Build date: 1788386403 - Wed Sep  2 22:00:03 UTC 2026
Build cvs date: 1788380867 - Wed Sep  2 20:27:47 UTC 2026
Build id: 2026-09-03.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P lib/libc/sys/msgctl.2
P lib/libc/sys/msgget.2
P lib/libc/sys/msgrcv.2
P lib/libc/sys/msgsnd.2
P lib/libc/sys/semctl.2
P lib/libc/sys/semget.2
P lib/libc/sys/semop.2
P lib/libc/sys/shmat.2
P lib/libc/sys/shmctl.2
P lib/libc/sys/shmget.2
P lib/libcrypto/asn1/a_type.c
P lib/libcrypto/asn1/asn1_gen.c
P regress/usr.bin/ssh/cert-userkey.sh
P regress/usr.bin/ssh/keygen-comment.sh
P regress/usr.bin/ssh/keytype.sh
P regress/usr.bin/ssh/unittests/sshkey/mktestdata.sh
P regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1-cert.fp
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1-cert.pub
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1.fp
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1.fp.bb
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1.pub
P regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1_pw
P regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2.fp
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2.fp.bb
U regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2.pub
P regress/usr.bin/ssh/unittests/sshsig/testdata/mldsa44-ed25519
U regress/usr.bin/ssh/unittests/sshsig/testdata/mldsa44-ed25519.pub
P regress/usr.bin/ssh/unittests/sshsig/testdata/mldsa44-ed25519.sig
P sys/arch/amd64/amd64/identcpu.c
P sys/arch/amd64/amd64/vmm_machdep.c
P sys/arch/amd64/include/specialreg.h
P sys/dev/usb/if_atu.c
P sys/dev/usb/if_atureg.h
M sys/dev/usb/uhidev.c
P sys/dev/vmm/vmm.c
P sys/dev/vmm/vmm.h
P sys/net/bpf.c
P sys/net/bpf.h
P sys/net/bpf_filter.c
P sys/net/if_ppp.c
P sys/net/pf.c
P usr.bin/mandoc/main.c
P usr.bin/ssh/myproposal.h
P usr.bin/ssh/ssh-keyscan.c
P usr.bin/ssh/ssh-mldsa-eddsa.c
P usr.bin/ssh/ssh_config.5
P usr.bin/ssh/sshd.8
P usr.bin/ssh/sshd_config.5
M usr.sbin/bgpd/session.c

commit ACzvkBULFBiy9nNf
Author: bluhm
Date: 2026/09/02 20:27:47

  Prevent pf dropping TCP state with crafted reset packet.

  Revision 1.1212 of pf.c weakened the TCP reset check in stateful
  connection tracking to let legitimate resets pass in the backwards
  window.  Such a reset is accepted only if its acknowledgment number
  matches perfectly.  But as a workaround for broken stacks, pf
  replaces an acknowledgment number of 0 in a reset with the tracked
  sequence of the peer.  Then the perfect match always succeeds, and
  an attacker can spoof resets more easily than intended.  Use the
  acknowledgment number from the wire, before the workaround has
  modified it.

  discovered by Minghao Zhang; OK sashan@

  sys/net/pf.c

commit TIGM0yRpVXjzEFCd
Author: dv
Date: 2026/09/02 19:25:00

  Require NRIP Save support for vmm(4) on AMD hosts.

  This feature gives a fast, reliable path to accurately advancing
  RIP when emulating certain instructions. Most AMD hardware from the
  past 15 years should have NRIP Save and nested paging support so
  this drops support for AMD hardware from roughly family 11h and
  older with some rare exceptions.

  Discussed multiple times in the past.

  ok mlarkin@

  sys/arch/amd64/amd64/identcpu.c
  sys/arch/amd64/include/specialreg.h

commit yIkHPNoaSOV8oMsz
Author: dv
Date: 2026/09/02 19:01:29

  Centralize vmm(4) vcpu yield logic.

