Build date: 1784930403 - Fri Jul 24 22:00:03 UTC 2026
Build cvs date: 1784905430 - Fri Jul 24 15:03:50 UTC 2026
Build id: 2026-07-25.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P share/man/man4/man4.riscv64/Makefile
U share/man/man4/man4.riscv64/aplic.4
U share/man/man4/man4.riscv64/imsic.4
P sys/arch/riscv64/conf/GENERIC
P sys/arch/riscv64/conf/RAMDISK
P sys/arch/riscv64/conf/files.riscv64
U sys/arch/riscv64/dev/aplic.c
U sys/arch/riscv64/dev/imsic.c
P sys/arch/riscv64/dev/riscv_cpu_intc.c
P sys/arch/riscv64/include/riscvreg.h
P sys/dev/pci/if_aq_pci.c
P sys/dev/pci/pcidevs
P sys/dev/pci/pcidevs.h
P sys/dev/pci/pcidevs_data.h
P sys/dev/pci/drm/drm_linux.c
M sys/dev/usb/uhidev.c
P sys/uvm/uvm_extern.h
P sys/uvm/uvm_pdaemon.c
P sys/uvm/uvm_pmemrange.c
P sys/uvm/uvm_pmemrange.h
P usr.bin/tmux/screen-redraw.c
P usr.sbin/bgpctl/bgpctl.c
P usr.sbin/bgpd/bgpd.c
P usr.sbin/bgpd/control.c
P usr.sbin/bgpd/rde.c
P usr.sbin/bgpd/rtr.c
RCS file: /cvs/src/usr.sbin/bgpd/session.c,v
retrieving revision 1.539
retrieving revision 1.540
Merging differences between 1.539 and 1.540 into session.c
M usr.sbin/bgpd/session.c
P usr.sbin/vmd/control.c
P usr.sbin/vmd/fw_cfg.c
P usr.sbin/vmd/loadfile_elf.c
P usr.sbin/vmd/virtio.c
P usr.sbin/vmd/x86_vm.c

commit Yp5lEJZQ2PBJgXPj
Author: kettenis
Date: 2026/07/24 15:03:50

  Kill the uvm_pmalloc mechanism. This never really worked, at least until
  kirill@ fixed some page number/address confusement.  But it can't really
  work since pages freed by the pagedaemon are likely going to be grabbed
  by other consumers before we issue a wakeup through the uvm_pmalloc
  mechanism.  At this point the consensus is that it adds complexity to the
  pagedaemon that stands in the way of progress.

  Discussed with claudio@ and deraadt@
  ok deraadt@

  sys/dev/pci/drm/drm_linux.c
  sys/uvm/uvm_extern.h
  sys/uvm/uvm_pdaemon.c
  sys/uvm/uvm_pmemrange.c
  sys/uvm/uvm_pmemrange.h

commit PWrGRmURkGwA79mn
Author: dv
Date: 2026/07/24 14:24:49

  vmd(8): guard firmware config system state with a mutex.

  While vmd is not yet SMP, if multiple VCPUs emulate io to the Qemu
  firmware config registers simultaneously, they will race in mutating
  and observing state.

  Report and diff by Andrew Griffiths.

  ok hshoexer@

  usr.sbin/vmd/fw_cfg.c

commit j6avUVTkwX5V4Mco
Author: dv
Date: 2026/07/24 14:11:16

  vmd(8): reject GPAs in holes during gpa translation.

  vmd independentaly allocates guest memory in a series of ranges,
  mirroring the physical memory layout for the guest. The GPA translation
  in find_gap_range() incorrectly selects a memory range if the GPA
  is in a hole between two guest memory ranges. Make the initial check
  that the GPA falls within the bounds of a known memory range instead
  of just prior to the end.

  Report and diff by Andrew Griffiths.

  ok hshoexer@

  usr.sbin/vmd/x86_vm.c

commit G04tgSh14PuGXAwX
Author: kettenis
Date: 2026/07/24 13:58:52

  regen

  sys/dev/pci/pcidevs.h
  sys/dev/pci/pcidevs_data.h

commit Me7NdgzNd4KpdNzc
Author: kettenis
Date: 2026/07/24 13:58:18

  Add Spacemit K3.

  sys/dev/pci/pcidevs

commit smcRFq2Y0xP7dCV1
Author: dv
Date: 2026/07/24 13:56:02

  vmd(8): guard virtio entropy device register io with a mutex.

  While vmd isn't yet SMP capable, in the event multiple VCPU thread
  exist they may interleave in emulation of register access of the
  virtio entropy device because it's currently emulated in the vm
  process.

  Report and diff by Andrew Griffiths.

  ok hshoexer@

  usr.sbin/vmd/virtio.c

commit vEa2sGgMkIwTTisk
Author: dv
Date: 2026/07/24 13:48:17

  vmd(8): initialize the direct-boot argument page.

  In vmd's ELF loader, the boot args page is copied into guest memory
  from the stack without complete initialization. Initialize to zero
  to prevent leaking stack values into guest memory.

  Report and diff by Andrew Griffiths.

  ok hshoexer@

  usr.sbin/vmd/loadfile_elf.c

commit PeKuACfl0AfMRUcJ
Author: dv
Date: 2026/07/24 13:44:03

  Reject invalid payload sizes at vmd(8) control boundary.

  When we introduced agressive parsing and santization of imsg objects,
  it introduced the ability for a control socket client to force vmd
  to exit via fatal() calls. A simple solution is to validate just
  the size of the object at the control process boundary as that's
  the primary logic for triggering fatal() calls. This may need a
  greater redesign but that would require inspecting all imsg
  deseralization call points. For now, the author's proposal is fine.

  Report and diff by Andrew Griffiths.

  ok hshoexer@

  usr.sbin/vmd/control.c

commit 07TMzmN5mAb87a4e
Author: kettenis
Date: 2026/07/24 11:06:28

  aplic(4) and imsic(4)

  share/man/man4/man4.riscv64/Makefile
  share/man/man4/man4.riscv64/aplic.4
  share/man/man4/man4.riscv64/imsic.4

commit 9RDxOC8bCM2KhZXc
Author: kettenis
Date: 2026/07/24 10:51:01

  Add support for the RISC-V Advanced Interrupt Architecture.  This adds
  new imsic(4) and aplic(4) drivers for the Incoming MSI Controller and
  Advanced Platform-Level Interrupt Controller and supports the standard
  configuration where both are presents and imsic(4) functions as the
  top-level interrupt controller and aplic(4) forwarding classic interrupt
  lines as MSIs to imsic(4).  Tested on QEMU and Spacemit K3.

  ok jca@, mlarkin@

  sys/arch/riscv64/conf/GENERIC
  sys/arch/riscv64/conf/RAMDISK
  sys/arch/riscv64/conf/files.riscv64
  sys/arch/riscv64/dev/aplic.c
  sys/arch/riscv64/dev/imsic.c
  sys/arch/riscv64/dev/riscv_cpu_intc.c
  sys/arch/riscv64/include/riscvreg.h

commit 3qq2E0efDbFIKio9
Author: nicm
Date: 2026/07/24 08:49:23

  Replace outside as well as empty cells with the border.

  usr.bin/tmux/screen-redraw.c

commit 77JA7UNzb1dmdZAo
Author: claudio
Date: 2026/07/24 05:01:57

  Another imsg_get to imsg_getbuf conversion.

  OK tb@

  usr.sbin/bgpctl/bgpctl.c

commit FQm31MBSA0q2tr0T
Author: claudio
Date: 2026/07/24 05:01:01

  Convert from imsg_get() to imsgbuf_get()

  imsg_get should no longer be used.
  OK tb@

  usr.sbin/bgpd/bgpd.c
  usr.sbin/bgpd/control.c
  usr.sbin/bgpd/rde.c
  usr.sbin/bgpd/rtr.c
  usr.sbin/bgpd/session.c

commit K1ry9JnuRt4LUDHO
Author: bcook
Date: 2026/07/24 02:31:43

  enable 64-bit DMA mbuf support for aq(4)

  tested on "Aquantia AQC107S" rev 0x02: F/W version 3.1.86

  from brad@comstyle.com, ok kettenis@

  sys/dev/pci/if_aq_pci.c