add a libm dependency

(christos)

Add a libm dependency

(christos)

Fix vax and platforms that don't have ldexp in libc (aarch64, ppc64, ia64)

(christos)

Consistency in use of #define names.  No functional change as values of
before and after defines are the same.

(skrll)

Remove ETH (defunct) and add ETM.

(maya)

Sync with sys/dev/audio/audio.c rev1.62.
> Restore backward compatibility with netbsd-7 audio.

(isaki)

Restore backward compatibility with netbsd-7 audio.
For sticky parameters (encoding, precision, channels, sample_rate and pause):
- AUDIO_SETINFO for nonexistent track updates sticky parameters.
- AUDIO_GETINFO for nonexistent track reads sticky parameters.
For blocksize, hiwat, lowat and {play.record}.buffer_size:
- AUDIO_SETINFO for nonexistent track does nothing.
- AUDIO_GETINFO for nonexistent track returns dummy non-zero values.
Nonexistent track is a playback track on O_RDONLY descriptor for example,
or both tracks on /dev/audioctl.

(isaki)

Add LUZ and WMI airports (Poland).

(fcambus)

Comment out full function of optimized version of copyoutstr(9),
which has never been enabled so far.

Only for clarity. No binary changes.

(rin)

PR 55045: strlcpy(NULL, ..., 0) considered harmfull in some implementations.

(martin)

panel -> lcdpanel

Part of PR port-cobalt/55009

(thorpej)

mips64 has compat_netbsd32 but cannot have exec_aout; all other users
of compat_netbsd32 need exec_aout

Addresses PR kern/55037.

XXX pullup-9

(pgoyette)

Add ioctls to get and set raw mode.

(christos)

PT_GNU_RELRO segments are arranged such that their vaddr + memsz ends
on a linker common page size boundary.  However, if the common page size
used by the linker is less than the VM page size being used by the kernel,
this can end up in the middle of a VM page and when the region is write-
protected, this can cause objects in neighboring .data to get incorrectly
write-protected, resulting in a crash.

Avoid this situation by calculating the end of the RELRO region not by
rounding memsz up to the VM page size, but rather by adding vaddr + memsz
and then truncating to the VM page size.

Fixes PR toolchain/55043.

XXX pullup-9

(thorpej)

CLEANFILES can only do files

(mlelstv)

lookup_fastforward(): bail out on mount -o union

(ad)

replace #if condition for irq_slot with __diagused on the cleanup path

fixes PR kern/55044 by Uwe Toenjes

(jdolecek)

move the pam module after the trench where pam is being build

(christos)

don't skip the rdir check for the lazy case; breaks chroot df(1) hiding.

(christos)

Tickets #753 - #756

(martin)

Pull up following revision(s) (requested by rin in ticket #755):

sys/arch/evbppc/conf/std.virtex: revision 1.4
sys/arch/powerpc/powerpc/trap_subr.S: revision 1.81
sys/arch/powerpc/ibm4xx/4xx_trap_subr.S: revision 1.8
sys/arch/evbppc/conf/std.walnut: revision 1.9
common/lib/libc/arch/powerpc/atomic/atomic_op_asm.h: revision 1.7
sys/arch/powerpc/include/asm.h: revision 1.49
common/lib/libc/arch/powerpc/atomic/atomic_cas.S: revision 1.9
sys/arch/powerpc/ibm4xx/trap_subr.S: revision 1.28
sys/arch/powerpc/include/lock.h: revision 1.15
sys/arch/evbppc/conf/std.obs266: revision 1.3
common/lib/libc/arch/powerpc/atomic/atomic_swap.S: revision 1.8
sys/arch/powerpc/powerpc/locore_subr.S: revision 1.61
sys/arch/powerpc/powerpc/lock_stubs.S: revision 1.12
sys/arch/evbppc/conf/std.obs200: revision 1.5

Implement workaround for IBM405 Errata 77 (aka CPU_210), where
interrupted stwcx. may errantly write data to memory:

    https://elinux.org/images/1/1d/Ppc405gp-errata.pdf

This is because stwcx. is split into two pieces in the pipeline.

We need to
(1) insert dcbt before every stwcx. instruction, as well as
(2) insert sync before every rfi/rfci instruction.

It is unclear which processors are affected, but according to Linux,
all 405-based cores up until 405GPR and 405EP are affected:

    https://github.com/torvalds/linux/blob/master/arch/powerpc/platforms/40x/Kconfig#L140

For kernel, this workaround can be restricted to affected processors.

