give_up_before_retransmission ... ok
test s_pl_012_an_owed_ack_waits_for_its_next_hop ... ok
test s_pl_013_a_local_host_unreachable_fails_a_connect_at_once ... ok
test s_pl_014_an_owed_ack_outlasts_an_unreachable_next_hop ... ok
test s_pl_014_a_synchronized_connection_records_host_unreachable_soft ... ok
test s_pl_015_what_is_owed_outside_a_connection_waits_for_its_next_hop ... ok
test s_pl_015_resets_waiting_for_their_next_hop_stay_bounded ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/handshake.rs (target/debug/deps/handshake-0f5451ee5d775226)

running 42 tests
test s_hs_010_synsent_rst_without_ack ... ok
test s_hs_009_synsent_refused ... ok
test s_hs_012_synsent_ack_without_syn ... ok
test s_hs_011_synsent_rst_with_a_bad_ack ... ok
test s_hs_014_synsent_fin ... ok
test s_hs_001_active_open_bare_peer ... ok
test s_hs_005_simultaneous_open ... ok
test s_hs_008_synsent_ack_past_snd_nxt ... ok
test s_hs_003_passive_open_bare_peer ... ok
test s_hs_006_simultaneous_open_synack_lost ... ok
test s_hs_007_synsent_ack_at_iss ... ok
test s_hs_004_passive_open_full_peer ... ok
test s_hs_002_active_open_full_peer ... ok
test s_hs_013_synsent_bad_ack_without_syn ... ok
test s_hs_015_syn_give_up ... ok
test s_hs_016_one_syn_retransmission ... ok
test s_hs_017_two_syn_retransmissions ... ok
test s_hs_018_syn_payload_is_discarded ... ok
test s_hs_019_synack_payload_is_discarded ... ok
test s_hs_020_listen_rst ... ok
test s_hs_021_listen_ack ... ok
test s_hs_022_listen_synack ... ok
test s_hs_023_listen_without_syn ... ok
test s_hs_024_duplicate_syn_in_syn_received ... ok
test s_hs_025_new_syn_in_syn_received ... ok
test s_hs_026_child_bad_ack ... ok
test s_hs_027_child_rst ... ok
test s_hs_028_active_syn_received_rst ... ok
test s_hs_029_child_fin ... ok
test s_hs_030_fin_waits_for_established ... ok
test s_hs_031_child_text_without_ack ... ok
test s_hs_032_child_inexact_rst ... ok
test s_hs_033_child_completes_with_data ... ok
test s_hs_035_connect_needs_a_unicast_remote ... ok
test s_hs_034_synack_give_up ... ok
test s_hs_038_data_queued_in_syn_sent ... ok
test s_hs_037_the_initial_window_is_ten_smss ... ok
test s_hs_039_active_syn_received_bad_ack ... ok
test s_hs_040_synack_retransmitted ... ok
test s_hs_041_no_socket ... ok
test s_hs_042_no_socket_reset_limit ... ok
test s_hs_043_calls_in_the_wrong_state ... ok

test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/held.rs (target/debug/deps/held-8a7311b9115459cc)

running 6 tests
test options_are_the_ones_the_connection_has ... ok
test ready_counts_the_connections_accept_has_yet_to_return ... ok
test an_orphan_is_counted_until_its_idle_reset ... ok
test a_close_that_resets_leaves_no_orphan ... ok
test an_orphan_is_counted_until_both_fins ... ok
test a_close_before_the_handshake_ends_leaves_an_orphan_until_it_gives_up ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/icmp.rs (target/debug/deps/icmp-8b786e685d8f926e)

running 21 tests
test s_ic_002_a_stale_quote ... ok
test s_ic_004_administratively_prohibited ... ok
test s_ic_003_host_unreachable_is_soft ... ok
test s_ic_001_port_unreachable_refuses_a_connect ... ok
test s_ic_010_an_unassigned_code_is_soft ... ok
test s_ic_007_quotes_outside_the_flight ... ok
test s_ic_009_parameter_problem_is_soft ... ok
test s_ic_008_time_exceeded_is_soft ... ok
test s_ic_013_an_mtu_that_is_no_smaller ... ok
test s_ic_005_soft_in_a_synchronized_state ... ok
test s_ic_011_path_mtu_lowered ... ok
test s_ic_012_no_next_hop_mtu ... ok
test s_ic_014_the_mtu_floor ... ok
test s_ic_018_a_listener_is_never_addressed ... ok
test s_ic_006_port_unreachable_is_soft_when_synchronized ... ok
test s_ic_017_time_wait_is_stale ... ok
test s_ic_015_an_mtu_not_below_the_refused_datagram ... ok
test s_ic_016_one_retransmission_per_lowering ... ok
test s_ic_019_a_pending_child_is_deleted ... ok
test s_ic_021_path_mtu_with_timestamps ... ok
test s_ic_020_progress_clears_a_soft_error ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/isn.rs (target/debug/deps/isn-4c2818daebf3af43)

running 9 tests
test s_isn_005_the_key_counts ... ok
test s_isn_001_siphash_reference_vectors ... ok
test s_isn_003_the_4us_clock ... ok
test s_isn_006_clock_wrap ... ok
test s_isn_004_every_field_of_the_tuple_counts ... ok
test s_isn_002_isn_at_clock_zero ... ok
test s_isn_008_timestamp_offset ... ok
test s_isn_009_incarnations_share_the_offset ... ok
test s_isn_007_prop_unpredictable ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/listen.rs (target/debug/deps/listen-416005a2d313f4e2)

running 11 tests
test s_ls_001_one_listener_per_endpoint ... ok
test s_ls_002_connections_do_not_hold_the_port ... ok
test s_ls_009_the_specific_address_first ... ok
test s_ls_006_a_closed_child_is_accepted ... ok
test s_ls_007_a_reset_child_is_never_returned ... ok
test s_ls_011_a_bound_port_without_a_listener ... ok
test s_ls_010_children_inherit_options ... ok
test s_ls_005_first_in_first_out ... ok
test s_ls_008_closing_a_listener_resets_its_children ... ok
test s_ls_004_the_ready_bound ... ok
test s_ls_003_the_pending_bound ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/modern.rs (target/debug/deps/modern-ac368f3cc82e0909)

running 14 tests
test s_mod_001_syn_with_fin ... ok
test s_mod_002_syn_with_rst ... ok
test s_mod_003_urgent_data_inline ... ok
test s_mod_007_fast_open ... ok
test s_div_002_rst_below_the_offered_edge_behind_snd_una ... ok
test s_div_001_rst_never_below_snd_una ... ok
test s_mod_006_tcp_md5 ... ok
test s_div_003_rst_at_snd_nxt_inside_the_window ... ok
test s_mod_009_out_of_range_acks_are_logged_per_10_s ... ok
test s_div_002_rst_at_a_shrunk_edge ... ok
test s_mod_008_challenges_are_logged_once ... ok
test s_div_001_rst_at_the_right_edge ... ok
test s_mod_005_one_line_per_rule_per_10_s ... ok
test s_mod_005_a_bulk_peer_leaves_room_for_refusals ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/net.rs (target/debug/deps/net-b73d1001768f0962)

running 13 tests
test s_net_011_the_fin_overtakes_the_last_data ... ok
test s_net_014_an_abort_is_a_reset ... ok
test s_ls_012_a_syn_flood ... ok
test s_net_012_a_slow_reader ... ok
test s_net_005_lost_acks ... ok
test s_net_008_timestamps_wrap ... ok
test s_net_010_a_lost_retransmission ... ok
test s_net_016_a_peer_without_options ... ok
test s_net_002_newreno_when_one_side_has_no_sack ... ok
test s_net_007_sequence_numbers_wrap ... ok
test s_net_009_the_last_segment_of_each_burst ... ok
test s_net_015_nagle_and_the_delayed_ack ... ok
test s_net_013_a_hundred_connections ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.62s

     Running tests/options.rs (target/debug/deps/options-3a2766467a740697)

running 30 tests
test s_op_002_synack_to_a_bare_syn ... ok
test s_op_012_window_scale_outside_a_syn_is_ignored ... ok
test s_op_009_window_scaling ... ok
test s_op_007_the_interface_bounds_the_mss ... ok
test s_op_004_mss_zero_is_raised ... ok
test s_op_001_the_active_syn ... ok
test s_op_013_a_synack_window_is_never_scaled ... ok
test s_op_010_shift_above_14_is_clamped ... ok
test s_op_005_mss_100_is_raised ... ok
test s_op_011_unscaled_when_the_peer_offers_none ... ok
test s_op_008_timestamps_take_twelve_bytes ... ok
test s_op_003_synack_to_a_full_syn ... ok
test s_op_015_timestamps_unnegotiated ... ok
test s_op_006_no_mss_option ... ok
test s_op_014_sack_unnegotiated ... ok
test s_op_016_timestamps_on_an_unnegotiated_connection ... ok
test s_op_017_ts_recent_needs_seq_at_or_before_last_ack_sent ... ok
test s_op_018_delayed_ack_echoes_the_earliest ... ok
test s_op_019_ts_across_a_hole ... ok
test s_op_022_no_paws_on_an_rst ... ok
test s_op_023_ts_recent_expires_after_24_days ... ok
test s_op_020_paws ... ok
test s_op_024_rst_for_no_socket_echoes_the_timestamp ... ok
test s_op_021_missing_timestamps_are_dropped ... ok
test s_op_026_mss_outside_a_syn_is_ignored ... ok
test s_op_027_ecn_is_not_negotiated ... ok
test s_op_028_sack_blocks_in_a_syn_are_ignored ... ok
test s_op_029_the_last_mss_wins ... ok
test s_op_031_the_shift_fits_the_buffer ... ok
test s_op_032_tsecr_without_ack_is_ignored ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/port.rs (target/debug/deps/port-4aecde1497a45557)

running 8 tests
test s_port_007_never_a_self_connection ... ok
test s_port_002_another_destination_another_counter ... ok
test s_port_003_a_listening_port_is_skipped ... ok
test s_port_001_algorithm_4 ... ok
test s_port_004_time_wait_holds_its_4_tuple ... ok
test s_port_006_algorithm_2_for_a_listener ... ok
test s_port_005_exhaustion ... ok
test s_port_008_prop_ports ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/receive.rs (target/debug/deps/receive-318f2d6927df8d4d)

running 26 tests
test s_rx_003_out_of_order_is_acknowledged_at_once ... ok
test s_rx_011_unread_bytes_close_the_window ... ok
test s_rx_009_a_fin_beyond_a_hole ... ok
test s_rx_007_stored_bytes_win ... ok
test s_rx_006_a_later_range_remains ... ok
test s_rx_010_nothing_after_a_remembered_fin ... ok
test s_rx_002_the_delayed_ack_is_40_ms ... ok
test s_rx_012_receiver_silly_window_avoidance ... ok
test s_rx_001_every_second_segment ... ok
test s_rx_014_the_edge_holds_while_a_hole_is_open ... ok
test s_rx_004_duplicate_acks_are_not_coalesced ... ok
test s_rx_017_sack_blocks ... ok
test s_rx_005_a_filled_hole_is_acknowledged_at_once ... ok
test s_rx_015_the_offered_edge_is_honoured_under_scaling ... ok
test s_rx_016_the_ack_rides_on_data ... ok
test s_rx_013_a_window_update_when_the_window_was_small ... ok
test s_rx_020_dsack_below_rcv_nxt ... ok
test s_rx_022_no_sack_unnegotiated ... ok
test s_rx_023_a_reset_is_never_end_of_stream ... ok
test s_rx_021_dsack_inside_a_range ... ok
test s_rx_018_the_triggering_range_first ... ok
test s_rx_008_at_most_32_ranges ... ok
test s_rx_024_data_then_end ... ok
test s_rx_019_three_blocks_with_timestamps ... ok
test s_rx_025_push_is_not_a_boundary ... ok
test s_rx_027_half_close_keeps_receiving ... ok

test result: ok. 26 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery.rs (target/debug/deps/recovery-b574193b8d932082)

running 22 tests
test s_lr_004_full_ack_after_limited_transmit ... ok
test s_lr_013_the_recovery_point ... ok
test s_lr_007_inflation_is_capped ... ok
test s_lr_008_sack_recovery ... ok
test s_lr_009_is_lost_on_the_first_ack ... ok
test s_lr_010_a_second_hole ... ok
test s_lr_002_limited_transmit_and_inflation ... ok
test s_lr_014_invalid_blocks_and_dsack ... ok
test s_lr_005_what_is_not_a_duplicate ... ok
test s_lr_016_timeout ... ok
test s_lr_012_rescue_retransmission ... ok
test s_lr_006_no_fast_retransmit_after_a_timeout ... ok
test s_lr_001_newreno_one_loss ... ok
test s_lr_011_new_data_during_sack_recovery ... ok
test s_lr_018_no_sack_recovery_before_the_timeout_point ... ok
test s_lr_003_newreno_partial_ack ... ok
test s_lr_017_a_second_timeout ... ok
test s_lr_020_sacked_bytes_stay_queued ... ok
test s_lr_022_limited_transmit_by_pipe ... ok
test s_lr_021_pure_duplicates_without_blocks ... ok
test s_lr_019_sacks_after_a_timeout_skip_held_ranges ... ok
test s_lr_023_a_lost_fast_retransmission ... ok

test result: ok. 22 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/rtt.rs (target/debug/deps/rtt-d31542d133375b39)

running 11 tests
test s_rt_011_an_echo_from_the_future ... ok
test s_rt_016_no_timer_when_all_is_acknowledged ... ok
test s_rt_009_timestamp_samples ... ok
test s_rt_006_three_seconds_after_a_lost_syn ... ok
test s_rt_007_karn ... ok
test s_rt_010_a_retransmission_echoed ... ok
test s_rt_008_one_segment_timed ... ok
test s_rt_014_three_expiries_forget_the_estimate ... ok
test s_rt_013_backoff_doubles ... ok
test s_rt_005_the_minimum_is_200_ms ... ok
test s_rt_015_the_timer_restarts_on_new_acks ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/send.rs (target/debug/deps/send-ac3312157674b9ac)

running 21 tests
test s_tx_001_one_segment_with_push ... ok
test s_tx_010_the_initial_window_bounds_a_burst ... ok
test s_tx_005_push_only_where_the_queue_empties ... ok
test s_tx_004_full_segments_then_wait ... ok
test s_tx_003_nodelay ... ok
test s_tx_014_an_opened_window_ends_persist ... ok
test s_tx_012_no_send_after_shutdown ... ok
test s_tx_013_persist_backs_off ... ok
test s_tx_008_half_the_largest_window ... ok
test s_tx_009_a_shrunk_window ... ok
test s_tx_011_the_send_buffer_is_bounded ... ok
test s_tx_002_nagle ... ok
test s_tx_006_silly_window_override ... ok
test s_tx_007_an_opened_window_cancels_the_override ... ok
test s_tx_015_the_probe_byte_taken ... ok
test s_tx_018_the_fin_as_probe ... ok
test s_tx_017_an_unanswered_persist_gives_up ... ok
test s_tx_019_a_shut_window_stops_the_retransmission_timer ... ok
test s_tx_021_close_pushes ... ok
test s_tx_020_cwnd_does_not_arm_the_override ... ok
test s_tx_016_an_answered_persist_lives ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/seq.rs (target/debug/deps/seq-dd3e9ffdeb749621)

running 8 tests
test s_seq_003_half_the_space_is_unordered ... ok
test s_seq_001_offsets ... ok
test s_seq_002_ordering_across_the_wrap ... ok
test s_seq_004_ack_range_check ... ok
test s_seq_008_sending_across_the_wrap ... ok
test s_seq_006_acceptability_across_the_wrap ... ok
test s_seq_007_timestamps_compare_modularly ... ok
test s_seq_005_segment_length ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/take.rs (target/debug/deps/take-094ff4230f111b52)

running 5 tests
test what_the_reader_did_not_take_stays_held_in_order ... ok
test with_nothing_held_the_reader_is_not_asked ... ok
test text_unread_when_both_fins_ended_the_connection_is_still_taken ... ok
test a_take_owes_the_window_update_a_read_does ... ok
test text_across_the_rings_wrap_is_shown_in_two_pieces_and_none_is_lost ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/timers.rs (target/debug/deps/timers-4a1adec2f02af4b0)

running 15 tests
test s_gu_001_three_expiries_raise_advice ... ok
test s_ka_002_a_probe_after_two_hours ... ok
test s_gu_006_progress_confirms_the_next_hop ... ok
test s_gu_004_user_timeout ... ok
test s_gu_006_b_advice_is_kept_per_address ... ok
test s_ka_001_off_by_default ... ok
test s_gu_005_user_timeout_ends_an_answered_persist ... ok
test s_ka_006_the_idle_time_is_settable ... ok
test s_ka_005_the_peer_keepalive_is_answered ... ok
test s_gu_002_give_up ... ok
test s_ka_004_no_keepalive_with_data_outstanding ... ok
test s_gu_006_a_confirmation_after_a_reverify_is_kept ... ok
test s_ka_003_nine_unanswered_probes ... ok
test s_ka_007_close_wait_and_fin_wait_2 ... ok
test s_gu_003_progress_restarts_the_give_up_clock ... ok

test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_net_testnet-e03e671d96866ba0)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/testnet.rs (target/debug/deps/testnet-cc9bd563b04459e9)

running 2 tests
test a_published_reader_decodes_the_capture_as_the_wire_carried_it ... ok
test a_run_repeats_exactly ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_net_udp-7a4e951db28da231)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/bind.rs (target/debug/deps/bind-a2984a153b04991f)

running 12 tests
test s_udp_us_004_any_needs_no_address ... ok
test s_udp_us_003_only_an_assigned_address_binds ... ok
test s_udp_us_010_no_privileged_ports ... ok
test s_udp_us_007_the_draw_is_reduced ... ok
test s_udp_us_009_a_numbered_bind_is_skipped ... ok
test s_udp_us_006_the_candidates_wrap ... ok
test s_udp_us_011_close_frees_the_port_at_once ... ok
test s_udp_us_005_algorithm_1 ... ok
test s_udp_us_002_whatever_the_address ... ok
test s_udp_us_001_one_socket_per_port ... ok
test closing_leaves_no_turn_behind ... ok
test s_udp_us_008_exhaustion_spends_one_draw ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recv.rs (target/debug/deps/recv-41702d5029aa9c50)

running 29 tests
test s_udp_us_036_an_empty_datagram ... ok
test s_udp_us_039_a_bad_checksum_is_malformed ... ok
test s_udp_017_a_closed_port_is_answered ... ok
test s_udp_us_035_no_socket_is_a_port_unreachable ... ok
test s_udp_us_031_a_specific_socket_hears_no_broadcast ... ok
test s_udp_us_033_mdns_arrives_with_its_group ... ok
test s_udp_us_037_source_port_zero ... ok
test s_udp_018_the_limited_broadcast_reaches_port_68 ... ok
test s_udp_us_030_a_bound_any_socket_receives ... ok
test s_udp_us_034_no_socket_for_a_group_is_no_error ... ok
test s_udp_us_038_no_checksum_is_delivered ... ok
test s_udp_us_032_bound_any_hears_both_broadcasts ... ok
test s_udp_us_041_arrival_order ... ok
test s_udp_us_040_a_full_queue_drops_and_says_nothing ... ok
test s_udp_us_043_a_group_not_joined_never_reaches_udp ... ok
test s_udp_us_044_the_acquisition_exception ... ok
test s_udp_us_045_what_a_datagram_carries ... ok
test s_udp_us_042_a_short_buffer_truncates ... ok
test s_udp_us_046_refused_once ... ok
test s_udp_us_047_an_unconnected_socket_hears_no_error ... ok
test s_udp_us_048_an_error_for_no_socket ... ok
test s_udp_us_049_hard_and_soft ... ok
test s_udp_us_050_the_latest_error_wins ... ok
test s_udp_us_051_a_send_takes_the_error ... ok
test s_udp_us_052_the_whole_4_tuple_must_match ... ok
test s_udp_us_054_close_discards_what_was_received ... ok
test s_udp_us_056_prop_ip_options_never_surface ... ok
test s_udp_us_053_accepted_datagrams_outlive_close ... ok
test s_udp_us_055_prop_the_demultiplexer ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/send.rs (target/debug/deps/send-84231b2e4c29ae88)

running 25 tests
test s_udp_us_014_connect_needs_a_source ... ok
test s_udp_us_020_what_send_refuses ... ok
test s_udp_us_022_multicast_ttl ... ok
test s_udp_us_013_what_connect_refuses ... ok
test s_udp_us_017_a_connected_socket_sends_to_its_peer ... ok
test s_udp_us_012_connect_fixes_the_local_address ... ok
test s_udp_us_024_a_waiting_datagram_whose_route_goes_is_dropped ... ok
test s_udp_us_021_broadcast_needs_permission ... ok
test s_udp_us_015_a_connected_socket_hears_its_peer_alone ... ok
test s_udp_us_016_connect_purges_strangers ... ok
test s_udp_us_019_a_bound_socket_sends ... ok
test s_udp_us_024_the_source_address_must_be_ours ... ok
test s_udp_us_018_reconnect ... ok
test s_udp_us_023_payload_sizes ... ok
test s_udp_us_025_a_full_queue_refuses ... ok
test s_udp_us_025_what_waits_for_a_next_hop_is_bounded_by_its_sockets_queue ... ok
test s_udp_us_026_a_datagram_waits_for_its_next_hop_in_its_socket_and_never_in_ip ... ok
test s_udp_us_026_datagrams_to_one_next_hop_leave_in_the_order_they_were_accepted ... ok
test s_udp_us_026_no_head_of_line_blocking ... ok
test s_udp_us_027_a_datagram_for_a_hop_ip_has_given_up_is_ips_refusal_at_its_turn ... ok
test s_udp_us_027_a_failed_next_hop_is_reported_once ... ok
test s_udp_us_027_an_unconnected_socket_is_told_nothing_and_nothing_is_kept_for_another_try ... ok
test s_udp_us_028_only_the_acquisition_socket_sends_from_nowhere ... ok
test s_udp_us_029_the_discover_byte_for_byte ... ok
test s_udp_us_053_a_closed_sockets_datagram_waits_for_its_next_hop_and_holds_back_no_other ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_net_wire-873a39372d03d4d0)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/checksum.rs (target/debug/deps/checksum-7a13c52b35d9a298)

running 15 tests
test s_ck_003_zeros ... ok
test s_ck_004_odd_length_pads_with_zero ... ok
test s_ck_005_streaming_is_split_independent ... ok
test s_ck_001_rfc1071_worked_example ... ok
test s_ck_002_empty_input ... ok
test s_ck_006_carry_of_a_carry ... ok
test s_ck_009_verification_by_summing ... ok
test s_ck_008_long_pattern_even_and_odd ... ok
test s_ck_010_negative_zero_verifies ... ok
test s_ck_017_pseudo_header ... ok
test s_ck_018_tcp_length_is_the_transport_length ... ok
test s_ck_007_many_words_of_ones ... ok
test s_ck_019_udp_zero_is_sent_as_ffff ... ok
test s_ck_021_every_header_bit_flip_is_caught ... ok
test native_order_sum_matches_the_oracle_at_every_length_and_split ... ok

test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/icmp.rs (target/debug/deps/icmp-d2b0e731040b0b9d)

running 35 tests
test s_icmp_001_echo_request ... ok
test quote_total_length_below_its_header_is_refused ... ok
test s_icmp_002_echo_reply ... ok
test s_icmp_003_seven_bytes ... ok
test s_icmp_004_echo_without_data ... ok
test an_error_with_options_still_fits_576_bytes ... ok
test s_icmp_006_data_changed ... ok
test s_icmp_007_odd_data_length ... ok
test s_icmp_005_checksum_changed ... ok
test s_icmp_008_echo_code_1 ... ok
test s_icmp_009_port_unreachable ... ok
test s_icmp_010_fragmentation_needed ... ok
test s_icmp_011_fragmentation_needed_without_mtu ... ok
test s_icmp_012_rfc4884_length_byte ... ok
test s_icmp_013_unreachable_codes ... ok
test s_icmp_014_quote_of_19_bytes ... ok
test s_icmp_015_quote_short_of_8_payload_bytes ... ok
test s_icmp_016_quote_with_options ... ok
test s_icmp_017_quote_with_options_short ... ok
test s_icmp_018_quote_not_ipv4 ... ok
test s_icmp_019_quoted_checksum_not_verified ... ok
test s_icmp_020_rfc4884_padding_beyond_the_quoted_length ... ok
test s_icmp_021_time_exceeded ... ok
test s_icmp_022_parameter_problem ... ok
test s_icmp_023_redirect ... ok
test s_icmp_024_timestamp_request_refused_by_type ... ok
test s_icmp_025_timestamp_fields_are_never_read ... ok
test s_icmp_026_timestamp_reply_refused_by_type ... ok
test s_icmp_027_source_quench ... ok
test s_icmp_028_deprecated_types ... ok
test s_icmp_029_router_discovery ... ok
test s_icmp_030_unknown_types ... ok
test s_icmp_031_checksum_before_type ... ok
test s_icmp_047_echo_reply_to_odd_data ... ok
test s_icmp_048_unreachable_zeroes_unused_bytes ... ok

test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/igmp.rs (target/debug/deps/igmp-76044004b32d0d76)

running 29 tests
test igmp3_records_layout ... ok
test igmp3_is_include_lists_its_sources ... ok
test igmp3_join_frame ... ok
test igmp3_leave_current_and_unspecified_source ... ok
test s_igmp_001_v2_report ... ok
test s_igmp_002_v2_general_query ... ok
test s_igmp_003_v1_query ... ok
test s_igmp_004_v3_general_query ... ok
test s_igmp_005_v3_exponential_code ... ok
test s_igmp_006_v2_codes_are_linear ... ok
test s_igmp_007_v3_largest_code ... ok
test s_igmp_008_group_and_source_query ... ok
test s_igmp_009_sources_overrun ... ok
test s_igmp_010_bytes_after_sources_ignored ... ok
test s_igmp_011_query_of_9_to_11_bytes ... ok
test s_igmp_012_seven_bytes ... ok
test s_igmp_013_checksum_changed ... ok
test s_igmp_014_trailing_bytes_ignored ... ok
test s_igmp_015_checksum_covers_trailing_bytes ... ok
test s_igmp_016_query_group_unicast ... ok
test s_igmp_017_report_group_not_multicast ... ok
test s_igmp_018_leave ... ok
test s_igmp_019_v1_report_max_response_ignored ... ok
test s_igmp_020_v3_report_unsupported ... ok
test s_igmp_021_unknown_types ... ok
test s_igmp_022_checksum_before_type ... ok
test s_igmp_026_emit_join_frame ... ok
test s_igmp_027_emit_leave ... ok
test s_igmp_030_emitted_max_response_is_zero ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ipv4.rs (target/debug/deps/ipv4-4e4484d2e12319f3)

running 54 tests
test s_ip_003_nineteen_bytes ... ok
test s_ip_002_minimal_datagram ... ok
test s_ip_004_version_6 ... ok
test s_ip_005_version_5 ... ok
test s_ip_007_header_overrun ... ok
test s_ip_001_udp_datagram_fields ... ok
test s_ip_008_total_below_header ... ok
test s_ip_009_total_zero ... ok
test s_ip_006_header_length_below_5 ... ok
test s_ip_010_total_inside_options ... ok
test s_ip_012_truncated_fragment_is_truncated ... ok
test s_ip_011_total_overrun ... ok
test s_ip_013_link_padding_is_not_payload ... ok
test s_ip_014_padded_igmp_body ... ok
test s_ip_015_checksum_off_by_one ... ok
test s_ip_016_checksum_zero_is_checked ... ok
test s_ip_017_options_are_covered ... ok
test s_ip_018_payload_is_not_covered ... ok
test s_ip_020_df_and_mf ... ok
test s_ip_021_first_fragment ... ok
test s_ip_019_reserved_flag_is_kept ... ok
test s_ip_022_last_fragment ... ok
test s_ip_023_largest_offset ... ok
test s_ip_024_dscp_and_ecn ... ok
test s_ip_027_identification_of_atomic_datagram ... ok
test s_ip_028_largest_datagram ... ok
test s_ip_029_protocol_numbers ... ok
test s_ip_030_emit_udp_datagram ... ok
test s_ip_031_emit_router_alert ... ok
test s_ip_032_option_padding ... ok
test s_ip_033_forty_option_bytes ... ok
test s_ip_036_ttl_zero ... ok
test s_ip_037_invalid_sources ... ok
test s_ip_038_emit_over_junk ... ok
test s_ip_039_atomic_form ... ok
test s_ip_040_emit_dscp_and_ecn ... ok
test s_ipo_001_nops_and_eol_are_not_options ... ok
test s_ipo_002_record_route ... ok
test s_ip_034_largest_total_length ... ok
test s_ipo_003_router_alert ... ok
test s_ipo_004_router_alert_length ... ok
test s_ipo_005_option_length_one ... ok
test s_ipo_006_option_length_zero_terminates ... ok
test s_ipo_007_option_overrun ... ok
test s_ipo_008_kind_in_last_byte ... ok
test s_ipo_009_bytes_after_eol_ignored ... ok
test s_ipo_010_router_alert_without_eol ... ok
test s_ipo_011_unknown_kind_is_opaque ... ok
test s_ipo_012_option_filling_the_area ... ok
test s_ipo_013_option_past_a_full_area ... ok
test s_ipo_014_repeated_options_in_order ... ok
test s_ipo_015_stream_id_exposed ... ok
test s_ipo_016_security_option_exposed ... ok
test source_routes_cannot_be_built ... ok

test result: ok. 54 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/link.rs (target/debug/deps/link-c4da610f133c46bf)

running 43 tests
test s_arp_001_request ... ok
test s_arp_002_reply ... ok
test s_arp_003_probe ... ok
test s_arp_004_announcement ... ok
test s_arp_006_seven_bytes ... ok
test s_arp_008_hardware_zero ... ok
test s_arp_005_twenty_seven_bytes ... ok
test s_arp_011_protocol_length_16 ... ok
test s_arp_010_hardware_length_7 ... ok
test s_arp_009_protocol_ipv6 ... ok
test s_arp_012_types_before_lengths ... ok
test s_arp_013_other_operations ... ok
test s_arp_007_ieee802_hardware ... ok
test s_arp_014_padding_ignored ... ok
test s_arp_015_request_target_mac_exposed ... ok
test s_arp_019_emit_request ... ok
test s_arp_020_emit_reply ... ok
test s_arp_021_emit_probe_and_announcement ... ok
test s_arp_022_interface_mac_is_individual ... ok
test s_eth_001_arp_request_frame ... ok
test s_eth_002_udp_frame_without_padding ... ok
test s_eth_003_thirteen_bytes_truncated ... ok
test s_eth_004_header_alone_has_an_empty_body ... ok
test s_eth_005_short_frame_accepted ... ok
test s_eth_006_length_1500_is_a_length_frame ... ok
test s_eth_007_length_0_is_a_length_frame ... ok
test s_eth_008_type_1501_is_undefined ... ok
test s_eth_009_type_1535_is_undefined ... ok
test s_eth_010_type_0600_is_another_ethertype ... ok
test s_eth_013_customer_tag ... ok
test s_eth_014_priority_tag ... ok
test s_eth_015_service_then_customer_tag ... ok
test s_eth_016_three_tags ... ok
test s_eth_017_truncated_tag ... ok
test s_eth_018_inner_length_field ... ok
test s_eth_019_9100_is_not_a_tag ... ok
test s_eth_020_group_source ... ok
test s_eth_021_destination_classes ... ok
test s_eth_026_emit_arp_request ... ok
test s_eth_027_emit_over_junk ... ok
test s_eth_028_minimum_body_padding ... ok
test s_eth_029_maximum_body ... ok
test s_eth_031_multicast_mac_mapping ... ok

test result: ok. 43 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/roundtrip.rs (target/debug/deps/roundtrip-fc05914cb8bc3882)

running 9 tests
test s_rt_002_canonical_vectors_rebuild ... ok
test s_rt_001_every_vector_reemits_raw ... ok
test s_rt_009_zero_copy ... ok
test s_rt_008_position_independence ... ok
test s_rt_006_truncation_sweep ... ok
test s_rt_007_single_bit_flips ... ok
test s_rt_003_build_then_parse ... ok
test s_rt_004_canonical_idempotence ... ok
test s_rt_005_totality_structured_fuzz ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/transport.rs (target/debug/deps/transport-1f8879561150984f)

