Build date: 1779141603 - Mon May 18 22:00:03 UTC 2026 Build cvs date: 1779129442 - Mon May 18 18:37:22 UTC 2026 Build id: 2026-05-19.1 Build tags: amd64-regress ports sysupgrade Applied the following diff(s): /home/anton/tmp/robsd/src-sys-em.diff /home/anton/tmp/robsd/src-sys-uhidev-sispm.diff /home/anton/tmp/robsd/src-sysupgrade.diff P lib/libcrypto/x509/x509_addr.c P share/man/man4/ix.4 P share/man/man5/bsd.port.mk.5 P sys/dev/ic/qwx.c P sys/dev/ic/qwxvar.h P sys/dev/ic/qwz.c P sys/dev/ic/qwzreg.h P sys/dev/pci/files.pci P sys/dev/pci/if_ix.c P sys/dev/pci/if_ix.h P sys/dev/pci/if_qwx_pci.c P sys/dev/pci/if_qwz_pci.c P sys/dev/pci/ixgbe.c P sys/dev/pci/ixgbe.h U sys/dev/pci/ixgbe_e610.c P sys/dev/pci/ixgbe_type.h P sys/dev/pci/pcidevs P sys/dev/pci/pcidevs.h P sys/dev/pci/pcidevs_data.h P sys/dev/pci/drm/drm_gem.c P sys/dev/pci/drm/drm_gpusvm.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_gart.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_gmc.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_ring.h P sys/dev/pci/drm/amd/amdgpu/amdgpu_vce.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.h P sys/dev/pci/drm/amd/amdgpu/amdgpu_vm_cpu.c P sys/dev/pci/drm/amd/amdgpu/gfx_v11_0.c P sys/dev/pci/drm/amd/amdgpu/gfx_v9_0.c P sys/dev/pci/drm/amd/amdgpu/sdma_v4_0.c P sys/dev/pci/drm/amd/amdgpu/vcn_v3_0.c P sys/dev/pci/drm/amd/amdgpu/vcn_v4_0.c P sys/dev/pci/drm/amd/amdkfd/kfd_chardev.c P sys/dev/pci/drm/amd/amdkfd/kfd_device_queue_manager.c P sys/dev/pci/drm/amd/amdkfd/kfd_priv.h P sys/dev/pci/drm/amd/amdkfd/kfd_svm.c P sys/dev/pci/drm/amd/amdkfd/kfd_topology.c P sys/dev/pci/drm/amd/display/dc/core/dc_resource.c P sys/dev/pci/drm/amd/pm/powerplay/smumgr/ci_smumgr.c P sys/dev/pci/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c P sys/dev/pci/drm/i915/display/intel_psr.c P sys/dev/pci/drm/radeon/ci_dpm.c M sys/dev/usb/uhidev.c P sys/kern/kern_exec.c P sys/kern/vfs_syscalls.c P sys/sys/namei.h P usr.bin/ssh/chacha.c P usr.sbin/bgpctl/bgpctl.c P usr.sbin/bgpctl/output.c P usr.sbin/bgpd/bgpd.h P usr.sbin/bgpd/chash.c P usr.sbin/bgpd/chash.h P usr.sbin/bgpd/flowspec.c P usr.sbin/bgpd/parse.y P usr.sbin/bgpd/rde_attr.c P usr.sbin/bgpd/rde_prefix.c M usr.sbin/bgpd/session.c P usr.sbin/rpki-client/ccr.c P usr.sbin/rpki-client/extern.h P usr.sbin/rpki-client/print.c commit tnkPASRm3oms8s6Q Author: claudio Date: 2026/05/18 18:37:22 In res_to_flowspec enforce the FLOWSPEC_SIZE_MAX limit for a single rule. OK tb@ usr.sbin/bgpctl/bgpctl.c commit BI2DdF8lnwk5ZJtD Author: claudio Date: 2026/05/18 18:36:25 Introduce a maximum size for a single flowspec NLRI of 4000 bytes. Enforce this in both in the parser but also in the RDE. In the RDE flowspec_valid() will error out if the lenght is too long but also pt_get_flow() and pt_add_flow() will error out. The fixed buffer in pt_get_flow() is now sized appropriately instead of using a arbitrary size. OK tb@ usr.sbin/bgpd/bgpd.h usr.sbin/bgpd/flowspec.c usr.sbin/bgpd/parse.y usr.sbin/bgpd/rde_prefix.c commit eVSSgrV71Wphx9PB Author: tb Date: 2026/05/18 16:26:41 rpki-client: switch subordinates in CCR manifests to a simple queue Using a simple list meant that we reversed the order on parsing, resulting in confusing output in file mode. This is output cosmetics: the CCR DER is unaffected. Problem spotted by/ok job (who also wrote the exact same diff) usr.sbin/rpki-client/ccr.c usr.sbin/rpki-client/extern.h usr.sbin/rpki-client/print.c