However, for kernel modules and userland, we have to enable it for all
32bit powerpc archs in order to share common binaries as before.
Proposed on port-powerpc:

    http://mail-index.netbsd.org/port-powerpc/2020/02/21/msg003583.html

(martin)

Pull up following revision(s) (requested by rin in ticket #754):

sys/kern/files.kern: revision 1.44

Include kern_crashme.c in non-DEBUG kernels.
This is useful for simulating crashes in production to test failover.

(martin)

Pull up following revision(s) (requested by rin in ticket #753):

sys/fs/tmpfs/tmpfs_vfsops.c: revision 1.75

remove an always false check and its' "This can never happen?" comment.

(martin)

Pull up following revision(s) (requested by riastradh in ticket #756):

lib/Makefile: revision 1.276

Remove unfinished hack I accidentally committed in 2017.

This caused make to unconditionally take ages running useless
submakes in every subdirectory.  Accidentally committed during the
MKCRYPTO option removal when I was presumably experimenting with
automating library dependency generation in lib.

Should shave a few seconds at least off every build!

(martin)

Ticket #1513

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1513):

lib/Makefile: revision 1.276

Remove unfinished hack I accidentally committed in 2017.

This caused make to unconditionally take ages running useless
submakes in every subdirectory.  Accidentally committed during the
MKCRYPTO option removal when I was presumably experimenting with
automating library dependency generation in lib.

Should shave a few seconds at least off every build!

(martin)

Mark find_event_count() with __used

(kamil)

Comment that libpam depends on libssh.

(rin)

Make some wait channel names unique to six characters.

(rjs)

Move libpam to the next trench since it depends on ssh

(christos)

- show " refcount %d" for consistency
- fix an extra : bug which was introduced rev 1.17

(nisimura)

Trailing whitespace

(skrll)

Typo in comment

(skrll)

Use vpanic, not vprintf and then panic.

(riastradh)

Don't clear CFI and priority bit to pass them to the upper layer.

(msaitoh)

Send packets even if link state is not up

ixl(4) has not the limitation that it must not send packet when
link is down. And most of the other NIC drivers do not refer to it
when sending packets.

reviewed by knakahara@n.o, thanks.

(yamaguchi)

Use ixl_atq_exec for waiting the Get link status response of ixl(4)
not to send the same command at once

reviewed by knakahara@n.o., thanks.

(yamaguchi)

Added KASSERT

(yamaguchi)

Remove unfinished hack I accidentally committed in 2017.

This caused make to unconditionally take ages running useless
submakes in every subdirectory.  Accidentally committed during the
MKCRYPTO option removal when I was presumably experimenting with
automating library dependency generation in lib.

Should shave a few seconds at least off every build!

(riastradh)

Fix the crash when ixl(4) sends Get link status command
and receives Get link status response in parallel

sc->sc_link_state_atq.iatq_fn is used in ixl_atq_done_locked()
with sc->sc_atq_lock, but it was cleared in ixl_get_link_status()
without the lock.

(yamaguchi)

Add build glue

(christos)

Add fido and cbor

(christos)

Add a commented out entry for pam_u2f.so

(christos)

Add debugging commented out.

(christos)

print the widest int

(christos)

the uid is not a pam item!

(christos)

Disable debugging

(christos)

Enable ssh-sk-helper

(christos)

Extra directories for fido and cbor

(christos)

Add libcbor, libfido2, pam-u2f

(christos)

add libfido2, libcbor, pam-u2f, sort

(christos)

Add libcbor, libfido2

(christos)

Add libcbor

(christos)

Add build glue

(christos)

Add libfido2 and pam-u2f

(christos)

Add build glue

(christos)

Add cast

(christos)

add casts, change to multiline.

(christos)

- fix order initialization: debug_file was not getting properly initialized
- fix free casts
- add pam module entry for OpenPAM

(christos)

back to LOG_DEBUG

(christos)

define as empty when not debugging.

(christos)

define as empty when not debugging

(christos)

Add build glue

(christos)

Fix word accesses on Gayle (Amiga1200) pcmcia. Patch by Martin ��berg.

(is)

The Gayle interface uses swapped (little-endian) word accesses, so we
need to use the amiga_bus_stride_1swap methods for the word accesses.

Analyzed and submitted via port-amiga@ by Martin ��berg.