running 89 tests
test s_tcp_006_rst ... ok
test s_tcp_001_syn ... ok
test s_tcp_009_nineteen_bytes ... ok
test s_tcp_002_syn_ack ... ok
test s_tcp_005_three_sack_blocks ... ok
test s_tcp_003_data ... ok
test s_tcp_004_sack ... ok
test s_tcp_008_odd_length_verifies ... ok
test s_tcp_007_fin ... ok
test s_tcp_013_checksum_changed ... ok
test s_tcp_010_data_offset_below_5 ... ok
test s_tcp_011_data_offset_past_the_bytes ... ok
test s_tcp_012_data_offset_15_on_59_bytes ... ok
test s_tcp_014_checksum_zero_is_checked ... ok
test s_tcp_015_wrong_source_address ... ok
test s_tcp_016_port_zero ... ok
test s_tcp_017_reserved_bits_kept ... ok
test s_tcp_018_acknowledgment_without_ack ... ok
test s_tcp_019_urgent_pointer_only_with_urg ... ok
test s_tcp_020_any_flag_combination ... ok
test s_tcp_021_ece_and_cwr ... ok
test s_tcp_022_syn_with_data ... ok
test s_tcp_024_window_is_unsigned ... ok
test s_tcp_025_data_offset_before_checksum ... ok
test s_tcp_023_largest_segment ... ok
test s_tcp_026_checksum_before_options ... ok
test s_topt_001_no_options ... ok
test s_topt_002_timestamps_alone ... ok
test s_topt_003_mss_at_odd_offset ... ok
test s_topt_004_eol_first ... ok
test s_topt_005_bytes_after_eol_ignored ... ok
test s_topt_006_mss_length ... ok
test s_topt_007_window_scale_length ... ok
test s_topt_008_sack_permitted_length ... ok
test s_topt_009_timestamps_length ... ok
test s_topt_010_sack_lengths ... ok
test s_topt_011_sack_without_blocks ... ok
test s_topt_012_md5_skipped ... ok
test s_topt_013_unknown_kinds_skipped ... ok
test s_topt_014_length_zero ... ok
test s_topt_015_length_one ... ok
test s_topt_016_timestamps_past_the_area ... ok
test s_topt_017_kind_in_last_byte ... ok
test s_topt_018_repeats ... ok
test s_topt_019_window_scale_above_14 ... ok
test s_topt_020_mss_zero ... ok
test s_topt_021_syn_options_outside_a_syn ... ok
test s_topt_022_sack_in_a_syn ... ok
test s_topt_023_timestamps_in_a_syn ... ok
test s_topt_024_forty_nops ... ok
test s_topt_025_syn_without_timestamps ... ok
test s_tser_001_emit_syn ... ok
test s_tser_002_emit_syn_ack ... ok
test s_tser_003_emit_syn_without_timestamps ... ok
test s_tser_004_emit_syn_layouts ... ok
test s_tser_005_emit_data ... ok
test s_tser_006_emit_sack ... ok
test s_tser_007_sack_block_limits ... ok
test s_tser_009_window_shift_limit ... ok
test s_tser_010_emit_rst ... ok
test s_tser_011_emit_rst_with_timestamps ... ok
test s_tser_012_emitted_reserved_and_urgent_are_zero ... ok
test s_tser_013_emit_odd_segment ... ok
test s_tser_014_emit_over_junk ... ok
test s_tser_015_too_long ... ok
test s_udp_001_dns_query ... ok
test s_udp_002_ffff_verifies ... ok
test s_udp_003_seven_bytes ... ok
test s_udp_004_length_below_header ... ok
test s_udp_005_length_overrun ... ok
test s_udp_006_surplus_after_length_ignored ... ok
test s_udp_007_checksum_covers_only_the_length ... ok
test s_udp_008_no_checksum ... ok
test s_udp_009_no_checksum_catches_nothing ... ok
test s_udp_010_wrong_checksum ... ok
test s_udp_011_pseudo_header_catches_misdelivery ... ok
test s_udp_012_destination_port_zero ... ok
test s_udp_013_source_port_zero ... ok
test s_udp_014_largest_datagram ... ok
test s_udp_015_length_checked_before_checksum ... ok
test s_udp_019_emit_dns_query ... ok
test s_udp_020_emit_computed_zero_as_ffff ... ok
test s_udp_021_always_checksummed ... ok
test s_udp_022_too_long ... ok
test s_udp_023_zero_port_cannot_be_built ... ok
test s_udp_024_emit_hi ... ok
test tcp_pseudo_header_names_protocol_6 ... ok
test udp_pseudo_header_names_protocol_17 ... ok
test s_udp_016_the_one_undetectable_bit_flip ... ok

test result: ok. 89 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_osrelease-50dadd189bb5660e)

running 8 tests
test tests::a_file_that_is_not_text_is_refused ... ok
test tests::a_dirty_x86_build_reads_so ... ok
test tests::uname_names_a_dirty_tree ... ok
test tests::a_file_the_build_did_not_write_is_refused ... ok
test tests::a_value_the_build_does_not_write_is_refused_by_its_field ... ok
test tests::what_the_build_writes_is_what_a_reader_reads ... ok
test tests::a_missing_or_doubled_field_is_refused_by_its_name ... ok
test tests::every_file_the_build_writes_is_os_release ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_pci-9bdc72ba04228e61)

running 75 tests
test af::tests::a_function_resets_only_with_both_bits ... ok
test aperture::tests::nothing_is_inside_a_machine_that_named_no_window ... ok
test af::tests::pending_is_bit_zero_of_status ... ok
test aperture::tests::the_window_an_extent_is_inside_is_the_one_named ... ok
test bar::tests::a_32_bit_memory_bar_is_its_own_whole_address ... ok
test bar::tests::a_64_bit_memory_bar_takes_the_register_after_it ... ok
test bar::tests::a_placement_moves_the_address_and_keeps_the_devices_own_bits ... ok
test bar::tests::a_sizing_mask_decodes_to_the_spec_size ... ok
test bar::tests::a_sizing_mask_that_describes_no_size_is_refused ... ok
test bar::tests::a_wide_bar_has_no_address_until_the_high_half_arrives ... ok
test bar::tests::a_wide_claim_in_the_last_slot_is_refused_by_name ... ok
test bar::tests::an_address_a_bar_cannot_hold_is_refused_by_name ... ok
test bar::tests::an_io_bar_whose_bit_2_is_clear_is_not_a_32_bit_memory_bar ... ok
test bar::tests::an_io_bar_whose_bit_2_is_set_is_not_a_64_bit_memory_bar ... ok
test bar::tests::an_unassigned_bar_is_refused_rather_than_mapped_at_zero ... ok
test bar::tests::every_io_bar_is_refused_whatever_the_bits_above_it_say ... ok
test bar::tests::prefetchable_is_read_and_is_not_part_of_the_address ... ok
test bar::tests::the_reserved_type_encodings_are_refused_by_name ... ok
test bar::tests::the_shapes_real_controllers_publish_still_decode ... ok
test bridge::tests::a_64_bit_prefetchable_window_is_its_upper_dwords_too ... ok
test bridge::tests::a_disabled_window_is_no_window ... ok
test bridge::tests::the_limit_names_the_last_megabyte_and_not_the_first_free_one ... ok
test bridge::tests::the_type_field_is_not_part_of_the_address ... ok
test caps::tests::a_forward_chain_is_followed_to_its_end ... ok
test caps::tests::a_pointer_below_the_standard_header_is_refused ... ok
test caps::tests::a_pointer_that_is_not_dword_aligned_is_refused ... ok
test caps::tests::a_pointer_to_a_visited_link_ends_the_walk ... ok
test caps::tests::the_terminator_ends_the_walk ... ok
test caps::tests::the_walk_is_bounded_by_the_distinct_offsets_it_can_hold ... ok
test express::tests::initiating_a_reset_preserves_the_rest_of_device_control ... ok
test express::tests::only_a_version_two_structure_holds_device_control_2 ... ok
test express::tests::only_bit_twenty_eight_says_a_function_resets ... ok
test express::tests::restoring_device_control_never_starts_a_reset ... ok
test msi::tests::a_function_without_per_vector_masking_offers_no_mask_register ... ok
test msi::tests::a_narrow_function_has_no_upper_address_register ... ok
test msi::tests::disabling_clears_the_enable_bit_and_nothing_else ... ok
test msi::tests::enabling_keeps_what_the_function_said_about_itself ... ok
test msi::tests::multiple_message_capable_is_an_exponent ... ok
test msi::tests::the_capable_field_is_not_the_enable_field ... ok
test msi::tests::the_layout_moves_with_the_address_width ... ok
test msix::tests::a_reserved_indicator_is_refused_rather_than_indexed ... ok
test msix::tests::a_table_past_the_address_space_is_refused_rather_than_wrapped ... ok
test msix::tests::an_entry_is_four_dwords_in_the_order_the_spec_gives_them ... ok
test msix::tests::an_unassigned_bar_is_refused_rather_than_written_at_its_offset ... ok
test msix::tests::bir_and_offset_share_one_register ... ok
test msix::tests::disabling_masks_as_well_and_keeps_the_size ... ok
test msix::tests::enabling_clears_the_function_wide_mask_and_keeps_the_size ... ok
test msix::tests::table_size_is_encoded_one_less_than_it_is ... ok
test msix::tests::the_control_bits_are_not_part_of_the_size ... ok
test msix::tests::the_indicator_is_not_added_to_the_offset ... ok
test placement::tests::a_released_address_is_offered_again ... ok
test placement::tests::a_reserved_address_is_never_offered_twice ... ok
test placement::tests::a_run_is_free_and_in_one_list_once ... ok
test placement::tests::a_run_is_offered_aligned_to_the_span_and_not_at_its_start ... ok
test placement::tests::a_run_that_straddles_a_windows_edge_offers_the_part_inside_it ... ok
test placement::tests::a_span_that_runs_past_a_window_is_not_inside_it ... ok
test placement::tests::an_extent_inside_another_opens_no_run ... ok
test placement::tests::edk2_offers_a_64_bit_bar_the_window_it_declared ... ok
test placement::tests::edk2s_32_bit_runs_are_the_ones_its_boot_printed ... ok
test placement::tests::edk2s_64_bit_runs_are_the_ones_its_boot_printed ... ok
test placement::tests::every_address_the_t14_offers_is_inside_the_window_its_firmware_named ... ok
test placement::tests::largest_run_first_still_offers_no_address_outside_a_window ... ok
test placement::tests::nothing_is_offered_where_firmware_named_no_window ... ok
test placement::tests::nothing_is_offered_where_nothing_fits ... ok
test placement::tests::taken_is_read_in_any_order_and_overlapping ... ok
test pm::tests::a_transition_changes_the_state_bits_and_clears_no_event ... ok
test pm::tests::no_soft_reset_is_bit_three_and_nothing_else ... ok
test probe::tests::a_function_the_table_knows_nothing_about_is_read_at_its_base ... ok
test probe::tests::a_transitional_virtio_id_is_not_a_modern_one ... ok
test probe::tests::neither_answer_of_an_unanswered_read_is_a_reference ... ok
test slot::tests::a_function_goes_back_to_its_own_residue_ahead_of_a_free_slot ... ok
test slot::tests::a_held_function_is_owned ... ok
test slot::tests::a_release_keeps_the_slot_only_for_a_residue ... ok
test slot::tests::a_second_function_takes_a_free_slot_and_never_anothers_residue ... ok
test slot::tests::other_functions_residues_are_no_free_slot ... ok

test result: ok. 75 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_phys-bbc990ee9e0e741f)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/phys.rs (target/debug/deps/phys-e8eddaefd0071f1e)

running 2 tests
test an_address_off_its_alignment_or_past_48_bits_is_no_address ... ok
test a_words_address_field_is_its_bits_from_the_alignment_to_47 ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_ps2-865fc29c56dec46f)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/decode.rs (target/debug/deps/decode-b9d132b3ab6ece29)

running 20 tests
test a_device_reset_is_reported_and_aa_is_still_a_legal_head_byte ... ok
test a_sequence_is_pending_until_the_byte_that_ends_it ... ok
test a_healthy_stream_discards_nothing_and_leaves_no_byte_unaccounted ... ok
test a_stream_truncated_at_any_offset_resyncs_within_two_packets ... ok
test a_stale_partial_is_abandoned_rather_than_completed ... ok
test an_implausible_byte_at_a_boundary_costs_exactly_itself ... ok
test buttons_are_already_in_hid_order ... ok
test every_usage_the_rest_of_the_tree_names_is_reachable ... ok
test left_shift_break_is_not_read_as_a_reset ... ok
test make_and_break_and_the_e0_prefix ... ok
test deltas_are_nine_bit_and_dy_is_inverted ... ok
test overflow_drops_the_motion_and_keeps_the_buttons ... ok
test no_legal_head_byte_is_ever_discarded ... ok
test overrun_codes_report_lost_and_clear_the_prefix_state ... ok
test page_up_and_down_decode_to_their_hid_usages ... ok
test pause_consumes_exactly_six_bytes_and_emits_nothing ... ok
test printscreen_emits_one_usage_and_no_phantom_shift ... ok
test tables_hold_only_real_usages_and_no_duplicates ... ok
test the_iso_key_is_the_one_the_layouts_carry ... ok
test unmapped_scancodes_emit_nothing ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/fuzz.rs (target/debug/deps/fuzz-10bab5efbca8d384)

running 4 tests
test a_lost_scancode_byte_never_wedges_the_prefix_state ... ok
test a_lost_byte_costs_exactly_the_packet_it_landed_in ... ok
test arbitrary_bytes_never_kill_the_mouse_decoder ... ok
test arbitrary_bytes_never_kill_the_key_decoder ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/lib.rs (target/debug/deps/toyos_quiesce-b21da58b4db502c9)

running 8 tests
test tests::an_empty_machine_is_already_stopped ... ok
test tests::the_caller_is_never_stopped_and_its_siblings_always_are ... ok
test tests::the_budget_ends_the_wait_and_the_boundary_is_inclusive ... ok
test tests::every_other_thread_stops_the_log_writer_included ... ok
test tests::the_record_names_the_shortfall_only_when_there_is_one ... ok
test tests::a_sweep_with_nothing_left_running_ends_the_wait_however_long_it_took ... ok
test tests::a_line_that_is_not_a_record_is_refused_rather_than_half_read ... ok
test tests::every_record_reads_back_as_itself_off_a_line_of_log ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_random-9f6c8470e91e6f4e)

running 12 tests
test tests::bytes_of_another_length_are_no_seed ... ok
test tests::the_block_function_is_rfc_8439s ... ok
test tests::a_draw_is_the_blocks_the_module_states ... ok
test tests::a_wipe_leaves_zeros ... ok
test tests::bytes_a_failed_source_leaves_are_no_seed ... ok
test tests::every_seed_mixed_moves_the_draw_and_none_replaces_another ... ok
test tests::a_taken_seed_leaves_zeros_where_it_was_handed ... ok
test tests::a_stream_does_not_repeat_where_32_bits_of_counter_end ... ok
test tests::the_block_function_gives_appendix_a_1s_keystreams ... ok
test tests::a_quarter_round_moves_its_four_words_of_the_state_and_no_other ... ok
test tests::the_key_a_draw_was_made_under_is_gone_when_it_returns ... ok
test tests::the_quarter_round_is_rfc_8439s ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_rootimage-8779a7eb044990fc)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/chunk.rs (target/debug/deps/chunk-da24920ad35d6108)

running 12 tests
test a_chunk_larger_than_the_extent_is_one_request_of_the_extent ... ok
test a_granularity_past_the_bound_is_not_taken ... ok
test a_granularity_dividing_the_bound_leaves_it_alone ... ok
test an_odd_granularity_rounds_the_bound_down_to_a_common_multiple ... ok
test no_granularity_is_the_bound ... ok
test a_bound_off_the_alignment_is_refused - should panic ... ok
test a_chunk_off_the_block_is_refused - should panic ... ok
test four_kib_blocks_advance_the_lba_by_their_own_size ... ok
test a_failing_last_partial_chunk_names_its_own_length ... ok
test a_failing_chunk_is_named_by_its_first_lba_and_nothing_after_it_is_asked ... ok
test the_last_chunk_is_whatever_is_left ... ok
test an_exact_multiple_is_whole_chunks ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/handoff.rs (target/debug/deps/handoff-05e3785a6aaf6a77)

running 9 tests
test an_extent_ending_one_page_past_the_descriptor_is_refused ... ok
test an_extent_inside_one_descriptor_is_held ... ok
test an_extent_straddling_two_adjacent_descriptors_of_the_type_is_refused ... ok
test an_extent_inside_a_descriptor_of_another_type_is_refused ... ok
test an_extent_starting_one_page_before_the_descriptor_is_refused ... ok
test a_length_that_is_not_whole_blocks_is_refused ... ok
test a_start_that_is_not_block_aligned_is_refused ... ok
test an_extent_whose_end_overflows_is_refused ... ok
test the_whole_descriptor_is_held ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_smmu-2aa83d2753d47320)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/encodings.rs (target/debug/deps/encodings-1a7c61e22a21a4b2)

running 27 tests
test a_command_error_is_the_cons_registers_err_field_alone ... ok
test a_context_descriptor_walks_ttb0_alone_under_its_own_asid ... ok
test a_descriptor_read_back_is_a_table_only_above_level_3 ... ok
test a_descriptor_or_a_mapping_past_the_units_output_size_is_refused ... ok
test a_context_descriptors_ips_is_the_units_output_size_and_no_more_than_48_bits ... ok
test a_queue_is_inside_the_units_size_and_aligned_to_its_own ... ok
test a_queues_indexes_say_empty_full_and_slot_as_a_count_would ... ok
test a_table_or_queue_past_the_units_output_size_is_refused ... ok
test a_stream_table_is_linear_inside_the_units_streams_and_aligned_to_its_size ... ok
test a_reserved_size_is_refused_and_the_largest_defined_one_is_not ... ok
test a_translation_fault_names_its_stream_its_address_and_whether_it_wrote ... ok
test a_translating_entry_is_stage_1_alone_through_one_context_descriptor ... ok
test a_unit_that_is_not_coherent_is_refused_unless_the_iort_says_it_is ... ok
test a_unit_that_lacks_what_the_configuration_needs_is_refused_by_name ... ok
test a_units_output_size_is_idr5s_and_bounds_what_it_is_given ... ok
test a_units_sizes_are_read_from_their_own_fields ... ok
test an_aborting_entry_is_valid_and_configured_to_pass_nothing ... ok
test an_address_past_the_input_or_off_the_leafs_alignment_has_no_plan ... ok
test an_asid_is_no_wider_than_the_units ... ok
test an_error_is_active_while_the_two_registers_differ_in_its_bit ... ok
test consuming_an_event_acknowledges_an_overflow_and_never_raises_one ... ok
test each_command_holds_its_opcode_and_parameters_where_its_diagram_has_them ... ok
test memory_is_a_level_2_block_only_its_own_context_and_an_unprivileged_device_reach ... ok
test the_control_values_hold_each_field_where_its_register_has_it ... ok
test the_doorbell_is_one_level_3_page_of_device_memory ... ok
test every_event_number_is_its_own_code_and_only_a_fault_carries_an_attempt ... ok
test the_registers_sit_where_the_register_overview_has_them ... ok

test result: ok. 27 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_swap-e0b1919a1d337f39)

running 5 tests
test tests::every_word_is_spelled_once ... ok
test tests::an_installed_binary_is_named_by_its_service_under_its_digest ... ok
test tests::the_digest_is_sha256 ... ok
test tests::a_request_round_trips_and_a_path_it_did_not_stage_is_refused ... ok
test tests::verify_refuses_other_bytes_and_names_both_digests ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_symbols-3d77fffbe8378355)

running 6 tests
test tests::file_range_answers_an_extent_wholly_inside ... ok
test tests::file_range_refuses_an_extent_past_the_end ... ok
test tests::locate_refuses_bytes_too_short_for_a_file_header ... ok
test tests::file_range_refuses_an_extent_the_addition_overflows ... ok
test tests::a_short_name_is_untouched ... ok
test tests::a_name_past_head_plus_tail_is_elided ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/frame.rs (target/debug/deps/frame-f15e1316f09dd2d3)

running 12 tests
test a_build_id_is_one_to_32_bytes ... ok
test a_line_that_is_no_frame_is_none ... ok
test a_frame_cut_at_any_byte_is_not_that_frame ... ok
test an_escape_no_encoder_writes_is_refused ... ok
test an_offset_is_in_the_files_addresses ... ok
test a_name_holding_the_grammars_bytes_reads_back_whole ... ok
test an_id_that_is_not_lowercase_hex_bytes_is_refused ... ok
test an_elided_name_keeps_offset_and_id_and_is_refused ... ok
test every_byte_below_space_reads_back ... ok
test the_kernels_exact_line ... ok
test a_frame_reads_back_as_written ... ok
test no_line_panics_the_reader ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/name.rs (target/debug/deps/name-824dc79ccb12b2ef)

running 7 tests
test a_file_that_cannot_name_says_why ... ok
test a_real_binarys_offset_names_its_function ... ok
test another_build_is_refused_by_name ... ok
test the_build_the_record_names_is_the_one_named ... ok
test a_name_no_build_id_vouches_for_is_marked_unchecked ... ok
test every_function_names_what_object_reads ... ok
test no_corrupted_file_panics_the_namer ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/real.rs (target/debug/deps/real-ab8d37aba9a537d2)

running 3 tests
test locate_finds_the_same_tables_readelf_reports ... ok
test a_file_header_locate_cannot_read_answers_none ... ok
test a_real_binarys_own_functions_resolve_to_their_own_names ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_tco-b6266fa91f28306e)

running 2 tests
test tests::the_lockup_bound_follows_the_deadline_the_boot_named ... ok
test tests::a_bound_is_read_a_malformed_one_is_not_silence ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/decode.rs (target/debug/deps/decode-606f992d567079be)

running 11 tests
test the_loaders_bound_is_exact_under_ten_seconds_and_reaches_the_hardware ... ok
test a_bound_becomes_the_timer_whose_expiries_do_not_outrun_it ... ok
test the_declared_control_words_run_and_halt_the_timer ... ok
test the_last_register_has_to_end_inside_the_port_space ... ok
test a_machine_no_row_names_is_refused_rather_than_guessed ... ok
test no_two_rows_name_one_device ... ok
test the_q35_row_reaches_the_port_qemu_puts_the_block_at ... ok
test a_base_the_block_cannot_live_at_is_refused_by_name ... ok
test an_absent_device_reading_all_ones_names_no_port ... ok
test the_tiger_lake_row_takes_its_base_from_the_smbus_function ... ok
test the_register_offsets_are_ich9_tco_hs ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_tmpdir-cdc83da0c40509c3)

running 2 tests
test tests::a_directory_the_sweep_cannot_remove_costs_no_process_but_this_one ... ok
test tests::a_held_global_lock_times_out_naming_its_holder ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/reclaim.rs (target/debug/deps/reclaim-3028b35fdf6e62d7)

running 7 tests
test holder ... ok
test a_directory_goes_on_a_return_and_on_a_panic ... ok
test a_killed_process_is_reclaimed_and_a_live_one_is_never_touched ... ok
test a_root_without_an_owner_goes_and_nothing_else_is_touched ... ok
test an_adopted_root_goes_with_its_adopter ... ok
test making_a_root_waits_for_global ... ok
test removing_a_root_waits_for_global ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s

     Running unittests src/lib.rs (target/debug/deps/toyos_trace-221dc2a8c8afb444)

running 5 tests
test tests::a_kind_the_abi_does_not_name_is_refused_by_its_number ... ok
test tests::thread_zero_is_a_thread_and_no_thread_is_said ... ok
test tests::a_task_event_with_no_task_is_refused ... ok
test tests::a_wake_names_its_task_and_prints_when_on_which_cpu ... ok
test tests::every_kind_decodes_with_what_its_data_says ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_transport-6991df383ae0da41)

running 10 tests
test queue::tests::a_tail_stepped_past_each_pop_is_refused_at_the_depth ... ok
test arena::tests::an_arena_is_whole_slots_after_the_header ... ok
test queue::tests::an_entry_is_nobodys_before_it_is_published ... ok
test inflight::tests::an_end_answers_every_tag_once_and_a_late_completion_nothing ... ok
test queue::tests::a_head_stepped_past_each_push_is_refused_at_the_depth ... ok
test queue::tests::a_peer_cursor_out_of_reach_is_a_violation ... ok
test inflight::tests::a_tag_is_answered_once_and_its_slot_takes_a_new_one ... ok
test arena::tests::a_run_a_peer_names_is_inside_the_arena ... ok
test queue::tests::the_ring_wraps_and_counts_its_space ... ok
test inflight::tests::a_slot_refilled_past_sixteen_bits_refuses_its_first_tag ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/loom.rs (target/debug/deps/loom-06053d5823929c8c)

running 3 tests
test a_published_entry_is_read_whole ... ok
test a_hostile_producer_yields_entries_or_a_violation ... ok
test a_hostile_consumer_yields_room_or_a_violation ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/lib.rs (target/debug/deps/toyos_tsc-9daa5a94cecbaed8)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_untrusted-25e0a33e0225bc57)

running 11 tests
test tests::an_index_is_below_the_table_it_indexes ... ok
test tests::a_refusal_says_which_number_and_which_bound ... ok
test tests::a_length_may_equal_its_bound_where_an_index_may_not ... ok
test tests::an_empty_table_indexes_nothing ... ok
test tests::asking_whether_it_is_a_known_value_is_not_an_exit ... ok
test tests::decoding_keeps_the_provenance ... ok
test tests::every_width_widens_rather_than_wrapping ... ok
test tests::it_is_the_integer_it_wraps ... ok
test tests::two_untrusted_values_compare_with_each_other ... ok
test tests::exactly_refuses_by_naming_both_numbers ... ok
test tests::a_value_whose_low_bits_are_in_range_is_still_out_of_range ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_update-f69df6d883598cfa)

running 42 tests
test floor::tests::a_floor_is_named_for_its_key_and_scope ... ok
test floor::tests::a_loader_deletes_the_stale_floors_of_its_scope_and_never_the_owners ... ok
test floor::tests::only_not_found_is_no_variable ... ok
test floor::tests::a_runtime_variable_that_stays_is_refused ... ok
test floor::tests::only_the_loaders_own_variable_is_a_floor_and_nothing_else_is_none ... ok
test image::tests::a_bent_header_is_refused_by_name ... ok
test image::tests::a_header_reads_back_as_it_was_written ... ok
test policy::tests::a_boot_tries_the_marked_slot_first_and_the_other_only_if_there_is_one ... ok
test image::tests::an_image_splits_into_exactly_its_sections ... ok
test policy::tests::an_update_must_be_newer_than_what_runs ... ok
test policy::tests::the_floor_admits_its_own_version_and_above_and_only_rises ... ok
test policy::tests::every_word_is_one_parameter_token ... ok
test record::tests::a_record_reads_back_and_anothers_is_refused ... ok
test record::tests::a_hang_kills_only_an_unproven_image ... ok
test record::tests::how_a_boot_ended_is_what_it_is_recorded_as ... ok
test record::tests::the_first_write_credits_no_image ... ok
test repo::tests::a_repository_the_renderer_writes_is_one_the_client_accepts ... ok
test repo::tests::a_machines_root_at_the_images_version_with_other_bytes_is_refused ... ok
test repo::tests::a_machines_newer_root_holds_though_the_mirror_withholds_it ... ok
test repo::tests::a_duplicated_signature_does_not_meet_a_threshold ... ok
test repo::tests::a_lower_sequence_or_a_reissued_one_is_refused ... ok
test repo::tests::a_root_not_signed_by_the_previous_threshold_is_refused ... ok
test repo::tests::a_role_version_below_the_held_one_is_refused ... ok
test repo::tests::an_archive_past_its_length_or_not_its_hash_is_refused ... ok
test repo::tests::base64_has_one_spelling ... ok
test repo::tests::a_document_past_its_cap_is_refused_unread ... ok
test repo::tests::a_root_at_the_last_version_is_refused ... ok
test repo::tests::a_time_is_one_that_exists_and_reads_back ... ok
test repo::tests::a_document_that_is_not_the_format_is_refused_by_line ... ok
test repo::tests::a_signature_in_another_namespace_is_refused ... ok
test repo::tests::targets_not_matching_the_timestamp_are_refused ... ok
test repo::tests::expired_metadata_is_refused_with_both_times ... ok
test sig::tests::the_message_is_sshsigs_signed_data ... ok
test slots::tests::a_grant_claims_only_an_idle_slot_on_the_running_disk ... ok
test slots::tests::a_table_reads_back_and_a_bent_one_is_refused ... ok
test slots::tests::the_checksum_is_crc32 ... ok
test slots::tests::moving_the_mark_is_atomic_against_a_torn_copy ... ok
test repo::tests::a_rotated_root_is_walked_and_drops_the_old_keys_floors ... ok
test sig::tests::rfc_8032_vectors_verify_and_a_flipped_bit_does_not ... ok
test slots::tests::the_idle_slot_is_the_one_whose_root_the_kernel_does_not_hold ... ok
test repo::tests::the_same_version_with_other_bytes_is_refused ... ok

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 05.