commit AO0p3OqUFF739Vp2 Author: claudio Date: 2026/05/18 15:49:22 Various fixes to the flowspec parser - handle PROTO proto_item like PROTO { proto_item }. - The LENGTH spec needs to be adjusted, curflow->type needs to be set before evaluating lengthspec. - Twice $$ is used in error checking before $$ was set. Use $1 instead. - extra semicolon after flags OK tb@ usr.sbin/bgpd/parse.y commit T1TnJru5qba032bL Author: kirill Date: 2026/05/18 13:47:32 sys/qwz: add 802.11n support Advertise HT capabilities and pass HT/QoS peer association. OK: stsp@ sys/dev/ic/qwz.c sys/dev/ic/qwzreg.h sys/dev/pci/if_qwz_pci.c commit 0iunsyH0anTRmcs1 Author: stsp Date: 2026/05/18 13:35:49 Ask qwx(4) firmware to move into M3 state before resetting the device. From mglocker@ via qwz(4). sys/dev/pci/if_qwx_pci.c commit DYpSKq7u6rscOrEx Author: stsp Date: 2026/05/18 13:32:43 Reset unified_ready flag before sending WMI init command to qwx(4) firmware. From mglocker@ via qwz(4) sys/dev/ic/qwx.c commit eBrW0V0HhIPsOC1E Author: kirill Date: 2026/05/18 13:21:17 man/bsd.port.mk.5: document check-shlib-syms OK: sthen@, tb@, gonzalo@ share/man/man5/bsd.port.mk.5 commit K9EM3Kbt9mhN77fS Author: claudio Date: 2026/05/18 12:34:51 Change CH_LOCATE equality function to be named _eq Reduce risk of using e.g. memcmp there. _eq returns 1 for match and 0 for no match. Also make all arguemnts const. This makes it a bit unclear which argument is which. First argument is from the hash table the second argument is the arg passed to CH_LOCATE. OK tb@ usr.sbin/bgpd/chash.c usr.sbin/bgpd/chash.h usr.sbin/bgpd/rde_attr.c commit EVwuzdgKDNKGsnRv Author: stsp Date: 2026/05/18 12:26:14 Avoid calling bus_dmamap_destroy() from interrupt context in qwx(4). Keep Rx TID DMA memory allocated until the interface goes down, rather than freeing DMA memory in interrupt context. Fixes splassert failures reported in dmesg because of qwx(4), such as: splassert: vm_map_assert_wrlock_ln: want 0 have 4 splassert: uvm_mapent_alloc: want 0 have 4 splassert: assertwaitok: want 0 have 4 Root cause of problem in qwx(4) pointed out by kettenis@, who also reviewed several diffs until I arrived at a correct fix. ok kettenis@ phessler@ sys/dev/ic/qwx.c sys/dev/ic/qwxvar.h commit BK45VlyaVKpPYcmK Author: stsp Date: 2026/05/18 12:15:08 document E610 support in ix(4) share/man/man4/ix.4 commit 86Js4XkzdFJAAo5U Author: stsp Date: 2026/05/18 12:14:38 Add support for Intel E610 Ethernet devices to the ix(4) driver. Build fix for sparc64 and arm64 contributed by jmatthew@ ok deraadt@ sys/dev/pci/files.pci sys/dev/pci/if_ix.c sys/dev/pci/if_ix.h sys/dev/pci/ixgbe.c sys/dev/pci/ixgbe.h sys/dev/pci/ixgbe_e610.c sys/dev/pci/ixgbe_type.h commit nMAEJJFsPNh3j9Cz Author: stsp Date: 2026/05/18 12:12:17 regen sys/dev/pci/pcidevs.h sys/dev/pci/pcidevs_data.h commit 72b9WfOaWJqyMRlM Author: stsp Date: 2026/05/18 12:11:50 add PCI IDs for Intel E610 products sys/dev/pci/pcidevs commit wP3qTrTThUlf6Fu8 Author: claudio Date: 2026/05/18 09:22:09 Add filter_size to the total memory use for "Sets and filters" OK tb@ usr.sbin/bgpctl/output.c commit 5B9vFoyZxEgTLrFX Author: jsg Date: 2026/05/18 06:45:53 0X20 -> 0x20, matching the other hex constants sys/sys/namei.h commit 49LEFVrlhzOxydCe Author: tb Date: 2026/05/18 04:24:01 x509_addr: do not call memcmp() on NULL If the minimum length is 0, either a->data or b->data could be NULL, so do not call memcmp() and let the length