Tested on formerly working hardware

- by Jukka Andberg with Dlink DE-660+ (ne)
- by Frank Wille with D-Link DFE-670TXD (ne)

Tested on formerly not working hardware:

- by Martin with 3Com 3c589 Etherling III (ep)
- by Martin and Frank with CompactFlash cards (wdc)

(is)

minor knits in mcast handling.

(nisimura)

Add fido constants, and turn hid "raw" mode for fido devices.

(christos)

ramdisk-zfsroot: Build with -D_REENTRANT

zpool(8) requires libhack built with it.

(roy)

New ioctl DIOCGSECTORALIGN returns sector alignment parameters.

struct disk_sectoralign {
/* First aligned sector number.  */
uint32_t dsa_firstaligned;

/* Number of sectors per aligned unit.  */
uint32_t dsa_alignment;
};

- Teach wd(4) to get it from ATA.
- Teach cgd(4) to pass it through from the underlying disk.
- Teach dk(4) to pass it through with adjustments.
- Teach zpool (zfs) to take advantage of it.
  => XXX zpool doesn't seem to understand when the vdev's starting
    sector is misaligned.

Missing:

- ccd(4) and raidframe(4) support -- these should support _using_
  DIOCGSECTORALIGN to decide where to start putting ccd or raid
  stripes on disk, and these should perhaps _implement_
  DIOCGSECTORALIGN by reporting the stripe/interleave factor.

- sd(4) support -- I don't know any obvious way to get it from SCSI,
  but if any SCSI wizards know better than I, please feel free to
  teach sd(4) about it!

- any ld(4) attachments -- might be worth teaching the ld drivers for
  nvme and various raid controllers to get the aligned sector size

There's some duplicate logic here for now.  I'm doing it this way,
rather than gathering the logic into a new disklabel_sectoralign
function or something, so that this change is limited to adding a new
ioctl, without any new kernel symbols, in order to make it easy to
pull up to netbsd-9 without worrying about the module ABI.

(riastradh)

libhack: revert prior, will be done per consumer instead.

(roy)

Include kern_crashme.c in non-DEBUG kernels.

This is useful for simulating crashes in production to test failover.

(riastradh)

Create /dev/ipmi0 in `MAKEDEV all'.

Works on my machine with sysutils/ipmitool if the latter is built
with CONFIGURE_ARGS+= --enable-intf-open.

(riastradh)

Fix undefined behavior in misaligned pointer usage

Detected by UBSan and already fixed upstream.

Cherry-pick:
From aa0218d6a12814fac50b287214f9f3b0b99e11b1 Mon Sep 17 00:00:00 2001
From: Brian Behlendorf <behlendorf1@llnl.gov>
Date: Tue, 7 Jan 2014 23:24:37 +0100
Subject: [PATCH] Fix nvlist 'Bus Error' for Sparc

The mis-aligned memory accesses in nvpair_native_embedded() and
nvpair_native_embedded_array() will cause a 'Bus Error' for
architectures such as Sparc which not fully byte addressible.
To avoid this issue care is taken to avoid dereferencing the
potentially mis-aligned packed nvlist_t.

Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Ned Bass <bass6@llnl.gov>
Signed-off-by: marku89 <mar42@kola.li>
Issue #1700

(kamil)

Add sysloglike attr.

(christos)

Enable compression

(christos)

Duh, acctually use all 64-bits when giving the rings to the chip.

(thorpej)

fix print-like attrs

(christos)

PR/55041: Fix printf format in syslog(3) error message.

(christos)

zfs needs rumpkern_sysproxy

(christos)

increase slot slop space from 100 to 1000 before giving up.

from Paul Ripke on current-users.  thanks!

(mrg)

oops, fix incorrect usage of daif_enable() in my previous commit.

(ryo)

Ammend ticket #1511 for additional changes

(martin)

Additionally pull up the following revisions, to fix build fallout from
ticket #1511:

src/sys/ufs/ufs/dir.h 1.26
sys/ufs/ufs/ufs_lookup.c 1.149

Zero out all the dirent padding not just one byte, to avoid kernel memory
disclosure (from https://svnweb.freebsd.org/base?view=revision&revision=347066)

(martin)

Tickets #750 - #752

(martin)

Pull up following revision(s) (requested by rin in ticket #752):

sys/arch/powerpc/booke/copyin.c: revision 1.8

Let copyinstr(9) return ENAMETOOLONG correctly if source is not
NUL-terminated; it cannot be determined by (uint8_t)data == '\0'
since data is right shifted at the end of loop.