cargo run -- --ci host, part 05
test repo::tests::a_chain_past_the_walk_bound_is_refused ... ok

test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/repo_oracle.rs (target/debug/deps/repo_oracle-fb3b977d3e7a1c8f)

running 1 test
test a_repository_ssh_keygen_signed_is_accepted_and_a_bent_one_is_not ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/sshsig_oracle.rs (target/debug/deps/sshsig_oracle-4561d8e9232c6857)

running 1 test
test a_header_ssh_keygen_signed_verifies_and_a_bent_one_does_not ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_userbound-0c2856776390c093)

running 43 tests
test fault::tests::a_ring_is_only_ever_what_cs_said ... ok
test place::tests::a_full_window_is_a_refusal_for_a_span_that_could_fit ... ok
test place::tests::a_hole_between_regions_takes_exactly_span_and_guard ... ok
test place::tests::a_region_at_or_above_the_ceiling_bounds_nothing ... ok
test place::tests::a_length_near_the_top_of_u64_is_refused_and_not_summed ... ok
test place::tests::a_span_from_a_wider_window_is_refused_by_a_narrower_one ... ok
test place::tests::a_span_is_whole_pages ... ok
test place::tests::a_zero_length_is_refused ... ok
test place::tests::placement_is_top_down_with_the_guard_above ... ok
test place::tests::nothing_is_placed_below_the_floor ... ok
test place::tests::the_largest_span_is_the_window_less_one_guard ... ok
test port::tests::a_declared_run_refuses_every_run_that_shares_a_port_with_it ... ok
test port::tests::a_full_declaration_refuses_one_more_run ... ok
test port::tests::a_refused_access_names_the_first_port_it_may_not_touch ... ok
test port::tests::a_fresh_bitmap_refuses_every_port_and_ends_in_ones ... ok
test port::tests::a_held_row_opens_its_ports_and_no_other ... ok
test place::tests::a_window_without_room_for_its_guard_is_a_kernel_bug - should panic ... ok
test place::tests::a_window_reaching_the_last_page_of_the_user_half_is_a_kernel_bug - should panic ... ok
test port::tests::a_run_is_never_empty_and_never_past_the_last_port ... ok
test place::tests::a_window_not_2_mib_aligned_is_a_kernel_bug - should panic ... ok
test port::tests::the_last_port_of_the_space_opens_without_touching_the_end_byte ... ok
test port::tests::a_switch_to_a_process_holding_nothing_closes_the_row ... ok
test segment::tests::an_empty_or_kernel_window_is_refused_before_the_walk ... ok
test segment::tests::a_read_only_page_between_writable_ones_refuses_a_write_only ... ok
test segment::tests::frames_in_reverse_are_one_segment_per_leaf ... ok
test span::tests::a_kernel_address_is_not_a_user_address ... ok
test span::tests::a_range_ending_past_the_bound_is_refused_and_a_wrapping_one_too ... ok
test span::tests::a_vaddr_min_above_the_base_cannot_rebase ... ok
test span::tests::a_zero_sized_object_is_nothing_to_dereference ... ok
test segment::tests::a_run_that_cannot_be_pinned_refuses_the_window_and_leaves_nothing_pinned ... ok
test span::tests::an_entry_is_an_address_of_the_user_half_and_nothing_else ... ok
test span::tests::an_image_at_vaddr_zero_rebases_to_the_base_itself ... ok
test span::tests::an_image_that_reaches_the_last_page_of_the_user_half_is_refused ... ok
test segment::tests::a_range_is_looked_up_once_per_leaf ... ok
test span::tests::an_object_is_refused_for_its_alignment_before_anything_else ... ok
test span::tests::an_object_may_not_end_past_the_bound ... ok
test span::tests::no_type_may_cross_a_2_mib_boundary ... ok
test segment::tests::an_absent_page_anywhere_refuses_the_window ... ok
test segment::tests::frames_in_order_are_one_segment ... ok
test segment::tests::the_segments_are_the_maximal_runs_and_cover_the_window_exactly ... ok
test segment::tests::every_run_is_pinned_until_the_window_is_dropped ... ok
test segment::tests::a_read_across_shuffled_frames_gets_the_bytes_at_their_addresses ... ok
test segment::tests::a_write_across_shuffled_frames_lands_where_a_ring_3_load_reads_it ... ok

test result: ok. 43 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s

     Running tests/firmware.rs (target/debug/deps/firmware-ff1846570b37ec0e)

running 24 tests
test a_port_answers_as_its_declaration_says ... ok
test a_wide_access_is_held_to_every_port_it_spans ... ok
test a_sleep_type_is_three_bits_and_lands_only_in_its_field ... ok
test an_address_in_the_ecam_window_is_a_configuration_access_whatever_the_map_types_it ... ok
test a_configuration_read_is_held_to_the_window_and_to_one_register ... ok
test a_write_that_reaches_smi_cmd_and_is_no_byte_to_it_is_refused ... ok
test an_unlisted_address_below_1_mib_is_refused_whatever_the_range_registers_answer ... ok
test a_byte_for_smi_cmd_is_a_firmware_call_unless_the_fadt_names_it ... ok
test a_memory_bar_is_refused_where_firmware_types_its_range_as_its_own ... ok
test an_unlisted_register_is_read_where_it_is_uncached_and_never_written ... ok
test every_other_type_and_an_unlisted_address_is_refused_with_its_type ... ok
test every_configuration_write_is_refused_by_one_name ... ok
test every_page_a_window_the_kernel_drives_lies_in_is_refused_inside_any_type ... ok
test memory_any_usable_range_holds_is_refused_whatever_lists_it_first ... ok
test memory_past_what_the_kernel_maps_is_refused ... ok
test no_unlisted_address_is_read_where_a_cpus_range_registers_differ ... ok
test nvs_and_reserved_memory_pass_both_ways_to_their_last_byte_and_no_further ... ok
test ram_is_refused_both_ways_whatever_usable_type_it_is ... ok
test runtime_services_code_is_refused_both_ways ... ok
test runtime_services_data_is_read_as_the_tables_memory_is_and_never_written ... ok
test the_facs_is_read_and_its_bytes_are_never_written ... ok
test the_lock_word_is_exchanged_only_where_all_four_bytes_are_the_firmwares_own ... ok
test the_kernel_admits_a_fixed_few_firmware_calls_in_any_period ... ok
test the_tables_memory_is_read_and_never_written ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_virtio-7636a0b5fd96be30)

running 33 tests
test tests::a_chain_is_whole_before_its_index_and_its_index_before_its_notification ... ok
test tests::a_descriptor_table_the_device_rewrote_into_a_loop_is_never_followed ... ok
test tests::a_device_missing_a_structure_is_refused_by_its_name ... ok
test tests::a_device_that_never_finishes_its_reset_is_refused_and_written_nothing_more ... ok
test tests::a_device_without_version_1_is_refused_and_told_so ... ok
test tests::a_chain_on_a_queue_the_device_was_never_given_is_the_drivers_mistake - should panic ... ok
test tests::a_chain_over_a_descriptor_in_flight_is_the_drivers_mistake - should panic ... ok
test tests::a_chain_past_the_table_is_the_drivers_mistake - should panic ... ok
test tests::a_device_that_does_not_keep_features_ok_is_refused_and_told_so ... ok
test tests::a_field_past_the_device_structure_is_refused_and_not_read ... ok
test tests::a_head_past_the_table_is_refused ... ok
test tests::a_head_with_no_chain_in_flight_is_refused ... ok
test tests::a_new_queue_zeroes_its_parts_and_nothing_else ... ok
test tests::a_published_chain_is_what_the_device_reads ... ok
test tests::a_notify_offset_outside_the_notification_structure_is_refused ... ok
test tests::a_refused_element_does_not_hide_the_ones_behind_it ... ok
test tests::a_structure_its_bar_does_not_hold_is_refused_and_never_reached ... ok
test tests::a_used_element_is_read_after_the_index_that_counts_it ... ok
test tests::a_ring_past_the_grant_is_the_drivers_mistake - should panic ... ok
test tests::more_bytes_than_the_chain_may_be_written_is_refused ... ok
test tests::only_what_the_device_offers_is_accepted ... ok
test tests::structures_in_two_bars_are_refused ... ok
test tests::the_initialisation_is_the_sequence_the_specification_orders ... ok
test tests::a_notification_is_the_queues_index_at_the_queues_address ... ok
test tests::a_part_off_its_alignment_is_the_drivers_mistake - should panic ... ok
test tests::a_queue_size_that_is_no_power_of_two_is_the_drivers_mistake - should panic ... ok
test tests::a_queue_shallower_than_the_drivers_rings_is_refused ... ok
test tests::a_used_index_past_what_was_made_available_is_refused_and_nothing_is_read ... ok
test tests::a_vector_the_device_does_not_map_is_refused_and_its_queue_stays_disabled ... ok
test tests::the_first_capability_of_each_type_in_a_real_bar_is_the_one_used ... ok
test tests::a_readable_element_after_a_writable_one_is_the_drivers_mistake - should panic ... ok
test tests::both_indices_wrap_at_65536 ... ok
test tests::a_hostile_device_is_believed_only_where_the_model_agrees ... ok

test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (target/debug/deps/toyos_wallclock-d4ec3af8b5280ad4)

running 6 tests
test tests::an_impossible_instant_is_refused_and_a_leap_day_is_not ... ok
test tests::only_logkeepers_own_names_are_logkeepers ... ok
test tests::the_calendar_round_trips_through_the_dates_that_break_one ... ok
test tests::every_time_of_day_this_renders_is_one_it_reads_back ... ok
test tests::every_stem_this_renders_is_one_it_reads_back ... ok
test tests::a_part_is_its_stem_and_number ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (target/debug/deps/toyos_xhci-64cc3df6bec03b92)

running 150 tests
test bot::tests::a_byte_no_phase_publishes_reads_as_closed ... ok
test bot::tests::a_break_says_where_it_left_the_device_and_which_event_ended_it ... ok
test bot::tests::every_phase_but_the_closed_one_is_a_device_holding_a_command ... ok
test bot::tests::every_phase_survives_the_byte_it_is_published_as ... ok
test bot::tests::no_two_phases_are_named_the_same_thing ... ok
test call::tests::a_call_that_enters_the_ladder_a_rung_up_finds_that_rung_whole ... ok
test call::tests::a_call_whose_transport_has_not_broken_is_clipped_and_refused_nothing ... ok
test call::tests::a_command_sent_again_after_a_hold_leaves_the_last_rung_its_bound ... ok
test call::tests::a_command_sent_again_is_clipped_to_where_the_next_rung_begins ... ok
test call::tests::a_read_whose_wait_spent_the_operation_goes_out_again_after_the_port_reset_took ... ok
test bot::tests::a_data_phase_whose_pipe_will_not_restart_breaks_as_a_stall ... ok
test bot::tests::a_leg_that_fails_breaks_the_round_trip_where_it_failed ... ok
test bot::tests::a_stalled_data_phase_delivers_what_both_the_controller_and_the_device_say_arrived ... ok
test bot::tests::a_stalled_status_is_asked_for_again_once ... ok
test bot::tests::a_csw_is_believed_only_when_it_is_valid_and_meaningful ... ok
test bot::tests::what_is_delivered_is_what_both_the_controller_and_the_device_say_arrived ... ok
test bot::tests::a_status_stalled_after_a_data_stall_is_still_asked_for_again ... ok
test bot::tests::a_command_or_status_block_that_moved_short_breaks ... ok
test bot::tests::a_command_with_no_data_is_its_command_block_and_its_status ... ok
test bot::tests::a_stalled_data_phase_is_restarted_and_its_status_read ... ok
test bot::tests::a_data_phase_runs_on_the_pipe_its_command_names ... ok
test bot::tests::a_cbw_is_laid_out_as_the_class_defines_it ... ok
test call::tests::a_rung_entered_early_gets_its_own_bound_and_not_the_calls ... ok
test call::tests::a_rung_is_never_starved_by_what_was_spent_before_it ... ok
test call::tests::a_second_break_in_the_same_call_does_not_extend_it ... ok
test call::tests::a_silent_controller_is_sent_no_command_in_any_rung_and_its_port_is_still_reset ... ok
test call::tests::a_wait_is_cut_only_when_its_window_ended_it ... ok
test call::tests::nothing_but_the_command_sent_again_outlives_the_operations_budget ... ok
test configure::tests::a_bind_adds_and_drops_nothing ... ok
test configure::tests::a_recoverys_slot_context_is_context_entries_and_zeroes ... ok
test bot::tests::a_restart_answered_with_a_transfer_is_a_driver_bug - should panic ... ok
test configure::tests::a_binds_slot_context_names_the_speed_and_the_port ... ok
test configure::tests::a_recovery_drops_and_adds_both_endpoints ... ok
test configure::tests::an_endpoint_context_carries_the_descriptors_own_numbers ... ok
test configure::tests::context_entries_is_the_higher_index_of_the_pair ... ok
test configure::tests::nothing_but_the_pair_is_ever_dropped ... ok
test enumerate::tests::a_boot_keyboard_is_addressed_described_configured_and_bound ... ok
test configure::tests::the_recovery_describes_the_endpoints_exactly_as_the_bind_did ... ok
test enumerate::tests::a_device_that_answered_set_protocol_recovers_nothing ... ok
test enumerate::tests::a_configuration_with_nothing_to_bind_is_refused_where_it_is_read ... ok
test enumerate::tests::a_stalled_set_protocol_recovers_ep0_before_the_endpoints_are_configured ... ok
test enumerate::tests::a_device_that_states_another_packet_size_has_its_ep0_evaluated ... ok
test enumerate::tests::a_stated_packet_size_a_device_of_that_speed_cannot_have_is_refused ... ok
test enumerate::tests::every_route_configures_its_endpoints_last ... ok
test enumerate::tests::only_an_interface_with_a_boot_protocol_is_asked_for_one ... ok
test enumerate::tests::every_speed_has_one_control_packet_size_or_none ... ok
test flush::tests::a_device_with_no_cache_owes_nothing_and_keeps_the_count ... ok
test flush::tests::a_loss_is_counted_once_and_never_uncounted ... ok
test flush::tests::a_write_is_owed_until_a_flush_that_succeeded_and_not_after ... ok
test identity::tests::a_device_that_differs_in_any_field_is_a_new_disk ... ok
test identity::tests::a_device_with_no_readable_serial_is_never_adopted ... ok
test identity::tests::a_disk_is_waited_for_only_after_a_reset_of_ours_and_only_inside_the_window ... ok
test identity::tests::a_language_is_read_only_from_a_string_descriptor_that_carries_one ... ok
test identity::tests::a_serial_prints_as_the_characters_it_carries_and_nothing_else ... ok
test identity::tests::a_string_descriptor_is_read_only_whole_and_well_formed ... ok
test identity::tests::the_same_device_is_the_same_disk ... ok
test job::tests::a_cancelled_operation_leaves_the_slot_free ... ok
test job::tests::a_failing_stage_ends_the_transfer_whatever_is_still_owed ... ok
test job::tests::a_data_stage_does_not_end_a_transfer_that_still_owes_its_status ... ok
test job::tests::a_completion_for_another_trb_is_not_this_one ... ok
test job::tests::a_failing_status_stage_is_the_answer ... ok
test job::tests::a_late_completion_from_an_abandoned_transfer_answers_nobody ... ok
test job::tests::a_stage_is_answered_by_its_own_trb_and_in_its_own_order ... ok
test job::tests::a_transfer_matches_on_its_trb_and_on_both_halves_of_its_endpoint ... ok
test job::tests::only_the_first_answer_counts ... ok
test job::tests::an_answer_outlives_the_deadline ... ok
test job::tests::a_transfer_that_answers_one_stage_and_stops_is_silent ... ok
test job::tests::submitting_over_an_outstanding_operation_panics - should panic ... ok
test job::tests::an_empty_slot_is_not_busy_and_has_no_deadline ... ok
test job::tests::the_residue_is_the_first_stages_and_the_code_is_the_last ... ok
test job::tests::the_deadline_produces_silence_and_nothing_else ... ok
test ladder::tests::a_break_before_a_data_out_phase_is_done_leaves_the_device_owed_it ... ok
test ladder::tests::a_break_elsewhere_climbs_every_rung ... ok
test ladder::tests::a_device_owed_data_out_is_never_given_the_class_reset ... ok
test ladder::tests::a_device_is_addressed_again_only_as_what_it_was_enumerated_as ... ok
test ladder::tests::a_run_climbs_one_rung_per_break_until_a_round_trip_ends_it ... ok
test ladder::tests::a_rung_that_did_not_verify_left_exactly_where_its_port_no_longer_holds_the_device ... ok
test late::tests::an_answer_posted_before_the_deadline_passed_is_taken_after_it ... ok
test ladder::tests::every_run_of_breaks_climbs_strictly_and_ends_offline_after_a_port_reset ... ok
test ladder::tests::only_a_quiesce_that_failed_lets_the_rung_go_on ... ok
test ladder::tests::only_a_run_that_begins_owed_data_out_skips_the_class_reset ... ok
test port::tests::a_port_whose_belief_moved_is_outstanding_until_it_is_read ... ok
test portsc::tests::a_port_holds_its_device_only_while_it_reads_connected_with_no_change_unconsumed ... ok
test ladder::tests::the_port_rung_resets_then_addresses_then_configures_then_asks ... ok
test late::tests::a_ring_that_keeps_producing_is_given_up_on_one_ring_past_the_deadline ... ok
test late::tests::before_the_deadline_nothing_is_given_up ... ok
test late::tests::past_the_deadline_the_first_empty_read_ends_the_wait ... ok
test port::tests::a_device_found_at_bring_up_is_never_enumerated_without_a_reset ... ok
test port::tests::a_device_its_class_reset_did_not_bring_back_gets_the_most_reset_its_port_has ... ok
test port::tests::a_warm_reset_is_finished_only_once_the_controller_has_cleared_pr ... ok
test portsc::tests::a_write_never_carries_ped ... ok
test protocol::tests::a_port_claimed_twice_keeps_the_first_claim ... ok
test recovery::tests::a_halted_endpoint_is_reset_and_then_cleared_at_the_device ... ok
test portsc::tests::a_write_never_sets_ped_and_pr_together ... ok
test portsc::tests::an_unseen_change_survives_the_acknowledge ... ok
test portsc::tests::bits_are_where_the_table_puts_them ... ok
test portsc::tests::neutral_keeps_exactly_the_bits_that_are_safe_to_write_back ... ok
test portsc::tests::powering_a_port_down_moves_that_bit_and_no_other ... ok
test recovery::tests::every_recovery_rebuilds_the_ring_exactly_once ... ok
test protocol::tests::a_conformant_pair_covers_the_machine ... ok
test protocol::tests::a_range_that_would_wrap_is_refused_rather_than_folded ... ok
test protocol::tests::firmware_that_makes_no_sense_is_refused_by_name ... ok
test recovery::tests::a_running_endpoint_is_stopped_and_never_cleared ... ok
test recovery::tests::a_stopped_endpoint_only_needs_its_ring_back ... ok
test recovery::tests::an_endpoint_in_error_only_needs_its_ring_back ... ok
test recovery::tests::disabled_and_reserved_states_are_refused_by_name ... ok
test recovery::tests::only_a_halted_endpoint_is_cleared_at_the_device ... ok
test recovery::tests::the_bus_is_reached_only_after_every_command ... ok
test recovery::tests::the_endpoint_state_field_decodes_to_every_value_three_bits_can_hold ... ok
test reset_recovery::tests::a_refusal_that_is_not_about_state_and_a_silence_both_end_the_quiesce ... ok
test reset_recovery::tests::a_context_state_error_is_followed_by_the_command_for_where_the_pipe_went ... ok
test reset_recovery::tests::a_command_that_took_is_not_issued_again_over_a_field_that_lags ... ok
test reset_recovery::tests::a_disabled_or_reserved_endpoint_refuses_the_whole_recovery ... ok
test reset_recovery::tests::a_stopped_pair_is_asked_nothing ... ok
test reset_recovery::tests::a_halting_completion_code_outranks_a_field_that_still_reads_running ... ok
test reset_recovery::tests::only_a_halt_condition_or_a_trb_error_speaks_for_the_endpoint ... ok
test reset_recovery::tests::a_pipe_refused_from_every_state_is_given_up_on_by_name ... ok
test reset_recovery::tests::a_slot_goes_back_only_over_a_stopped_pair ... ok
test reset_recovery::tests::every_command_is_defined_for_the_state_it_was_chosen_from ... ok
test reset_recovery::tests::every_pair_is_stopped_inside_the_bound_however_it_moves_and_however_the_field_lags ... ok
test reset_recovery::tests::only_a_pair_a_reset_device_disabled_has_nothing_to_stop ... ok
test reset_recovery::tests::the_bound_is_the_worst_case ... ok
test reset_recovery::tests::the_in_pipe_is_quiesced_before_the_out_pipe ... ok
test ring::tests::a_controller_that_has_caught_up_has_nothing_pending ... ok
test ring::tests::a_pointer_that_is_no_position_on_this_ring_is_refused_by_name ... ok
test ring::tests::an_enqueue_point_past_the_end_of_the_ring_is_refused ... ok
test ring::tests::the_count_is_the_wrapped_distance_between_the_two ... ok
test ring::tests::no_two_refusals_read_the_same ... ok
test scan::tests::a_broken_endpoint_is_recovered_until_the_silence_bound_passes ... ok
test scan::tests::a_free_slot_and_nothing_broken_is_the_end_of_the_scan ... ok
test scsi::tests::a_flush_the_device_does_not_implement_is_no_failure_and_every_other_refusal_is ... ok
test ring::tests::the_low_four_bits_of_the_field_are_not_address ... ok
test scsi::tests::a_question_unanswered_or_answered_short_refuses_the_device ... ok
test scan::tests::a_silent_controller_ends_the_scan_at_the_operations_deadline ... ok
test scan::tests::an_outstanding_operation_is_never_given_up_on ... ok
test scsi::tests::a_device_field_prints_as_the_characters_it_carries_and_nothing_else ... ok
test scsi::tests::a_device_that_is_not_a_disk_this_driver_serves_is_refused_by_name ... ok
test scsi::tests::a_disk_spinning_up_is_asked_for_its_sense_and_then_again ... ok
test scsi::tests::an_answer_to_something_not_asked_is_a_driver_bug - should panic ... ok
test scsi::tests::a_disk_that_never_becomes_ready_is_given_up_on_at_its_budget ... ok
test scsi::tests::a_ready_attempt_that_breaks_is_recovered_and_one_taken_offline_ends_it ... ok
test scsi::tests::a_transfer_cdb_is_laid_out_as_sbc_defines_it ... ok
test scsi::tests::a_ready_disk_is_asked_what_it_is_and_how_big_and_nothing_else ... ok
test scsi::tests::a_transfer_is_its_batches_in_order_and_only_a_whole_one_advances ... ok
test scsi::tests::a_transfer_past_the_disk_is_refused_and_an_empty_one_is_nothing ... ok
test scsi::tests::only_the_first_batch_may_answer_ask_again ... ok
test scsi::tests::every_fixed_cdb_carries_its_own_length_direction_and_allocation ... ok
test scsi::tests::sense_is_believed_only_when_its_ascq_arrived ... ok
test scsi::tests::a_disk_too_big_for_read_capacity_10_is_asked_the_16_byte_form ... ok
test call::tests::every_path_through_a_call_ends_inside_its_bounds ... ok

test result: ok. 150 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (target/debug/deps/toyos_xhci_sim-63d09615301ce01b)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enumerate.rs (target/debug/deps/enumerate-fb375b5fc15e3b74)

running 7 tests
test an_enumeration_takes_one_act_per_pass_and_reports_once ... ok
test a_device_pulled_while_enable_slot_goes_unanswered_is_torn_down ... ok
test an_enumeration_is_abandoned_when_its_port_goes ... ok
test gate_an_enumeration_that_outlives_its_port_costs_a_deadline ... ok
test an_enumeration_that_stops_being_answered_still_reports_its_slot ... ok
test a_device_with_no_boot_protocol_is_never_asked_for_one ... ok
test a_slot_the_controller_has_not_named_yet_is_waited_for_even_when_the_port_goes ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/explore.rs (target/debug/deps/explore-2578a12a7d6446f1)

running 1 test
test no_sequence_breaks_an_invariant ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s

     Running tests/scenarios.rs (target/debug/deps/scenarios-2caebc991fe326a0)

running 15 tests
test a_device_that_bounces_back_out_is_never_enumerated ... ok
test a_device_plugged_in_is_enumerated_once ... ok
test a_device_with_no_slot_settles_anyway ... ok
test a_device_replugged_inside_a_hot_reset_given_up_on_is_enumerated ... ok
test a_replug_inside_one_debounce_is_seen ... ok
test gate_dropping_the_reset_deadline_wedges_the_port ... ok
test gate_acknowledging_before_deciding_hides_a_replug ... ok
test gate_ignoring_the_connect_change_hides_a_replug ... ok
test gate_stepping_from_inside_an_effect_is_caught ... ok
test gate_writing_back_what_was_read_disables_the_port ... ok
test the_debounce_is_actually_waited_out ... ok
test a_port_that_never_finishes_its_reset_is_given_up_on_and_left_alone ... ok
test unplugging_tears_the_device_down ... ok
test repeated_replugs_stay_balanced ... ok
test gate_restarting_the_debounce_never_enumerates ... ok

test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/superspeed.rs (target/debug/deps/superspeed-efbd8582fe9f60c1)

running 13 tests
test a_device_pulled_as_its_enumeration_begins_is_torn_down ... ok
test a_device_pulled_during_the_warm_retrain_is_not_enumerated ... ok
test a_completed_failure_that_stays_failed_is_refused_by_name ... ok
test a_link_a_hot_reset_kills_is_recovered_warm ... ok
test a_port_of_unknown_protocol_is_still_reset ... ok
test a_link_already_inactive_is_warm_reset_at_once ... ok
test a_port_given_up_on_is_not_reset_again_until_its_device_is_pulled ... ok
test a_trained_superspeed_link_is_not_reset ... ok
test a_reset_that_completes_failed_is_warm_reset ... ok
test a_link_that_never_trains_is_refused_by_its_own_name ... ok
test a_usb2_completed_failure_is_refused_not_warm_reset ... ok
test a_usb2_port_is_never_warm_reset ... ok
test a_usb2_port_is_reset_as_before ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/teardown.rs (target/debug/deps/teardown-55cdc3cdc8a2e577)

running 9 tests
test a_recovery_the_controller_refuses_lets_the_device_go ... ok
test a_teardown_gives_the_slot_and_the_block_back ... ok
test a_running_endpoint_is_stopped_rather_than_reset ... ok
test gate_acting_with_an_answer_outstanding_is_caught ... ok
test a_recovery_is_abandoned_when_its_port_goes ... ok
test gate_a_recovery_that_outlives_its_port_costs_a_second_deadline ... ok
test gate_freeing_the_block_before_the_slot_is_caught ... ok
test a_halted_endpoint_is_reset_cleared_and_delivering_again ... ok
test a_controller_that_never_answers_still_releases_the_port ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/teeth.rs (target/debug/deps/teeth-389f5d40c3cdea55)

running 1 test
test every_flaw_changes_an_outcome ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests bcachefs

running 2 tests
test bcachefs/src/block_io.rs - block_io::DeviceError (line 66) - compile fail ... ok
test bcachefs/src/block_io.rs - block_io::DeviceError (line 62) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

   Doc-tests kernel_loom

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests kernel_sim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_abi

running 4 tests
test toyos-abi/src/usersafe.rs - usersafe::user_safe (line 70) - compile fail ... ok
test toyos-abi/src/usersafe.rs - usersafe::user_safe (line 53) - compile fail ... ok
test toyos-abi/src/usersafe.rs - usersafe::user_safe (line 63) ... ok
test toyos-abi/src/usersafe.rs - usersafe::user_safe (line 46) ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s

   Doc-tests toyos_acpi

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_blackbox

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_blockhold

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_blockring

running 2 tests
test toyos-blockring/src/wire.rs - wire::Opened (line 49) - compile fail ... ok
test toyos-blockring/src/wire.rs - wire::Opened (line 40) ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s

   Doc-tests toyos_bootmap

running 1 test
test toyos-bootmap/src/lib.rs - DirectMapEnd (line 64) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

   Doc-tests toyos_cpuvuln

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_device_memory

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_dhcp

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_dma

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_dns

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_elf

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_elide

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_fat32

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_fat32_check

running 1 test
test toyos-fat32/check/src/lib.rs - (line 30) - compile ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

   Doc-tests toyos_gicv3

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_gpt

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_hda

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_i219

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_inspect

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_its

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_keymap

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_libc_copies

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_logstream

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_manifest

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_microcode

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_net_ip

running 8 tests
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 483) - compile fail ... ok
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 468) - compile fail ... ok
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 478) - compile fail ... ok
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 488) - compile fail ... ok
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 463) - compile fail ... ok
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 493) - compile fail ... ok
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 473) - compile fail ... ok
test toyos-net-ip/src/lib.rs - compile_fail::s_ip_nud_028_a_state_holds_only_its_own_fields (line 436) ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.76s

   Doc-tests toyos_net_shard

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_net_tcp

running 5 tests
test toyos-net-shard/tcp/src/lib.rs - compile_fail::s_op_030_tcp_cannot_choose_dscp_ecn_or_df (line 349) - compile fail ... ok
test toyos-net-shard/tcp/src/lib.rs - compile_fail::s_hs_036_a_connection_cannot_connect_again (line 323) - compile fail ... ok
test toyos-net-shard/tcp/src/lib.rs - compile_fail::s_hs_036_a_connection_cannot_connect_again (line 330) - compile fail ... ok
test toyos-net-shard/tcp/src/lib.rs - compile_fail::s_hs_036_a_connection_cannot_connect_again (line 316) ... ok
test toyos-net-shard/tcp/src/lib.rs - compile_fail::s_op_030_tcp_cannot_choose_dscp_ecn_or_df (line 342) ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s

   Doc-tests toyos_net_testnet

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_net_udp

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_net_wire

running 18 tests
test toyos-net-wire/src/lib.rs - compile_fail::raw_payload_takes_no_transport_protocol_and_no_payload_is_forged (line 275) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_tser_008_established_builder_cannot_hold_syn_only_options (line 234) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_rt_010_transport_parse_takes_only_its_ipv4_view (line 248) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_rt_010_transport_parse_takes_only_its_ipv4_view (line 255) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_tser_008_established_builder_cannot_hold_syn_only_options (line 224) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::raw_payload_takes_no_transport_protocol_and_no_payload_is_forged (line 270) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_tser_008_established_builder_cannot_hold_syn_only_options (line 229) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::write_payload_and_write_frame_body_are_sealed (line 325) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_eth_030_builder_ethertype_admits_only_ipv4_and_arp (line 212) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::write_payload_and_write_frame_body_are_sealed (line 340) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::write_payload_and_write_frame_body_are_sealed (line 357) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::write_payload_and_write_frame_body_are_sealed (line 390) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::write_payload_and_write_frame_body_are_sealed (line 372) - compile fail ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_eth_030_builder_ethertype_admits_only_ipv4_and_arp (line 207) ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_rt_010_transport_parse_takes_only_its_ipv4_view (line 241) ... ok
test toyos-net-wire/src/lib.rs - compile_fail::raw_payload_takes_no_transport_protocol_and_no_payload_is_forged (line 264) ... ok
test toyos-net-wire/src/lib.rs - compile_fail::s_tser_008_established_builder_cannot_hold_syn_only_options (line 219) ... ok
test toyos-net-wire/src/lib.rs - compile_fail::write_payload_and_write_frame_body_are_sealed (line 293) ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s

   Doc-tests toyos_osrelease

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_pci

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_phys

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_ps2

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_quiesce

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_random

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_rootimage

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_smmu

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_swap

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_symbols

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_tco

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_tmpdir

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_trace

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_transport

running 4 tests
test toyos-blockring/transport/src/queue.rs - queue::Place (line 48) - compile fail ... ok
test toyos-blockring/transport/src/queue.rs - queue::Place (line 53) - compile fail ... ok
test toyos-blockring/transport/src/queue.rs - queue::Place (line 43) - compile fail ... ok
test toyos-blockring/transport/src/queue.rs - queue::Place (line 36) ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s

   Doc-tests toyos_tsc

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_untrusted

running 5 tests
test toyos-untrusted/src/lib.rs - Untrusted (line 107) - compile fail ... ok
test toyos-untrusted/src/lib.rs - Untrusted (line 126) - compile fail ... ok
test toyos-untrusted/src/lib.rs - Untrusted (line 119) - compile fail ... ok
test toyos-untrusted/src/lib.rs - Untrusted (line 113) - compile fail ... ok
test toyos-untrusted/src/lib.rs - Untrusted (line 134) ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.47s

   Doc-tests toyos_update

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_userbound

running 6 tests
test toyos-userbound/src/firmware.rs - firmware::SleepType (line 498) - compile fail ... ok
test toyos-userbound/src/firmware.rs - firmware::ConfigAt (line 447) - compile fail ... ok
test toyos-userbound/src/firmware.rs - firmware::LockWordAt (line 261) - compile fail ... ok
test toyos-userbound/src/firmware.rs - firmware::PortAt (line 327) - compile fail ... ok
test toyos-userbound/src/firmware.rs - firmware::MemoryAt (line 151) - compile fail ... ok
test toyos-userbound/src/firmware.rs - firmware::FirmwareCall (line 348) - compile fail ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s

   Doc-tests toyos_virtio

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_wallclock

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_xhci

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests toyos_xhci_sim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:15:42 [ci] the workspace's host members: cargo test --workspace --exclude toyos-build --exclude bootloader --exclude kernel --exclude toyos --exclude acpiserver --exclude acpiserver-api --exclude toyos-aml --exclude calc --exclude compositor --exclude toyos-desktop --exclude console --exclude diskserver --exclude doom --exclude editor --exclude filepicker --exclude filepicker-api --exclude files --exclude fileserver --exclude host --exclude inspect --exclude kernelprobe --exclude logkeeper --exclude logkeeper-api --exclude metalprobe --exclude netstack --exclude toyos-mdns --exclude toyos-net-node --exclude paint --exclude pkg --exclude proctest --exclude shell --exclude snake --exclude soundserver --exclude toyos-mixer --exclude sprite --exclude sshserver --exclude supervisor --exclude swap --exclude symbolize --exclude terminal --exclude test-runner --exclude toybox --exclude toyos-font --exclude toyos-window --exclude trace --exclude update