comparison decide. Doing it this way preserves the RFC 3779, section 2.2.3.3 semantics and avoids the UB. A valid IPAddressFamily has an addressFamily element of 2 or 3 octets: 2 octets for the AFI and 1 octet for the optional SAFI. The check as it is written compares the AFIs and, if they're equal, lets absent SAFI be smaller than any other SAFI. So IPv4 (0x0001) sorts before IPv4 unicast (0x000101) and that in turn sorts before IPv6 (0x0002). Found by beck while breaking OpenSSL ok kenjiro lib/libcrypto/x509/x509_addr.c commit S7xm4S3kGIcJUDPE Author: tb Date: 2026/05/18 04:14:57 chacha: avoid -Wunterminated-string-initialization warning The sizes of sigma[] and tau[] aren't used, so include a trailing NUL and thereby avoid upsetting modern compilers about use of dangerous, valid C. ok deraadt djm usr.bin/ssh/chacha.c commit 2INIgFf2PrI9lcmh Author: deraadt Date: 2026/05/18 03:11:34 Intended behaviour should not have a XXX XXX XXX XXX ok beck sys/kern/kern_exec.c commit qorsBAL4rs5JvZj3 Author: jsg Date: 2026/05/18 02:14:18 drm/amdgpu/vcn4: Avoid overflow on msg bound check From Benjamin Cheng 271cd5429513ff9b364a9bf8903e5b65b687eb25 in linux-6.18.y/6.18.32 65bce27ea6192320448c30267ffc17ffa094e713 in mainline linux sys/dev/pci/drm/amd/amdgpu/vcn_v4_0.c commit SGqq9PjFMEnmP7FI Author: jsg Date: 2026/05/18 02:12:30 drm/amdgpu/vcn3: Avoid overflow on msg bound check From Benjamin Cheng 016b64a0313ea5346cf526e30c8d3e66aca10175 in linux-6.18.y/6.18.32 e6e9faba8100628990cccd13f0f044a648c303cf in mainline linux sys/dev/pci/drm/amd/amdgpu/vcn_v3_0.c commit 9zRCz31N9qA2lh45 Author: jsg Date: 2026/05/18 02:10:30 drm/amdgpu: rework how we handle TLB fences From Alex Deucher f0d3bb6f5125c69ce872a7574afd6d9e1f7ea349 in linux-6.18.y/6.18.32 69c5fbd2b93b5ced77c6e79afe83371bca84c788 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.c sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.h commit tp1XdNJSSMNGefPr Author: jsg Date: 2026/05/18 02:07:48 Revert "drm/amdgpu: don't attach the tlb fence for SI" From Prike Liang 13e9ea445191390269a6f092d009b68e086e601b in linux-6.18.y/6.18.32 9163fe4d790fb4e16d6b0e23f55b43cddd3d4a65 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.c commit LSkfKJZRzpQp6WFZ Author: jsg Date: 2026/05/18 02:05:49 drm/amdgpu: Fix validating flush_gpu_tlb_pasid() From Timur Kristof 576b73b246564c8fa75572d45c1ed9b053b4be5b in linux-6.18.y/6.18.32 e3a6eff92bbd960b471966d9afccb4d584546d17 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_gmc.c commit pA8PZTPYVOh2YqKJ Author: jsg Date: 2026/05/18 02:03:52 drm/amdgpu: validate the flush_gpu_tlb_pasid() From Prike Liang fd78e63459ab6fe99b9fd026c420808d09eaa8be in linux-6.18.y/6.18.32 f4db9913e4d3dabe9ff3ea6178f2c1bc286012b8 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_gmc.c commit HlaK0jRsf1O4n9jl Author: jsg Date: 2026/05/18 02:01:28 drm/amdgpu/pm: align Hawaii mclk workaround with radeon From Alex Deucher f8f546883e8777493157ccc4fac5794c502fcbd2 in linux-6.18.y/6.18.32 1987c79b4fe5789dfa14423e78b5c25f6acf3e9d in mainline linux sys/dev/pci/drm/amd/pm/powerplay/smumgr/ci_smumgr.c commit 1yLEHLc90UICoB5V Author: jsg Date: 2026/05/18 01:58:48 drm/amdgpu/pm: add missing revision check for CI From Alex Deucher 6fed6e9f10622db34a18ee6ce155cbe0fa211b23 in linux-6.18.y/6.18.32 2a561b361b7681509710f3cfc3d95d54c87ac69f in mainline linux sys/dev/pci/drm/amd/pm/powerplay/smumgr/ci_smumgr.c commit yR4k88jUvNlo9CjI