Found by POOL_REDZONE.

(martin)

Pull up following revision(s) (requested by thorpej in ticket #751):

sys/arch/cobalt/dev/gt.c: revision 1.30

The PCI I/O space extent map needs to reflect the BUS_{START,END}
not the SYS_{START,END}.

This fixes mapping of the viaide DMA registers on my Qube2.

(martin)

Pull up following revision(s) (requested by christos in ticket #750):

sys/arch/amd64/amd64/db_interface.c: revision 1.37

Fix boot -c or -d by avoiding ipi handling before the vector is initialized.

(martin)

KNF. No functional change.

(msaitoh)

Re-add -lrumpdev dropped in the previous commit.

(isaki)

Let copyinstr(9) return ENAMETOOLONG correctly if source is not
NUL-terminated; it cannot be determined by (uint8_t)data == '\0'
since data is right shifted at the end of loop.

Found by POOL_REDZONE.

(rin)

The PCI I/O space extent map needs to reflect the BUS_{START,END}
not the SYS_{START,END}.

This fixes mapping of the viaide DMA registers on my Qube2.

(thorpej)

Implement workaround for IBM405 Errata 77 (aka CPU_210), where
interrupted stwcx. may errantly write data to memory:

    https://elinux.org/images/1/1d/Ppc405gp-errata.pdf

This is because stwcx. is split into two pieces in the pipeline.

We need to
(1) insert dcbt before every stwcx. instruction, as well as
(2) insert sync before every rfi/rfci instruction.

It is unclear which processors are affected, but according to Linux,
all 405-based cores up until 405GPR and 405EP are affected:

    https://github.com/torvalds/linux/blob/master/arch/powerpc/platforms/40x/Kconfig#L140

For kernel, this workaround can be restricted to affected processors.
However, for kernel modules and userland, we have to enable it for all
32bit powerpc archs in order to share common binaries as before.

Proposed on port-powerpc:

    http://mail-index.netbsd.org/port-powerpc/2020/02/21/msg003583.html

(rin)

libhack: build with -D_REENTRANT

Some tools that use libhack expect thread locking.
An example of this is zpool(8).

Without it, it randomly crashes. As such, force _REENTRANT to avoid
debugging future random crashes from any other applications which
rely on this.

(roy)

Revert previous

Requested by joerg who wants to fix (ab)users.

(kamil)

uvm_pglistalloc() / uvm_pglistfree() musn't be called from interrupt
context.  Assert it.

(ad)

- Give pmap uvm_objects an empty pagerops to avoid special casing in UVM.
  (This use of uvm_object causes a disproportionate amount of work.)

- Undo the pmap_destroy()/pmap_delref() split.  I misunderstood the flow of
  control, and there's no need for this.

- For pmap_remove_pv(), always look up the pv_entry in advance as those
  calls will need to be covered by lock again soon.

(ad)

Give pmap uvm_objects an empty pagerops to avoid special casing in UVM.
(This use of uvm_object causes a disproportionate amount of work.)

(ad)

reassignbuf(), brelvp(): VI_WRMAPDIRTY is always clear if the object has no
pages, so assert that instead of trying to clear it.

(ad)

child_return():

- This was assuming arg == curlwp, but NULL is passed to lwp_create(), as
  evidenced by a random panic during testing.  How did this ever work?

- Replace a goto.

(ad)

Redo the sshsk_sign() stuff properly, but putting the helper in libssh.so

(christos)

fix variable name

(christos)

fix build by adding a Makefile.inc that chains up.

(christos)

Fix sun2

(christos)

Add new signal trap entry tests in t_ptrace_wait*

New tests:
- syscall_signal_on_sce
- syscall_detach_on_sce

The first one fails as a signal emitted to the child is caught by the
debugger.

The second one passes.

(kamil)

Centralize the base rump libraries into a variable used by all the other
Makefiles so that we can make changes to it centrally as needed and have
less mess. Fixes the sun2 build that needs rumpvfs after librump after
the latest changes.

(christos)

librump depends on vfs so add a dependency on for sun2.

(christos)

bus_dmatag_subregion isn't supported on (compiled into) arm so ifdef its
use in previous.

(skrll)

Add explicit casts in bus_dmatag_subregion() calls to avoid overflow /
truncation warnings on 32-bit platforms.

