FreeBSD/src 36256f7sys/dev/mlx5/mlx5_ib mlx5_ib_qp.c

mlx5ib: use the hardware Toeplitz id when creating an RSS TIR

create_rss_raw_qp_tir() wrote MLX5_RX_HASH_FUNC_TOEPLITZ (the
userspace ABI flag, value 1) into tirc.rx_hash_fn.  That field takes
the hardware encoding from mlx5_ifc.h, where 1 is INVERTED_XOR8 and
Toeplitz is MLX5_TIRC_RX_HASH_FN_HASH_TOEPLITZ (2).

Reviewed by: kib, slavash
Sponsored by: Nvidia Networking
MFC after: 1 week
DeltaFile
+2-1sys/dev/mlx5/mlx5_ib/mlx5_ib_qp.c
+2-11 files

FreeBSD/src 9273fe8sys/compat/linuxkpi/common/include/linux hrtimer.h, sys/compat/linuxkpi/common/src linux_hrtimer.c

linuxkpi: Add `hrtimer_setup()`

`hrtimer_setup()` replaces `hrtimer_init()` in Linux 6.15. The API and
the role are the same, except:
* it takes the `function` callback as argument
* if `function` is NULL, it assigns a default callback

At the same time, we hide `hrtimer_init()` if LINUXKPI_VERSION is
greater than or equal to 61500 because it was dropped in Linux 6.15.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58757
DeltaFile
+19-0sys/compat/linuxkpi/common/include/linux/hrtimer.h
+17-0sys/compat/linuxkpi/common/src/linux_hrtimer.c
+36-02 files

FreeBSD/src 5fad251sys/compat/linuxkpi/common/include/linux time.h, sys/compat/linuxkpi/common/src linux_timesub.c

linuxkpi: Add `timer64_to_tm()`

The function converts a number of seconds since Epoch to a `struct tm`.
The implementation was copied from `contrib/tzcode/localtime.c`.

The amdgpu DRM driver started to use it in Linux 6.15.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58758
DeltaFile
+183-0sys/compat/linuxkpi/common/src/linux_timesub.c
+19-0sys/compat/linuxkpi/common/include/linux/time.h
+2-0sys/conf/files
+1-0sys/modules/linuxkpi/Makefile
+205-04 files

FreeBSD/src 1771ab2usr.sbin/nfsuserd nfsuserd.c

nfsuserd.c: Fix handling where pw_name/gr_name differ from lookup name

When an NSS backend returns a canonical pw_name or gr_name that differs from
the lookup name supplied by the NFSv4 upcall, nfsuserd stores the successful
mapping in the kernel cache under the canonical name instead of the requested
name.

This causes the retry lookup performed by nfsv4_strtouid() or
nfsv4_strtogid() to miss the newly inserted cache entry, resulting in the
default UID/GID being returned although the NSS lookup itself succeeded.

PR:     296753
Reviewed by:    rmacklem
Tested by:      Emanuel Helms <emanuel at nfv.cc>
MFC after:      2 weeks
DeltaFile
+4-2usr.sbin/nfsuserd/nfsuserd.c
+4-21 files

FreeBSD/src 8ffe241sys/compat/linuxkpi/common/src linux_compat.c linux_page.c

linuxkpi: Fix assertion in `lkpi_vmf_insert_pfn_prot_locked()`

Before this change, the assertion would not catch a page index matching
the end address, even though the end address of a mapping is outside of
that mapping.

While here, add another assertion to catch page indexes outside of the
expected range earlier.

Also, pagefaulting an address outside of the mapping range should return
`VM_FAULT_SIGBUS` instead of panicing.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58194
DeltaFile
+4-1sys/compat/linuxkpi/common/src/linux_page.c
+2-0sys/compat/linuxkpi/common/src/linux_compat.c
+6-12 files

FreeBSD/src 9872af2usr.sbin/gstat gstat.c

gstat: Set errno = 0 before strtoul

The strtoul function sets errno on error, but does not clear it on
success; when using strtoul and checking errno (as one should) for
ERANGE / EINVAL afterwards, it's important to zero errno first.

While here, remove a dead store.

Reviewed by:    phk
Fixes:  4fe8c1b67be0 ("Add error and range checking ... ")
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D59270

(cherry picked from commit 6ddb10cf6b7f870d749e96d2ae55976b18896f54)
DeltaFile
+1-1usr.sbin/gstat/gstat.c
+1-11 files

FreeBSD/src bf95db1usr.sbin/gstat gstat.c

gstat: Set errno = 0 before strtoul

The strtoul function sets errno on error, but does not clear it on
success; when using strtoul and checking errno (as one should) for
ERANGE / EINVAL afterwards, it's important to zero errno first.

While here, remove a dead store.