Author: jsg Date: 2026/05/18 01:56:19 drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission From John B. Moore 0b91ea46bb68abf98a082bf239092253bbd6aaa2 in linux-6.18.y/6.18.32 78d2e624fa073c14970aa097adcf3ea31c157a66 in mainline linux sys/dev/pci/drm/amd/amdgpu/sdma_v4_0.c commit fYf4SCV7ALZrwXxI Author: jsg Date: 2026/05/18 01:54:17 drm/amdkfd: Make all TLB-flushes heavy-weight From Felix Kuehling 6fbd52d210c15f3987e04d8fa2cf6ca3ace2d0d8 in linux-6.18.y/6.18.32 9b4e3495d1bd2469bf94b74930c153c2d534ddb7 in mainline linux sys/dev/pci/drm/amd/amdkfd/kfd_chardev.c sys/dev/pci/drm/amd/amdkfd/kfd_device_queue_manager.c sys/dev/pci/drm/amd/amdkfd/kfd_priv.h sys/dev/pci/drm/amd/amdkfd/kfd_svm.c commit SQWpfABIbDqAarEi Author: jsg Date: 2026/05/18 01:52:29 drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ From John B. Moore 71614ab2a683490bf7f43bf25afcf0d2a57a8403 in linux-6.18.y/6.18.32 7bbfb2559bcec39d1a4e1182d931a2046112c352 in mainline linux sys/dev/pci/drm/amd/amdgpu/gfx_v9_0.c commit cS8NAZN5ptV1j1Uz Author: jsg Date: 2026/05/18 01:50:17 drm/amdgpu: zero-initialize GART table on allocation From Philip Yang b17175d0a375b3ed5e81597dac4983fdb46e478d in linux-6.18.y/6.18.32 e6c2e6c2e1fa066968a16aca1cb66cd1bdde7741 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_gart.c commit reQ5s07Tr8mY1pW2 Author: jsg Date: 2026/05/18 01:47:50 drm/radeon: add missing revision check for CI From Alex Deucher 264ee64cf86794353e4fcb363282e3f9cf5249b3 in linux-6.18.y/6.18.32 17223816498f7b117d138d18eb0eba63604dc74e in mainline linux sys/dev/pci/drm/radeon/ci_dpm.c commit pf7tAHM1teQ04rL8 Author: jsg Date: 2026/05/18 01:45:24 drm: Set old handle to NULL before prime swap in change_handle From Francis, David 672464dd53231509c9c771110798c56d4660e19e in linux-6.18.y/6.18.32 5e28b7b94408897e41c63477aabc9e1db439bc8c in mainline linux sys/dev/pci/drm/drm_gem.c commit JtnbyNP7uVUu3N2N Author: jsg Date: 2026/05/18 01:42:51 drm/amdkfd: validate SVM ioctl nattr against buffer size From Alysa Liu db9530a9873a7c85d2266a922589ebcf427fa631 in linux-6.18.y/6.18.32 045e0ff208f0838a246c10204105126611b267a1 in mainline linux sys/dev/pci/drm/amd/amdkfd/kfd_chardev.c sys/dev/pci/drm/amd/amdkfd/kfd_priv.h commit zvbUi4DEfyDI6X4y Author: jsg Date: 2026/05/18 01:39:29 drm/amd/display: Change dither policy for 10 bpc output back to dithering From Mario Kleiner 158def957199b6c0b4d578f369ad05cbd7789fe9 in linux-6.18.y/6.18.32 d65bfb1782304b03862c8c725fac608015dffd36 in mainline linux sys/dev/pci/drm/amd/display/dc/core/dc_resource.c commit ncCV7cbrGvXk2IJP Author: jsg Date: 2026/05/18 01:37:36 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg From Benjamin Cheng 638e48ee39d0f2af9336f917a6f5d6692dd64d93 in linux-6.18.y/6.18.32 b193019860d61e92da395eae2011f2f6716b182f in mainline linux sys/dev/pci/drm/amd/amdgpu/vcn_v3_0.c commit PQdG5qOooriPiv6b Author: jsg Date: 2026/05/18 01:35:56 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg From Benjamin Cheng 63b51e8a9d54317d31cc3856c1e12407070d5fc2 in linux-6.18.y/6.18.32 0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648 in mainline linux sys/dev/pci/drm/amd/amdgpu/vcn_v4_0.c commit ufP9GRVxcOgD3BV4 Author: jsg Date: 2026/05/18 01:34:06 drm/amdgpu/vce: Prevent partial address patches From Benjamin Cheng b3d1a0a45c4aec484fa2a5b060b611e3d3064470 in linux-6.18.y/6.18.32 de2a02cc28d6d5d37db07d00a9a684c754a5fd74 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_vce.c