(thorpej)

Use the 64-bit PCI DMA tag if available.

(thorpej)

Harmonize bus_dmatag_subregion() handling with other drivers.

(thorpej)

- Range-limit our DMA tag to 40-bit.
- Eliminate __LP64__ ifdefs.

(thorpej)

mountall: Mount ZFS filesystems before fstab

This allows null mounts in fstab to reference fstab mounts.
It's highly unlikely ZFS mounts would reference anything outside of ZFS.

(roy)

Fix typo in a comment

(kamil)

Use the 64-bit PCI DMA tag if available.

(thorpej)

Support 64-bit DMA addressing, and use the 64-bit PCI DMA tag if available.

(thorpej)

Expose max_align_t to C99/C++

max_align_t does not depend on any pre-C99 or !C++ language feature.

This structure is in use in 3rd party essential C++ code as an extension
for older language revisions and in gnu99 code in the NetBSD distribution
(RTLD's build rules define -std=gnu11 just for exposing this struct).

Exposing max_align_t from the central NetBSD header avoid duplicate
definition in 3rd party code that could differ and produce ABI mismatched
binaries between -std= revisions.

This problem does not exist on OSs like Linux as they get this namespace
visibility defined inside LLVM or GNU toolchain headers. NetBSD ships with
its own stddef.h, rather than relying on a toolchain and its internal
extensions.

(kamil)

fix a sign-compare issue (for the pam module)

(christos)

Add the sign client part.

(christos)

Tickets #743 - #749

(martin)

Pull up following revision(s) (requested by mrg in ticket #749):

sys/external/bsd/drm2/nouveau/nouveau_pci.c: revision 1.25

list the PCI ID range for new nvidia TU117 and TU116.

adjust the check to simply be >= 0x1580, which is the
first pciid not support.

should fix PR#54600.

(martin)

Pull up following revision(s) (requested by riastradh in ticket #748):

sys/dev/pci/ichsmb.c: revision 1.61

If attach fails, don't panic on detach.

(martin)

Pull up following revision(s) (requested by thorpej in ticket #747):

sys/dev/pci/if_mcx.c: revision 1.11

Use the 64-bit PCI DMA tag if available.  Otherwise, we are needlessly
allocating (and using) bounce buffers on sytems with >4GB of RAM.

XXX pullup-9

(martin)

Pull up following revision(s) (requested by riastradh in ticket #746):

sys/ddb/db_lex.c: revision 1.25

Fix crash(8).  Will revisit.

(martin)

Pull up following revision(s) (requested by riastradh in ticket #745):

sys/dev/usb/umass.c: revision 1.177
sys/dev/usb/umass.c: revision 1.178
sys/dev/usb/umass.c: revision 1.179

Abort default pipe too on detach before detaching children.

This ensures that pending xfers on the default pipe will be aborted
before we wait for children, which, in the case of scsibus -> sd,
means waiting for pending xfers to complete -- xfers that may never
complete if something is wedged.

Consolidate logic to call the transfer callback.
No functional change intended.

Make sure the umass transfer callback is run in error branches.

(martin)

Pull up following revision(s) (requested by riastradh in ticket #744):