06:15:42 === [ci] the kernel's library
    Finished `test` profile [optimized + debuginfo] target(s) in 0.11s
     Running unittests pure/lib.rs (target/debug/deps/kernel-c59cf369e40e4e77)

running 178 tests
test bootwrite::tests::a_handlers_time_is_not_the_kicks_and_the_kicks_is_not_the_handlers ... ok
test bootwrite::tests::a_handler_that_holds_the_span_has_outlasted_it_on_either_cpu ... ok
test bootwrite::tests::a_write_that_has_retired_is_never_judged_by_the_clock ... ok
test bootwrite::tests::a_take_the_clock_has_not_reached_is_waited_for ... ok
test bootwrite::tests::a_kick_not_taken_in_the_span_is_a_deaf_boot_processor ... ok
test mtrr::tests::registers_that_are_off_and_not_the_boot_processors_are_off ... ok
test mtrr::tests::registers_that_are_off_type_nothing_uncacheable ... ok
test mtrr::tests::registers_that_are_on_and_not_the_boot_processors_are_different ... ok
test mtrr::tests::registers_that_are_word_for_word_the_boot_processors_are_the_same ... ok
test mtrr::tests::a_range_no_register_covers_has_the_default_type ... ok
test mtrr::tests::a_register_types_its_region_to_the_last_byte_and_no_further ... ok
test mtrr::tests::a_default_or_a_covering_register_of_no_defined_encoding_is_unknown ... ok
test mtrr::tests::a_mask_with_no_address_bit_and_a_region_at_the_top_decide_without_overflow ... ok
test mtrr::tests::two_registers_over_one_range_answer_as_the_architecture_orders_them ... ok
test pcid::oracle::tests::a_flush_between_two_owners_clears_the_alias ... ok
test pcid::oracle::tests::the_model_flags_a_live_reissue ... ok
test pipe::tests::an_end_dropped_with_the_ring_neither_empty_nor_full_is_gone ... ok
test pipe::tests::an_end_whose_other_end_is_held_is_not_told_it_is_gone ... ok
test pcid::tests::a_freed_tag_waits_for_a_flush_before_it_is_reissued ... ok
test pipe::tests::an_end_with_a_second_holder_outlives_the_first ... ok
test pipe::tests::readable_and_writable_say_nothing_of_the_other_end ... ok
test pipe::tests::the_last_holder_of_the_pipe_ends_it ... ok
test pcid::tests::two_live_address_spaces_never_share_a_pcid ... ok
test proclife::interleave::tests::a_sibling_join_is_answered_however_the_two_interleave ... ok
test proclife::interleave::tests::a_process_that_kills_itself_ends ... ok
test pcid::tests::churn_never_aliases_two_live_tags ... ok
test proclife::interleave::tests::a_kill_racing_a_spawn_leaves_no_unretired_thread ... ok
test proclife::interleave::tests::a_spawn_racing_a_kill_and_the_pass_that_reaps_it ... ok
test proclife::interleave::tests::a_published_exit_leaves_no_unretired_thread ... ok
test proclife::interleave::tests::a_join_racing_the_kill_that_takes_its_target ... ok
test proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down ... ok
test proclife::interleave::tests::a_sibling_exit_a_spawn_and_the_processs_own_exit ... ok
test proclife::interleave::tests::a_kill_chain_of_three_ends ... ok
test proclife::interleave::tests::the_last_one_out_is_in_its_process_until_its_teardown_is_done ... ok
test proclife::interleave::tests::the_refusal_that_dropped_without_unmapping_is_the_leak_l5_reports ... ok
test proclife::interleave::tests::a_reap_racing_a_teardown_and_a_join_breaks_no_law ... ok
test proclife::interleave::tests::a_sibling_closing_a_spawns_handle_before_the_spawn_returns ... ok
test proclife::join::tests::a_join_asked_after_it_collected_keeps_its_answer ... ok
test proclife::join::tests::a_live_thread_answers_wait_and_stays_in_the_table ... ok
test proclife::join::tests::a_process_being_torn_down_gives_up_no_thread ... ok
test proclife::join::tests::a_settled_join_does_not_take_the_table_again ... ok
test proclife::join::tests::a_zombie_is_answered_once_and_the_second_join_finds_nothing ... ok
test proclife::join::tests::the_two_refusals_are_told_apart ... ok
test proclife::pids::tests::a_pid_given_back_is_taken_again ... ok
test proclife::pids::tests::pids_are_issued_in_order_from_zero ... ok
test proclife::pids::tests::the_last_pid_is_one_below_max_and_none_follows_it ... ok
test proclife::reap::tests::nothing_is_taken_from_a_table_of_live_processes ... ok
test proclife::reap::tests::only_the_published_are_taken_and_they_come_back_in_pid_order ... ok
test proclife::spawn::tests::a_claimed_process_refuses_at_the_insert_too ... ok
test proclife::spawn::tests::a_claimed_process_refuses_at_the_start_in_both_arms ... ok
test proclife::spawn::tests::a_live_process_admits_a_thread_at_both_moments ... ok
test proclife::spawn::tests::a_full_process_refuses_at_the_start_until_a_join_collects ... ok
test proclife::spawn::tests::a_missing_entry_is_refused_by_name_and_not_by_the_teardown_flag ... ok
test pcid::oracle::tests::the_owned_allocator_admits_no_cross_space_read ... ok
test proclife::teardown::tests::a_main_threads_exit_is_the_processs ... ok
test proclife::teardown::tests::a_process_that_is_gone_grants_no_claim ... ok
test proclife::interleave::tests::two_processes_killing_each_other_both_end ... ok
test proclife::teardown::tests::a_sibling_join_is_released_by_the_sibling_it_named ... ok
test proclife::teardown::tests::exactly_one_claimant_wins_however_many_arrive ... ok
test proclife::teardown::tests::only_the_thread_that_empties_a_claimed_process_tears_it_down ... ok
test proclife::teardown::tests::the_retire_set_is_every_thread_still_in_but_the_caller ... ok
test proclife::tree::tests::a_child_landed_under_a_place_claimed_since_its_admission_is_claimed_with_it ... ok
test proclife::tree::tests::a_chain_is_refused_at_max_depth_plus_one_below_the_supervisor ... ok
test proclife::tree::tests::a_place_being_torn_down_admits_nothing ... ok
test proclife::tree::tests::a_published_child_leaves_its_parents_children ... ok
test proclife::tree::tests::a_spawn_past_the_last_pid_is_refused_and_a_refused_spawn_spends_none ... ok
test proclife::interleave::tests::an_exit_whose_sibling_kills_the_process_killing_it ... ok
test proclife::teardown::tests::a_thread_leaves_once - should panic ... ok
test sched::cpu::pass_cost_tests::a_quantile_follows_the_mass_and_not_the_tail ... ok
test sched::cpu::pass_cost_tests::a_bucket_is_a_power_of_two_wide ... ok
test sched::cpu::pass_cost_tests::the_recorder_counts_what_it_was_given ... ok
test sched::cpu::tests::a_cpu_does_not_hand_over_the_context_it_is_still_standing_on ... ok
test sched::cpu::tests::a_corpse_is_not_starved_for_ever_by_a_spinning_rt_task ... ok
test sched::cpu::tests::a_dying_task_is_picked_before_the_fair_queue ... ok
test sched::cpu::tests::a_dying_task_resumes_when_the_rt_band_empties ... ok
test sched::cpu::tests::a_dying_task_that_exits_is_released_by_its_own_death ... ok
test sched::cpu::tests::a_killed_rt_thread_unwinds_in_the_normal_band ... ok
test sched::cpu::tests::a_killed_task_does_not_starve_a_ready_rt_task ... ok
test sched::cpu::tests::a_killed_task_loses_the_cpu_before_its_quantum_expires ... ok
test sched::cpu::tests::a_killed_task_that_expires_its_quantum_goes_back_to_the_dying_list ... ok
test proclife::spawn::tests::the_insert_refuses_the_spawn_a_sibling_filled_the_process_under ... ok
test sched::cpu::tests::a_killed_task_that_expires_its_quantum_yields_to_a_ready_rt_task ... ok
test sched::cpu::tests::a_killed_task_that_yields_goes_back_to_the_dying_list ... ok
test sched::cpu::tests::a_live_fair_task_loses_the_cpu_to_a_ready_rt_task ... ok
test sched::cpu::tests::a_retire_moves_a_ready_task_to_the_dying_list ... ok
test sched::cpu::tests::a_retire_of_the_running_task_asks_for_a_safe_point ... ok
test sched::cpu::tests::a_retire_that_loses_the_claim_leaves_the_wake_in_flight ... ok
test sched::cpu::tests::a_retire_wakes_a_parked_task_so_it_can_unwind ... ok
test sched::cpu::tests::a_running_task_refuses_the_parked_mark ... ok
test sched::cpu::tests::a_spawned_task_is_adopted_and_dispatched ... ok
test sched::cpu::tests::a_steal_probe_goes_to_surplus_and_not_to_a_cpu_full_of_corpses ... ok
test sched::cpu::tests::a_stopped_task_is_never_picked_again ... ok
test sched::cpu::tests::a_stopped_task_is_not_published_as_load ... ok
test sched::cpu::tests::a_wake_for_a_stopped_task_lands_in_the_band_and_not_the_run_queue ... ok
test sched::cpu::tests::an_adopt_of_a_killed_task_dispatches_it_on_arrival ... ok
test sched::cpu::tests::an_aged_grant_is_not_undone_by_a_pass_inside_its_chunk ... ok
test sched::cpu::tests::an_unwind_under_saturated_rt_is_stretched_by_the_age_ratio ... ok
test sched::cpu::tests::placement_believes_a_cpu_that_answers_and_no_other ... ok
test sched::cpu::tests::stopping_outranks_killing ... ok
test sched::cpu::tests::the_balance_path_keeps_a_killed_task_rather_than_migrating_it ... ok
test sched::cpu::tests::the_dying_list_is_served_oldest_first ... ok
test sched::fair::tests::charge_accumulates_and_saturates ... ok
test sched::cpu::tests::the_pick_dispatches_a_killed_task_so_it_can_unwind ... ok
test sched::fair::tests::charge_nonrunnable_is_a_bug ... ok
test sched::fair::tests::frontier_is_monotonic ... ok
test sched::fair::tests::lag_clamps_in_both_directions ... ok
test sched::fair::tests::leave_stores_lag_and_wake_rederives_vruntime ... ok
test sched::fair::tests::leave_when_nonrunnable_is_a_noop ... ok
test sched::fair::tests::new_process_starts_at_frontier_with_zero_lag ... ok
test sched::fair::tests::nonrunnable_vruntime_tracks_the_live_frontier ... ok
test sched::fair::tests::refcount_tracks_runnable_threads ... ok
test sched::mailbox::tests::a_node_carries_one_message_at_a_time ... ok
test sched::mailbox::tests::doorbell_kick_policy ... ok
test sched::mailbox::tests::fifo_across_nodes_and_recycling ... ok
test sched::mailbox::tests::releasing_an_unposted_claim_frees_the_node ... ok
test sched::mailbox::tests::dropping_a_queued_node_is_loud - should panic ... ok
test sched::mailbox::tests::sleep_needs_an_empty_mailbox_and_a_quiet_doorbell ... ok
test sched::park::tests::a_boosted_notify_always_kicks ... ok
test sched::park::tests::a_kill_beats_a_pre_park_claim_to_the_commit ... ok
test sched::park::tests::a_kill_that_lands_before_the_commit_refuses_the_park ... ok
test sched::park::tests::a_notify_before_phase_one_refuses_it ... ok
test sched::park::tests::a_notify_before_the_commit_refuses_the_park_and_sends_nothing ... ok
test sched::park::tests::an_uncancellable_ticket_parks_a_killed_task ... ok
test sched::park::tests::cancel_reports_a_claim_it_lost ... ok
test sched::park::tests::one_wake_node_serves_the_whole_lifecycle ... ok
test sched::park::tests::dropping_a_ticket_is_loud - should panic ... ok
test sched::park::tests::park_then_notify_delivers_exactly_one_message ... ok
test sched::retire::tests::a_wake_and_a_retire_ride_distinct_nodes ... ok
test sched::retire::tests::retire_goes_to_the_home_cpu_and_always_kicks ... ok
test sched::retire::tests::retiring_a_dead_task_posts_nothing ... ok
test sched::retire::tests::the_chase_reuses_the_same_node ... ok
test sched::retire::tests::the_kill_bit_is_set_before_the_kick_and_before_the_chase_kick ... ok
test sched::retire::tests::a_second_retirer_fails_fast - should panic ... ok
test sched::task::tests::a_dead_task_takes_no_post ... ok
test sched::task::tests::a_post_before_the_commit_refuses_it ... ok
test sched::task::tests::a_post_claims_a_waiter_it_finds_parked_or_committing ... ok
test proclife::interleave::tests::two_spawns_race_one_teardown ... ok
test sched::task::tests::a_second_retirer_is_refused ... ok
test sched::task::tests::a_stale_generation_cannot_park_the_task ... ok
test sched::task::tests::a_wake_between_registration_and_commit_refuses_the_park ... ok
test sched::task::tests::cancel_reports_a_claim_it_lost ... ok
test sched::task::tests::claims_on_anything_but_a_waiter_are_lost ... ok
test sched::task::tests::park_then_wake_is_the_ordinary_path ... ok
test sched::task::tests::an_edge_outside_the_table_panics - should panic ... ok
test sched::task::tests::registration_forgets_a_post_or_revoke_to_an_earlier_wait ... ok
test sched::task::tests::sticky_bits_survive_transitions ... ok
test sched::task::tests::stopping_outranks_killing_at_a_safe_point ... ok
test sched::task::tests::wait_membership_is_single_watch ... ok
test sched::task::tests::word_roundtrips_every_state ... ok
test sched::watch::tests::a_bounded_post_skips_a_waiter_that_was_not_parked ... ok
test sched::watch::tests::a_post_between_registration_and_park_is_not_lost ... ok
test sched::watch::tests::a_post_in_place_fires_and_drops_nothing ... ok
test sched::watch::tests::a_post_wakes_every_parked_thread_and_fires_every_ring ... ok
test sched::watch::tests::a_registration_sweeps_the_entries_that_can_no_longer_fire ... ok
test sched::watch::tests::a_revoke_takes_the_registration_out_before_it_wakes ... ok
test sched::watch::tests::a_revoked_waiter_cannot_park_again ... ok
test sched::watch::tests::a_waiter_revoked_before_it_parks_cannot_park ... ok
test sched::watch::tests::a_sweep_drops_what_it_took_out_with_the_list_lock_let_go ... ok
test sched::watch::tests::a_waiter_revoked_while_it_commits_cannot_park ... ok
test sched::watch::tests::a_second_registration_is_loud - should panic ... ok
test sched::watch_list::a_list_outgrowing_the_buffer_sized_for_it_is_not_moved_into_it ... ok
test sched::watch::tests::cancel_and_drop_answer_every_live_poll_as_gone ... ok
test sched::watch_list::a_post_of_one_entry_past_its_stack_fires_each_once_and_frees_none_under_the_lock ... ok
test sched::watch_list::a_re_arm_after_a_post_of_few_entries_is_one_section ... ok
test sched::windows::tests::a_pass_ends_the_preemption_off_window_and_starts_the_next ... ok
test sched::watch_list::nothing_allocates_or_frees_under_the_list_lock_and_a_post_in_place_frees_nothing ... ok
test sched::windows::tests::a_start_counts_from_how_the_cpu_stands ... ok
test sched::windows::tests::a_whole_set_opens_or_closes_only_across_zero ... ok
test sched::windows::tests::an_interrupts_off_window_is_mask_to_unmask_and_the_longest_is_taken_once ... ok
test sched::windows::tests::an_untracked_cpu_records_and_refuses_nothing ... ok
test sched::windows::tests::every_transition_nothing_reported_before_is_named ... ok
test sched::windows::tests::only_a_crossing_of_zero_opens_or_closes_a_preemption_off_window ... ok
test sched::windows::tests::the_idle_halt_inside_a_pass_is_no_window ... ok
test proclife::interleave::tests::a_spawn_racing_the_kill_of_its_own_spawner ... ok
test proclife::interleave::tests::a_childs_exit_racing_its_parents_kill ... ok
test proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it ... ok
test proclife::interleave::tests::an_exit_publishes_after_every_end_below_it ... ok
test proclife::interleave::tests::a_spawn_under_an_unrelated_process_lands_between_two_claims_of_one_walk ... ok

test result: ok. 178 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

06:15:42 [ci] the kernel's library: cargo test -p kernel --lib --features sched-check

06:15:42 === [ci] the licences of what ships
06:15:44   NOTICE section tests/testcases/ (LGPL-2.1-or-later AND BSD-3-Clause AND (MIT OR Apache-2.0)) is not shipped
06:15:44   NOTICE section "Rust crates and the forks" names no files: every crate, fork or not, is judged by the crate half of this gate
06:15:44   crate fortanix-sgx-abi 0.6.1 (registry+https://github.com/rust-lang/crates.io-index) is MPL-2.0, via std → fortanix-sgx-abi [x86_64-fortanix-unknown-sgx]
06:15:44   crate ucs2 0.3.2 (registry+https://github.com/rust-lang/crates.io-index) is MPL-2.0, via bootloader → uefi → ucs2
06:15:44   crate uefi 0.26.0 (registry+https://github.com/rust-lang/crates.io-index) is MPL-2.0, via bootloader → uefi
06:15:44   crate uefi-macros 0.13.0 (registry+https://github.com/rust-lang/crates.io-index) is MPL-2.0, via bootloader → uefi → uefi-macros
06:15:44   crate uefi-raw 0.5.0 (registry+https://github.com/rust-lang/crates.io-index) is MPL-2.0, via bootloader → uefi → uefi-raw
06:15:44   crate uefi-services 0.23.0 (registry+https://github.com/rust-lang/crates.io-index) is MPL-2.0, via bootloader → uefi-services
06:15:44   crate doom 0.1.0 (<src>/toyos-dirrename/userland/doom/Cargo.toml) is "GPL-2.0-only": not allowed: GPL-2.0-only; pulled in by doom
    EXCEPTED, pending the owner, issues/a-package-is-a-directory-under-apps-and-the-installer-is-a-program.md: /system/bin/doom links doomgeneric, id's Doom source by way of Chocolate Doom (NOTICE); it leaves the image as a package at the stage where the apps leave this repository
06:15:44   crate windows-sys 0.61.100 (<src>/toyos-dirrename/rust/library/windows-sys/Cargo.toml) is "": declares no licence; pulled in by std → dlmalloc [cfg(any(all(target_family = "wasm", not(any(unix, target_os = "wasi"))), target_os = "xous", target_os = "vexos", target_os = "toyos", all(target_vendor = "fortanix", target_env = "sgx")))] → windows-sys [cfg(target_os = "windows")]
    EXCEPTED, reached only under cfg(target_os = "windows"): std's empty in-tree stand-in for windows-sys, which declares no licence
06:15:44   crate windows-link 0.0.0 (<src>/toyos-dirrename/rust/library/windows_link/Cargo.toml) is "": declares no licence; pulled in by std → windows-link [cfg(any(windows, target_os = "cygwin"))]
    EXCEPTED, reached only under cfg(any(windows, target_os = "cygwin")): std's in-tree stand-in for windows-link, which declares no licence
06:15:44   file assets/DOOM1.WAD is "LicenseRef-id-Software-DOOM1-Shareware": not allowed: LicenseRef-id-Software-DOOM1-Shareware; pulled in by COMMITTED_FILES
    EXCEPTED, pending the owner, issues/a-package-is-a-directory-under-apps-and-the-installer-is-a-program.md: id's shareware terms: redistributable unmodified and not for consideration, so an image carrying it may not be sold (NOTICE); it leaves with doom
06:15:44   file assets/soundfont.sf2 is "LicenseRef-GeneralUser-GS-2.0": not allowed: LicenseRef-GeneralUser-GS-2.0; pulled in by COMMITTED_FILES
    EXCEPTED, pending the owner, issues/a-package-is-a-directory-under-apps-and-the-installer-is-a-program.md: GeneralUser GS's own permissive licence, no standard one, with its author's caveat on where the samples came from (NOTICE); doom alone opens it, and it leaves with doom
06:15:44   NOTICE section userland/doom is "GPL-2.0-or-later": not allowed: GPL-2.0-or-later; pulled in by NOTICE
    EXCEPTED, pending the owner, issues/a-package-is-a-directory-under-apps-and-the-installer-is-a-program.md: doomgeneric, the C half of the doom crate, fetched at build time and compiled into it; it leaves with doom
06:15:44 [ci] the licences of what ships: 6 exception(s) stand, and nothing else is refused

06:15:44 === [ci] clippy and the bare targets
info: component clippy is up to date
info: component rust-std for target x86_64-unknown-none is up to date
info: component rust-std for target x86_64-unknown-uefi is up to date
info: component rust-std for target aarch64-unknown-none-softfloat is up to date
info: component rust-std for target aarch64-unknown-uefi is up to date
06:15:44 [ci] clippy and the bare targets: installed

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 06.

cargo run -- --ci host, part 06
06:15:44 === [ci] clippy, warnings denied
06:15:44 === clippy: cargo clippy --workspace $GUESTS --all-targets --keep-going -- $ADOPTED -D warnings
    Checking toyos-update v0.1.0 (<src>/toyos-dirrename/toyos-update)
    Checking toyos-manifest v0.1.0 (<src>/toyos-dirrename/toyos-manifest)
    Checking toyos-i219 v0.1.0 (<src>/toyos-dirrename/toyos-i219)
    Checking toyos-libc-copies v0.1.0 (<src>/toyos-dirrename/tests/libc-arch)
    Checking toyos-swap v0.1.0 (<src>/toyos-dirrename/toyos-swap)
    Checking toyos-build v0.1.0 (<src>/toyos-dirrename)
    Finished `dev` profile [optimized + debuginfo] target(s) in 5.19s
06:15:49 === clippy: cargo clippy --workspace $GUESTS --all-targets --keep-going --features $CONTROLS -- $ADOPTED -D warnings
    Checking toyos-build v0.1.0 (<src>/toyos-dirrename)
    Finished `dev` profile [optimized + debuginfo] target(s) in 3.21s
06:15:53 === clippy: cargo clippy -p kernel --lib --tests --features sched-check -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.12s
06:15:53 === clippy: cargo clippy -p kernel --lib --tests --features sched-check,protocol-port --features $KERNEL_CONTROLS -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
06:15:53 === clippy: cargo clippy -p kernel --target x86_64-unknown-none -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.14s
06:15:53 === clippy: cargo clippy -p kernel --target x86_64-unknown-none --features boot-actuators,test-actuators -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.10s
06:15:53 === clippy: cargo clippy -p kernel --target x86_64-unknown-none --features boot-actuators -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.10s
06:15:54 === clippy: cargo clippy -p kernel --target x86_64-unknown-none --features debug-wait,sched-check,sched-tripwire,heap-tripwire,heap-sweep,pass-spin,stack-witness,switch-witness,switch-witness-mutate-frame,switch-witness-mutate-rsp,df-witness,df-witness-mutate,entry-df-unclean,mask-windows -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.10s
06:15:54 === clippy: cargo clippy -p kernel --target x86_64-unknown-none --features heap-band-notail,heap-lockspin -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
06:15:54 === clippy: cargo clippy -p kernel --target x86_64-unknown-none --features heap-band-nohead -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.14s
06:15:54 === clippy: cargo clippy -p kernel --target aarch64-unknown-none-softfloat -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.19s
06:15:54 === clippy: cargo clippy -p kernel --target aarch64-unknown-none-softfloat --features boot-actuators,test-actuators -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.21s
06:15:55 === clippy: cargo clippy -p kernel --target aarch64-unknown-none-softfloat --features boot-actuators -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
06:15:55 === clippy: cargo clippy -p kernel --target aarch64-unknown-none-softfloat --features debug-wait,sched-check,sched-tripwire,heap-tripwire,heap-sweep,pass-spin,stack-witness,switch-witness,switch-witness-mutate-frame,switch-witness-mutate-rsp,mask-windows -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
06:15:55 === clippy: cargo clippy -p bootloader --target x86_64-unknown-uefi -- $ADOPTED -W clippy::undocumented_unsafe_blocks -D warnings
    Checking toyos-update v0.1.0 (<src>/toyos-dirrename/toyos-update)
    Checking bootloader v0.1.0 (<src>/toyos-dirrename/bootloader)
    Finished `dev` profile [optimized + debuginfo] target(s) in 1.61s
06:15:57 === clippy: cargo clippy -p bootloader --target aarch64-unknown-uefi -- $ADOPTED -W clippy::undocumented_unsafe_blocks -D warnings
    Checking toyos-update v0.1.0 (<src>/toyos-dirrename/toyos-update)
    Checking bootloader v0.1.0 (<src>/toyos-dirrename/bootloader)
    Finished `dev` profile [optimized + debuginfo] target(s) in 1.19s
06:15:58 === clippy: cargo clippy -p toyos-xhci --all-targets -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
06:15:58 === clippy: cargo clippy -p kernel-loom --test loom_mailbox --features victim-retires-mid-probe -- $ADOPTED -D warnings
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.25s
06:15:59 === clippy: cargo clippy -p toyos-abi --all-targets --keep-going --target-dir target/clippy-abi -- -W clippy::undocumented_unsafe_blocks -D warnings
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.20s
06:15:59 === clippy: cargo clippy --manifest-path userland/acpiserver/aml/Cargo.toml --all-targets -- $ADOPTED -D warnings
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.14s
06:15:59 === clippy: cargo clippy --manifest-path userland/compositor/desktop/Cargo.toml --all-targets -- $ADOPTED -D warnings
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.21s
06:16:00 === clippy: cargo clippy --manifest-path userland/netstack/mdns/Cargo.toml --all-targets -- $ADOPTED -D warnings
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
06:16:00 === clippy: cargo clippy --manifest-path userland/netstack/node/Cargo.toml --all-targets -- $ADOPTED -D warnings
    Checking toyos-net-node v0.1.0 (<src>/toyos-dirrename/userland/netstack/node)
    Finished `dev` profile [optimized + debuginfo] target(s) in 1.61s
06:16:02 === clippy: cargo clippy --manifest-path userland/soundserver/mixer/Cargo.toml --all-targets -- $ADOPTED -D warnings
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.29s
06:16:02 [ci] clippy, warnings denied: clean

06:16:02 === [ci] kernel-loom without loom
    Finished `test` profile [optimized + debuginfo] target(s) in 0.44s
     Running tests/log_body_words.rs (target/debug/deps/log_body_words-ba761697c24e5cd1)

running 2 tests
test a_shorter_record_does_not_inherit_the_longer_one_it_replaced ... ok
test every_field_survives_the_word_packing ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/log_cursor.rs (target/debug/deps/log_cursor-b3271d086aa5f722)

running 2 tests
test a_cursors_loss_claim_is_not_read ... ok
test a_cursor_ahead_of_a_shard_is_refused ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/log_zeroed_init.rs (target/debug/deps/log_zeroed_init-f65a416c9f0ef2f9)

running 1 test
test a_zero_allocated_ap_shard_issues_first_seq_first ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:03 [ci] kernel-loom without loom: cargo test -p kernel-loom --no-default-features --test log_zeroed_init --test log_body_words --test log_cursor

06:16:03 === [ci] control `wake-fence-off`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.17s
     Running tests/log_wake.rs (target/debug/deps/log_wake-fd96f3dce4f325b5)

running 1 test
test a_commit_and_an_arm_cannot_both_miss ... FAILED

failures:

---- a_commit_and_an_arm_cannot_both_miss stdout ----

thread 'a_commit_and_an_arm_cannot_both_miss' (237796621) panicked at kernel/loom/tests/log_wake.rs:98:9:
the producer posted nothing and the reader decided to park: a committed record is left with a parked reader, and only a missing fence can produce it
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_commit_and_an_arm_cannot_both_miss

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test log_wake`
06:16:03 [ci] control `wake-fence-off`: 1 verdict(s) reached

06:16:03 === [ci] control `lock-acquire-off`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.14s
     Running tests/ticket_lock.rs (target/debug/deps/ticket_lock-1441b3e0d5540721)

running 1 test
test try_lock_observes_the_previous_owners_writes ... FAILED

failures:

---- try_lock_observes_the_previous_owners_writes stdout ----

thread 'try_lock_observes_the_previous_owners_writes' (237796822) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent write accesses to `UnsafeCell`.

note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    try_lock_observes_the_previous_owners_writes

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test ticket_lock`
06:16:04 [ci] control `lock-acquire-off`: 1 verdict(s) reached

06:16:04 === [ci] control `owed-fence-off`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running tests/owed_lock.rs (target/debug/deps/owed_lock-2028f07743415783)

running 1 test
test a_turned_away_cpu_holds_the_lock_or_is_answered ... FAILED

failures:

---- a_turned_away_cpu_holds_the_lock_or_is_answered stdout ----

thread 'a_turned_away_cpu_holds_the_lock_or_is_answered' (237796904) panicked at kernel/loom/tests/owed_lock.rs:52:9:
cpu 3 was turned away and nobody answered it
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_turned_away_cpu_holds_the_lock_or_is_answered

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test owed_lock`
06:16:04 [ci] control `owed-fence-off`: 1 verdict(s) reached

06:16:04 === [ci] control `seqlock-writer-fence-off`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.23s
     Running tests/panic_console_publish.rs (target/debug/deps/panic_console_publish-f3e00ff7db7a9c08)

running 1 test
test a_snapshot_is_one_publication_whole ... FAILED

failures:

---- a_snapshot_is_one_publication_whole stdout ----

thread 'a_snapshot_is_one_publication_whole' (237797100) panicked at kernel/loom/tests/panic_console_publish.rs:28:13:
a snapshot kept two publications' words: [1, 1, 1, 2]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_snapshot_is_one_publication_whole

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test panic_console_publish`
06:16:04 [ci] control `seqlock-writer-fence-off`: 1 verdict(s) reached

06:16:04 === [ci] control `serial-try-lock-then-some`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.12s
     Running tests/serial_lock.rs (target/debug/deps/serial_lock-f65ea87dbf3a7210)

running 2 tests
test a_lost_try_lock_leaves_the_lock_held ... FAILED
test two_writers_never_overlap ... FAILED

failures:

---- a_lost_try_lock_leaves_the_lock_held stdout ----

thread 'a_lost_try_lock_leaves_the_lock_held' (237797223) panicked at kernel/loom/tests/serial_lock.rs:24:9:
a lost try_lock released the lock its holder still has
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- two_writers_never_overlap stdout ----

thread 'two_writers_never_overlap' (237797224) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent write accesses to `UnsafeCell`.



failures:
    a_lost_try_lock_leaves_the_lock_held
    two_writers_never_overlap

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 7 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test serial_lock`
06:16:05 [ci] control `serial-try-lock-then-some`: 2 verdict(s) reached

06:16:05 === [ci] control `reap-raise-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.14s
     Running tests/reap_gate.rs (target/debug/deps/reap_gate-a6fae9c43f3f99ca)

running 1 test
test a_claim_sees_the_enrolled_work ... FAILED

failures:

---- a_claim_sees_the_enrolled_work stdout ----

thread 'a_claim_sees_the_enrolled_work' (237797390) panicked at kernel/loom/tests/reap_gate.rs:97:13:
assertion `left == right` failed: a claimed gate handed the reaper an unpublished exit — the raise did not carry the work it was raised for
  left: 0
 right: 1
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_claim_sees_the_enrolled_work

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 3 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test reap_gate`
06:16:05 [ci] control `reap-raise-relaxed`: 1 verdict(s) reached

06:16:05 === [ci] control `shootdown-serve-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running tests/tlb_shootdown.rs (target/debug/deps/tlb_shootdown-a2e346343d56fb12)

running 2 tests
test an_acknowledged_flush_postdates_the_page_table_write ... FAILED
test one_serve_answers_two_concurrent_shootdowns ... FAILED

failures:

---- an_acknowledged_flush_postdates_the_page_table_write stdout ----

thread 'an_acknowledged_flush_postdates_the_page_table_write' (237797580) panicked at kernel/loom/tests/tlb_shootdown.rs:142:13:
assertion `left == right` failed: cpu 1 acknowledged the shootdown while still holding a translation for the page the initiator is about to free
  left: 1
 right: 0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- one_serve_answers_two_concurrent_shootdowns stdout ----

thread 'one_serve_answers_two_concurrent_shootdowns' (237797581) panicked at kernel/loom/tests/tlb_shootdown.rs:181:13:
assertion `left == right` failed: the first initiator freed a page cpu 1 could still reach
  left: 1
 right: 0


failures:
    an_acknowledged_flush_postdates_the_page_table_write
    one_serve_answers_two_concurrent_shootdowns

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.18s

error: test failed, to rerun pass `-p kernel-loom --test tlb_shootdown`
06:16:05 [ci] control `shootdown-serve-relaxed`: 2 verdict(s) reached

06:16:05 === [ci] control `shootdown-served-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.12s
     Running tests/counters_round.rs (target/debug/deps/counters_round-2f4dae6a97ddac0b)

running 1 test
test a_cpu_read_as_answered_is_read_with_its_answer ... FAILED

failures:

---- a_cpu_read_as_answered_is_read_with_its_answer stdout ----

thread 'a_cpu_read_as_answered_is_read_with_its_answer' (237797791) panicked at kernel/loom/tests/counters_round.rs:57:17:
assertion `left == right` failed: cpu 1 read as having answered the round, and its block did not copy out that answer
  left: None
 right: Some([2, 2])
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_cpu_read_as_answered_is_read_with_its_answer

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test counters_round`
06:16:06 [ci] control `shootdown-served-relaxed`: 1 verdict(s) reached

06:16:06 === [ci] control `roster-commit-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running tests/smp_bringup.rs (target/debug/deps/smp_bringup-890aba1ad9e2e955)

running 1 test
test a_committed_count_never_outruns_its_slot ... FAILED

failures:

---- a_committed_count_never_outruns_its_slot stdout ----

thread 'a_committed_count_never_outruns_its_slot' (237797933) panicked at kernel/loom/tests/smp_bringup.rs:50:17:
assertion `left == right` failed: a reader saw cpu1 counted while its hardware-id slot was still unfilled
  left: 4294967295
 right: 7
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_committed_count_never_outruns_its_slot

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test smp_bringup`
06:16:06 [ci] control `roster-commit-relaxed`: 1 verdict(s) reached

06:16:06 === [ci] control `smp-ready-split`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.22s
     Running tests/smp_bringup.rs (target/debug/deps/smp_bringup-12b06e12df4049d5)

running 1 test
test a_released_machine_is_answering ... FAILED

failures:

---- a_released_machine_is_answering stdout ----

thread 'a_released_machine_is_answering' (237798089) panicked at kernel/loom/tests/smp_bringup.rs:83:21:
a CPU saw the machine released but not answering: a shootdown here is local-only and skips an AP that may already have joined
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_released_machine_is_answering

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test smp_bringup`
06:16:06 [ci] control `smp-ready-split`: 1 verdict(s) reached

06:16:06 === [ci] control `log-commit-release-off`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.14s
     Running tests/log_record.rs (target/debug/deps/log_record-8901e25c649904e8)

running 2 tests
test a_committed_record_is_whole_or_absent ... FAILED
test a_key_and_the_record_it_names_come_from_one_generation ... FAILED

failures:

---- a_committed_record_is_whole_or_absent stdout ----

thread 'a_committed_record_is_whole_or_absent' (237798330) panicked at kernel/loom/tests/log_record.rs:82:5:
assertion `left == right` failed: torn: at_ns is another record's
  left: 0
 right: 1007
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_key_and_the_record_it_names_come_from_one_generation stdout ----

thread 'a_key_and_the_record_it_names_come_from_one_generation' (237798331) panicked at kernel/loom/tests/log_record.rs:355:13:
assertion `left == right` failed: a key from the generation the slot used to hold
  left: 1007
 right: 5007


failures:
    a_committed_record_is_whole_or_absent
    a_key_and_the_record_it_names_come_from_one_generation

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 5 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test log_record`
06:16:07 [ci] control `log-commit-release-off`: 2 verdict(s) reached

06:16:07 === [ci] control `shard-publish-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.12s
     Running tests/log_publish.rs (target/debug/deps/log_publish-69909270b5c9854c)

running 1 test
test a_reader_that_finds_a_shard_finds_it_built ... FAILED

failures:

---- a_reader_that_finds_a_shard_finds_it_built stdout ----

thread 'a_reader_that_finds_a_shard_finds_it_built' (237798595) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent load and mut accesses.

note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_reader_that_finds_a_shard_finds_it_built

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test log_publish`
06:16:07 [ci] control `shard-publish-relaxed`: 1 verdict(s) reached

06:16:07 === [ci] control `log-ring-publish-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.12s
     Running tests/log_ring.rs (target/debug/deps/log_ring-fd5970f45225a9ad)

running 3 tests
test a_lane_publishes_whole_and_reuses_only_after_a_read ... FAILED
test a_slot_is_reused_only_after_its_record_was_read ... FAILED
test a_published_record_is_whole_and_read_once ... FAILED

failures:

---- a_lane_publishes_whole_and_reuses_only_after_a_read stdout ----

thread 'a_lane_publishes_whole_and_reuses_only_after_a_read' (237798857) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent read and write accesses.

note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_slot_is_reused_only_after_its_record_was_read stdout ----

thread 'a_slot_is_reused_only_after_its_record_was_read' (237798859) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent read and write accesses.