Reviewed by:    phk
Fixes:  4fe8c1b67be0 ("Add error and range checking ... ")
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D59270

(cherry picked from commit 6ddb10cf6b7f870d749e96d2ae55976b18896f54)
DeltaFile
+1-1usr.sbin/gstat/gstat.c
+1-11 files

FreeBSD/src b712bb8sys/netinet tcp_subr.c tcp_usrreq.c

tcp: fix TCPS_CLOSED state underleak in syncache_socket()

The syncache entry holds one TCPS_SYN_RECEIVED count that normally is
transferred to the the newborn tp.  Upon failure syncache_socket() shall
not use TCPSTATES_INC/TCPSTATES_DEC (see 5050df3f4aa4 why).  But when
syncache_socket() fails in_pcbconnect(), it calls tcp_discardcb() to free
resources that were just allocated by tcp_newtcpcb() and this
tcp_discardcb() would do TCPSTATES_DEC(tp->t_state).  The t_state is
TCPS_CLOSED at this point.

Make tcp_discardcb() symmetrical to tcp_newtcpcb() - not responsible for
the TCPSTATES.  Make the caller responsible for state count book keeping.

Reviewed by:            tuexen
Fixes:                  3703e1a73e0e0367c04f47f793e46495e46e647b
Differential Revision:  https://reviews.freebsd.org/D59325
DeltaFile
+0-1sys/netinet/tcp_subr.c
+1-0sys/netinet/tcp_usrreq.c
+1-12 files

FreeBSD/src 2e16d37tests/sys/netinet udp_bindings.c

tests/netinet: test case for a jail with 2 addresses

Check that wildcard bind(2) doesn't yet select a local address, and later
connect(2) succeeds.
DeltaFile
+31-0tests/sys/netinet/udp_bindings.c
+31-01 files

FreeBSD/src 08cf959sys/netinet in_pcb.c

inpcb: use new local address in in_pcbconnect()

when collecting necessary locks for the operation.  The IPv6 version
is already correct.

Submitted by:   Nick Price <nick spun.io>
Fixes:          1dda8ba77a20d983774a3bf0e94c51c93f1d8758
DeltaFile
+1-1sys/netinet/in_pcb.c
+1-11 files

FreeBSD/src 153446esys/compat/linuxkpi/common/include/linux mm.h

linuxkpi: Add `split_page()`

This function is supposed to split large pages into an array of
`PAGE_SIZE`-sized pages, with correct refcounting. This is apparently
used to allow some drivers to free a part of a large page only.

I don't think we use large pages in linuxkpi. Therefore, this new
function is curently a no-op.

The DRM drivers TTM memory manager started to use it in Linux 6.15.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58762
DeltaFile
+6-0sys/compat/linuxkpi/common/include/linux/mm.h
+6-01 files

FreeBSD/src be6e357sys/compat/linuxkpi/common/src linux_compat.c

linuxkpi: Update `struct vm_area_struct` when an existing mapping is extended

With Mesa 26 and DRM drivers in Linux 6.13, userspace will try to extend
an existing mmap, at last push the end address further.

Before this change, the mapping was not updated, but userspace would try
to access a page after the initial end address, leading to a panic
triggered by the following assertion in `vm_fault_populate()`:

    MPASS(fs->first_pindex <= pager_last);

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58195
DeltaFile
+13-0sys/compat/linuxkpi/common/src/linux_compat.c
+13-01 files

FreeBSD/src fbc89a8sys/compat/linuxkpi/common/include/linux kthread.h

linuxkpi: Add `kthread_run_worker()`

On Linux, `kthread_run_worker()` differs from `kthread_create_worker()`
by waking up the task after creating it with `kthread_create_worker()`.

On FreeBSD, we already execute it and wait for it, so probably no need
to do anything further. Therefore, `kthread_run_worker()` is an alias to
`kthread_create_worker()`.

The DRM drivers generic code started to replace
`kthread_create_worker()` by `kthread_run_worker()` as is in Linux 6.14.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57701
DeltaFile
+11-0sys/compat/linuxkpi/common/include/linux/kthread.h
+11-01 files

FreeBSD/src 33ba607sys/compat/linuxkpi/common/include/linux kobject.h

linuxkpi: Alias `sd` field of `struct kobject`

On Linux, a `struct kernfs_node *` pointer, representing a directory in
sysfs, is kept in the `sd` struct field.

We don't have that on FreeBSD because we use sysctls instead. Let's
alias the sysctl OID pointer to `sd` using an union.