sys/dev/usb/uhci.c: revision 1.292
sys/dev/usb/uhci.c: revision 1.293
sys/dev/usb/usbdi.h: revision 1.99
sys/dev/usb/motg.c: revision 1.26
sys/dev/usb/motg.c: revision 1.27
sys/dev/usb/motg.c: revision 1.28
sys/dev/usb/motg.c: revision 1.29
sys/external/bsd/dwc2/dwc2.c: revision 1.70
sys/external/bsd/dwc2/dwc2.c: revision 1.71
sys/dev/usb/usb.c: revision 1.181
sys/arch/mips/adm5120/dev/ahci.c: revision 1.20
sys/dev/usb/usb.c: revision 1.182
sys/dev/usb/xhci.c: revision 1.116
sys/dev/usb/xhci.c: revision 1.117
sys/dev/usb/xhci.c: revision 1.118
sys/dev/usb/uhci.c: revision 1.289
sys/dev/usb/usbdivar.h: revision 1.121
sys/dev/usb/usbdi.c: revision 1.190
sys/dev/usb/usbdivar.h: revision 1.122
sys/dev/usb/usbdi.c: revision 1.191
sys/dev/usb/usbdi.c: revision 1.192
sys/external/bsd/dwc2/dwc2var.h: revision 1.7
sys/dev/usb/motg.c: revision 1.30
sys/dev/usb/motg.c: revision 1.31
sys/dev/usb/motg.c: revision 1.32
sys/dev/usb/motg.c: revision 1.33
sys/external/bsd/dwc2/dwc2.c: revision 1.67
sys/external/bsd/dwc2/dwc2.c: revision 1.68
sys/dev/usb/ehci.c: revision 1.270
sys/external/bsd/dwc2/dwc2.c: revision 1.69
sys/dev/usb/usbdi.h: revision 1.100
sys/dev/usb/ehci.c: revision 1.271
sys/arch/mips/adm5120/dev/ahci.c: revision 1.18
sys/dev/usb/usbdi.h: revision 1.101
sys/dev/usb/ehci.c: revision 1.272
sys/dev/ic/sl811hs.c: revision 1.103
sys/arch/mips/adm5120/dev/ahci.c: revision 1.19
sys/dev/usb/ehci.c: revision 1.273
sys/dev/usb/ohci.c: revision 1.293
sys/dev/usb/uhci.c: revision 1.290
sys/dev/usb/ohci.c: revision 1.294
sys/dev/usb/uhci.c: revision 1.291
sys/dev/usb/ohci.c: revision 1.295

Teach usb_rem_task to return whether removed from queue or not.

New function usb_task_pending for diagnostic assertions.
Usable only for negative diagnostic assertions:

        KASSERT(!usb_task_pending(dev, task))

If you can think of a better name for this than !usb_task_pending,
I'm all ears.

-

Nothing guarantees xfer's timeout has completed.

Wait for it when we free the xfer.

-

New xfer state variables ux_timeout_set and ux_timeout_reset.

These are needed because:
- The host controller interrupt cannot wait for the callout or task
  to finish running.
- Nothing in the USBD API as is waits for the callout or task to
  finish running.
- Callers expect to be able to resubmit USB xfers from xfer callbacks
  without waiting for anything to finish running.

The variable ux_timeout_set can be used by a host controller to
decide on submission whether to schedule the callout or to ask an
already-scheduled callout or already-queued task to reschedule the
callout, by setting the variable ux_timeout_reset to true.

When the callout or task runs and sees that ux_timeout_reset is true,
rather than queue the task or abort the xfer, it can instead just
schedule the callout anew.

-

Fix steady state of timeouts in ehci.

This is complicated because:
1. There are three ways that an xfer can be completed:
  (a) hardware interrupt completes xfer
  (b) software decision aborts xfer with USBD_CANCELLED
  (c) timeout aborts xfer with USBD_TIMEOUT
2. The timeout abort can't be done in callout because ehci_sync_hc,
  called unconditionally by ehci_abort_xfer to wait until the device
  has finished using any references to the xfer, may sleep.  So we
  have to schedule a callout that, when run, will schedule a usb_task.
3. The hardware completion interrupt can't sleep waiting for a callout
  or task to finish -- can't use callout_halt or usb_rem_task_wait.
  So the callout and usb_task must be able to run _after_ the hardware
  completion interrupt, and recognize that they're late to the party.
  (Note, though, that usbd_free_xfer does wait for the callout and
  task to complete, so there's no danger they may use themselves after
  free.)
4. The xfer may resubmitted -- and the timeout may be rescheduled --
  immediately after the hardware completion interrupt, _while_ the
  callout and/or usb_task may still be scheduled.  Specifically, we
  may have the following sequence of events:
  (a) hardware completion interrupt
  (b) callout or usb_task fires
  (c) driver resubmits xfer
  (d) callout or usb_task acquires lock and looks around dazed and
      bewildered at the firehose of events like reading the news in 2019

The mechanism for sorting this out is that we have two bits of state:
- xfer->ux_timeout_set informs the driver, when submitting an xfer and
  setting up its timeout, whether either the callout or usb_task is
  already scheduled or not.
- xfer->ux_timeout_reset informs the callout or usb_task whether it
  should reschedule the callout, because the xfer got resubmitted, or
  not.

-

Factor out HCI-independent xfer completion logic.

New API for HCI drivers to synchronize hardware completion
interrupts, synchronous aborts, and asynchronous timeouts:
- When submitting an xfer to hardware, call
  usbd_xfer_schedule_timeout(xfer).
- On HCI completion interrupt for xfer completion:
        if (!usbd_xfer_trycomplete(xfer))
                return;        /* timed out or aborted, ignore it */
- In upm_abort methods, call usbd_xfer_abort(xfer).

