FreeBSD git weekly: 2026-11-02 to 2026-11-08

Track desired and acknowledged VLAN membership separately.  Retain
pending deletions and uncertain state after failed requests instead of
losing the work when a message is submitted.  Make repeated registration
idempotent.

Adapt DPDK's synchronous, single-VID virtchnl request shape and the
bounded desired-state reconciliation used by igbv and ixv.  Serialize
VLAN requests under the existing virtchnl mutex, with filter-list
changes under the iflib context lock.  Preserve an unresolved
transaction so a late reply cannot be mistaken for a newer operation,
including after the desired state changes.

Reconcile live membership changes without restarting healthy queues.
Limit each pass to 32 requests and a one-second reply deadline,
continuing live batches from the admin task.  Down or recovering VFs
apply desired state at initialization; initialization batches continue
through the existing retry callout without rediscovering the mailbox or
losing acknowledged progress. Completed PF rejections retain pending
work without resetting unrelated traffic.  An unresolved request invokes
mailbox recovery when running and prevents queue enable during
initialization.

Delete nonzero VLAN filters before additions so released capacity is
reused in the same reconciliation pass. Add VID 0 first and delete it
last, retaining untagged admission if a nonzero deletion is rejected.
After a confirmed VF reset, replay desired membership.  After
AdminQ-only rediscovery, retain deletion tombstones and reconcile
uncertain state because the PF may still hold the old filters.

MFC after:      2 weeks
Sponsored by:   BBOX.io

The driver advertised VLAN offload unconditionally, even when the PF
did not grant it, as observed with an E835 VF under Hyper-V.  This
tells the stack to rely on hardware tag insertion and sends the PF
unsupported VLAN filter requests.

Advertise hardware VLAN tagging and filtering only when GET_VF_RESOURCES
grants the legacy VLAN capability.  Do not allocate filter shadow entries
or send ADD_VLAN/DEL_VLAN requests without that capability.  Retain VLAN
MTU and checksum/TSO support for software-tagged packets.

Keep advertised capabilities stable across resets, since existing VLAN
interfaces may already rely on them.  If resource rediscovery removes
previously advertised VLAN offload, leave the VF stopped and require
reattachment rather than resume with a stale offload contract.  A newly
granted capability is not exposed until reattach.

MFC after:      2 weeks
Sponsored by:   BBOX.io

Update expat_config.h and the libbsdxml(3) manpage to reflect the most
recent import.

MFC after:      3 days
MFC with:       765f30b9f3af

mqfs_readdir() never reported end of directory.  Since 77b273d8f5f4
VOP_READDIR_APV() asserts that a readdir which returns no entries also
sets *a_eofflag, so with INVARIANTS the final zero-length
getdirentries(2) that ls(1) issues on a mounted mqueuefs panics:

    panic: VOP_READDIR: eofflag not set

Report end of directory when the child list was walked to its end;
leave the flag clear when the walk stopped because the buffer was full.

MFC after:      1 week

The module Makefile named its only source file in both the SRCS= line
and the SRCS+= line that follows.  bsd.kmod.mk tolerates the duplicate
in a normal build, but when the kernel is built with -flto=thin the
linker sees the same bitcode object twice and refuses to link the
module ("Expected at most one ThinLTO module per bitcode file").

Fixes:          https://cgit.freebsd.org/src/commit/?id=54e231b373ef
MFC after:      1 week

Changes: https://github.com/libexpat/libexpat/blob/R_2_10_0/expat/Changes

Security:       CVE-2026-115506
Security:       CVE-2026-117610
Security:       CVE-2026-118370
MFC after:      3 days