commit YRkqlmAWZhP58vZ4 Author: jsg Date: 2026/05/18 01:32:16 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB From Benjamin Cheng a6d5563ba1f03a049561cd347574613167294e8d in linux-6.18.y/6.18.32 2444eb0ec8283f4a3845eb7febad378476e1ba3c in mainline linux sys/dev/pci/drm/amd/amdgpu/vcn_v4_0.c commit nUFOTeQEkP5w33ss Author: jsg Date: 2026/05/18 01:30:08 drm/amdgpu: Add bounds checking to ib_{get,set}_value From Benjamin Cheng fec8b11b55e53ff51a741e56894fe331a516f5c6 in linux-6.18.y/6.18.32 66085e206431ef88ce36f53c1f53d570790ccc9e in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_ring.h commit QvRQCvF13TfF2WmN Author: jsg Date: 2026/05/18 01:27:04 drm/amdkfd: Add upper bound check for num_of_nodes From Alysa Liu 44d5a450c04d3d734c13a03561c3131020d66edf in linux-6.18.y/6.18.32 74b73fa56a395d46745e4f245225963e9f8be7f1 in mainline linux sys/dev/pci/drm/amd/amdkfd/kfd_chardev.c sys/dev/pci/drm/amd/amdkfd/kfd_priv.h sys/dev/pci/drm/amd/amdkfd/kfd_topology.c commit 6pI19Hc58OZXPNCU Author: jsg Date: 2026/05/18 01:25:33 drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x From Yang Wang de137adccf7ade2d06e46bf9f0960ecc6be6ef13 in linux-6.18.y/6.18.32 504f0098ebd074ac8c0ce3471795d79f68e3d265 in mainline linux sys/dev/pci/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c commit N4XHgtnpmZhBjmlC Author: deraadt Date: 2026/05/18 01:25:10 Since libc (currently and probably forever) only calls __pledge_open() with 3 flags (O_RDONLY, O_RDWR, and O_CLOEXEC) validate this before calling deeper kernel code. It is not trivial to check O_RDONLY because the flag isn't a bit in the 3 (valid) states represented inside O_ACCMODE (which are converted more carefully to FREAD|FWRITE nowadays). This brings me back to my youth with the open(,3) bug... ok beck sys/kern/vfs_syscalls.c commit bskzoy5zbeJAeL8L Author: jsg Date: 2026/05/18 01:22:31 drm/amdgpu: gate VM CPU HDP flush on reset lock From Chenglei Xie f34eda3ff33d351a9d9c078420cbe1bd258b413e in linux-6.18.y/6.18.32 ddda81c4d7e71e41b1be91d921fd85747eddbd12 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_vm_cpu.c commit x7zSZEzXWZJR4GFU Author: jsg Date: 2026/05/18 01:20:09 drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. From Ramalingeswara Reddy, Kanala 2795d325bb5c133ff7f32d9272eea4877f42f358 in linux-6.18.y/6.18.32 574b3b14f7d1b329fc6e67b79328f0e6f4d4b3d4 in mainline linux sys/dev/pci/drm/amd/amdgpu/gfx_v11_0.c commit HvGqBJbUpnx8xKDN Author: jsg Date: 2026/05/18 01:17:13 drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure From Amir Shetaia 77d0b5d11387071770246fd0185a69fa28e8e109 in linux-6.18.y/6.18.32 ad52d61d82181dbdb7f05826de38352d5e550cc2 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c commit EYcFOnW3DY7TfwL6 Author: jsg Date: 2026/05/18 01:14:33 drm/i915/psr: Init variable to avoid early exit from et alignment loop From Jouni Hogander 48fb2213e2c27f94dccf657a2ffd3c8256ad7729 in linux-6.18.y/6.18.32 314f6179e370988ac00dadf373a4f6166eb3db15 in mainline linux sys/dev/pci/drm/i915/display/intel_psr.c commit QOZxPaav8QWyEMT5 Author: jsg Date: 2026/05/18 01:12:11 drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages From Matthew Brost 7fbb3b4bef023903e66138c25b205b47be19612b in linux-6.18.y/6.18.32 556dba95473900073a6c03121361c11f646dc551 in mainline linux sys/dev/pci/drm/drm_gpusvm.c commit I1Upn9Xq8UvElEzU Author: matthieu Date: 2026/05/17 18:36:04 update 3RDPARTY