For HCI drivers that use this API (not needed in drivers that don't,
or for xfers like root intr xfers that don't use it):
- New ubm_abortx method serves role of former *hci_abort_xfer, but
  without any logic for wrangling timeouts/callouts/tasks -- caller
  in usbd_xfer_abort has already handled them.
- New ubm_dying method, returns true if the device is in the process
  of detaching, used by the timeout logic.

Converted and tested:
- ehci
- ohci

Converted and compile-tested:
- ahci (XXX did this ever work?)
- dwc2
- motg (XXX missing usbd_xfer_schedule_timeout in motg_*_start?)
- uhci
- xhci

Not changed:
- slhci (sys/dev/ic/sl811hs.c) -- doesn't use a separate per-xfer
  callout for timeouts (XXX but maybe should?)
- ugenhc (sys/rump/dev/lib/libugenhc/ugenhc.c) -- doesn't manage its
  own transfer timeouts

-

Fix steady state of root intr xfers.

Why?
- Avoid completing a root intr xfer multiple times in races.
- Avoid potential use-after-free in poll_hub callouts (uhci, ahci).

How?
- Use sc->sc_intr_xfer or equivalent to store only a pending xfer
  that has not yet completed -- whether successfully, by timeout, or
  by synchronous abort.  When any of those happens, set it to null
  under the lock, so the xfer is completed only once.
- For hci drivers that use a callout to poll the root hub (uhci, ahci):
  . Pass the softc pointer, not the xfer, to the callout, so the
    callout is not even tempted to use xfer after free -- if the
    callout fires, but the xfer is synchronously aborted before the
    callout can do anything, the xfer might be freed by the time the
    callout starts to examine it.
  . Teach the callout to do nothing if it is callout_pending after it
    has fired.  This way:
    1. completion or synchronous abort can just callout_stop
    2. start can just callout_schedule
    If the callout had already fired before (1), and doesn't acquire
    the bus lock until after (2), it may be tempted to abort the new
    root intr xfer just after submission, which would be wrong -- so
    instead we just have the callout do nothing if it notices it has
    been rescheduled, since it will fire again after the appropriate
    time has elapsed.

-

Initialize xfer->ux_status in uhci_root_intr_start.

Otherwise, it will be USBD_NOT_STARTED, so usbd_ar_pipe will skip
calling upm_abort.
Candidate fix for PR kern/54963, same problem as reported at:
href="https://mail-index.NetBSD.org/current-users/2020/02/13/msg037740.html

-

Set ux_isdone in uhci_poll_hub for DIAGNOSTIC.

-

Fix mistakes in previous sloppy change with root intr xfers.
- Make sure ux_status is set to USBD_IN_PROGRESS when started.
  Otherwise, if it is still in flight when we abort the pipe,
  usbd_ar_pipe will skip calling upm_abort.
- Initialize ux_status under the lock; in principle a completion
  interrupt (or a delay) could race with the initialization.
- KASSERT that the xfer is in progress when we're about to complete
  it.

Candidate fix for PR kern/54963 for other HCI drivers than uhci.
ok nick
ok phone
(This is the change that nick evidently MEANT to ok when he ok'd the
previous one!)

-

Fix build

-

Fix non-DIAGNOSTIC builds.

-

Fix wrong KASSERT in motg abort.
This has been wrong since last summer when we did the transition to
xfer->ux_status = USBD_CANCELLED earlier.
XXX pullup-9

-

Fix mistakes in timeout/abort/completion changes in motg(4).
- Call usbd_xfer_schedule_timeout so we actually do time out.
- Don't call usbd_xfer_trycomplete until all the data have been
  transferred -- it commits to completion, not timeout.
- Use xfer->ux_status != USBD_IN_PROGRESS to test whether, after a
  partial write, an xfer has been interrupted or timed out and need
  not be continued.
- Remove wrong assertion.

-

Fix mistake in use of usbd_xfer_schedule_timeout in motg.

This code path is used both for xfers that are new, and xfers that
are being done piece by piece and are partway done.  For the latter
case, skip usbd_xfer_schedule_timeout so we schedule it only once per
xfer.

-

Simplify some branches and kassert some redundant assignments.