---- a_published_record_is_whole_and_read_once stdout ----

thread 'a_published_record_is_whole_and_read_once' (237798858) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent read and write accesses.



failures:
    a_lane_publishes_whole_and_reuses_only_after_a_read
    a_published_record_is_whole_and_read_once
    a_slot_is_reused_only_after_its_record_was_read

test result: FAILED. 0 passed; 3 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

error: test failed, to rerun pass `-p kernel-loom --test log_ring`
06:16:07 [ci] control `log-ring-publish-relaxed`: 3 verdict(s) reached

06:16:07 === [ci] control `log-ring-tail-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running tests/log_ring.rs (target/debug/deps/log_ring-65fb5473d901dbfd)

running 3 tests
test a_lane_publishes_whole_and_reuses_only_after_a_read ... FAILED
test a_slot_is_reused_only_after_its_record_was_read ... FAILED
test a_published_record_is_whole_and_read_once ... FAILED

failures:

---- a_lane_publishes_whole_and_reuses_only_after_a_read stdout ----

thread 'a_lane_publishes_whole_and_reuses_only_after_a_read' (237799056) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent read and write accesses to `UnsafeCell`.

note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_slot_is_reused_only_after_its_record_was_read stdout ----

thread 'a_slot_is_reused_only_after_its_record_was_read' (237799058) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent read and write accesses to `UnsafeCell`.


---- a_published_record_is_whole_and_read_once stdout ----

thread 'a_published_record_is_whole_and_read_once' (237799057) panicked at kernel/loom/tests/log_ring.rs:119:45:
assertion `left == right` failed
  left: Refused
 right: Written


failures:
    a_lane_publishes_whole_and_reuses_only_after_a_read
    a_published_record_is_whole_and_read_once
    a_slot_is_reused_only_after_its_record_was_read

test result: FAILED. 0 passed; 3 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

error: test failed, to rerun pass `-p kernel-loom --test log_ring`
06:16:08 [ci] control `log-ring-tail-relaxed`: 3 verdict(s) reached

06:16:08 === [ci] control `log-ring-loads-swapped`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.14s
     Running tests/log_ring.rs (target/debug/deps/log_ring-17a1cc881f842c98)

running 1 test
test a_published_record_is_whole_and_read_once ... FAILED

failures:

---- a_published_record_is_whole_and_read_once stdout ----

thread 'a_published_record_is_whole_and_read_once' (237799219) panicked at kernel/loom/tests/log_ring.rs:119:45:
assertion `left == right` failed
  left: Refused
 right: Written
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_published_record_is_whole_and_read_once

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.01s

error: test failed, to rerun pass `-p kernel-loom --test log_ring`
06:16:08 [ci] control `log-ring-loads-swapped`: 1 verdict(s) reached

06:16:08 === [ci] control `post-is-an-answer`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.18s
     Running tests/inbox_answer.rs (target/debug/deps/inbox_answer-bf78819351e10b6a)

running 3 tests
test a_post_with_nothing_to_read_answers_nothing ... FAILED
test a_post_that_lands_after_its_bytes_were_read_answers_nothing ... FAILED
test a_poll_armed_again_does_not_end_the_look ... FAILED

failures:

---- a_post_with_nothing_to_read_answers_nothing stdout ----

thread 'a_post_with_nothing_to_read_answers_nothing' (237799388) panicked at kernel/loom/tests/inbox_answer.rs:247:9:
assertion `left == right` failed: a post with nothing behind it was answered
  left: [(7, 1)]
 right: []

---- a_post_that_lands_after_its_bytes_were_read_answers_nothing stdout ----

thread 'a_post_that_lands_after_its_bytes_were_read_answers_nothing' (237799387) panicked at kernel/loom/tests/inbox_answer.rs:276:9:
assertion `left == right` failed: the payload's late post was answered
  left: [(7, 1)]
 right: []
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_poll_armed_again_does_not_end_the_look stdout ----

thread 'a_poll_armed_again_does_not_end_the_look' (237799386) panicked at kernel/loom/tests/inbox_answer.rs:310:9:
assertion `left == right` failed
  left: [(3, 1), (4, 1)]
 right: [(4, 1)]


failures:
    a_poll_armed_again_does_not_end_the_look
    a_post_that_lands_after_its_bytes_were_read_answers_nothing
    a_post_with_nothing_to_read_answers_nothing

test result: FAILED. 0 passed; 3 failed; 0 ignored; 0 measured; 13 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test inbox_answer`
06:16:08 [ci] control `post-is-an-answer`: 3 verdict(s) reached

06:16:08 === [ci] control `poll-fire-load-store`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.12s
     Running tests/poll_once.rs (target/debug/deps/poll_once-e7936a3e2ec155dd)

running 2 tests
test a_post_and_a_recheck_answer_a_poll_once ... FAILED
test a_withdrawal_and_a_post_never_both_take_a_poll ... FAILED

failures:

---- a_post_and_a_recheck_answer_a_poll_once stdout ----

thread 'a_post_and_a_recheck_answer_a_poll_once' (237799525) panicked at kernel/loom/tests/poll_once.rs:49:9:
assertion `left == right` failed: a ready poll is answered exactly once
  left: 2
 right: 1

---- a_withdrawal_and_a_post_never_both_take_a_poll stdout ----

thread 'a_withdrawal_and_a_post_never_both_take_a_poll' (237799526) panicked at kernel/loom/tests/poll_once.rs:72:9:
answered=true withdrawn=true
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_post_and_a_recheck_answer_a_poll_once
    a_withdrawal_and_a_post_never_both_take_a_poll

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test poll_once`
06:16:09 [ci] control `poll-fire-load-store`: 2 verdict(s) reached

06:16:09 === [ci] control `sleeplock-acquire-off`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running tests/sleep_lock.rs (target/debug/deps/sleep_lock-f3b193adf2ee818c)

running 2 tests
test two_holders_never_overlap ... FAILED
test a_parking_contender_observes_the_holders_writes ... FAILED

failures:

---- two_holders_never_overlap stdout ----

thread 'two_holders_never_overlap' (237799665) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent write accesses to `UnsafeCell`.

note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_parking_contender_observes_the_holders_writes stdout ----

thread 'a_parking_contender_observes_the_holders_writes' (237799664) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent write accesses to `UnsafeCell`.



failures:
    a_parking_contender_observes_the_holders_writes
    two_holders_never_overlap

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test sleep_lock`
06:16:09 [ci] control `sleeplock-acquire-off`: 2 verdict(s) reached

06:16:09 === [ci] control `device-irq-lossy`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.12s
     Running tests/device_irq.rs (target/debug/deps/device_irq-9fe67f32f4d3986f)

running 1 test
test every_message_is_counted_once ... FAILED

failures:

---- every_message_is_counted_once stdout ----

thread 'every_message_is_counted_once' (237799825) panicked at kernel/loom/tests/device_irq.rs:51:9:
assertion `left == right` failed: two interrupts arrived, the reader took 0 and 1 were left: a driver that misses one waits for a device that has already spoken
  left: 1
 right: 2
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    every_message_is_counted_once

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test device_irq`
06:16:09 [ci] control `device-irq-lossy`: 1 verdict(s) reached

06:16:09 === [ci] control `dump-report-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.16s
     Running tests/dump_request.rs (target/debug/deps/dump_request-f9ff90301d3f7756)

running 1 test
test a_request_filed_during_a_report_is_reported ... FAILED

failures:

---- a_request_filed_during_a_report_is_reported stdout ----

thread 'a_request_filed_during_a_report_is_reported' (237800068) panicked at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/location.rs:115:9:
Causality violation: Concurrent write accesses to `UnsafeCell`.

note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_request_filed_during_a_report_is_reported

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 4 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test dump_request`
06:16:10 [ci] control `dump-report-relaxed`: 1 verdict(s) reached

06:16:10 === [ci] control `no-preempt-guard`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running tests/loom_mailbox.rs (target/debug/deps/loom_mailbox-a88193098a4b07bc)

running 1 test

thread 'preempted_producer_strands_suffix' (237800403) panicked at kernel/loom/tests/loom_mailbox.rs:76:9:
I2: this CPU halted while its own interrupted context is inside a push. That context cannot resume while the CPU sleeps, so every message queued behind its unlinked node stays invisible with no doorbell edge left to raise. Drained so far: []
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
test preempted_producer_strands_suffix ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

06:16:11 [ci] control `no-preempt-guard`: 1 verdict(s) reached

06:16:11 === [ci] control `doorbell-kick-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running tests/loom_sleep.rs (target/debug/deps/loom_sleep-c38cbcf547a528eb)

running 1 test

thread 'a_halted_cpu_with_queued_work_was_kicked' (237801031) panicked at kernel/loom/tests/loom_sleep.rs:104:13:
halted with 2 of 2 messages queued and no IPI in flight — a sleep-through
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

thread 'a_halted_cpu_with_queued_work_was_kicked' (237801031) panicked at kernel/loom/src/../../pure/sched/mailbox.rs:178:9:
mailbox node dropped with a message in flight
stack backtrace:
   0:        0x100355edc - std[5d97c59e5e5fafcc]::backtrace_rs::backtrace::libunwind::trace
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/../../backtrace/src/backtrace/libunwind.rs:117:9
   1:        0x100355edc - std[5d97c59e5e5fafcc]::backtrace_rs::backtrace::trace_unsynchronized::<std[5d97c59e5e5fafcc]::sys::backtrace::_print_fmt::{closure#1}>
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/../../backtrace/src/backtrace/mod.rs:66:14
   2:        0x100355edc - std[5d97c59e5e5fafcc]::sys::backtrace::_print_fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:74:9
   3:        0x100355edc - <<std[5d97c59e5e5fafcc]::sys::backtrace::BacktraceLock>::print::DisplayBacktrace as core[663bb9e1522ba5ef]::fmt::Display>::fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:44:26
   4:        0x10036725c - <core[663bb9e1522ba5ef]::fmt::rt::Argument>::fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/fmt/rt.rs:152:76
   5:        0x10036725c - core[663bb9e1522ba5ef]::fmt::write
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/fmt/mod.rs:1687:22
   6:        0x100359a54 - std[5d97c59e5e5fafcc]::io::default_write_fmt::<alloc[cc4db322bb1ac55d]::vec::Vec<u8>>
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/io/mod.rs:626:11
   7:        0x100359a54 - <alloc[cc4db322bb1ac55d]::vec::Vec<u8> as std[5d97c59e5e5fafcc]::io::Write>::write_fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/io/mod.rs:1730:13
   8:        0x10033cbd4 - <std[5d97c59e5e5fafcc]::sys::backtrace::BacktraceLock>::print
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:47:25
   9:        0x10033cbd4 - std[5d97c59e5e5fafcc]::panicking::default_hook::{closure#0}
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:292:27
  10:        0x10034f694 - std[5d97c59e5e5fafcc]::panicking::default_hook
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:316:9
  11:        0x1002e7c70 - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn for<'a, 'b> core[663bb9e1522ba5ef]::ops::function::Fn<(&'a std[5d97c59e5e5fafcc]::panic::PanicHookInfo<'b>,), Output = ()> + core[663bb9e1522ba5ef]::marker::Sync + core[663bb9e1522ba5ef]::marker::Send> as core[663bb9e1522ba5ef]::ops::function::Fn<(&std[5d97c59e5e5fafcc]::panic::PanicHookInfo,)>>::call
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/alloc/src/boxed.rs:2333:9
  12:        0x1002e7c70 - test[4aa3eea2f4983582]::test_main_inner::<test[4aa3eea2f4983582]::test_main_static::{closure#0}>::{closure#0}
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/test/src/lib.rs:155:21
  13:        0x100329c4c - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn for<'a, 'b> core[663bb9e1522ba5ef]::ops::function::Fn<(&'a std[5d97c59e5e5fafcc]::panic::PanicHookInfo<'b>,), Output = ()> + core[663bb9e1522ba5ef]::marker::Sync + core[663bb9e1522ba5ef]::marker::Send> as core[663bb9e1522ba5ef]::ops::function::Fn<(&std[5d97c59e5e5fafcc]::panic::PanicHookInfo,)>>::call
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/alloc/src/boxed.rs:2333:9
  14:        0x100329c4c - generator[50749e7e4996c531]::detail::gen::catch_unwind_filter::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>::{closure#0}::{closure#0}
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:19:13
  15:        0x10034fbd4 - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn for<'a, 'b> core[663bb9e1522ba5ef]::ops::function::Fn<(&'a std[5d97c59e5e5fafcc]::panic::PanicHookInfo<'b>,), Output = ()> + core[663bb9e1522ba5ef]::marker::Sync + core[663bb9e1522ba5ef]::marker::Send> as core[663bb9e1522ba5ef]::ops::function::Fn<(&std[5d97c59e5e5fafcc]::panic::PanicHookInfo,)>>::call
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/alloc/src/boxed.rs:2333:9
  16:        0x10034fbd4 - std[5d97c59e5e5fafcc]::panicking::panic_with_hook
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:823:13
  17:        0x10033cc88 - std[5d97c59e5e5fafcc]::panicking::panic_handler::{closure#0}
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:681:13
  18:        0x100333d60 - std[5d97c59e5e5fafcc]::sys::backtrace::__rust_end_short_backtrace::<std[5d97c59e5e5fafcc]::panicking::panic_handler::{closure#0}, !>
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:182:18
  19:        0x10033d3f4 - __rustc[100742bb89c490cb]::rust_begin_unwind
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:679:5
  20:        0x100375ff4 - core[663bb9e1522ba5ef]::panicking::panic_fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/panicking.rs:80:14
  21:        0x1002db104 - <kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg> as core[663bb9e1522ba5ef]::ops::drop::Drop>::drop
                               at <src>/toyos-dirrename/kernel/loom/src/../../pure/sched/mailbox.rs:178:9
  22:        0x1002db104 - core[663bb9e1522ba5ef]::ptr::drop_glue::<kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg>>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  23:        0x1002db104 - core[663bb9e1522ba5ef]::ptr::drop_glue::<[kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg>]>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  24:        0x1002db104 - core[663bb9e1522ba5ef]::ptr::drop_glue::<[kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg>; 2usize]>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  25:        0x1002db104 - core[663bb9e1522ba5ef]::ptr::drop_glue::<loom_sleep[8e8d7a68dd6c3415]::World>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  26:        0x1002d316c - core[663bb9e1522ba5ef]::ptr::drop_in_place::<loom_sleep[8e8d7a68dd6c3415]::World>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:818:14
  27:        0x1002d316c - <alloc[cc4db322bb1ac55d]::sync::Arc<loom_sleep[8e8d7a68dd6c3415]::World>>::drop_slow
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/alloc/src/sync.rs:2143:18
  28:        0x1002d6040 - loom_sleep[8e8d7a68dd6c3415]::a_halted_cpu_with_queued_work_was_kicked::{closure#0}
                               at <src>/toyos-dirrename/kernel/loom/tests/loom_sleep.rs:121:5
  29:        0x1002d6040 - <loom[709ac591f2027ef2]::model::Builder>::check::<loom_sleep[8e8d7a68dd6c3415]::a_halted_cpu_with_queued_work_was_kicked::{closure#0}>::{closure#0}
                               at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/model.rs:194:17
  30:        0x1002d6040 - <<loom[709ac591f2027ef2]::model::Builder>::check<loom_sleep[8e8d7a68dd6c3415]::a_halted_cpu_with_queued_work_was_kicked::{closure#0}>::{closure#0} as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once::{shim:vtable#0}
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
  31:        0x10031f1d4 - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn core[663bb9e1522ba5ef]::ops::function::FnOnce<(), Output = ()>> as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/alloc/src/boxed.rs:2319:9
  32:        0x10031f1d4 - loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0}
                               at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/scheduler.rs:142:17
  33:        0x10031f1d4 - <loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0} as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
  34:        0x10031f1d4 - <generator[50749e7e4996c531]::gen_impl::GeneratorImpl<core[663bb9e1522ba5ef]::option::Option<alloc[cc4db322bb1ac55d]::boxed::Box<dyn core[663bb9e1522ba5ef]::ops::function::FnOnce<(), Output = ()>>>, ()>>::init_code::<loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0}>::{closure#0}
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/gen_impl.rs:357:21
  35:        0x10031f1d4 - <generator[50749e7e4996c531]::stack::StackBox<<generator[50749e7e4996c531]::gen_impl::GeneratorImpl<core[663bb9e1522ba5ef]::option::Option<alloc[cc4db322bb1ac55d]::boxed::Box<dyn core[663bb9e1522ba5ef]::ops::function::FnOnce<(), Output = ()>>>, ()>>::init_code<loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0}>::{closure#0}>>::call_once
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/stack/mod.rs:137:13
  36:        0x100370bdc - <generator[50749e7e4996c531]::stack::Func>::call_once
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/stack/mod.rs:119:9
  37:        0x100370bdc - generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:35:14
  38:        0x100370bdc - <generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0} as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
  39:        0x100370bdc - std[5d97c59e5e5fafcc]::panicking::catch_unwind::do_call::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/std/src/panicking.rs:576:43
  40:        0x100370bdc - std[5d97c59e5e5fafcc]::panicking::catch_unwind::<(), generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/std/src/panicking.rs:544:19
  41:        0x100370bdc - std[5d97c59e5e5fafcc]::panic::catch_unwind::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/std/src/panic.rs:359:14
  42:        0x100370bdc - generator[50749e7e4996c531]::detail::gen::catch_unwind_filter::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:23:5
  43:        0x100370bdc - generator[50749e7e4996c531]::detail::gen::gen_init_impl
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:50:25
  44:        0x100370b6c - generator[50749e7e4996c531]::detail::asm::gen_init
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/aarch64_unix.rs:22:5

thread 'a_halted_cpu_with_queued_work_was_kicked' (237801031) panicked at kernel/loom/src/../../pure/sched/mailbox.rs:178:9:
mailbox node dropped with a message in flight
stack backtrace:
   0:        0x100355edc - std[5d97c59e5e5fafcc]::backtrace_rs::backtrace::libunwind::trace
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/../../backtrace/src/backtrace/libunwind.rs:117:9
   1:        0x100355edc - std[5d97c59e5e5fafcc]::backtrace_rs::backtrace::trace_unsynchronized::<std[5d97c59e5e5fafcc]::sys::backtrace::_print_fmt::{closure#1}>
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/../../backtrace/src/backtrace/mod.rs:66:14
   2:        0x100355edc - std[5d97c59e5e5fafcc]::sys::backtrace::_print_fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:74:9
   3:        0x100355edc - <<std[5d97c59e5e5fafcc]::sys::backtrace::BacktraceLock>::print::DisplayBacktrace as core[663bb9e1522ba5ef]::fmt::Display>::fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:44:26
   4:        0x10036725c - <core[663bb9e1522ba5ef]::fmt::rt::Argument>::fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/fmt/rt.rs:152:76
   5:        0x10036725c - core[663bb9e1522ba5ef]::fmt::write
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/fmt/mod.rs:1687:22
   6:        0x100359a54 - std[5d97c59e5e5fafcc]::io::default_write_fmt::<alloc[cc4db322bb1ac55d]::vec::Vec<u8>>
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/io/mod.rs:626:11
   7:        0x100359a54 - <alloc[cc4db322bb1ac55d]::vec::Vec<u8> as std[5d97c59e5e5fafcc]::io::Write>::write_fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/io/mod.rs:1730:13
   8:        0x10033cbd4 - <std[5d97c59e5e5fafcc]::sys::backtrace::BacktraceLock>::print
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:47:25
   9:        0x10033cbd4 - std[5d97c59e5e5fafcc]::panicking::default_hook::{closure#0}
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:292:27
  10:        0x10034f694 - std[5d97c59e5e5fafcc]::panicking::default_hook
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:316:9
  11:        0x1002e7c70 - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn for<'a, 'b> core[663bb9e1522ba5ef]::ops::function::Fn<(&'a std[5d97c59e5e5fafcc]::panic::PanicHookInfo<'b>,), Output = ()> + core[663bb9e1522ba5ef]::marker::Sync + core[663bb9e1522ba5ef]::marker::Send> as core[663bb9e1522ba5ef]::ops::function::Fn<(&std[5d97c59e5e5fafcc]::panic::PanicHookInfo,)>>::call
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/alloc/src/boxed.rs:2333:9
  12:        0x1002e7c70 - test[4aa3eea2f4983582]::test_main_inner::<test[4aa3eea2f4983582]::test_main_static::{closure#0}>::{closure#0}
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/test/src/lib.rs:155:21
  13:        0x100329c4c - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn for<'a, 'b> core[663bb9e1522ba5ef]::ops::function::Fn<(&'a std[5d97c59e5e5fafcc]::panic::PanicHookInfo<'b>,), Output = ()> + core[663bb9e1522ba5ef]::marker::Sync + core[663bb9e1522ba5ef]::marker::Send> as core[663bb9e1522ba5ef]::ops::function::Fn<(&std[5d97c59e5e5fafcc]::panic::PanicHookInfo,)>>::call
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/alloc/src/boxed.rs:2333:9
  14:        0x100329c4c - generator[50749e7e4996c531]::detail::gen::catch_unwind_filter::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>::{closure#0}::{closure#0}
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:19:13
  15:        0x10034fbd4 - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn for<'a, 'b> core[663bb9e1522ba5ef]::ops::function::Fn<(&'a std[5d97c59e5e5fafcc]::panic::PanicHookInfo<'b>,), Output = ()> + core[663bb9e1522ba5ef]::marker::Sync + core[663bb9e1522ba5ef]::marker::Send> as core[663bb9e1522ba5ef]::ops::function::Fn<(&std[5d97c59e5e5fafcc]::panic::PanicHookInfo,)>>::call
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/alloc/src/boxed.rs:2333:9
  16:        0x10034fbd4 - std[5d97c59e5e5fafcc]::panicking::panic_with_hook
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:823:13
  17:        0x10033cc88 - std[5d97c59e5e5fafcc]::panicking::panic_handler::{closure#0}
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:681:13
  18:        0x100333d60 - std[5d97c59e5e5fafcc]::sys::backtrace::__rust_end_short_backtrace::<std[5d97c59e5e5fafcc]::panicking::panic_handler::{closure#0}, !>
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/sys/backtrace.rs:182:18
  19:        0x10033d3f4 - __rustc[100742bb89c490cb]::rust_begin_unwind
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/std/src/panicking.rs:679:5
  20:        0x100375ff4 - core[663bb9e1522ba5ef]::panicking::panic_fmt
                               at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/panicking.rs:80:14
  21:        0x1002da7c8 - <kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg> as core[663bb9e1522ba5ef]::ops::drop::Drop>::drop
                               at <src>/toyos-dirrename/kernel/loom/src/../../pure/sched/mailbox.rs:178:9
  22:        0x1002da7c8 - core[663bb9e1522ba5ef]::ptr::drop_glue::<kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg>>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  23:        0x1002db144 - core[663bb9e1522ba5ef]::ptr::drop_glue::<[kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg>]>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  24:        0x1002db144 - core[663bb9e1522ba5ef]::ptr::drop_glue::<[kernel_loom[69df8da3d8035e49]::sched::mailbox::MailboxNode<kernel_loom[69df8da3d8035e49]::sched_model::Msg>; 2usize]>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  25:        0x1002db144 - core[663bb9e1522ba5ef]::ptr::drop_glue::<loom_sleep[8e8d7a68dd6c3415]::World>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:823:1
  26:        0x1002d316c - core[663bb9e1522ba5ef]::ptr::drop_in_place::<loom_sleep[8e8d7a68dd6c3415]::World>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:818:14
  27:        0x1002d316c - <alloc[cc4db322bb1ac55d]::sync::Arc<loom_sleep[8e8d7a68dd6c3415]::World>>::drop_slow
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/alloc/src/sync.rs:2143:18
  28:        0x1002d6040 - loom_sleep[8e8d7a68dd6c3415]::a_halted_cpu_with_queued_work_was_kicked::{closure#0}
                               at <src>/toyos-dirrename/kernel/loom/tests/loom_sleep.rs:121:5
  29:        0x1002d6040 - <loom[709ac591f2027ef2]::model::Builder>::check::<loom_sleep[8e8d7a68dd6c3415]::a_halted_cpu_with_queued_work_was_kicked::{closure#0}>::{closure#0}
                               at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/model.rs:194:17
  30:        0x1002d6040 - <<loom[709ac591f2027ef2]::model::Builder>::check<loom_sleep[8e8d7a68dd6c3415]::a_halted_cpu_with_queued_work_was_kicked::{closure#0}>::{closure#0} as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once::{shim:vtable#0}
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
  31:        0x10031f1d4 - <alloc[cc4db322bb1ac55d]::boxed::Box<dyn core[663bb9e1522ba5ef]::ops::function::FnOnce<(), Output = ()>> as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/alloc/src/boxed.rs:2319:9
  32:        0x10031f1d4 - loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0}
                               at ~/.cargo/git/checkouts/loom-906f299ec1581ba6/dfe3797/src/rt/scheduler.rs:142:17
  33:        0x10031f1d4 - <loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0} as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
  34:        0x10031f1d4 - <generator[50749e7e4996c531]::gen_impl::GeneratorImpl<core[663bb9e1522ba5ef]::option::Option<alloc[cc4db322bb1ac55d]::boxed::Box<dyn core[663bb9e1522ba5ef]::ops::function::FnOnce<(), Output = ()>>>, ()>>::init_code::<loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0}>::{closure#0}
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/gen_impl.rs:357:21
  35:        0x10031f1d4 - <generator[50749e7e4996c531]::stack::StackBox<<generator[50749e7e4996c531]::gen_impl::GeneratorImpl<core[663bb9e1522ba5ef]::option::Option<alloc[cc4db322bb1ac55d]::boxed::Box<dyn core[663bb9e1522ba5ef]::ops::function::FnOnce<(), Output = ()>>>, ()>>::init_code<loom[709ac591f2027ef2]::rt::scheduler::spawn_thread::{closure#0}>::{closure#0}>>::call_once
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/stack/mod.rs:137:13
  36:        0x100370bdc - <generator[50749e7e4996c531]::stack::Func>::call_once
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/stack/mod.rs:119:9
  37:        0x100370bdc - generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:35:14
  38:        0x100370bdc - <generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0} as core[663bb9e1522ba5ef]::ops::function::FnOnce<()>>::call_once
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
  39:        0x100370bdc - std[5d97c59e5e5fafcc]::panicking::catch_unwind::do_call::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/std/src/panicking.rs:576:43
  40:        0x100370bdc - std[5d97c59e5e5fafcc]::panicking::catch_unwind::<(), generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/std/src/panicking.rs:544:19
  41:        0x100370bdc - std[5d97c59e5e5fafcc]::panic::catch_unwind::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>
                               at ~/.rustup/toolchains/stable-aarch64-apple-darwin/lib/rustlib/src/rust/library/std/src/panic.rs:359:14
  42:        0x100370bdc - generator[50749e7e4996c531]::detail::gen::catch_unwind_filter::<generator[50749e7e4996c531]::detail::gen::gen_init_impl::{closure#0}, ()>
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:23:5
  43:        0x100370bdc - generator[50749e7e4996c531]::detail::gen::gen_init_impl
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/gen.rs:50:25
  44:        0x100370b6c - generator[50749e7e4996c531]::detail::asm::gen_init
                               at ~/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generator-0.8.9/src/detail/aarch64_unix.rs:22:5

thread 'a_halted_cpu_with_queued_work_was_kicked' (237801031) panicked at /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library/core/src/panicking.rs:233:5:
panic in a destructor during cleanup
thread caused non-unwinding panic. aborting.
error: test failed, to rerun pass `-p kernel-loom --test loom_sleep`

Caused by:
  process didn't exit successfully: `<src>/toyos-dirrename/target/debug/deps/loom_sleep-c38cbcf547a528eb --exact a_halted_cpu_with_queued_work_was_kicked` (signal: 6, SIGABRT: process abort signal)
06:16:11 [ci] control `doorbell-kick-relaxed`: 1 verdict(s) reached

06:16:11 === [ci] control `push-fence-relaxed`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.19s
     Running tests/loom_push.rs (target/debug/deps/loom_push-9be859ddff6561a3)

running 1 test
test a_cpu_that_halts_without_seeing_the_surplus_was_pushed ... FAILED

failures:

---- a_cpu_that_halts_without_seeing_the_surplus_was_pushed stdout ----

thread 'a_cpu_that_halts_without_seeing_the_surplus_was_pushed' (237801308) panicked at kernel/loom/tests/loom_push.rs:143:9:
cpu1 halted with cpu0's surplus of 2 published and no push behind it — both sides of the store-buffer pair missed, which is the pull path's slept-before-the-surplus defect back again, in a window a fence would have closed
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_cpu_that_halts_without_seeing_the_surplus_was_pushed

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test loom_push`
06:16:12 [ci] control `push-fence-relaxed`: 1 verdict(s) reached

06:16:12 === [ci] control `commit-ignores-notify`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.25s
     Running tests/loom_watch.rs (target/debug/deps/loom_watch-f13a59174a717cf0)

running 2 tests
test a_post_racing_a_registration_leaves_nobody_parked ... FAILED
test a_fire_racing_a_submitters_park_is_never_lost ... FAILED

failures:

---- a_post_racing_a_registration_leaves_nobody_parked stdout ----

thread 'a_post_racing_a_registration_leaves_nobody_parked' (237801675) panicked at kernel/loom/tests/loom_watch.rs:244:13:

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 07.

cargo run -- --ci host, part 07
assertion `left == right` failed: parked with the condition true and no wake owed: the post was lost
  left: []
 right: [Wake(TaskKey(1), Woken)]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_fire_racing_a_submitters_park_is_never_lost stdout ----

thread 'a_fire_racing_a_submitters_park_is_never_lost' (237801674) panicked at kernel/loom/tests/loom_watch.rs:850:13:
assertion `left == right` failed: parked over a fired poll and no wake owed: a fire was lost
  left: []
 right: [Wake(TaskKey(1), Woken)]


failures:
    a_fire_racing_a_submitters_park_is_never_lost
    a_post_racing_a_registration_leaves_nobody_parked

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 10 filtered out; finished in 0.19s

error: test failed, to rerun pass `-p kernel-loom --test loom_watch`
06:16:12 [ci] control `commit-ignores-notify`: 2 verdict(s) reached

06:16:12 === [ci] control `notify-flag-load-only`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.16s
     Running tests/loom_watch.rs (target/debug/deps/loom_watch-804d50fe30374251)

running 1 test
test a_second_post_is_not_lost_to_a_flag_the_waiter_consumed ... FAILED

failures:

---- a_second_post_is_not_lost_to_a_flag_the_waiter_consumed stdout ----

thread 'a_second_post_is_not_lost_to_a_flag_the_waiter_consumed' (237801922) panicked at kernel/loom/tests/loom_watch.rs:454:13:
assertion `left == right` failed: parked with both conditions true and no wake owed: a post answered off a load
  left: []
 right: [Wake(TaskKey(1), Woken)]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_second_post_is_not_lost_to_a_flag_the_waiter_consumed

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 11 filtered out; finished in 2.57s

error: test failed, to rerun pass `-p kernel-loom --test loom_watch`
06:16:15 [ci] control `notify-flag-load-only`: 1 verdict(s) reached

06:16:15 === [ci] control `gate-fence-off`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.12s
     Running tests/loom_watch.rs (target/debug/deps/loom_watch-2dd86f2d566d30a7)

running 1 test
test a_transition_racing_an_opening_gate_is_never_missed ... FAILED

failures:

---- a_transition_racing_an_opening_gate_is_never_missed stdout ----

thread 'a_transition_racing_an_opening_gate_is_never_missed' (237802950) panicked at kernel/loom/tests/loom_watch.rs:602:13:
assertion `left == right` failed: the stop parked over a thread that had parked, and nothing posted it
  left: []
 right: [Wake(TaskKey(1), Woken)]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_transition_racing_an_opening_gate_is_never_missed

