[GIT PULL] nvme fixes for Linux 7.3

[Keith Busch]

The following changes since commit 326d49039c10b65522ac7277b19b9b5c42ed1aeb:

  nbd: add pre_defined_connections module parameter for pre-created devices (2026-08-15 20:01:20 -0600)

are available in the Git repository at:

  git://git.infradead.org/nvme.git tags/nvme-7.3-2026-09-03

for you to fetch changes up to f46566780a5f7e00a9026868e45421de61afcf22:

  nvme-tcp.h: drop kernel-doc comments, fix a few descriptions (2026-09-02 15:45:10 -0700)

----------------------------------------------------------------
nvme fixes for Linux 7.3

 - Harden the tcp host and target against malformed PDUs: reject C2HData
   for a non-read command, bound an over-long PDU before copying it, and
   reject unsolicited H2CData (Yehyeong, Shivam)
 - Fix circular locking on TLS queues (Xixin)
 - Fix a soft lockup when scanning sparse namespace ID space (Mohamed)
 - Fix racy access to the FDP placement id array (Kanchan)
 - RDMA host and target fixes for a double cleanup on the queue_rq
   error path and a queue leak when the connect backlog is exceeded
   (Xixin)
 - Authentication fixes: drain the target's expiry work before the SQ
   is freed, and release the DH-CHAP secret when parsing fails (Kazuki,
   Xu Rao)
 - Fix nvme-fc options double free when nvme_add_ctrl() fails (Niklas)
 - Add missing SRCU grace period to nvme_alloc_ns() error path (Tristan)
 - Skip zoned limits update when the zone info query failed (Chao)
 - Reject enabling a target namespace with no device path (Seokgyu)
 - Add opcode filtering for fault injection (Mohamed)
 - Drop the kernel-doc comments from nvme-tcp.h (Randy)

----------------------------------------------------------------
Chao Shi (1):
      nvme: skip the zoned limits update if the zone info query failed

Kanchan Joshi (2):
      nvme: set ns->head in nvme_alloc_ns_head
      nvme: fix racy access to FDP placement id array

Kazuki Hanai (1):
      nvmet-auth: Synchronize timeout work during SQ teardown

Keith Busch (1):
      MAINTAINERS: update nvme entry

Mohamed Khalfella (4):
      nvme: add opcode filtering for fault injection
      nvme: remove stale namespaces by NSID range during scan
      nvme: print namespace IDs as unsigned 32bit value
      nvmet: print namespace IDs as unsigned 32bit value

Niklas Cassel (1):
      nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails

Randy Dunlap (1):
      nvme-tcp.h: drop kernel-doc comments, fix a few descriptions

Seokgyu Choi (1):
      nvmet: reject namespace enable without device path

Shivam Kumar (2):
      nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
      nvmet-tcp: reject unsolicited H2CData PDUs

Tristan Madani (1):
      nvme: add missing SRCU grace period in error path

Xixin Liu (3):
      nvme-rdma: fix -EIO cleanup order in queue_rq
      nvmet-rdma: fix queue leak when connect backlog is exceeded
      nvme-tcp: defer TLS inline send to io_work

Xu Rao (1):
      nvme-fabrics: fix DHCHAP secret leak on parse failure

Yehyeong Lee (2):
      nvme-tcp: check the data direction of a C2HData PDU
      nvme-tcp: return -EPROTO for a C2HData on a write

 .../fault-injection/nvme-fault-injection.rst       | 65 ++++++++++++++
 MAINTAINERS                                        |  2 +-
 drivers/nvme/host/core.c                           | 99 +++++++++++++---------
 drivers/nvme/host/fabrics.c                        |  2 +
 drivers/nvme/host/fault_inject.c                   | 14 ++-
 drivers/nvme/host/fc.c                             | 26 ++++--
 drivers/nvme/host/nvme.h                           |  2 +
 drivers/nvme/host/rdma.c                           | 18 ++--
 drivers/nvme/host/sysfs.c                          |  2 +-
 drivers/nvme/host/tcp.c                            | 12 +++
 drivers/nvme/host/zns.c                            |  4 +-
 drivers/nvme/target/auth.c                         |  6 ++
 drivers/nvme/target/configfs.c                     |  4 +-
 drivers/nvme/target/core.c                         |  9 +-
 drivers/nvme/target/nvmet.h                        |  2 +
 drivers/nvme/target/pr.c                           |  2 +-
 drivers/nvme/target/rdma.c                         | 15 ++--
 drivers/nvme/target/tcp.c                          | 10 +++
 include/linux/nvme-tcp.h                           | 18 ++--
 19 files changed, 228 insertions(+), 84 deletions(-)