  Put all checks for "should the vcpu yield?" into the same function
  and rename it to better fit semantics ("stop" -> "yield"). This
  pulls in some scheduler flag checks that were duplicated between
  amd64 cpu-dependent code paths.

  sure, mlarkin@

  sys/arch/amd64/amd64/vmm_machdep.c
  sys/dev/vmm/vmm.c
  sys/dev/vmm/vmm.h

commit i0qYWVnOUnKpj1R8
Author: dv
Date: 2026/09/02 18:43:14

  Make vmm(4) exception helpers return void.

  None of the vmm_inject_{gp,ud,etc.}() functions can fail. There's
  no need to return 0 for all of them, so simplify the function
  signature and update call sites to clean things up a bit.

  sure, mlarkin@

  sys/arch/amd64/amd64/vmm_machdep.c

commit ADOkh0Y1LPpMpdey
Author: dv
Date: 2026/09/02 18:37:03

  vmm(4): classify injected #DB as hardware exception.

  vmm was incorrectly classifying as a software exception. Change to
  hardware exception without an error code.

  ok mlarkin@

  sys/arch/amd64/amd64/vmm_machdep.c

commit XUfPxWiip8RrT3KC
Author: claudio
Date: 2026/09/02 13:34:32

  Use bpf_mfilter in bpf_movein since it operates on an mbuf

  With this bpf_filter is no longer used by the kernel and all the code
  around it can be hidden from _KERNEL.

  OK tb@

  sys/net/bpf.c
  sys/net/bpf.h
  sys/net/bpf_filter.c

commit e5r9inM3SiFXnZxh
Author: claudio
Date: 2026/09/02 13:25:12

  Use correct bpf filter calls in ppp(4)

  10 years ago the bpf_filter interface was changed and bpf_mfilter was
  introduced. bpf_filter no longer support passing an mbuf as pkt by using
  a buflen of 0. Finally adjust this code and switch it over to bpf_mfilter.

  OK tb@

  sys/net/if_ppp.c

commit g0xOCtHFsM48aBdj
Author: schwarze
Date: 2026/09/02 12:30:19

  When a manual page file requested via man(1) is not found in any mandoc.db(5)
  but is then found by the fallback search in the file system, do not warn
  about an outdated mandoc.db if the manual page tree that contains the
  requested file does not contain a mandoc.db file in the first place.

  This avoids bogus, annoying warnings in two situations:
  (1) when users choose to have their own, private manual page tree
  without putting a mandoc.db into it; and
  (2) on operating systems allowing a configuration where makewhatis(8)
  and mandoc.db(5) are not used at all.

  Issue found by Paul Bredbury <brebs@sent.com> on Alpine Linux, where
  installing apropos(1) and makewhatis(8) is optional and not the default.

  usr.bin/mandoc/main.c

commit lRTy6VX6MDAq0bs9
Author: djm
Date: 2026/09/02 09:04:11

  reenable ssh-mldsa44-ed25519 at a low priority position

  usr.bin/ssh/myproposal.h

commit BGahWtlpifJlpcrh
Author: tb
Date: 2026/09/02 07:15:01

  asn1_multi: slightly improve order of variable declarations and freeing

  lib/libcrypto/asn1/asn1_gen.c

commit usRrreHsIarJ9xSj
Author: tb
Date: 2026/09/02 07:11:55

  asn1_multi: explicitly test against NULL twice

  lib/libcrypto/asn1/asn1_gen.c

commit aROvpigCcqQNYdLf
Author: tb
Date: 2026/09/02 07:11:04

  asn1_multi: assign and test twice

  tweak nearby whitespace

  lib/libcrypto/asn1/asn1_gen.c

commit cB8Dk8na0vrZtCqO
Author: tb
Date: 2026/09/02 07:09:48

  asn_multi: rename bad label to err

  lib/libcrypto/asn1/asn1_gen.c

commit k9nGEUQIvwz494Ej
Author: tb
Date: 2026/09/02 07:08:36

  asn1_multi: rework creation of the returned stack

  Currently, the ASN1_TYPE ret is created up front and further populated
  via a possibly failing call to ASN1_STRING_type_new(). On failure, the
  incomplete ret is returned, indicating success to the caller, which may
  or may not fail later.