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test loom_watch`
06:16:16 [ci] control `gate-fence-off`: 1 verdict(s) reached

06:16:16 === [ci] control `poll-fire-load-store`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.15s
     Running tests/loom_watch.rs (target/debug/deps/loom_watch-c3e0e112b9250e74)

running 3 tests
test a_poll_on_two_watches_racing_both_posts_completes_exactly_once ... FAILED
test a_poll_registered_racing_a_post_in_place_completes_exactly_once ... FAILED
test a_poll_registered_racing_a_post_completes_exactly_once ... FAILED

failures:

---- a_poll_on_two_watches_racing_both_posts_completes_exactly_once stdout ----

thread 'a_poll_on_two_watches_racing_both_posts_completes_exactly_once' (237803142) panicked at kernel/loom/tests/loom_watch.rs:658:9:
assertion `left == right` failed: a poll over a ready object completes once
  left: 2
 right: 1
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_poll_registered_racing_a_post_in_place_completes_exactly_once stdout ----

thread 'a_poll_registered_racing_a_post_in_place_completes_exactly_once' (237803144) panicked at kernel/loom/tests/loom_watch.rs:351:5:
assertion `left == right` failed: a poll over a ready object completes once
  left: 2
 right: 1

---- a_poll_registered_racing_a_post_completes_exactly_once stdout ----

thread 'a_poll_registered_racing_a_post_completes_exactly_once' (237803143) panicked at kernel/loom/tests/loom_watch.rs:351:5:
assertion `left == right` failed: a poll over a ready object completes once
  left: 2
 right: 1


failures:
    a_poll_on_two_watches_racing_both_posts_completes_exactly_once
    a_poll_registered_racing_a_post_completes_exactly_once
    a_poll_registered_racing_a_post_in_place_completes_exactly_once

test result: FAILED. 0 passed; 3 failed; 0 ignored; 0 measured; 9 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test loom_watch`
06:16:16 [ci] control `poll-fire-load-store`: 3 verdict(s) reached

06:16:16 === [ci] control `fault-posted-before-it-is-set`
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.20s
     Running tests/loom_watch.rs (target/debug/deps/loom_watch-342ffd79d5171796)

running 2 tests
test a_poll_registered_racing_a_post_in_place_completes_exactly_once ... FAILED
test a_poll_registered_racing_a_post_completes_exactly_once ... FAILED

failures:

---- a_poll_registered_racing_a_post_in_place_completes_exactly_once stdout ----

thread 'a_poll_registered_racing_a_post_in_place_completes_exactly_once' (237803662) panicked at kernel/loom/tests/loom_watch.rs:350:5:
assertion `left != right` failed: a poll over a ready object was completed by neither
  left: 0
 right: 0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- a_poll_registered_racing_a_post_completes_exactly_once stdout ----

thread 'a_poll_registered_racing_a_post_completes_exactly_once' (237803661) panicked at kernel/loom/tests/loom_watch.rs:350:5:
assertion `left != right` failed: a poll over a ready object was completed by neither
  left: 0
 right: 0


failures:
    a_poll_registered_racing_a_post_completes_exactly_once
    a_poll_registered_racing_a_post_in_place_completes_exactly_once

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 10 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel-loom --test loom_watch`
06:16:16 [ci] control `fault-posted-before-it-is-set`: 3 verdict(s) reached

06:16:16 === [ci] control `victim-retires-mid-probe`
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.20s
     Running tests/loom_mailbox.rs (target/debug/deps/loom_mailbox-854161e9182e6318)

running 1 test

thread 'a_probe_outstanding_when_its_victim_retires_is_never_reclaimed' (237804385) panicked at kernel/loom/tests/loom_mailbox.rs:254:5:
assertion `left == right` failed: the victim retired with a probe still linked in its queue, so the node stays claimed for the rest of the boot and every later `claim()` by its thief answers `None` — one CPU stopping costs a second CPU its pull half permanently
  left: 1
 right: 0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
caught the verdict: the victim retired with a probe still linked in its queue
test a_probe_outstanding_when_its_victim_retires_is_never_reclaimed ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

06:16:17 [ci] control `victim-retires-mid-probe`: 1 verdict(s) reached

06:16:17 === [ci] control `counting-allocator`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.25s
     Running unittests pure/lib.rs (target/debug/deps/kernel-6097f575e1539c4c)

running 2 tests
test pcid::oracle::tests::the_counting_allocator_produces_a_cross_space_read ... ok
test pcid::tests::two_live_address_spaces_never_share_a_pcid ... FAILED

failures:

---- pcid::tests::two_live_address_spaces_never_share_a_pcid stdout ----

thread 'pcid::tests::two_live_address_spaces_never_share_a_pcid' (237805030) panicked at kernel/pure/pcid/mod.rs:171:21:
the allocator reissued tag 1, still held by a live address space
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    pcid::tests::two_live_address_spaces_never_share_a_pcid

test result: FAILED. 1 passed; 1 failed; 0 ignored; 0 measured; 171 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:17 [ci] control `counting-allocator`: 2 verdict(s) reached

06:16:17 === [ci] control `mutate-spawn-skips-the-insert-recheck`
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.31s
     Running unittests pure/lib.rs (target/debug/deps/kernel-0678184e0e5d49cf)

running 2 tests
test proclife::interleave::tests::a_published_exit_leaves_no_unretired_thread ... FAILED
test proclife::interleave::tests::a_kill_racing_a_spawn_leaves_no_unretired_thread ... FAILED

failures:

---- proclife::interleave::tests::a_published_exit_leaves_no_unretired_thread stdout ----

thread 'proclife::interleave::tests::a_published_exit_leaves_no_unretired_thread' (237805641) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 0 was claimed for teardown and never published an exit
  schedule: spawn_thread#1 -> exit#0 -> exit#0 -> spawn_thread#1 -> spawn_thread#1 -> out 0/0 -> out 0/0 -> out 0/1 -> out 0/1

---- proclife::interleave::tests::a_kill_racing_a_spawn_leaves_no_unretired_thread stdout ----

thread 'proclife::interleave::tests::a_kill_racing_a_spawn_leaves_no_unretired_thread' (237805640) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 0 was claimed for teardown and never published an exit
  schedule: spawn_thread#1 -> kill#0 -> kill#0 -> spawn_thread#1 -> spawn_thread#1 -> out 0/0 -> out 0/0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::a_kill_racing_a_spawn_leaves_no_unretired_thread
    proclife::interleave::tests::a_published_exit_leaves_no_unretired_thread

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 172 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:18 [ci] control `mutate-spawn-skips-the-insert-recheck`: 2 verdict(s) reached

06:16:18 === [ci] control `mutate-claim-teardown-always-wins`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.23s
     Running unittests pure/lib.rs (target/debug/deps/kernel-6e184e18194cdfe1)

running 1 test
test proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down ... FAILED

failures:

---- proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down stdout ----

thread 'proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down' (237806596) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 0: 2 teardown claims succeeded
  schedule: exit#0 -> exit#0 -> kill#1
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 174 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:18 [ci] control `mutate-claim-teardown-always-wins`: 1 verdict(s) reached

06:16:18 === [ci] control `mutate-kill-waits-for-its-victims`
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.78s
     Running unittests pure/lib.rs (target/debug/deps/kernel-cafdcd0f4db5baa9)

running 2 tests
test proclife::interleave::tests::a_kill_chain_of_three_ends ... FAILED
test proclife::interleave::tests::two_processes_killing_each_other_both_end ... FAILED

failures:

---- proclife::interleave::tests::a_kill_chain_of_three_ends stdout ----

thread 'proclife::interleave::tests::a_kill_chain_of_three_ends' (237808742) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
a kill waits on pid 1's teardown
  schedule: kill#0 -> kill#0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- proclife::interleave::tests::two_processes_killing_each_other_both_end stdout ----

thread 'proclife::interleave::tests::two_processes_killing_each_other_both_end' (237808743) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
a kill waits on pid 1's teardown
  schedule: kill#0 -> kill#0


failures:
    proclife::interleave::tests::a_kill_chain_of_three_ends
    proclife::interleave::tests::two_processes_killing_each_other_both_end

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 173 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:19 [ci] control `mutate-kill-waits-for-its-victims`: 2 verdict(s) reached

06:16:19 === [ci] control `mutate-first-out-tears-down`
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.46s
     Running unittests pure/lib.rs (target/debug/deps/kernel-20f5b15b9e4ec2b0)

running 1 test
test proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down ... FAILED

failures:

---- proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down stdout ----

thread 'proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down' (237810238) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 0 was torn down with tid 1 still in it
  schedule: exit#0 -> exit#0 -> kill#1 -> out 0/0 -> out 0/0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::an_exit_and_a_kill_never_both_tear_a_process_down

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 173 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:20 [ci] control `mutate-first-out-tears-down`: 1 verdict(s) reached

06:16:20 === [ci] control `mutate-join-collects-in-a-teardown`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.31s
     Running unittests pure/lib.rs (target/debug/deps/kernel-f021dcce956c5b5a)

running 1 test
test proclife::interleave::tests::a_join_racing_the_kill_that_takes_its_target ... FAILED

failures:

---- proclife::interleave::tests::a_join_racing_the_kill_that_takes_its_target stdout ----

thread 'proclife::interleave::tests::a_join_racing_the_kill_that_takes_its_target' (237811138) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 0 tid 1: its entry and its mapped TLS went while a sibling was still in the process
  schedule: kill#0 -> kill#0 -> thread_join#1 -> out 0/0 -> out 0/0 -> out 0/1 -> thread_join#1
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::a_join_racing_the_kill_that_takes_its_target

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 173 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:20 [ci] control `mutate-join-collects-in-a-teardown`: 1 verdict(s) reached

06:16:20 === [ci] control `mutate-last-out-leaves-before-its-teardown`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.35s
     Running unittests pure/lib.rs (target/debug/deps/kernel-9a2779cc48b5db37)

running 2 tests
test proclife::teardown::tests::only_the_thread_that_empties_a_claimed_process_tears_it_down ... FAILED
test proclife::interleave::tests::the_last_one_out_is_in_its_process_until_its_teardown_is_done ... FAILED

failures:

---- proclife::teardown::tests::only_the_thread_that_empties_a_claimed_process_tears_it_down stdout ----

thread 'proclife::teardown::tests::only_the_thread_that_empties_a_claimed_process_tears_it_down' (237812208) panicked at kernel/pure/proclife/teardown.rs:219:9:
assertion `left == right` failed: the last one out is in its process until its teardown is done
  left: Some(Zombie(-1))
 right: Some(Scheduled)

---- proclife::interleave::tests::the_last_one_out_is_in_its_process_until_its_teardown_is_done stdout ----

thread 'proclife::interleave::tests::the_last_one_out_is_in_its_process_until_its_teardown_is_done' (237812207) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 0 tid 0 is tearing its process down and the table has it out, so a stop would not wait for it
  schedule: exit#0 -> exit#0 -> out 0/0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::the_last_one_out_is_in_its_process_until_its_teardown_is_done
    proclife::teardown::tests::only_the_thread_that_empties_a_claimed_process_tears_it_down

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 173 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:21 [ci] control `mutate-last-out-leaves-before-its-teardown`: 2 verdict(s) reached

06:16:21 === [ci] control `mutate-place-skips-the-insert-recheck`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.27s
     Running unittests pure/lib.rs (target/debug/deps/kernel-b6048955f34d9084)

running 1 test
test proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it ... FAILED

failures:

---- proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it stdout ----

thread 'proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it' (237812768) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 3 landed unclaimed under a place whose end was already claimed
  schedule: spawn_under#1 -> kill#0 -> kill#0 -> kill#0 -> kill#0 -> spawn_under#1 -> spawn_under#1
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 174 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:21 [ci] control `mutate-place-skips-the-insert-recheck`: 1 verdict(s) reached

06:16:21 === [ci] control `mutate-refused-spawn-keeps-the-count`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.28s
     Running unittests pure/lib.rs (target/debug/deps/kernel-f3f33b9b59a9f859)

running 1 test
test proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it ... FAILED

failures:

---- proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it stdout ----
a spawn racing its place's kill: 1641 states

thread 'proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it' (237813719) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 1 was claimed for teardown and never published an exit
  schedule: spawn_under#1 -> kill#0 -> kill#0 -> kill#0 -> kill#0 -> spawn_under#1 -> out 1/0 -> out 1/0 -> out 1/0 -> out 1/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 174 filtered out; finished in 0.02s

error: test failed, to rerun pass `-p kernel --lib`
06:16:22 [ci] control `mutate-refused-spawn-keeps-the-count`: 1 verdict(s) reached

06:16:22 === [ci] control `mutate-landed-child-retires-nothing`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.30s
     Running unittests pure/lib.rs (target/debug/deps/kernel-fc90b694e79e1ca6)

running 2 tests
test proclife::tree::tests::a_child_landed_under_a_place_claimed_since_its_admission_is_claimed_with_it ... FAILED
test proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it ... FAILED

failures:

---- proclife::tree::tests::a_child_landed_under_a_place_claimed_since_its_admission_is_claimed_with_it stdout ----

thread 'proclife::tree::tests::a_child_landed_under_a_place_claimed_since_its_admission_is_claimed_with_it' (237814823) panicked at kernel/pure/proclife/tree.rs:274:9:
assertion `left == right` failed: the child's spawner was not answered its thread to retire
  left: []
 right: [Tid(0)]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it stdout ----

thread 'proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it' (237814822) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 1 was claimed for teardown and never published an exit
pid 3 was claimed for teardown and never published an exit
pid 3 outlived the end of pid 1 above it
  schedule: spawn_under#1 -> kill#0 -> kill#0 -> kill#0 -> kill#0 -> spawn_under#1 -> spawn_under#1 -> spawn_under#1 -> out 1/0 -> out 1/0 -> out 1/0 -> out 1/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0


failures:
    proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it
    proclife::tree::tests::a_child_landed_under_a_place_claimed_since_its_admission_is_claimed_with_it

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 173 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:22 [ci] control `mutate-landed-child-retires-nothing`: 2 verdict(s) reached

06:16:22 === [ci] control `mutate-publish-before-the-children`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.37s
     Running unittests pure/lib.rs (target/debug/deps/kernel-eced1954074bce19)

running 1 test
test proclife::interleave::tests::an_exit_publishes_after_every_end_below_it ... FAILED

failures:

---- proclife::interleave::tests::an_exit_publishes_after_every_end_below_it stdout ----

thread 'proclife::interleave::tests::an_exit_publishes_after_every_end_below_it' (237816243) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 1 was published with pid 2 still unpublished below it
pid 1 was published with pid 4 still unpublished below it
  schedule: exit#0 -> exit#0 -> exit#0 -> exit#0 -> exit#0 -> exit#0 -> exit#0 -> exit#0 -> out 1/0 -> out 1/0 -> out 1/0 -> out 1/0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::an_exit_publishes_after_every_end_below_it

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 174 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:23 [ci] control `mutate-publish-before-the-children`: 1 verdict(s) reached

06:16:23 === [ci] control `mutate-walk-in-one-hold`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.29s
     Running unittests pure/lib.rs (target/debug/deps/kernel-29ba8b7ce3d370b6)

running 1 test
test proclife::interleave::tests::a_spawn_under_an_unrelated_process_lands_between_two_claims_of_one_walk ... FAILED

failures:

---- proclife::interleave::tests::a_spawn_under_an_unrelated_process_lands_between_two_claims_of_one_walk stdout ----

thread 'proclife::interleave::tests::a_spawn_under_an_unrelated_process_lands_between_two_claims_of_one_walk' (237817148) panicked at kernel/pure/proclife/interleave.rs:894:9:
no ordering landed the unrelated spawn between the walk's two claims below the end: the walk holds the table across its claims
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::a_spawn_under_an_unrelated_process_lands_between_two_claims_of_one_walk

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 174 filtered out; finished in 0.04s

error: test failed, to rerun pass `-p kernel --lib`
06:16:23 [ci] control `mutate-walk-in-one-hold`: 1 verdict(s) reached

06:16:23 === [ci] control `mutate-spawner-handle-after-the-landing`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.11s
     Running unittests pure/lib.rs (target/debug/deps/kernel-2483b96922d9df2a)

running 2 tests
test proclife::interleave::tests::a_spawn_racing_the_kill_of_its_own_spawner ... FAILED
test proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it ... FAILED

failures:

---- proclife::interleave::tests::a_spawn_racing_the_kill_of_its_own_spawner stdout ----

thread 'proclife::interleave::tests::a_spawn_racing_the_kill_of_its_own_spawner' (237817706) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 3: a handle to it was minted after its last one had gone
  schedule: spawn_under#1 -> kill#0 -> kill#0 -> kill#0 -> kill#0 -> spawn_under#1 -> spawn_under#1 -> spawn_under#1 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 3/0 -> out 3/0 -> spawn_under#1
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

---- proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it stdout ----

thread 'proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it' (237817705) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 3: a handle to it was minted after its last one had gone
  schedule: spawn_under#1 -> kill#0 -> kill#0 -> kill#0 -> kill#0 -> spawn_under#1 -> spawn_under#1 -> spawn_under#1 -> out 1/0 -> out 1/0 -> out 1/0 -> out 1/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 2/0 -> out 3/0 -> out 3/0 -> spawn_under#1


failures:
    proclife::interleave::tests::a_spawn_racing_its_places_kill_leaves_nothing_under_it_and_publishes_it
    proclife::interleave::tests::a_spawn_racing_the_kill_of_its_own_spawner

test result: FAILED. 0 passed; 2 failed; 0 ignored; 0 measured; 173 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:23 [ci] control `mutate-spawner-handle-after-the-landing`: 2 verdict(s) reached

06:16:23 === [ci] control `mutate-spawner-handle-before-the-childs-own`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.21s
     Running unittests pure/lib.rs (target/debug/deps/kernel-68c27e53bbdb2954)

running 1 test
test proclife::interleave::tests::a_sibling_closing_a_spawns_handle_before_the_spawn_returns ... FAILED

failures:

---- proclife::interleave::tests::a_sibling_closing_a_spawns_handle_before_the_spawn_returns stdout ----

thread 'proclife::interleave::tests::a_sibling_closing_a_spawns_handle_before_the_spawn_returns' (237818292) panicked at kernel/pure/proclife/interleave.rs:544:27:
a lifecycle law broke:
pid 2: a handle to it was minted after its last one had gone
  schedule: spawn_under#0 -> spawn_under#0 -> close#1 -> spawn_under#0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    proclife::interleave::tests::a_sibling_closing_a_spawns_handle_before_the_spawn_returns

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 174 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p kernel --lib`
06:16:24 [ci] control `mutate-spawner-handle-before-the-childs-own`: 1 verdict(s) reached

06:16:24 === [ci] control `placement-ignores-staleness`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.29s
     Running tests/policy.rs (target/debug/deps/policy-fb61fd9cdbfa04f7)

running 1 test
test a_stopped_cpu_stops_taking_work ... FAILED

failures:

---- a_stopped_cpu_stops_taking_work stdout ----
stopped_cpu: worst never_ran 10, total 114 over 16 seeds, bound 4 of 24

thread 'a_stopped_cpu_stops_taking_work' (237819350) panicked at kernel/sim/tests/policy.rs:1419:5:
a stopped cpu took 10 of 24 programs, against the 4 its published numbers are believed for
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_stopped_cpu_stops_taking_work

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.02s

error: test failed, to rerun pass `-p kernel-sim --test policy`
06:16:24 [ci] control `placement-ignores-staleness`: 1 verdict(s) reached

06:16:24 === [ci] control `mutate-session-end-forgets`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.46s
     Running unittests src/lib.rs (target/debug/deps/toyos_blockring-c60f1ce9c5880c03)

running 1 test
test model::tests::every_request_is_answered_exactly_once ... FAILED

failures:

---- model::tests::every_request_is_answered_exactly_once stdout ----
Failures { resets: 0, crashes: 0, errors: 0 }: 28 end states, 0 with a flush given up, None
Failures { resets: 1, crashes: 0, errors: 0 }: 492 end states, 0 with a flush given up, None
Failures { resets: 0, crashes: 1, errors: 0 }: 4 end states, 0 with a flush given up, Some((Answers, "ticket 3 ended answered None, after ask 0 > ask 1 > ask 2 > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > take Flush#6 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > done Flush#6 > read #4 Ok > ask 3 > ask 4 > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > take Flush#7 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > done Flush#7 > read #5 Ok > read #6 Ok > crash([None, None] [3, 2]) > notice > reconnect > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > read #12 Ok > read #9 Ok > take Flush#16 > done Flush#16 > read #16 Ok"))

thread 'model::tests::every_request_is_answered_exactly_once' (237820690) panicked at toyos-blockring/src/model.rs:722:17:
Failures { resets: 0, crashes: 1, errors: 0 }: ticket 3 ended answered None, after ask 0 > ask 1 > ask 2 > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > take Flush#6 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > done Flush#6 > read #4 Ok > ask 3 > ask 4 > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > take Flush#7 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > done Flush#7 > read #5 Ok > read #6 Ok > crash([None, None] [3, 2]) > notice > reconnect > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > read #12 Ok > read #9 Ok > take Flush#16 > done Flush#16 > read #16 Ok
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    model::tests::every_request_is_answered_exactly_once

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 19 filtered out; finished in 4.19s

error: test failed, to rerun pass `-p toyos-blockring --lib`
06:16:29 [ci] control `mutate-session-end-forgets`: 1 verdict(s) reached

06:16:29 === [ci] control `mutate-abort-keeps-inflight`
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running unittests src/lib.rs (target/debug/deps/toyos_blockring-9da8b607da72767a)

running 1 test
test model::tests::every_request_is_answered_exactly_once ... FAILED

failures:

---- model::tests::every_request_is_answered_exactly_once stdout ----
Failures { resets: 0, crashes: 0, errors: 0 }: 28 end states, 0 with a flush given up, None
Failures { resets: 1, crashes: 0, errors: 0 }: 2 end states, 0 with a flush given up, Some((Answers, "the client met a second completion for tag 7, after ask 0 > ask 1 > ask 2 > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > take Flush#6 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > done Flush#6 > read #4 Ok > ask 3 > ask 4 > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > take Flush#7 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > read #5 Ok > read #6 Ok > read #8 Ok > reset([7] [None, None] [3, 2]) > read #7 Device > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > read #12 Ok > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#16 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#16 > read #9 Ok > read #16 Ok > take Flush#20 > done Flush#20 > read #20 Lost > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#24 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#13 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#24 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#13 > read #24 Ok > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#28 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#28 > read #13 Ok > read #28 Ok > take Flush#32 > done Flush#32 > read #32 Ok > posted #7 > read #7 Ok"))

thread 'model::tests::every_request_is_answered_exactly_once' (237824197) panicked at toyos-blockring/src/model.rs:722:17:
Failures { resets: 1, crashes: 0, errors: 0 }: the client met a second completion for tag 7, after ask 0 > ask 1 > ask 2 > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > take Flush#6 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > done Flush#6 > read #4 Ok > ask 3 > ask 4 > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > take Flush#7 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > read #5 Ok > read #6 Ok > read #8 Ok > reset([7] [None, None] [3, 2]) > read #7 Device > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#12 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#9 > read #12 Ok > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#16 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#16 > read #9 Ok > read #16 Ok > take Flush#20 > done Flush#20 > read #20 Lost > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#24 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#13 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#24 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#13 > read #24 Ok > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#28 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#28 > read #13 Ok > read #28 Ok > take Flush#32 > done Flush#32 > read #32 Ok > posted #7 > read #7 Ok
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    model::tests::every_request_is_answered_exactly_once

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 19 filtered out; finished in 0.02s

error: test failed, to rerun pass `-p toyos-blockring --lib`
06:16:29 [ci] control `mutate-abort-keeps-inflight`: 1 verdict(s) reached

06:16:29 === [ci] control `mutate-no-reissue-after-loss`
    Finished `test` profile [optimized + debuginfo] target(s) in 0.10s
     Running unittests src/lib.rs (target/debug/deps/toyos_blockring-05042003800e3648)

running 1 test
test model::tests::what_a_flush_calls_durable_is_on_the_medium ... FAILED

failures:

---- model::tests::what_a_flush_calls_durable_is_on_the_medium stdout ----
Failures { resets: 0, crashes: 0, errors: 0 }: 28 end states, 0 with a flush given up, None
Failures { resets: 1, crashes: 0, errors: 0 }: 20 end states, 0 with a flush given up, Some((Durable, "flush 4 was answered durable with block 0 holding 1, not the 3 acknowledged before it (or a later one of [3]), after ask 0 > ask 1 > ask 2 > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > take Flush#6 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > done Flush#6 > read #4 Ok > ask 3 > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > read #5 Ok > read #6 Ok > read #8 Ok > ask 4 > take Flush#12 > reset([] [None, None] [1, 2]) > read #12 Device > take Flush#16 > done Flush#16 > read #16 Lost > take Flush#20 > done Flush#20 > read #20 Ok"))

thread 'model::tests::what_a_flush_calls_durable_is_on_the_medium' (237824395) panicked at toyos-blockring/src/model.rs:733:17:
Failures { resets: 1, crashes: 0, errors: 0 }: flush 4 was answered durable with block 0 holding 1, not the 3 acknowledged before it (or a later one of [3]), after ask 0 > ask 1 > ask 2 > take Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > take Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > take Flush#6 > done Write { run: Run { first: 0, count: 1 }, lba: 0 }#4 > done Write { run: Run { first: 1, count: 1 }, lba: 1 }#5 > done Flush#6 > read #4 Ok > ask 3 > take Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > done Write { run: Run { first: 3, count: 1 }, lba: 0 }#8 > read #5 Ok > read #6 Ok > read #8 Ok > ask 4 > take Flush#12 > reset([] [None, None] [1, 2]) > read #12 Device > take Flush#16 > done Flush#16 > read #16 Lost > take Flush#20 > done Flush#20 > read #20 Ok
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    model::tests::what_a_flush_calls_durable_is_on_the_medium

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 19 filtered out; finished in 0.02s

error: test failed, to rerun pass `-p toyos-blockring --lib`
06:16:30 [ci] control `mutate-no-reissue-after-loss`: 1 verdict(s) reached

06:16:30 === [ci] control `publish-relaxed`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.33s
     Running tests/loom.rs (target/debug/deps/loom-24a430a1f85efe05)

running 1 test
test a_published_entry_is_read_whole ... FAILED

failures:

---- a_published_entry_is_read_whole stdout ----

thread 'a_published_entry_is_read_whole' (237825783) panicked at toyos-blockring/transport/tests/loom.rs:76:9:
assertion `left == right` failed: an entry was read before its words
  left: [[0, 0], [0, 0]]
 right: [[100, 3], [101, 10]]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_published_entry_is_read_whole

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.01s

error: test failed, to rerun pass `-p toyos-transport --test loom`
06:16:30 [ci] control `publish-relaxed`: 1 verdict(s) reached

06:16:30 === [ci] control `no-clamp`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.29s
     Running tests/loom.rs (target/debug/deps/loom-eb33bfc56f80c86a)

running 1 test
test a_hostile_producer_yields_entries_or_a_violation ... FAILED

failures:

---- a_hostile_producer_yields_entries_or_a_violation stdout ----

thread 'a_hostile_producer_yields_entries_or_a_violation' (237827175) panicked at toyos-blockring/transport/tests/loom.rs:107:9:
took 3 entries from a ring of 2 without releasing one
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    a_hostile_producer_yields_entries_or_a_violation

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 2 filtered out; finished in 0.01s

error: test failed, to rerun pass `-p toyos-transport --test loom`
06:16:31 [ci] control `no-clamp`: 1 verdict(s) reached

06:16:31 === [ci] control `end-keeps-inflight`
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.18s
     Running unittests src/lib.rs (target/debug/deps/toyos_transport-ed091dbee8d19249)

running 1 test
test inflight::tests::an_end_answers_every_tag_once_and_a_late_completion_nothing ... FAILED

failures:

---- inflight::tests::an_end_answers_every_tag_once_and_a_late_completion_nothing stdout ----

thread 'inflight::tests::an_end_answers_every_tag_once_and_a_late_completion_nothing' (237827511) panicked at toyos-blockring/transport/src/inflight.rs:150:9:
assertion `left == right` failed
  left: []
 right: [(4, 0), (6, 2)]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    inflight::tests::an_end_answers_every_tag_once_and_a_late_completion_nothing

test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 9 filtered out; finished in 0.00s

error: test failed, to rerun pass `-p toyos-transport --lib`
06:16:31 [ci] control `end-keeps-inflight`: 1 verdict(s) reached

06:16:31 === [ci] userland/acpiserver
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
   Compiling acpiserver v0.1.0 (<src>/toyos-dirrename/userland/acpiserver)
    Finished `test` profile [optimized + debuginfo] target(s) in 0.68s
     Running unittests src/main.rs (target/debug/deps/acpiserver-c834e39970f9f7ec)

running 28 tests
test aml::tests::every_refusals_kind_is_free_of_what_the_firmware_chose ... ok
test aml::tests::a_machine_that_stops_mid_load_ends_it_with_nothing_refused ... ok
test ec::tests::a_query_writes_its_command_once_the_input_is_empty_and_reads_once_the_output_is_full ... ok
test host::tests::a_page_the_firmware_lists_nowhere_is_counted_under_a_name_of_its_own ... ok
test host::tests::a_lock_the_kernel_cannot_take_is_denied_and_never_reported_held ... ok
test host::tests::a_lock_the_firmware_holds_is_denied_by_name_and_counted ... ok
test aml::tests::tables_the_kernel_will_not_read_are_refused_by_its_name_for_it ... ok
test aml::tests::a_refused_dsdt_leaves_no_namespace_and_loads_no_ssdt ... ok
test ec::tests::a_byte_before_the_command_is_refused - should panic ... ok
test aml::tests::tables_in_memory_of_a_type_the_kernel_keeps_are_refused_by_that_name_and_type ... ok
test host::tests::a_read_is_the_kernels_in_each_space_and_counted_by_space_and_page ... ok
test aml::tests::an_s5_that_is_no_package_of_two_integers_is_refused_by_kind ... ok
test host::tests::a_stopping_machine_denies_everything_and_is_no_refusal_of_the_firmwares ... ok
test aml::tests::a_lock_field_read_at_load_takes_the_lock_and_a_held_lock_refuses_the_table ... ok
test host::tests::the_lock_is_taken_and_given_back_through_the_kernel ... ok
test host::tests::a_read_the_kernel_refuses_is_denied_under_the_kernels_name_and_counted ... ok
test host::tests::nothing_is_written_and_the_controllers_space_is_not_reached ... ok
test aml::tests::only_an_s5_the_kernel_kept_is_a_power_off ... ok
test aml::tests::a_refused_ssdt_is_one_block_refused_and_the_rest_load ... ok
test ledger::tests::a_thing_is_new_once_and_counted_every_time ... ok
test sci::tests::a_press_and_the_controllers_gpe_are_both_read_off_one_sci ... ok
test sci::tests::a_status_set_with_its_enable_clear_is_no_event ... ok
test sci::tests::an_enabled_event_outside_the_served_set_is_refused_by_name ... ok
test sci::tests::only_a_press_on_a_machine_handed_no_sleep_type_is_dropped ... ok
test tables::tests::a_range_is_fetched_whole_in_qwords_and_then_bytes_and_kept ... ok
test tables::tests::a_range_the_kernel_refuses_any_byte_of_is_not_readable_and_says_why ... ok
test tables::tests::a_stopping_machine_reads_no_table ... ok
test aml::tests::qemus_tables_load_and_s5_is_what_its_kernel_decoded ... ok

test result: ok. 28 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:32 [ci] userland/acpiserver: cargo test --manifest-path userland/acpiserver/Cargo.toml