This pointer is checked by the DRM drivers using:
    if (var->kobj.sd) {
        ...
    }

The amdgpu DRM driver started to use these checks in Linux 6.13.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57586
DeltaFile
+16-1sys/compat/linuxkpi/common/include/linux/kobject.h
+16-11 files

FreeBSD/src 3732127sys/amd64/amd64 pmap.c, sys/arm64/arm64 pmap.c

amd64/arm64 pmap: consistently clear PGA_WRITEABLE

We don't consistently clear PGA_WRITEABLE on fictitious, managed pages.
Some functions do, e.g., pmap_remove_all(), but several do not.  At
worst, this is just a pessimization, but there is no good reason to be
inconsistent.  Clear PGA_WRITEABLE in those that previously did not by
introducing (and using) the helper function pmap_page_is_mapped_locked()
that implements the correct test.

Reviewed by:    kib, markj
MFC after:      3 weeks
Differential Revision:  https://reviews.freebsd.org/D59466
DeltaFile
+28-36sys/arm64/arm64/pmap.c
+25-28sys/amd64/amd64/pmap.c
+53-642 files

FreeBSD/src 4e45f4csys/kern subr_bufring.c

buf_ring: tiny style(9) fixup
DeltaFile
+2-3sys/kern/subr_bufring.c
+2-31 files

FreeBSD/src 9df7eedsys/kern kern_rangelock.c

rangelock: Fix format strings for 32-bit kernels

Reported by:    Jenkins
Fixes:          f1f58bdf7b5f ("acpi_pci: Honor device proximity for DMA tags")

(cherry picked from commit c869a36fc98a2ac1df5127e34ba7f9bffa0a5ce7)
DeltaFile
+4-4sys/kern/kern_rangelock.c
+4-41 files

FreeBSD/src 661d113lib/libsys pdfork.2

pdfork.2: document kern.pdfork_implicit_nowaitpid

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D59349
DeltaFile
+11-0lib/libsys/pdfork.2
+11-01 files

FreeBSD/src 24d3cbasys/kern kern_fork.c

kern_fork.c: add kern.pdfork_implicit_nowaitpid sysctl

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D59349
DeltaFile
+7-1sys/kern/kern_fork.c
+7-11 files

FreeBSD/src c63c77bsys/kern vfs_lookup.c

vp_crossmp: weaken the assert and make it more precise

Since the vp_crossmp vnode can leak into vn_vptocnp() calls due to
nullfs file mounting, not all lock requests are non-sleeping. The
requirement for the crossmp locking is that all lock requests should be
shared. Then, it does not matter if the requests allow sleeping, since
all locks are shared.

Also, check the lock type by correctly masking it with LK_TYPE_MASK.

Reported and tested by: pho
Reviewed by:    jah, markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D59468
DeltaFile
+1-1sys/kern/vfs_lookup.c
+1-11 files

FreeBSD/src a725815sys/dev/sound/pci emu10kx-pcm.c

snd_emu10kx: Make sure the block count and size cover the whole buffer

The playback voices always loop over the whole EMU_PLAY_BUFSZ buffer,
but emupchan_setblocksize() only recorded the new block size and left
the block count as it was set up by emu_vinit(). The blocks then no
longer covered the whole buffer, and the part they left out was played
without ever being written to, which became audible as distortion once
playback started going through a virtual channel.

Resize the buffer, so that the block count and size always cover it.

Fixes:          02d4eeabfd73 ("sound: Allocate vchans on-demand")
PR:             287687
MFC after:      1 week
Sponsored by:   The FreeBSD Foundation
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D59444
DeltaFile
+19-2sys/dev/sound/pci/emu10kx-pcm.c
+19-21 files

FreeBSD/src 358fe14sys/dev/sound dummy.c

snd_dummy: Bump primary channel count

Makes it easier to test scenarios involving more than 1 primary channels
per direction.

Sponsored by:   The FreeBSD Foundation
MFC after:      2 weeks
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D59085
DeltaFile
+2-2sys/dev/sound/dummy.c
+2-21 files

FreeBSD/src 5e02679sys/dev/sound/pcm dsp.c

sound: Prefer idle primary channels when allocating

dsp_chn_alloc() stopped at the first primary channel that was either
idle or already had vchans. Since the list is walked in order, the first
channel matched both conditions once it had been used, so every client
after the first was stacked onto it as a vchan and the remaining primary
channels were never allocated at all.

This is invisible on devices with a single primary channel, but not on
those which provide several. snd_emu10kx(4), for instance, registers
four primary channels for its front device, each able to run with its
own rate.

Look for an idle primary channel first, and only fall back to sharing
one that already has vchans when there is none left.

Sponsored by:   The FreeBSD Foundation
MFC after:      2 weeks
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D59084
DeltaFile
+17-7sys/dev/sound/pcm/dsp.c
+17-71 files

FreeBSD/src 5cc1427usr.sbin/syslogd syslogd.c

syslogd: Pipes need the CAP_PDGETPID right as well

While here, use caph_rights_limit(), as syslogd already uses
caph_enter().

