Build date: 1771801203 - Sun Feb 22 23:00:03 UTC 2026
Build cvs date: 1771799045 - Sun Feb 22 22:24:05 UTC 2026
Build id: 2026-02-23.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P sys/dev/acpi/if_bse_acpi.c
P sys/dev/fdt/if_bse_fdt.c
P sys/dev/ic/qwx.c
P sys/dev/pci/if_iwx.c
M sys/dev/usb/uhidev.c
P sys/kern/uipc_socket.c
P sys/uvm/uvm_map.c
P usr.bin/mg/interpreter.c
P usr.bin/mg/word.c
M usr.sbin/bgpd/session.c

commit CeZjcCSTxH3VWh7Y
Author: kettenis
Date: 2026/02/22 22:24:05

  Reset the PNVM segment count back to zero after we free the segments.
  Prevents us from calling bus_dmamap_sync(9) on random DMA map pointers
  when reloading the firmware.

  ok stsp@

  sys/dev/pci/if_iwx.c

commit Y7nXYkP1iIzIJAjv
Author: op
Date: 2026/02/22 22:16:41

  plug leak in transposeword(); from Han Boetes (hboetes at gmail), thanks!

  extracted from a bigger diff.

  usr.bin/mg/word.c

commit gA9gNBebv4zt0dZI
Author: kettenis
Date: 2026/02/22 21:53:54

  If we have a non-zero hint and none of the address selectors managed to
  return a valid address, set the hint to zero and retry.  This fixes
  mmap(2) with a hint (and without MAP_FIXED) when the hint falls outside
  of the userland address space range.

  ok deraadt@

  sys/uvm/uvm_map.c

commit PZVv5sIKax9l0PMT
Author: kettenis
Date: 2026/02/22 21:38:03

  Use bus_dmamap_load_raw(9) to load a DMA mapping for memory allocated with
  bus_dmamem_alloc(9).

  ok stsp@

  sys/dev/ic/qwx.c

commit dZzRrY2ZTAYdanwo
Author: bluhm
Date: 2026/02/22 21:30:58

  Prevent false ELOOP error in socket splicing.

  To avoid endless splicing loops, the mbuf's lifetime is limited by
  the ph_loopcnt counter.  Each time somove() runs, it compares the
  value to a maximum and increments.
  In the unlikely case that the drain buffer is full, the mbuf stays
  in the source buffer after incrementing.  When more data arrives
  and somove() is called, the counter at the same mbuf is incremented
  again.  Eventually the maxium could be reached and splicing dissolves
  with ELOOP.  This is not intended for mbufs which are never moved,
  we want to count the moves.
  Fix the race and increment just before sending the mbuf out to the
  drain buffer.

  OK mvs@

  sys/kern/uipc_socket.c

commit 3xz1WTMswew9BUt6
Author: mvs
Date: 2026/02/22 18:44:41

  Make bse(4) interrupts mp-safe. The code has nothing to do, so only
  establish interrupt handlers with IPL_MPSAFE bit.

  ok jmatthew

  sys/dev/acpi/if_bse_acpi.c
  sys/dev/fdt/if_bse_fdt.c

commit YV1932RfIkYXKSvx
Author: op
Date: 2026/02/22 10:31:28

  fix two leaks in interpreter.c; from Han Boetes (hboetes at gmail)

  - upon redefinition of a variable, free the content of the old varentry
  - free v1 if strndup fails, and delay the SLIST_INSERT_HEAD

  usr.bin/mg/interpreter.c