06:16:32 === [ci] userland/acpiserver/aml
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.13s
     Running unittests src/lib.rs (target/debug/deps/toyos_aml-f74bbb7a41540e23)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/evaluate.rs (target/debug/deps/evaluate-9d6f462fe5ccdee5)

running 27 tests
test a_method_without_return_returns_nothing_usable ... ok
test divide_stores_remainder_and_quotient_and_refuses_zero ... ok
test if_else_and_while_with_break_and_continue ... ok
test concatenate_takes_the_first_operands_type ... ok
test buffers_and_packages_are_sized_as_declared ... ok
test bcd_converts_both_ways_and_refuses_what_is_not_bcd ... ok
test break_and_continue_outside_a_while_are_refused ... ok
test index_reaches_into_buffers_strings_and_packages ... ok
test events_count_signals_and_a_wait_without_one_times_out ... ok
test comparisons_follow_the_first_operands_type ... ok
test an_arg_holding_a_reference_stores_through_it ... ok
test logical_operators_answer_ones_or_zero ... ok
test methods_take_their_declared_arguments_and_return_a_copy ... ok
test match_finds_the_first_element_both_tests_accept ... ok
test mid_takes_what_lies_within ... ok
test references_are_made_followed_and_asked_about ... ok
test integer_arithmetic_wraps_at_the_integer_width ... ok
test notify_sleep_stall_and_fatal_reach_the_host ... ok
test resource_templates_join_under_one_end_tag ... ok
test s5_evaluates_to_its_sleep_types ... ok
test mutexes_follow_sync_levels_and_are_released_by_the_end ... ok
test the_debug_object_takes_writes_and_refuses_reads ... ok
test explicit_conversions_follow_their_definitions ... ok
test osi_answers_like_windows ... ok
test store_converts_to_the_named_type_and_copy_object_does_not ... ok
test source_operands_convert_by_the_conversion_rules ... ok
test recursion_runs_until_its_bound ... ok

test result: ok. 27 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/heap.rs (target/debug/deps/heap-1073d2dccd4a0b58)

running 19 tests
test a_nest_of_concatenates_holds_one_buffers_copy ... ok
test a_nest_of_mids_holds_one_copy ... ok
test a_nest_of_to_strings_holds_one_copy ... ok
test a_returned_value_of_buffers_is_held_while_it_is_built ... ok
test buffers_of_a_mebibyte_fill_it_to_the_bound ... ok
test a_nest_of_concatenates_holds_one_strings_copy ... ok
test fields_read_through_each_other_are_held_while_they_are_read ... ok
test a_returned_value_of_packages_is_held_while_it_is_built ... ok
test a_returned_value_is_given_back_when_it_is_the_callers ... ok
test a_refused_load_gives_back_what_it_took ... ok
test field_units_fill_it_to_the_bound ... ok
test a_nest_of_packages_is_held_while_it_is_read ... ok
test package_elements_naming_nothing_yet_fill_it_to_the_bound ... ok
test a_walk_is_held_against_the_bound_while_it_lasts ... ok
test a_parent_whose_last_child_is_unwound_holds_no_map ... ok
test a_full_interpreter_reads_a_field_that_fits_an_integer ... ok
test empty_buffers_fill_it_to_the_bound ... ok
test references_into_a_buffer_fill_it_to_the_bound ... ok
test devices_of_one_child_each_fill_it_to_the_bound ... ok

test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/hostile.rs (target/debug/deps/hostile-cdadefcf70eaf473)

running 24 tests
test an_alias_goes_with_what_created_it ... ok
test a_reference_outliving_its_object_names_nothing ... ok
test a_package_length_that_leaves_its_package_is_refused ... ok
test a_reference_chain_cannot_form ... ok
test a_caller_value_is_refused_where_it_is_malformed ... ok
test a_loop_that_sleeps_is_bounded_in_time_asked ... ok
test a_field_beyond_what_is_held_is_refused ... ok
test a_reference_to_a_local_ends_with_its_method ... ok
test a_resource_template_join_is_bounded ... ok
test names_and_strings_hold_only_what_their_encoding_allows ... ok
test a_conversion_is_bounded_in_what_it_constructs ... ok
test objects_are_bounded_in_size ... ok
test the_wait_limit_is_exact_and_a_loads_too ... ok
test every_truncation_yields_a_value_or_a_refusal ... ok
test waits_and_stalls_are_bounded_in_time_asked ... ok
test what_is_held_live_is_bounded_in_sum ... ok
test a_string_stored_to_a_field_is_bounded_as_it_is_written ... ok
test usage_is_each_calls_own_and_a_refusals_too ... ok
test a_loop_without_end_is_bounded_in_steps ... ok
test tables_and_names_are_held_against_the_live_bound ... ok
test work_in_one_step_is_charged_in_proportion ... ok
test nesting_is_bounded_before_the_stack ... ok
test mutated_tables_yield_a_value_or_a_refusal ... ok
test a_walk_or_a_read_a_table_sizes_is_charged_for_all_of_it ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/namespace.rs (target/debug/deps/namespace-be3e867676d2ee7e)

running 18 tests
test a_collision_refuses_the_table_and_leaves_none_of_it ... ok
test a_scope_opens_only_what_has_one ... ok
test a_caller_names_only_absolute_paths_and_passes_the_declared_arguments ... ok
test a_lone_name_is_searched_for_toward_the_root_and_a_path_is_not ... ok
test names_a_method_creates_go_when_it_exits ... ok
test a_dsdt_loads_first_and_then_ssdts ... ok
test a_package_names_its_elements ... ok
test an_external_defines_nothing ... ok
test a_processor_parses_opens_a_scope_and_takes_notify ... ok
test a_prefix_above_the_root_finds_nothing ... ok
test an_alias_acts_exactly_as_its_source ... ok
test a_definition_needs_every_segment_but_its_last ... ok
test definition_block_level_code_runs_at_load ... ok
test a_dsdt_below_revision_2_makes_every_integer_32_bits ... ok
test parent_prefixes_climb_one_scope_each ... ok
test the_predefined_objects_are_there_before_any_table ... ok
test qemus_dsdt_loads_and_its_s5_is_what_its_boot_logged ... ok
test qemus_methods_run_against_the_registers_they_read ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/regions.rs (target/debug/deps/regions-8ea02fd76c87c2af)

running 18 tests
test a_lock_field_holds_the_global_lock_across_its_access ... ok
test an_index_field_writes_its_offset_then_reaches_the_data ... ok
test an_access_type_sets_the_unit_and_anyacc_takes_the_narrowest_natural_one ... ok
test a_host_refusal_and_a_space_not_carried_are_refused_by_name ... ok
test an_access_past_its_region_is_refused ... ok
test a_bank_field_selects_its_bank_first ... ok
test a_field_store_writes_its_source_as_it_was_when_firmware_changes_it ... ok
test a_buffer_field_over_a_conversion_and_a_conversion_into_one ... ok
test a_field_wider_than_an_integer_is_a_buffer ... ok
test a_pci_config_region_addresses_its_devices_function ... ok
test a_field_is_read_shifted_and_masked_from_its_units ... ok
test an_address_out_of_its_form_is_refused ... ok
test copy_object_into_a_field_writes_an_integer_or_buffer_alone ... ok
test a_pci_config_region_below_bridges_is_on_the_nearest_ones_secondary_bus ... ok
test buffer_fields_read_and_write_their_buffer ... ok
test system_io_and_the_embedded_controller_are_addressed_by_offset ... ok
test the_update_rule_completes_a_unit_the_field_covers_in_part ... ok
test a_pci_config_region_below_more_bridges_than_buses_is_refused ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/walk.rs (target/debug/deps/walk-42edf53a674c656b)

running 6 tests
test an_alias_is_not_walked ... ok
test every_object_is_walked_as_what_it_is ... ok
test siblings_are_read_in_the_order_they_were_declared ... ok
test a_parent_of_thousands_is_walked_in_their_order ... ok
test a_namespace_nested_deep_is_walked_whole ... ok
test a_walk_takes_its_links_and_its_deepest_path_from_the_bound ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

06:16:34 [ci] userland/acpiserver/aml: cargo test --manifest-path userland/acpiserver/aml/Cargo.toml

06:16:34 === [ci] userland/calc
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.16s
     Running unittests src/lib.rs (target/debug/deps/calc-7a1d2621a9ccb550)

running 64 tests
test app::tests::the_hex_letters_are_live_only_in_hex ... ok
test app::tests::every_button_reaches_the_same_place_a_key_does ... ok
test app::tests::the_sign_button_flips_the_number_it_stands_after ... ok
test app::tests::the_expression_line_is_a_text_field ... ok
test app::tests::a_fraction_is_cleared_on_the_way_into_prog_rather_than_rounded ... ok
test app::tests::typing_previews_and_equals_commits ... ok
test app::tests::prog_reads_digits_in_the_active_base_and_refuses_the_others ... ok
test bigint::tests::addition_crosses_the_limb_boundary ... ok
test app::tests::a_caret_in_the_middle_of_a_wide_character_is_unreachable ... ok
test bigint::tests::conversions_refuse_what_does_not_fit ... ok
test app::tests::a_whole_number_crosses_into_prog_and_back ... ok
test bigint::tests::division_is_exact_over_many_shapes ... ok
test bigint::tests::gcd_is_non_negative_and_divides_both ... ok
test bigint::tests::multiplication_matches_a_known_product ... ok
test bigint::tests::powers_and_roots_agree ... ok
test bigint::tests::radix_parsing_and_lengths ... ok
test bigint::tests::zero_has_one_representation ... ok
test dec::tests::arithmetic_survives_a_wide_exponent_gap ... ok
test app::tests::every_button_of_both_layouts_is_pressable_from_any_state ... ok
test dec::tests::ln_two_matches_its_published_digits ... ok
test dec::tests::root_two_matches_its_published_digits ... ok
test dec::tests::rounding_is_half_to_even_and_canonical ... ok
test app::tests::the_angle_button_says_which_one_it_is ... ok
test app::tests::a_field_that_is_full_says_so_rather_than_growing ... ok
test dec::tests::the_refusals_are_named_rather_than_taken ... ok
test num::tests::a_non_terminating_exact_value_is_shown_rounded_and_marked ... ok
test num::tests::division_by_zero_is_refused_on_both_paths ... ok
test dec::tests::e_matches_its_published_digits_and_the_factorial_series ... ok
test dec::tests::a_whole_power_works_on_a_negative_base ... ok
test num::tests::exact_arithmetic_stays_exact ... ok
test num::tests::percent_is_an_exact_hundredth ... ok
test num::tests::rendering_switches_to_a_scientific_form_rather_than_dropping_digits ... ok
test num::tests::powers_are_exact_while_that_is_worth_doing ... ok
test num::tests::the_marker_propagates_once_it_is_earned ... ok
test dec::tests::sine_and_cosine_of_one_match_their_published_digits ... ok
test num::tests::a_whole_power_of_an_approximation_does_not_need_a_positive_base ... ok
test num::tests::degrees_are_converted_at_the_call ... ok
test parser::tests::every_refusal_is_named_and_none_is_a_crash ... ok
test dec::tests::pi_matches_its_published_digits_and_machin ... ok
test parser::tests::precedence_and_associativity ... ok
test parser::tests::the_four_operations_stay_exact ... ok
test parser::tests::values_side_by_side_multiply ... ok
test prog::tests::a_fractional_division_is_refused_rather_than_rounded ... ok
test prog::tests::arithmetic_wraps_at_the_word ... ok
test prog::tests::digits_are_read_in_the_active_base ... ok
test parser::tests::degrees_are_a_toggle_and_nothing_else ... ok
test prog::tests::shifts_saturate_rather_than_wrap_the_count ... ok
test parser::tests::an_application_finishes_before_a_power_does ... ok
test prog::tests::the_logic_operators_have_c_precedence ... ok
test prog::tests::the_panes_show_the_same_bits_three_ways ... ok
test rational::tests::a_decimal_terminates_only_on_twos_and_fives ... ok
test rational::tests::a_tenth_plus_two_tenths_is_three_tenths ... ok
test rational::tests::a_third_times_three_is_one ... ok
test rational::tests::construction_normalizes ... ok
test rational::tests::division_by_zero_is_the_only_refusal ... ok
test rational::tests::exact_roots_only_where_both_halves_are_squares ... ok
test parser::tests::a_negative_base_under_a_fractional_power_is_named ... ok
test rational::tests::ordering_is_by_value ... ok
test rational::tests::parsing_takes_what_a_literal_may_be ... ok
test rational::tests::powers_include_the_reciprocal ... ok
test parser::tests::functions_are_typeable_by_name ... ok
test prog::tests::nothing_typeable_panics_here_either ... ok
test dec::tests::the_identities_hold_to_the_displayed_precision ... ok
test parser::tests::no_string_over_the_alphabet_panics ... ok

test result: ok. 64 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/main.rs (target/debug/deps/calc-d3e4f49f042c74be)

running 6 tests
test tests::hit_testing_follows_the_layout_at_every_size ... ok
test tests::the_keys_tile_the_panel_at_every_size ... ok
test tests::tracks_never_lose_a_pixel ... ok
test tests::every_key_face_fits_its_key ... ok
test tests::every_face_the_panel_shows_was_baked ... ok
test tests::the_longest_answer_is_never_cut ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/parser_identities.rs (target/debug/deps/parser_identities-a0fd5819088424fa)

running 6 tests
test the_rest_of_the_table_is_where_it_was ... ok
test the_typo_is_refused_by_name ... ok
test a_logarithm_round_trips_through_the_parser ... ok
test the_reported_expressions_have_the_values_they_should ... ok
test the_pythagorean_identity_holds_through_the_parser ... ok
test a_power_after_a_call_squares_what_the_call_returned ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

06:16:34 [ci] userland/calc: cargo test --manifest-path userland/calc/Cargo.toml

06:16:34 === [ci] userland/compositor/desktop
    Blocking waiting for file lock on package cache
    Finished `test` profile [optimized + debuginfo] target(s) in 0.16s
     Running unittests src/lib.rs (target/debug/deps/toyos_desktop-a34f95729f9983c3)

running 95 tests
test budget::tests::a_client_that_names_no_size_is_never_too_large ... ok
test budget::tests::a_window_larger_than_the_screen_is_refused_by_name ... ok
test budget::tests::capacity_is_checked_before_size ... ok
test budget::tests::the_poller_ceiling_binds_before_memory_does ... ok
test budget::tests::a_machine_with_almost_no_memory_still_gets_one_window ... ok
test budget::tests::a_window_costs_whole_pages ... ok
test budget::tests::a_bigger_screen_affords_fewer_windows ... ok
test damage::tests::an_empty_rect_is_not_damage ... ok
test damage::tests::a_contained_rect_changes_nothing ... ok

@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

Round-4 log for #816 at b693474e2: cargo run -- --ci host, part 08.

cargo run -- --ci host, part 08
test damage::tests::a_bridging_rect_collapses_both_it_joins ... ok
test damage::tests::take_clips_to_the_screen_and_drops_what_falls_outside ... ok
test damage::tests::the_bound_holds_and_the_list_stays_disjoint ... ok
test damage::tests::two_distant_rects_stay_two ... ok
test hit::tests::an_open_launcher_covers_the_window_beneath_it ... ok
test hit::tests::nothing_under_the_pointer_is_the_desktop ... ok
test hit::tests::each_button_answers_for_exactly_the_rect_it_is_drawn_in ... ok
test hit::tests::the_bar_past_its_own_buttons_is_desktop ... ok
test hit::tests::the_front_window_wins_an_overlap_and_a_minimized_one_never_does ... ok
test hit::tests::the_launcher_is_only_hit_while_it_is_open ... ok
test hit::tests::the_resize_corner_belongs_to_normal_windows_only ... ok
test hit::tests::the_taskbar_takes_precedence_over_a_window_reaching_into_it ... ok
test input::tests::a_batch_folds_to_its_transitions_and_its_last_position ... ok
test input::tests::a_button_already_down_is_not_a_press ... ok
test input::tests::a_click_on_a_maximized_title_bar_does_not_unmaximize_it ... ok
test input::tests::a_press_on_a_normal_title_bar_drags_at_once ... ok
test input::tests::a_release_is_always_the_window_s ... ok
test input::tests::a_resize_grab_changes_the_size_and_not_the_origin ... ok
test input::tests::a_resize_in_progress_keeps_the_resize_cursor_wherever_the_pointer_went ... ok
test input::tests::a_tab_click_reveals_minimizes_or_raises ... ok
test input::tests::a_truncated_report_is_not_decoded_from_what_follows_it ... ok
test input::tests::a_window_closed_mid_drag_ends_the_grab_instead_of_panicking_or_moving_another ... ok
test input::tests::alt_tab_cycles_even_with_nothing_focused_and_ctrl_n_spawns ... ok
test input::tests::an_unclaimed_super_chord_reaches_the_window ... ok
test input::tests::dragging_reports_both_the_rect_it_left_and_the_one_it_took ... ok
test input::tests::dragging_survives_a_lower_window_closing_and_still_moves_the_right_one ... ok
test input::tests::no_window_means_no_super_chord_does_anything ... ok
test input::tests::escape_closes_the_launcher_only_while_it_is_open ... ok
test input::tests::releasing_a_drag_at_an_edge_snaps_and_anywhere_else_does_not ... ok
test input::tests::releasing_a_resize_asks_for_the_buffer_and_never_snaps ... ok
test input::tests::the_cursor_belongs_to_the_window_under_it_and_not_to_the_focused_one ... ok
test input::tests::the_super_chords_toggle_against_the_mode_the_window_is_in ... ok
test input::tests::travelling_past_the_threshold_restores_the_window_under_the_pointer ... ok
test input::tests::the_tablet_range_maps_onto_the_screen_and_never_off_it ... ok
test layout::tests::a_drag_cannot_put_a_title_bar_off_the_top ... ok
test layout::tests::a_maximized_frame_is_exactly_the_work_area ... ok
test layout::tests::a_normal_window_has_no_mode_frame ... ok
test layout::tests::a_requested_window_is_centred_in_the_work_area ... ok
test layout::tests::a_resize_floors_at_the_minimum_and_never_moves_the_origin ... ok
test layout::tests::an_unmaximized_window_keeps_the_pointer_at_the_same_fraction_of_its_title ... ok
test layout::tests::frame_and_content_are_inverses ... ok
test layout::tests::buttons_sit_inside_the_title_bar_and_do_not_overlap ... ok
test layout::tests::reflow_keeps_the_size_and_brings_the_frame_back_on_screen ... ok
test layout::tests::reflow_leaves_a_window_that_already_fits_where_it_is ... ok
test layout::tests::restoring_under_a_pointer_at_the_left_edge_keeps_the_title_bar_reachable ... ok
test layout::tests::snapped_halves_never_overlap_and_never_reach_the_taskbar ... ok
test layout::tests::successive_unsized_windows_cascade_and_wrap ... ok
test layout::tests::the_layout_follows_the_metrics_it_is_given ... ok
test plan::tests::a_blit_never_reads_outside_the_buffer ... ok
test plan::tests::a_clip_that_misses_the_window_blits_nothing ... ok
test plan::tests::a_minimized_window_is_not_drawn_and_does_not_hide_the_wallpaper ... ok
test plan::tests::a_region_wholly_inside_the_taskbar_plans_only_the_bar ... ok
test plan::tests::a_window_mid_resize_does_not_cover_the_wallpaper_it_cannot_paint ... ok
test plan::tests::an_empty_desktop_is_wallpaper_and_the_bar ... ok
test plan::tests::an_opaque_window_covering_the_region_costs_no_wallpaper ... ok
test plan::tests::no_region_is_left_with_nothing_to_draw_in_it ... ok
test plan::tests::the_launcher_is_planned_over_every_window ... ok
test plan::tests::the_wallpaper_never_reaches_under_the_taskbar ... ok
test plan::tests::windows_are_planned_bottom_to_top_and_only_where_they_reach ... ok
test rect::tests::a_point_on_the_far_edge_is_outside ... ok
test rect::tests::a_wire_rect_cannot_wrap_into_the_whole_screen ... ok
test rect::tests::confine_brings_a_window_back_onto_a_smaller_screen ... ok
test rect::tests::extents_never_go_negative ... ok
test rect::tests::containment_and_overlap_agree_on_touching_edges ... ok
test rect::tests::union_ignores_an_empty_operand ... ok
test stack::tests::a_topmost_window_raises_above_every_other_topmost_one ... ok
test stack::tests::an_ordinary_window_opened_after_a_topmost_one_goes_under_it ... ok
test stack::tests::cycling_leaves_a_topmost_window_on_top ... ok
test stack::tests::cycling_needs_two_ordinary_windows ... ok
test stack::tests::focus_is_the_topmost_window_that_is_not_minimized ... ok
test stack::tests::cycling_sends_the_top_window_to_the_bottom_and_reveals_the_next ... ok
test stack::tests::raising_the_window_already_on_top_leaves_it_there ... ok
test stack::tests::raising_an_ordinary_window_cannot_lift_it_over_a_topmost_one ... ok
test taskbar::tests::a_crowded_bar_has_no_gap_rather_than_a_backwards_one ... ok
test taskbar::tests::a_narrow_screen_keeps_the_status_box_on_it ... ok
test taskbar::tests::a_tab_face_stays_inside_its_tab ... ok
test taskbar::tests::tabs_are_adjacent_and_the_new_button_follows_the_last ... ok
test taskbar::tests::the_gap_is_exactly_what_the_tabs_and_the_status_box_leave ... ok
test taskbar::tests::the_launcher_sits_on_the_bar_and_grows_upward ... ok
test taskbar::tests::the_strip_is_the_bottom_of_the_screen_and_nothing_else ... ok
test window::tests::a_client_cannot_damage_more_than_its_own_window ... ok
test window::tests::a_minimized_window_is_never_opaque ... ok
test window::tests::a_window_mid_resize_is_not_opaque_and_its_backing_is_the_buffer ... ok
test window::tests::a_window_shrunk_below_its_buffer_is_still_opaque ... ok
test window::tests::only_the_first_departure_from_normal_is_saved ... ok
test damage::tests::coverage_survives_a_random_stream ... ok

test result: ok. 95 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:35 [ci] userland/compositor/desktop: cargo test --manifest-path userland/compositor/desktop/Cargo.toml

06:16:35 === [ci] userland/diskserver
   Compiling diskserver v0.0.0 (<src>/toyos-dirrename/userland/diskserver)
    Finished `test` profile [optimized + debuginfo] target(s) in 0.43s
     Running unittests src/lib.rs (target/debug/deps/diskserver-2e5dc1c785f21dcd)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/main.rs (target/debug/deps/diskserver-388b5f963aa1f320)

running 1 test
test tests::an_unusable_or_unclaimed_controller_is_refused_and_an_absent_one_lists_nothing ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:36 [ci] userland/diskserver: cargo test --manifest-path userland/diskserver/Cargo.toml

06:16:36 === [ci] userland/fileserver
    Blocking waiting for file lock on package cache
   Compiling fileserver v0.0.0 (<src>/toyos-dirrename/userland/fileserver)
    Finished `test` profile [optimized + debuginfo] target(s) in 1.29s
     Running unittests src/lib.rs (target/debug/deps/fileserver-eb78af729d24b848)

running 39 tests
test cache::tests::a_write_past_the_disk_is_refused ... ok
test cache::tests::a_write_reaches_the_disk_at_the_flush_and_not_before ... ok
test cache::tests::contiguous_misses_are_one_request_and_a_second_read_is_none ... ok
test cache::tests::dirty_runs_go_out_in_runs ... ok
test data::tests::a_file_reads_back_what_was_written_across_pages_and_holes ... ok
test data::tests::a_shrink_zeroes_what_it_cut_and_regrowth_reads_zeros ... ok
test data::tests::a_rename_moves_an_open_file_and_a_directory_with_its_contents ... ok
test data::tests::a_file_unlinked_while_open_answers_gone ... ok
test data::tests::a_closed_file_keeps_its_length_across_a_remount ... ok
test data::tests::an_entry_refused_costs_only_its_own_file ... ok
test data::tests::data_is_one_partition_counted_over_both_sources ... ok
test data::tests::a_refused_rename_over_an_open_file_keeps_its_unsynced_writes ... ok
test fat::tests::a_device_error_is_io_and_not_not_found ... ok
test data::tests::directories_are_listed_and_refuse_what_posix_refuses ... ok
test fat::tests::a_partial_write_over_an_unreadable_block_writes_nothing ... ok
test fat::tests::a_refused_read_is_an_error_and_never_zeros ... ok
test resolve::tests::a_cycle_is_refused_and_not_followed_for_ever ... ok
test resolve::tests::a_link_that_stays_inside_by_going_up_and_back_resolves ... ok
test resolve::tests::a_plain_path_lands_under_the_root ... ok
test resolve::tests::a_relative_link_is_read_against_its_own_directory ... ok
test data::tests::a_directory_rename_the_format_refuses_part_way_moves_nothing ... ok
test resolve::tests::an_absolute_link_is_handed_back_with_the_rest_of_the_path ... ok
test resolve::tests::an_empty_target_names_nothing ... ok
test resolve::tests::the_last_link_is_left_alone_when_asked ... ok
test resolve::tests::no_link_climbs_out_of_the_root ... ok
test rights::tests::a_request_the_wire_does_not_have_is_neither ... ok
test rights::tests::an_open_changes_the_directory_by_every_flag_but_read ... ok
test rights::tests::every_request_that_writes_changes_the_directory_and_none_that_reads_does ... ok
test data::tests::a_write_its_entry_could_not_name_is_refused_and_every_accepted_one_kept ... ok
test volume::tests::a_clock_that_always_straddles_is_refused_by_name - should panic ... ok
test volume::tests::the_anchor_is_the_kernels ... ok
test writeback::tests::a_sync_that_left_a_file_unwritten_is_due_again ... ok
test cache::tests::at_the_dirty_limit_a_refused_flush_refuses_the_write_and_the_cache_grows_no_larger ... ok
test cache::tests::clean_blocks_are_bounded_and_dirty_ones_are_kept ... ok
test data::tests::every_file_reads_back_as_a_plain_map_of_its_accepted_writes ... ok
test fat::tests::an_unreadable_entry_is_io_and_not_undated ... ok
test fat::tests::a_file_that_will_not_level_costs_only_its_own_file ... ok
test data::tests::a_directory_rename_is_whole_under_one_name_wherever_the_server_is_killed ... ok
test data::tests::a_directory_rename_is_whole_under_one_name_whichever_write_is_refused ... ok

test result: ok. 39 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s

     Running unittests src/main.rs (target/debug/deps/fileserver-1f58d9b70a9fbdc1)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:39 [ci] userland/fileserver: cargo test --manifest-path userland/fileserver/Cargo.toml

06:16:39 === [ci] userland/logkeeper
   Compiling logkeeper v0.1.0 (<src>/toyos-dirrename/userland/logkeeper)
    Finished `test` profile [optimized + debuginfo] target(s) in 0.44s
     Running unittests src/main.rs (target/debug/deps/logkeeper-d1443c6ba5f4ad71)

running 9 tests
test origin::tests::a_stamp_ahead_of_the_clock_is_read_as_now ... ok
test origin::tests::a_closing_record_ends_its_writers_line_and_nothing_else ... ok
test origin::tests::a_writers_pieces_are_its_line_whoever_wrote_between_them ... ok
test policy::tests::every_step_names_itself ... ok
test origin::tests::what_is_held_is_bounded_and_said ... ok
test tests::readers_and_inspect_share_one_port_and_never_one_request ... ok
test store::tests::nothing_goes_while_there_is_room ... ok
test store::tests::whole_old_boots_go_first_then_earlier_continuations ... ok
test store::tests::a_flooding_boot_costs_its_own_middle_and_nobody_elses_start ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:40 [ci] userland/logkeeper: cargo test --manifest-path userland/logkeeper/Cargo.toml

06:16:40 === [ci] userland/netstack
    Blocking waiting for file lock on package cache
   Compiling toyos-net-node v0.1.0 (<src>/toyos-dirrename/userland/netstack/node)
   Compiling netstack v0.0.0 (<src>/toyos-dirrename/userland/netstack)
    Finished `test` profile [optimized + debuginfo] target(s) in 1.95s
     Running unittests src/main.rs (target/debug/deps/netstack-a376e3d5013a3049)

running 6 tests
test virtio_net::tests::a_full_transmit_queue_has_no_room_until_the_device_gives_heads_back ... ok
test virtio_net::tests::a_used_head_with_no_chain_in_flight_ends_the_driver - should panic ... ok
test virtio_net::tests::a_used_length_past_the_chains_writable_bytes_ends_the_driver - should panic ... ok
test virtio_net::tests::a_used_index_past_every_frame_offered_ends_the_driver - should panic ... ok
test virtio_net::tests::a_used_head_past_the_table_ends_the_driver - should panic ... ok
test virtio_net::tests::a_frame_offered_to_a_full_transmit_queue_is_not_taken - should panic ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:43 [ci] userland/netstack: cargo test --manifest-path userland/netstack/Cargo.toml

06:16:43 === [ci] userland/netstack/mdns
    Finished `test` profile [optimized + debuginfo] target(s) in 0.09s
     Running unittests src/lib.rs (target/debug/deps/toyos_mdns-aa5c41f3fcc05721)

running 36 tests
test tests::a_host_name_is_one_label ... ok
test tests::a_name_is_matched_whatever_its_case_and_any_asks_for_it_too ... ok
test tests::a_question_spelled_by_a_pointer_is_read ... ok
test tests::a_links_return_under_a_lost_name_probes_at_once_in_place_of_the_retry ... ok
test tests::a_query_for_this_name_is_answered_to_the_group ... ok
test tests::a_name_under_probe_is_answered_to_nobody ... ok
test tests::a_legacy_resolver_gets_its_id_its_question_and_a_short_ttl ... ok
test tests::a_retry_no_host_answers_claims_and_announces_the_name ... ok
test tests::a_retry_the_holder_answers_loses_again_and_the_next_is_a_minute_after_it ... ok
test tests::a_query_from_off_the_link_is_not_answered ... ok
test tests::a_question_that_is_not_this_hosts_is_not_answered ... ok
test tests::an_address_after_none_is_probed_for_and_a_new_one_under_a_held_name_is_announced ... ok
test tests::a_malformed_message_is_no_question ... ok
test tests::rfc6762_6_a_probe_for_a_held_name_is_answered_at_once_by_unicast_or_250_ms_after_the_records_last_multicast ... ok
test tests::a_flapping_link_restarts_the_probe_and_nothing_is_announced_until_one_runs_whole ... ok
test tests::rfc6762_8_1_a_conflicting_response_received_as_the_last_250_ms_end_takes_the_name ... ok
test tests::rfc6762_8_1_a_probe_asks_any_for_the_name_with_the_unicast_bit_and_proposes_its_record_in_the_authority_section ... ok
test tests::rfc6762_8_1_nothing_heard_before_the_first_probe_is_sent_is_a_conflict ... ok
test tests::rfc6762_8_1_a_probe_attempt_within_ten_seconds_of_a_conflict_waits_five_seconds_first ... ok
test tests::rfc6762_8_1_three_probes_250_ms_apart_follow_the_drawn_delay_and_the_name_is_announced_250_ms_after_the_third ... ok
test tests::forged_probes_that_win_every_tiebreak_cost_one_probe_in_five_seconds_and_the_name_is_claimed_when_they_stop ... ok
test tests::no_cut_of_a_conflicting_response_or_of_a_winning_probe_is_one ... ok
test tests::rfc6762_8_2_the_lexicographically_later_data_wins_a_simultaneous_probe_and_the_earlier_waits_a_second ... ok
test tests::rfc6762_8_a_link_that_returns_is_probed_on_before_the_name_is_announced_or_answered_with_again ... ok
test tests::the_group_address_maps_to_its_ethernet_address ... ok
test tests::rfc6762_8_2_a_probe_is_compared_by_class_then_type_then_data_and_a_longer_list_wins ... ok
test tests::the_record_is_multicast_at_most_once_a_second_and_a_query_inside_it_waits ... ok
test tests::rfc6762_9_a_held_name_another_host_answers_for_under_the_new_probe_is_lost ... ok
test tests::a_lost_name_is_probed_for_again_a_minute_after_the_loss_and_not_before ... ok
test tests::the_unicast_bit_sends_the_answer_back_to_the_asker ... ok
test tests::rfc6762_8_1_a_conflicting_response_under_the_probe_takes_the_name_and_nothing_else_does ... ok
test tests::rfc6762_9_a_conflicting_response_resets_a_held_name_to_probing_and_nothing_else_does ... ok
test tests::forged_probes_that_win_every_tiebreak_at_a_lost_name_cost_one_probe_a_minute ... ok
test tests::a_storm_of_forged_answers_costs_one_probe_and_the_name ... ok
test tests::a_storm_of_forged_conflicts_at_a_lost_name_costs_one_probe_a_minute ... ok
test tests::forged_answers_that_spare_every_probe_cost_one_probing_in_five_seconds_and_the_name_is_held_when_they_stop ... ok

test result: ok. 36 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

06:16:43 [ci] userland/netstack/mdns: cargo test --manifest-path userland/netstack/mdns/Cargo.toml