PR:             298104
Reported by:    mi
Fixes:          24816abb8740 ("syslogd: Limit rights on procdescs")
MFC after:      3 days

(cherry picked from commit 87cfe4a62078bc8ff14671fde3af347e7c7e3a26)
DeltaFile
+4-3usr.sbin/syslogd/syslogd.c
+4-31 files

FreeBSD/src 7b76afdsys/netipsec keysock.c

netipsec: Implement pr_disconnect for PF_KEY sockets

Otherwise close() fails.

PR:             297977
Reviewed by:    glebius
Fixes:          ea7be1293b48 ("keysock: do not use raw socket code")
MFC after:      1 week

(cherry picked from commit fef9077cf816a6499bd6a7f9678c179194463e43)
DeltaFile
+7-0sys/netipsec/keysock.c
+7-01 files

FreeBSD/src 6a80c0esys/kern uipc_shm.c kern_rangelock.c

rangelock: Reimplement _rangelock_cookie_assert()

After rangelocks were reimplemented, _rangelock_cookie_assert() became a
stub.  Re-provide an implementation.

Reviewed by:    kib
MFC after:      1 week
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D59222

(cherry picked from commit 2e376cca379b744ce24c849aced684bf770c0f75)
DeltaFile
+52-0sys/kern/kern_rangelock.c
+3-3sys/kern/uipc_shm.c
+55-32 files

FreeBSD/src f51ad3asys/dev/e1000 if_em.c

e1000: Fence DMA when hardware reset fails

iflib releases queue mappings after IFDI_STOP() returns.  If a
Physical Function reset fails, returning with PCI bus mastering
enabled can therefore leave the device able to access mappings which
the framework is about to recycle.

Disable bus mastering and drain pending PCIe transactions when reset
fails during initialization or stop.  Re-enable and verify bus
mastering only after a later reset succeeds and before queue
programming begins.  Treat inability to establish the DMA fence as a
fail-stop invariant violation.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+3-1sys/dev/e1000/if_em.c
+3-11 files

FreeBSD/src 9490296share/man/man4 rtnetlink.4

rtnetlink(4): Qualify VF status descriptions

Driver-specific extension namespaces are optional.  Describe their
role without implying that every provider supplies one.

Clarify that the VLAN count excludes membership installed implicitly by
the PF without implying that an explicit VID 0 request cannot consume a
reported filter.

Sponsored by:   BBOX.io
DeltaFile
+5-3share/man/man4/rtnetlink.4
+5-31 files

FreeBSD/src c6df112sys/kern sched_4bsd.c

sched_4bsd: Allocate runqueues only for present CPUs

4BSD has been allocating an array of MAXCPU runqueues, runq_pcpu[],
instead of one runqueue per actually present CPU.  On amd64, MAXCPU is
1024 and 'struct runq' is 4128 bytes, causing runq_pcpu[] to take more
than 4 MiB of memory.  On the vast majority of current systems, which
have at most 32 cores with SMT, this is a waste of memory.

Besides providing per-CPU runqueues, runq_pcpu[] has also been used to
determine the CPU ID of a given thread's associated runqueue through
pointer arithmetic.

Since per-CPU structures are only allocated for present CPUs, in order
to save space, move the runqueues to per-CPU fields and, for each thread
('struct ts_sched'), replace its runqueue pointer by the CPU ID of the
runqueue it is in (new 'ts_rqcpu' field).  Set the thread's CPU ID to
the special NOCPU value when it is running on the global runqueue.

Drop the SKE_RUNQ_PCPU() macro as it is now simply equivalent to

    [13 lines not shown]
DeltaFile
+30-27sys/kern/sched_4bsd.c
+30-271 files

FreeBSD/src 5806717sys/kern sched_4bsd.c

sched_4bsd: Remove obsolete SMP scaling for ticks per priority level

The INVERSE_ESTCPU_WEIGHT scaling had been introduced by commit
b698380f33ef ("Quick fix for scaling of statclock ticks in the SMP
case. ...") to leave more discrimination room for multiple CPUs possibly
adding their ticks to the same 'struct ksegrp' (but also slightly
changing how CPU hogs are penalized).

Then, commit 8460a577a4b4 ("Make KSE a kernel option, ...") introduced
the current thread-based code, where tick accounting is only done on the
current thread, which renders this trick obsolete on !KSE.

Finally, when KSE was removed, the trick became generally obsolete.

The trick is actually even harmful because it changes the intended
behavior of priorizing more the CPUs that use the less ticks (and so,
impairs boosting "interactive" processes).

Remove it now.  Clamping of 'ts_estcpu' and its relation to the

    [8 lines not shown]
DeltaFile
+0-4sys/kern/sched_4bsd.c
+0-41 files