(martin)

introduce AXE_IS_172() conditional to highlight odd ball 172 and invert most IF-THEN-ELSE.  consistent white spaces.

(nisimura)

Pull up following revision(s) (requested by riastradh in ticket #743):

etc/rc.d/random_seed: revision 1.8

Allow random seed on zfs.

(martin)

Fix description for #725

(martin)

use DOPAUSE. 772B Lenovo now has working rxpause,txpause

(nisimura)

simplify single bit tests. no code difference is observed

(nisimura)

Sync with OpenSSH 8.2p1 sample configs

- Add GSSAPIAuthentication and related options
- Add KerberosAuthentication and related options
- Bring in the lengthy but useful comment block about
  the side-effect of UsePAM with regards to PermitRootLogin.

(kim)

Improve an error message about round_blocksize.

(isaki)

Fix wrong parameter displayed in debug messages.

(isaki)

Reinitialize the sticky parameters whenever the hardware format is changed.
When the number of the hardware channels becomes less than the number of
channels that sticky parameters remember, subsequent open("/dev/sound") will
fail without this treatment.  This is for rev 1.43.

(isaki)

Use the 64-bit PCI DMA tag if available.

(thorpej)

- Support 64-bit DMA addresses for the Tx and Rx ring addresses.
- g/c and unused define.

(thorpej)

Use the 64-bit PCI DMA tag if avalable.

(thorpej)

Add a flag to dk_dump for virtual disk devices.

If a disk is backed by a physical medium other than itself, such as
cgd(4), then it passes DK_DUMP_RECURSIVE to disable the recursion
detection for dk_dump.

If, however, a device represents a physical medium on its own, such
as wd(4), then it passes 0 instead.

With this, I can now dump to dk on cgd on dk on wd.

(riastradh)

Allow dumping to cgd(4) on a dk(4).

(Technically this also allows dumping to a dk(4) on which there
happens to be a cgd(4) configured, but I'm not sure how to
distinguish that case here.  So don't do that!)

(riastradh)

Upon further reflection, we actually do need to ensure that the Rx
ring and the Rx Return ring are both in the same 4GB segment.

(thorpej)

- Use the 64-bit PCI DMA tag if available.
- Add a comment explaining that if we were to use more than one
  Rx ring / Rx Return ring, all of the Rx-related control data
  would need to be in the same 4G segment.

(thorpej)

- Use the 64-bit PCI DMA tag if available.
- In age_dma_alloc(), ensure that all of the control data end up in the
  same 4GB segment, because the hardware requires this.

(thorpej)

RIPE definition no longer exists in source

(sevan)

It doesn't make any sense to pass ETHER_ALIGN as the alignment constraint
to bus_dmamem_alloc().  Use PAGE_SIZE instead.

(thorpej)

Order caps first

(sevan)

Merge in changes from OpenBSD 6.6 whois(1).
This improves recursion support and querying whois servers.

(sevan)

Add defines for MIPS_XHASH (.MIPS.xhash)

MIPS version of GNU_HASH as supported by GNU toolchain.

(kamil)

Back out experimental change - not ready for LK_SHARED on VOP_OPEN() just yet.

(ad)

Sync with head.

(ad)

add support userspace tagged address for aarch64 (experimental)

'sysctl machdep.tagged_address' to set/clear TCR_EL1.TBI0 to enable/disable address tagging.
with 'machdep.tagged_address=1', some syscalls may cause problems?

(ryo)

Fix pmap to work correctly with tagged addresses

- when fault, untag from address before passing to uvm/pmap functions
- pmap_extract() checks more strictly and consider the address tag

(ryo)

add helper function aarch64_addresspace() and aarch64_untag_address() to check address space, and eliminate address tag

(ryo)

Use the 64-bit PCI DMA tag, if available.

(thorpej)

use macro

(ryo)

widen bit PAR_EL1.PAR_PA from [47:12] to [51:12] for ARMv8.2 (and later).

PAR_EL1:[51:48] is RES0 in ARMv8.1 and ARMv8.0.

(ryo)

Use the 64-bit PCI tag, if available.

(thorpej)

use pmapboot_enter_range()

(ryo)

replace KSEG pages mapping code with generic function pmapboot_enter_range()

(ryo)

Workaround build failure due to -Werror=format-nonliteral

Reviewed by kamil.

(mgorny)

Use the 64-bit PCI DMA tag if it's available, but range-limit to
40-bit because that's what the hardware can do.

(thorpej)