06:16:43 === [ci] userland/netstack/node
    Blocking waiting for file lock on package cache
   Compiling toyos-net-node v0.1.0 (<src>/toyos-dirrename/userland/netstack/node)
    Finished `test` profile [optimized + debuginfo] target(s) in 3.72s
     Running unittests src/lib.rs (target/debug/deps/toyos_net_node-aa2c64cc625e7067)

running 1 test
test lease::tests::the_log_lines_are_taken_and_the_report_before_them_keeps_its_turn ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/datagram.rs (target/debug/deps/datagram-e86a84e5f5c26267)

running 9 tests
test a_refusal_is_logged_by_the_call_that_met_it ... ok
test a_datagram_for_a_bound_port_is_handed_over_with_where_it_came_from ... ok
test a_broadcast_needs_its_permission ... ok
test a_socket_holds_the_port_it_named_or_the_one_its_draw_picked ... ok
test a_closed_socket_frees_its_port_and_what_it_accepted_still_leaves ... ok
test a_datagram_leaves_as_the_call_named_it ... ok
test a_clients_datagram_for_a_host_nobody_answers_for_is_dropped_and_the_client_is_told_nothing ... ok
test a_datagram_accepted_for_a_host_is_no_broadcast_after_the_server_renews_a_narrower_prefix ... ok
test each_refusal_is_answered_in_the_pipes_word_for_it ... ok

test result: ok. 9 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/host.rs (target/debug/deps/host-803046cba786c7e9)

running 1 test
test a_host_gives_a_connection_the_nodelay_its_listener_had_when_it_began ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/lease.rs (target/debug/deps/lease-b278d53b751b0a1a)

running 21 tests
test a_conflict_under_the_probe_declines_and_holds_nothing ... ok
test a_lease_that_runs_out_under_the_probe_leaves_no_address ... ok
test a_link_that_returns_with_no_lease_starts_discovery_over_at_once ... ok
test a_link_that_returns_keeps_a_held_lease_and_announces_it ... ok
test a_message_with_no_link_is_counted_and_not_sent ... ok
test a_hundred_refused_replies_are_one_line_and_a_count ... ok
test a_reply_without_the_cookie_is_refused_by_name ... ok
test a_renewal_without_a_router_takes_the_route_and_keeps_the_address ... ok
test a_renewal_for_a_server_nobody_answers_for_waits_and_is_dropped_and_the_client_is_told_nothing ... ok
test a_renewed_prefix_reaches_ip_before_its_router ... ok
test a_router_ip_refuses_is_no_router ... ok
test a_probe_the_link_drops_under_is_abandoned ... ok
test a_nak_takes_address_route_and_resolvers_in_one_step ... ok
test a_listener_stands_while_its_address_is_lost_and_answers_when_it_is_back ... ok
test a_second_conflict_takes_a_held_lease_and_declines_it ... ok
test expiry_takes_address_route_and_resolvers_in_one_step ... ok
test next_deadline_is_the_earliest_of_the_clients_and_the_stacks ... ok
test no_cut_of_the_ack_is_an_ack ... ok
test no_frame_is_from_the_address_before_it_is_verified ... ok
test the_lease_end_to_end ... ok
test no_flipped_bit_of_the_ack_yields_another_lease ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/listeners.rs (target/debug/deps/listeners-0155aace57c521d2)

running 31 tests
test a_listen_at_every_address_takes_no_port_held_at_the_machines_address ... ok
test a_listen_on_a_taken_port_is_refused_and_a_drawn_port_listens ... ok
test a_connect_between_two_accepts_is_queued_not_reset ... ok
test a_datagram_socket_holds_a_place_and_a_bind_without_one_makes_nothing ... ok
test a_handshake_reset_before_it_ends_leaves_the_next_connection_its_listeners_option ... ok
test a_listener_holds_a_place_and_a_listen_without_one_makes_nothing ... ok
test a_listener_ended_for_its_wake_gives_its_place_to_another_in_the_same_pass ... ok
test a_listen_at_the_machines_address_takes_no_port_held_at_every_address ... ok
test a_departed_clients_connection_holds_its_place_until_it_is_cut ... ok
test a_listener_holds_the_option_its_listen_named_from_its_first_connection ... ok
test a_listener_is_at_the_address_it_named_and_only_one_the_machine_holds ... ok
test a_handshake_nobody_finishes_leaves_the_port_open_and_is_given_up ... ok
test a_listener_answers_a_syn_and_wakes_its_owner_when_the_handshake_ends ... ok
test a_connect_past_the_places_is_refused_and_sends_nothing ... ok
test a_second_listen_at_the_machines_address_takes_no_port_held_there ... ok
test a_stream_reset_for_its_pipe_gives_its_place_to_a_connection_that_waits ... ok
test a_wake_left_by_a_connection_its_peer_reset_stands_for_the_next ... ok
test a_stream_starts_with_the_options_its_connection_took_from_its_listener ... ok
test a_wake_is_owed_only_for_a_connection_there_is_a_place_for ... ok
test a_request_for_a_stream_that_was_cut_names_nothing ... ok
test a_wake_the_owners_pipe_refuses_ends_the_listener ... ok
test an_accept_spends_a_wake_whatever_it_answers ... ok
test closing_a_listener_gives_its_place_to_a_connection_that_waits_at_another ... ok
test an_accept_answers_the_option_of_a_stream_its_own_pass_let_go ... ok
test closing_a_listener_resets_what_waits_and_frees_its_port ... ok
test more_places_wake_the_owner_of_a_connection_that_waits ... ok
test closing_a_connect_gives_its_place_to_a_connection_that_waits ... ok
test no_cut_of_a_syn_is_a_syn ... ok
test peers_at_more_addresses_than_there_are_places_hold_no_stream_past_them ... ok
test an_accepted_stream_is_one_of_its_peers_addresss_sixteen ... ok
test no_flipped_bit_of_a_syn_wakes_an_owner_or_ends_a_listener ... ok

test result: ok. 31 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/name.rs (target/debug/deps/name-8c603c20311b1485)

running 21 tests
test a_query_from_off_the_link_is_not_answered ... ok
test a_name_has_no_link_while_the_link_is_down_and_the_links_return_is_probed_on ... ok
test a_held_name_is_defended_and_probed_for_again_when_another_host_answers_for_it ... ok
test an_answer_goes_to_the_group_or_to_the_asker_as_the_query_asked ... ok
test a_second_query_inside_a_second_waits_for_the_second_to_end ... ok
test a_held_name_is_probed_for_again_when_the_link_returns_and_announced_only_then ... ok
test a_later_probe_of_another_hosts_makes_the_node_wait_a_second_and_probe_again ... ok
test a_held_lease_is_probed_for_three_times_and_its_name_announced_only_then ... ok
test a_lost_name_is_probed_for_again_a_minute_after_each_loss_and_claimed_once_no_host_answers ... ok
test a_conflicting_response_received_as_the_probing_ends_takes_the_name ... ok
test an_answer_to_a_link_local_asker_goes_to_its_own_link_address ... ok
test an_answer_udp_refuses_is_counted_and_dropped ... ok
test a_query_in_a_frame_to_the_groups_address_reaches_the_responder ... ok
test a_links_return_under_a_lost_name_is_probed_on_at_once_and_no_retry_follows_it ... ok
test every_message_leaves_with_ttl_255 ... ok
test another_hosts_answer_under_the_probe_takes_the_name_and_the_node_says_so ... ok
test the_first_probe_follows_the_delay_the_callers_draw_gives ... ok
test the_group_is_joined_and_its_membership_reported ... ok
test the_names_port_is_held_by_one_socket ... ok
test the_name_is_answered_only_while_its_lease_is_held ... ok
test no_cut_of_a_query_is_answered ... ok

test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/resolve.rs (target/debug/deps/resolve-94085b0fb47f9deb)

running 33 tests
test a_lookup_ends_when_its_lease_is_lost ... ok
test a_lookup_udp_refuses_every_resolver_of_ends_in_the_call_that_started_it ... ok
test a_forged_report_of_the_querys_own_addresses_and_ports_ends_nothing_and_the_answer_behind_it_is_taken ... ok
test a_lookup_is_not_carried_by_a_later_ones_schedule ... ok
test a_burst_at_a_resolver_not_yet_resolved_is_on_the_wire_once_the_resolver_answers_arp ... ok
test a_query_holds_its_port_while_its_answer_is_read_and_an_ended_lookup_holds_none ... ok
test a_lookup_outlives_a_renewal_that_names_the_same_resolvers ... ok
test a_query_is_rfc_1035s_octets_from_a_port_and_with_an_id_of_its_own_draws ... ok
test a_lookup_with_no_resolver_to_ask_is_refused_as_not_connected ... ok
test a_query_for_a_resolver_ip_has_given_up_ends_its_lookup_in_the_opportunity_that_would_have_carried_it ... ok
test a_clients_datagrams_behind_the_burst_wait_in_their_own_socket_and_take_no_querys_place ... ok
test a_lookup_let_go_frees_its_ports_and_its_place_at_once ... ok
test a_lookup_ends_when_its_leases_resolvers_change ... ok
test a_lookup_let_go_after_it_ended_takes_its_answer_with_it ... ok
test a_query_the_network_reports_unreachable_is_counted_and_ends_a_lookup_with_no_other_resolver ... ok
test a_query_its_resolver_refuses_by_icmp_is_counted_and_the_next_resolver_is_asked_at_once ... ok
test a_recorded_reply_of_a_public_resolver_answers_the_nodes_query ... ok
test a_reply_from_port_0_is_not_read ... ok
test a_query_udp_refuses_is_counted_holds_no_port_and_the_next_resolver_is_asked_at_once ... ok
test a_reply_is_read_only_at_the_address_its_query_left_from ... ok
test a_reply_is_read_only_from_the_resolver_its_query_went_to ... ok
test a_resolver_that_never_answers_is_asked_at_each_waits_end ... ok
test a_reply_on_another_querys_port_is_not_read ... ok
test a_report_that_is_not_about_the_query_or_is_a_hint_ends_no_wait ... ok
test a_resolver_the_lease_names_twice_is_asked_once_a_wait_whatever_it_reports ... ok
test forged_reports_and_another_resolvers_failures_end_nothing_and_the_answer_behind_them_is_taken ... ok
test a_reply_is_read_only_from_port_53 ... ok
test nothing_but_its_answer_ends_a_lookup ... ok
test reports_alone_end_no_lookup_and_ask_no_resolver_twice_inside_a_wait ... ok
test an_alias_answered_late_restarts_the_lookup_and_lets_the_old_names_queries_go ... ok
test the_lookup_past_the_cap_is_refused_until_an_answer_is_taken ... ok
test the_query_asked_in_a_dropped_querys_place_leaves_in_the_same_opportunity ... ok
test a_query_with_no_port_to_leave_from_ends_its_lookup_by_name ... ok

test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/slirp.rs (target/debug/deps/slirp-093165c007ff89fc)

running 3 tests
test slirps_offer_is_answered_with_a_request_for_what_it_offered ... ok
test slirps_ack_is_the_lease_its_bytes_name ... ok
test the_lease_is_read_from_the_acks_own_mask ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/streams.rs (target/debug/deps/streams-1e6b36f14ca6826f)

running 40 tests
test a_connect_before_the_lease_is_refused_and_sends_nothing ... ok
test a_connect_is_a_handshake_and_its_answer_names_the_port ... ok
test a_connect_closed_before_its_answer_is_answered_closed ... ok
test a_close_with_text_unread_resets ... ok
test a_connect_nobody_answers_arp_for_fails_when_tcp_knows ... ok
test a_connect_past_its_deadline_is_timed_out_at_the_deadline ... ok
test a_client_that_left_is_finished_by_the_stack ... ok
test a_finished_send_pipe_goes_with_its_reader ... ok
test a_close_sends_what_the_pipe_held_and_then_the_fin ... ok
test a_frame_moves_an_established_stream_with_no_opportunity_after_it ... ok
test a_full_pipe_keeps_the_rest_in_the_stack_and_is_watched_for_room ... ok
test a_reader_that_left_is_not_written_to_again ... ok
test a_refused_watch_resets_only_a_stream_that_holds_the_end ... ok
test a_refused_connect_is_answered_with_the_refusal ... ok
test a_pipe_that_is_no_pipe_resets_its_connection ... ok
test a_reset_after_the_clients_shutdown_lets_the_send_pipe_go_first ... ok
test a_deadline_moves_an_established_stream_with_no_opportunity_after_it ... ok
test a_client_done_writing_after_the_peers_fin_has_100_seconds_without_progress ... ok
test a_live_client_that_is_done_writing_is_not_timed ... ok
test a_reset_after_the_peers_fin_ends_the_send_pipe ... ok
test a_reset_ends_both_pipes_and_the_stream ... ok
test a_shutdown_after_the_peers_fin_keeps_the_send_pipe_past_the_connections_end ... ok
test a_writer_that_leaves_after_the_shutdown_leaves_the_stream_to_its_reader ... ok
test a_shutdown_sends_what_the_pipe_held_and_then_the_fin ... ok
test an_established_streams_connect_deadline_is_gone ... ok
test nodelay_reaches_the_stack ... ok
test a_departed_clients_unsent_bytes_have_100_seconds ... ok
test text_the_pipe_had_no_room_for_outlives_both_fins ... ok
test the_peers_fin_after_the_clients_shutdown_leaves_the_send_pipe_to_its_writer ... ok
test the_end_of_the_clients_writing_is_a_fin_and_the_peer_still_sends ... ok
test the_peers_fin_ends_the_clients_reading_and_not_its_writing ... ok
test room_in_the_pipe_opens_the_window_at_the_next_opportunity ... ok
test nothing_leaves_the_pipe_that_the_stack_will_not_take ... ok
test nothing_leaves_the_stack_that_the_pipe_did_not_take ... ok
test no_cut_of_a_segment_is_a_segment ... ok
test a_departed_clients_tail_arrives_whole_while_its_peer_takes_it ... ok
test a_peer_at_another_address_keeps_its_own_sixteen ... ok
test no_flipped_bit_of_a_segment_delivers_other_bytes ... ok
test a_departed_clients_connection_past_the_sixteen_is_one_of_them_once_one_is_done ... ok
test a_peer_keeps_sixteen_departed_clients_connections_alive_and_no_more ... ok

test result: ok. 40 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

06:16:50 [ci] userland/netstack/node: cargo test --manifest-path userland/netstack/node/Cargo.toml

06:16:50 === [ci] userland/pkg
   Compiling pkg v0.1.0 (<src>/toyos-dirrename/userland/pkg)
    Finished `test` profile [optimized + debuginfo] target(s) in 0.63s
     Running unittests src/lib.rs (target/debug/deps/pkg-e5d84c7974935e10)

running 12 tests
test sums::tests::a_line_that_is_not_one_and_a_name_given_twice_are_both_refused ... ok
test sums::tests::the_one_line_for_this_asset_is_the_answer ... ok
test sums::tests::hex_is_the_spelling_the_file_uses ... ok
test archive::tests::a_directory_and_two_files_come_back_whole ... ok
test archive::tests::a_header_that_does_not_sum_and_a_size_past_the_end_are_both_refused ... ok
test archive::tests::every_type_but_a_file_and_a_directory_is_refused ... ok
test archive::tests::a_name_that_leaves_the_archive_is_refused ... ok
test tests::a_file_name_that_states_no_version_is_refused ... ok
test tests::a_digest_the_manifest_cannot_carry_stops_the_install ... ok
test tests::a_path_the_archive_names_as_both_a_file_and_a_directory_is_refused ... ok
test tests::the_real_asset_plans_the_directory_the_track_describes ... ok
test tests::an_archive_that_is_not_one_directory_installs_nothing ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/main.rs (target/debug/deps/pkg-edc30b7abd4878f0)

running 3 tests
test tests::an_archive_that_inflates_past_the_ceiling_is_refused_unread ... ok
test tests::an_install_that_cannot_finish_takes_its_directory_back_down ... ok
test tests::a_tree_of_any_depth_comes_off_and_leaves_no_directory ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

06:16:51 [ci] userland/pkg: cargo test --manifest-path userland/pkg/Cargo.toml

06:16:51 === [ci] userland/soundserver
   Compiling soundserver v0.0.0 (<src>/toyos-dirrename/userland/soundserver)
    Finished `test` profile [optimized + debuginfo] target(s) in 0.45s
     Running unittests src/main.rs (target/debug/deps/soundserver-357eddc3ef0ef6da)

running 3 tests
test client::tests::the_stronger_witness_wins_in_either_order ... ok
test control::tests::a_control_message_is_refused_unless_its_width_and_its_state_both_fit ... ok
test mix::tests::published_totals_are_exactly_the_sum_of_every_window ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:52 [ci] userland/soundserver: cargo test --manifest-path userland/soundserver/Cargo.toml

06:16:52 === [ci] userland/soundserver/mixer
    Finished `test` profile [optimized + debuginfo] target(s) in 0.11s
     Running unittests src/lib.rs (target/debug/deps/toyos_mixer-55f41f11fc4bfc95)

running 55 tests
test channel::tests::a_mono_client_is_the_same_sample_in_both_channels ... ok
test channel::tests::an_append_lands_after_what_is_already_there ... ok
test channel::tests::planar_and_interleaved_convert_alike ... ok
test channel::tests::the_downmix_averages_rather_than_sums ... ok
test channel::tests::the_interleave_reads_only_the_frames_produced ... ok
test dll::tests::a_batch_is_measured_against_its_last_grid_point ... ok
test dll::tests::a_reset_forgets_the_grid_and_the_drift ... ok
test dll::tests::a_grid_that_runs_fast_is_followed ... ok
test dll::tests::a_wild_timestamp_cannot_collapse_or_run_away_the_period ... ok
test dll::tests::the_first_record_anchors_and_decides_nothing ... ok
test channel::tests::an_append_past_the_reserved_capacity_is_refused - should panic ... ok
test format::tests::a_half_rounds_away_from_zero ... ok
test corpus::tests::the_crate_agrees_with_the_captured_shell ... ok
test format::tests::full_scale_clamps_instead_of_wrapping ... ok
test gain::tests::a_settled_ramp_holds_its_level ... ok
test gain::tests::a_volume_that_is_not_a_number_is_refused_and_the_rest_is_clamped ... ok
test gain::tests::advancing_past_the_end_settles ... ok
test mix::tests::a_client_at_unity_is_added_unscaled ... ok
test mix::tests::a_period_of_the_wrong_width_is_refused - should panic ... ok
test mix::tests::a_silent_client_leaves_the_bus_untouched ... ok
test format::tests::a_period_quantizes_as_its_samples_do ... ok
test format::tests::passthrough_is_bit_exact_for_every_i16 ... ok
test format::tests::the_draw_stays_inside_half_an_lsb ... ok
test gain::tests::a_fade_stays_between_its_endpoints ... ok
test gain::tests::a_ramp_lands_exactly_on_its_target ... ok
test format::tests::the_generator_cannot_be_seeded_into_silence ... ok
test gain::tests::a_ramp_to_its_own_level_is_a_ramp_to_nowhere ... ok
test gain::tests::a_retarget_starts_from_the_level_reached ... ok
test corpus::tests::the_corpus_is_reproduced_bit_for_bit ... ok
test mix::tests::clients_sum_and_the_bus_is_not_clamped ... ok
test mix::tests::both_channels_of_a_frame_get_one_gain ... ok
test shape::tests::a_client_at_the_device_s_own_rate_gets_the_device_s_period ... ok
test mix::tests::the_composite_is_the_conversion_and_the_sum ... ok
test shape::tests::a_pipeline_with_nothing_to_reserve_disables_deferral ... ok
test shape::tests::a_rate_too_low_for_the_ramp_or_the_grid_is_refused ... ok
test shape::tests::a_shape_the_mixer_cannot_render_is_refused_and_nothing_divides_by_zero ... ok
test shape::tests::the_scratch_covers_every_rate_a_client_may_ask_for ... ok
test shape::tests::the_shipped_device_shape_is_served ... ok
test shape::tests::no_accepted_rate_overruns_the_shipped_scratch ... ok
test shape::tests::the_shipped_grid_and_ramp ... ok
test shape::tests::the_shipped_pipeline_keeps_five_periods_in_reserve ... ok
test stats::tests::a_late_wake_is_one_past_a_whole_period ... ok
test stats::tests::a_later_shorter_run_does_not_lower_the_worst ... ok
test stats::tests::a_software_grid_blames_only_itself ... ok
test stats::tests::one_covered_period_ends_a_run ... ok
test stats::tests::empty_wakes_belong_to_the_wake_that_ends_them ... ok
test stats::tests::only_the_wake_nothing_asked_for_is_named ... ok
test stats::tests::silence_outside_a_stream_costs_nothing ... ok
test stats::tests::the_halves_come_from_one_wake ... ok
test corpus::tests::a_one_lsb_change_anywhere_moves_the_transcript ... ok
test stats::tests::the_halves_sum_to_the_whole ... ok
test stats::tests::the_run_length_separates_a_gap_from_scattered_misses ... ok
test format::tests::the_dither_is_a_triangular_distribution_and_not_merely_shaped_like_one ... ok
test format::tests::a_signal_under_one_lsb_survives_the_quantizer ... ok
test format::tests::the_rounding_is_std_s_over_every_float_there_is ... ok

test result: ok. 55 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.92s

06:16:55 [ci] userland/soundserver/mixer: cargo test --manifest-path userland/soundserver/mixer/Cargo.toml

06:16:55 === [ci] userland/sshserver
    Finished `test` profile [optimized + debuginfo] target(s) in 0.22s
     Running unittests src/main.rs (target/debug/deps/sshserver-55278c998eec2a64)

running 29 tests
test command::tests::a_bare_name_resolves_under_system_bin ... ok
test command::tests::metacharacters_are_ordinary_bytes ... ok
test command::tests::quotes_hold_a_word_together ... ok
test command::tests::a_bare_command_is_its_words ... ok
test command::tests::a_shell_command_reaches_the_shell_whole ... ok
test command::tests::backslash_escapes_one_character ... ok
test command::tests::a_line_that_names_nothing_is_refused ... ok
test sftp::tests::a_second_init_ends_the_session ... ok
test sftp::tests::a_request_before_init_ends_the_session ... ok
test sftp::tests::a_handle_nobody_opened_is_refused ... ok
test sftp::tests::a_request_outside_the_profile_is_refused_by_name ... ok
test command::tests::an_unfinished_quote_is_refused ... ok
test sftp::tests::a_file_that_is_not_there_is_no_such_file ... ok
test sftp::tests::a_truncated_request_is_a_bad_message_and_not_a_panic ... ok
test sftp::tests::an_oversized_length_ends_the_session ... ok
test sftp::tests::framing_waits_for_a_whole_packet ... ok
test tests::a_file_that_names_nobody_authorizes_nobody ... ok
test tests::a_listed_key_is_authorized ... ok
test tests::a_key_listed_with_options_authorizes_nothing ... ok
test tests::an_unparseable_line_does_not_disarm_the_rest ... ok
test tests::an_unlisted_key_is_not_authorized ... ok
test tests::a_key_is_found_among_several_and_blank_lines ... ok
test tests::the_comment_is_not_part_of_the_key ... ok
test tests::input_a_program_is_reading_is_taken ... ok
test tests::input_for_a_program_that_is_gone_is_not_a_stall ... ok
test sftp::tests::the_profile_moves_a_file_and_lists_it ... ok
test sftp::tests::a_listing_longer_than_one_reply_continues_where_it_left_off ... ok
test tests::input_nothing_takes_is_given_up_on ... ok
test sftp::tests::a_directory_past_the_ceiling_is_refused_by_name ... ok

test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

06:16:56 [ci] userland/sshserver: cargo test --manifest-path userland/sshserver/Cargo.toml

06:16:56 === [ci] userland/symbolize
    Finished `test` profile [optimized + debuginfo] target(s) in 0.16s
     Running unittests src/main.rs (target/debug/deps/symbolize-9b3eaa77d97dc9da)

running 5 tests
test tests::a_name_is_read_under_the_root ... ok
test tests::a_name_some_host_reads_as_a_drive_or_separator_is_refused ... ok
test tests::a_name_that_leaves_the_root_is_refused ... ok
test tests::a_name_windows_reserves_for_a_device_is_refused ... ok
test tests::a_record_that_leaves_the_root_is_refused_on_its_line ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:16:56 [ci] userland/symbolize: cargo test --manifest-path userland/symbolize/Cargo.toml

06:16:56 === [ci] the apps for linux
info: component rust-std for target x86_64-unknown-linux-gnu is up to date
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.20s
    Checking toyos v0.18.0 (<src>/toyos-dirrename/toyos)
    Checking filepicker-api v0.1.0 (<src>/toyos-dirrename/userland/filepicker-api)
    Checking toyos-window v0.20.0 (<src>/toyos-dirrename/userland/toyos-window)
    Checking editor v0.1.0 (<src>/toyos-dirrename/userland/editor)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.93s
    Blocking waiting for file lock on package cache
    Checking filepicker v0.1.0 (<src>/toyos-dirrename/userland/filepicker)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.33s
    Checking files v0.1.0 (<src>/toyos-dirrename/userland/files)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.31s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
    Checking paint v0.1.0 (<src>/toyos-dirrename/userland/paint)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.32s
    Blocking waiting for file lock on package cache
    Checking toyos-manifest v0.1.0 (<src>/toyos-dirrename/toyos-manifest)
    Checking pkg v0.1.0 (<src>/toyos-dirrename/userland/pkg)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.91s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.13s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.21s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.10s
06:17:00 [ci] the apps for linux: 10 app(s) pass `cargo check --target x86_64-unknown-linux-gnu`; userland/doom, userland/proctest, userland/shell, userland/terminal, userland/toybox not attempted, as their manifests declare

06:17:00 === [ci] the apps for macos
info: component rust-std is up to date
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.15s
   Compiling filepicker-api v0.1.0 (<src>/toyos-dirrename/userland/filepicker-api)
   Compiling toyos-window v0.20.0 (<src>/toyos-dirrename/userland/toyos-window)
   Compiling editor v0.1.0 (<src>/toyos-dirrename/userland/editor)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.73s
    Blocking waiting for file lock on package cache
   Compiling filepicker v0.1.0 (<src>/toyos-dirrename/userland/filepicker)
    Finished `dev` profile [optimized + debuginfo] target(s) in 1.07s
   Compiling files v0.1.0 (<src>/toyos-dirrename/userland/files)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.64s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.13s
   Compiling paint v0.1.0 (<src>/toyos-dirrename/userland/paint)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.43s
   Compiling pkg v0.1.0 (<src>/toyos-dirrename/userland/pkg)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.47s
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.25s
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.27s
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.23s
06:17:05 [ci] the apps for macos: 10 app(s) pass `cargo build`; userland/doom, userland/proctest, userland/shell, userland/terminal, userland/toybox not attempted, as their manifests declare

06:17:05 === [ci] the apps for windows
info: component rust-std for target x86_64-pc-windows-msvc is up to date
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.17s
    Checking toyos v0.18.0 (<src>/toyos-dirrename/toyos)
    Checking filepicker-api v0.1.0 (<src>/toyos-dirrename/userland/filepicker-api)
    Checking toyos-window v0.20.0 (<src>/toyos-dirrename/userland/toyos-window)
    Checking editor v0.1.0 (<src>/toyos-dirrename/userland/editor)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.89s
    Checking filepicker v0.1.0 (<src>/toyos-dirrename/userland/filepicker)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.29s
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Checking files v0.1.0 (<src>/toyos-dirrename/userland/files)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.37s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.10s
    Checking paint v0.1.0 (<src>/toyos-dirrename/userland/paint)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.24s
    Checking toyos-manifest v0.1.0 (<src>/toyos-dirrename/toyos-manifest)
    Checking pkg v0.1.0 (<src>/toyos-dirrename/userland/pkg)
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.63s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.13s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.23s
    Finished `dev` profile [optimized + debuginfo] target(s) in 0.11s
06:17:09 [ci] the apps for windows: 10 app(s) pass `cargo check --target x86_64-pc-windows-msvc`; userland/doom, userland/proctest, userland/shell, userland/terminal, userland/toybox not attempted, as their manifests declare

06:17:09 === [ci] the toyos SDK
   Compiling toyos v0.18.0 (<src>/toyos-dirrename/toyos)
    Finished `test` profile [optimized + debuginfo] target(s) in 1.07s
     Running unittests src/lib.rs (target/debug/deps/toyos-f91d9b0c3685a5e7)

running 47 tests
test fs::tests::a_listing_entry_round_trips_and_a_short_one_is_refused ... ok
test fs::tests::a_grant_round_trips_at_every_bound ... ok
test fs::tests::a_path_is_canonical_only_without_empty_dot_or_dotdot_components ... ok
test fs::tests::bytes_no_grant_was_encoded_as_are_refused ... ok
test fs::tests::no_grant_carries_a_root_the_wire_refuses_or_one_past_the_badge ... ok
test ipc::tests::a_refused_move_closes_every_handle_it_consumed ... ok
test ipc::tests::a_batch_past_the_bound_is_refused_and_closed ... ok
test ipc::tests::a_taken_move_closes_nothing ... ok
test launch::tests::a_batch_names_each_handle_once_and_never_its_connection ... ok
test launch::tests::a_request_names_its_parent_by_one_word ... ok
test log::proof::a_position_that_never_lands_is_counted_by_the_sweep ... ok
test log::proof::a_ring_has_four_lanes_to_claim ... ok
test log::proof::a_full_ring_or_lane_refuses_at_once_and_never_waits ... ok
test fs::tests::the_window_copies_every_length_at_every_offset ... ok
test log::proof::a_placeholder_owned_ring_keeps_its_slots_from_every_pid_until_named ... ok
test log::proof::scribbled_words_bound_the_reader_and_never_panic_it ... ok
test log::proof::slots_left_to_others_are_theirs ... ok
test log::proof::the_region_carries_a_record_whole ... ok
test net::tests::a_binds_request_ends_in_its_listeners_options ... ok
test net::tests::a_not_found_is_not_a_netstack_that_is_not_there ... ok
test net::tests::an_option_request_is_three_words_on_the_wire ... ok
test log::stdio::tests::a_formatted_line_is_one_ended_record ... ok
test log::stdio::tests::a_line_a_flush_opened_is_closed_at_its_end ... ok
test log::stdio::tests::a_line_in_pieces_is_one_record ... ok
test log::stdio::tests::a_newline_ends_a_record_and_a_carriage_return_before_it_goes ... ok
test log::stdio::tests::a_long_line_is_records_in_order_with_nothing_lost ... ok
test net::tests::a_gone_handle_transfer_is_a_netstack_that_is_not_there ... ok
test net::tests::a_code_netstack_chose_is_still_its_own_answer ... ok
test net::tests::a_read_that_hung_up_is_a_netstack_that_is_not_there ... ok
test net::tests::an_accepts_answer_ends_in_its_connections_options ... ok
test log::proof::a_real_time_write_allocates_nothing ... ok
test net::tests::nothing_else_becomes_a_missing_netstack ... ok
test poller::tests::every_accessor_lands_on_the_abi_offset ... ok
test syscap::tests::a_refused_count_is_refused_and_not_an_empty_inventory ... ok
test poller::tests::a_submission_is_the_whole_entry_where_the_kernel_reads_it ... ok
test poller::tests::a_tail_the_kernel_publishes_mid_drain_is_observed ... ok
test log::stdio::tests::a_stream_held_by_two_writers_keeps_each_line_whole ... ok
test poller::tests::pending_counts_what_the_kernel_has_not_claimed ... ok
test log::proof::a_lane_gives_its_reader_every_record_in_order_or_counts_it_refused ... ok
test poller::tests::the_drop_counter_is_read_from_the_page ... ok
test syscap::tests::an_empty_inventory_is_its_count ... ok
test syscap::tests::a_machine_that_grows_every_round_is_refused_by_name ... ok
test syscap::tests::a_machine_that_grew_once_is_read_grown ... ok
test syscap::tests::every_record_is_read ... ok
test syscap::tests::a_record_that_does_not_decode_is_refused_and_not_dropped ... ok
test syscap::tests::a_refused_read_is_refused_and_not_an_empty_inventory ... ok
test log::proof::every_record_is_read_once_in_its_writers_order_or_counted_refused ... ok

test result: ok. 47 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests toyos

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

06:17:11 [ci] the toyos SDK: cargo test -p toyos

06:17:11 === [ci] nothing left in $TMPDIR or /tmp
06:17:11 [ci] nothing left in $TMPDIR or /tmp: every test took its scratch with it
06:17:11 [ci] Host: 78 step(s), all green

@Japabu
Japabu marked this pull request as ready for review October 10, 2026 06:30
@Japabu

Japabu commented Oct 10, 2026

Copy link
Copy Markdown
Collaborator Author

CI at b693474e2, read from each job's log: host 79 steps all green; toolchain toolchain restored; guest suite 43/43 ok. Merges clean with main 9b691ddce. Queued.

@Japabu
Japabu added this pull request to the merge queue Oct 10, 2026
Merged via the queue into main with commit 2c8a647 Oct 10, 2026
6 checks passed
@Japabu
Japabu deleted the wt/toyos-dirrename branch October 10, 2026 07:56
Japabu added a commit that referenced this pull request Oct 10, 2026
…st-side hash is toyos-sha2's

#810's https_fetch hashed the body it serves with the sha2 crate, which
this branch removes from the build crate's dependencies; it now hashes
with toyos-sha2, still a different SHA-256 from the guest's ring. Cargo.lock
is main's, regenerated by cargo over this branch's manifests. #817's
toyos-ssh hashes with ring and takes no sha2.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
Japabu added a commit that referenced this pull request Oct 10, 2026
… and atomic DATA commits (#816), into the SMMUv3 bring-up

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
Japabu added a commit that referenced this pull request Oct 10, 2026
…e SSH server core (#817), toyos-usbhid (#821) and the stop's hold of the console wire (#805), into the batch

Cargo.toml: both sides' build dependencies, the batch's libm (#813) and
main's toyos-ssh (#817). Cargo.lock: git's merge, which cargo metadata
--offline leaves as it is; every package it names is in one side's lock.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cSFvbD35xJ2kGANVdm23C
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant