AMDH: BEGIN amdsmb production-code harness
AMDH T0 sanity: rc=0 count=32 buf[0..3]=b0 b1 b2 b3 (expect rc=0 count=32 data=B0 B1 B2 B3)
AMDH T0: PASS
AMDH T1 wedge_prtcl: rc=0 (BUG: expect 0=ENOERR, correct would be 32=ETIMEOUT) count=32 elapsed=5440ms busy_polls=10002
AMDH T1 data: buf[0..3]=b0 b1 b2 b3 (STALE T0 bytes if 0xB0..) stale_0xAA=32
AMDH T1: BUG REPRODUCED (wedged controller reported SUCCESS after 5440ms busy spin; SMB_ETIMEOUT is dead code)
AMDH T2 wedge_ibf: ec_read rc=0 (BUG: expect 0; correct would be 1) val=0x00 sc_reads=502 (500-poll budget exhausted, write proceeded anyway)
AMDH T2: BUG REPRODUCED (EC timeout branch is dead code: 502 polls, still 'success')
AMDH T2b wedge_obf: ec_read rc=0 (BUG: expect 0; correct would be 1) val=0x5c (STALE byte 0x5C accepted as SMB_BCNT!) sc_reads=503
AMDH T2b: BUG REPRODUCED (OBF timeout branch is dead code; stale EC data byte returned as register value)
AMDH T3 uninit-caller-count truth table (smb.c:317 bcount is uninit; len=32 healthy slave):
AMDH T3 g=  0 -> rc=256 SMB_EINVAL: SMB_BREAD fails, feature dead for this stack byte
AMDH T3 g=  1 -> rc=0 count=32 stale_0xAA_bytes_in_out=31 (kernel-stack bytes smbioctl would copyout: 31)
AMDH T3 g=  5 -> rc=0 count=32 stale_0xAA_bytes_in_out=27 (kernel-stack bytes smbioctl would copyout: 27)
AMDH T3 g= 31 -> rc=0 count=32 stale_0xAA_bytes_in_out=1 (kernel-stack bytes smbioctl would copyout: 1)
AMDH T3 g= 32 -> rc=0 count=32 stale_0xAA_bytes_in_out=0 (kernel-stack bytes smbioctl would copyout: 0)
AMDH T3 g= 33 -> rc=256 SMB_EINVAL: SMB_BREAD fails, feature dead for this stack byte
AMDH T3 g=255 -> rc=256 SMB_EINVAL: SMB_BREAD fails, feature dead for this stack byte
AMDH T3w: bwrite with garbage count -> wire BCNT value:
AMDH T3w g=  0 -> rc=256 transmitted_BCNT=0x00 (rejected before wire)
AMDH T3w g=  1 -> rc=0 transmitted_BCNT=0x01 (garbage length put on the wire)
AMDH T3w g=  5 -> rc=0 transmitted_BCNT=0x05 (garbage length put on the wire)
AMDH T3w g= 31 -> rc=0 transmitted_BCNT=0x1f (garbage length put on the wire)
AMDH T3w g= 32 -> rc=0 transmitted_BCNT=0x20 (garbage length put on the wire)
AMDH T3w g= 33 -> rc=256 transmitted_BCNT=0x00 (rejected before wire)
AMDH T3w g=255 -> rc=256 transmitted_BCNT=0x00 (rejected before wire)
AMDH T4 (known DF-1091): rc=0 count=255 highest register index read=0xff (bank ends 0x27)
AMDH: END (0 harness self-failure(s))