  Instead, create the inner ASN1_STRING first, then the ASN1_TYPE. Use
  setter API with proper ownership transfer rather than fiddling with
  deeply nested ASN1 structures. This way we only succeed if everything
  actually succeeded.

  ok kenjiro

  lib/libcrypto/asn1/asn1_gen.c

commit 62c0xsArWh0fFgR3
Author: tb
Date: 2026/09/02 07:04:56

  asn1_multi: fix a comment

  Shorter, more precise and closer to grammatically correct.

  ok kenjiro

  lib/libcrypto/asn1/asn1_gen.c

commit HijvcJTpNr0CijtL
Author: tb
Date: 2026/09/02 07:03:45

  asn1_multi: plug leak if sk_ASN1_TYPE_push() fails

  If the push of typ onto sk fails, the exit path does not free it.
  Fix that and avoid function nesting when calling ASN1_generate_v3().

  Prompted by a similar fix in OpenSSL

  ok kenjiro

  lib/libcrypto/asn1/asn1_gen.c

commit eveWXsctydi8Gvmf
Author: tb
Date: 2026/09/02 07:01:54

  a_type: add XXX to consider adding an internal ASN1_TYPE_set0()

  ok kenjiro

  lib/libcrypto/asn1/a_type.c

commit 1XQrYxDoIPpYObg3
Author: jsg
Date: 2026/09/02 06:17:35

  Daan Vreeken agreed to rescind the advertising clause.

  https://mail-index.netbsd.org/source-changes/2025/11/26/msg159202.html

  sys/dev/usb/if_atu.c
  sys/dev/usb/if_atureg.h

commit Xyslzlw2PZnFce1C
Author: jsg
Date: 2026/09/02 04:48:34

  Frank van der Linden agreed to rescind the advertising clause.

  https://mail-index.netbsd.org/source-changes/2026/01/02/msg159829.html

  lib/libc/sys/msgctl.2
  lib/libc/sys/msgget.2
  lib/libc/sys/msgrcv.2
  lib/libc/sys/msgsnd.2
  lib/libc/sys/semctl.2
  lib/libc/sys/semget.2
  lib/libc/sys/semop.2
  lib/libc/sys/shmat.2
  lib/libc/sys/shmctl.2
  lib/libc/sys/shmget.2

commit WLehLp3iAgOmbnf9
Author: djm
Date: 2026/09/02 00:39:18

  replace testing of vendor PQ signature algorithm
  "ssh-mldsa44-ed25519@openssh.com" with the IANA-registered
  "ssh-mldsa44-ed25519"

  regress/usr.bin/ssh/cert-userkey.sh
  regress/usr.bin/ssh/keygen-comment.sh
  regress/usr.bin/ssh/keytype.sh
  regress/usr.bin/ssh/unittests/sshkey/mktestdata.sh
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1-cert.fp
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1-cert.pub
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1.fp
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1.fp.bb
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1.pub
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_1_pw
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2.fp
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2.fp.bb
  regress/usr.bin/ssh/unittests/sshkey/testdata/mldsa44_ed25519_2.pub
  regress/usr.bin/ssh/unittests/sshsig/testdata/mldsa44-ed25519
  regress/usr.bin/ssh/unittests/sshsig/testdata/mldsa44-ed25519.pub
  regress/usr.bin/ssh/unittests/sshsig/testdata/mldsa44-ed25519.sig

commit GfZZnkEXUVAGkQVQ
Author: djm
Date: 2026/09/02 00:37:59

  IANA has allocated a non-vendor codepoint for ssh-mldsa44-ed25519,
  so use it instead of the vendored "@openssh.com" name.

  Note: this replaces the vendored name, which was only marked as
  experimental and not enabled by default.cw

  If you have ssh-mldsa44-ed25519@openssh.com keys manually configured
  in sshd, then you will need to remove them from sshd_config and
  restart.

  usr.bin/ssh/myproposal.h
  usr.bin/ssh/ssh-keyscan.c
  usr.bin/ssh/ssh-mldsa-eddsa.c
  usr.bin/ssh/ssh_config.5
  usr.bin/ssh/sshd.8
  usr.bin/ssh/sshd_config.5