Commit 73e3f0710014 for kernel

commit 73e3f0710014fe6d4ed98cfc02292f6121db7558
Merge: b035a8be20dd ee5a386cfe60
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Aug 26 15:09:21 2026 -0700

    Merge tag 'nfs-for-7.3-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs

    Pull NFS client updates from Trond Myklebust:
     "Highlights include:

      Stable fixes:
       - Use-after-free fixes for the sunrpc client code
       - Delegation hash table leak
       - NULL dereference on lockowner allocation failure
       - Fix a handshake completion race in the TLS code
       - Fix an error sign checking issue when deciding whether the pNFS
         layout is still in use, or can be returned
       - Fix a layout segment leak in pnfs_layout_process()

      Other bugfixes:
       - Fix a missing NULL check in the rpcbind client
       - annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
       - nfs_inode_set_delegation() error paths should return the delegation
       - Use clear_and_wake_up_bit() in nfs_clear_invalid_mapping() and the
         pNFS code.
       - Fix the nfs4_alloc_client() error paths to free the IDR allocation
       - fix folio dereference before NULL check in
         nfs_inode_remove_request()
       - Fix delayed delegation return
       - Fix another state manager race with umount
       - Fix device leaks on parse failure
       - Avoid cancelling in-flight I/O during a layout recall if the server
         doesn't require it
       - flexfiles: report cancelled I/O as a layout error
       - flexfiles: fix NULL dereference for NFSv4.0 data servers
       - Fix incorrect argument passed to nfs4_delete_lease()
       - Fix several symlink issues resulting from nfs_atomic_open_v23()
       - Fix an uninitialised variable issue in the NFSv4.1 callback code
       - fix LAYOUTSTATS send buffer exhaustion

      Features and cleanups:
       - NFSv4.2: Allow the server to specify that file data may not be cached
       - localio: optimise I/O submission when when not doing memory reclaim
       - localio: Remove duplicate wait code in nfs_local_commit
       - flexfiles: support loosely coupled NFSv4.x data servers
       - pNFS: key the data server cache on the NFS version"

    * tag 'nfs-for-7.3-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs: (33 commits)
      NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
      NFSv4/pnfs: key the data server cache on the NFS version
      NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
      pNFS: Fix EBUSY check in pnfs_layout_need_return
      NFSv4.1: zero referring call lists before decoding
      nfs: fix ENXIO on O_CREAT open of existing symlink over NFSv3
      SUNRPC: wait for in-flight client TLS handshake callback
      NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
      lockd: fix NULL dereference on lockowner allocation failure
      NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails
      NFSv4/flexfiles: support loosely coupled data servers
      NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
      NFSv4: pin the superblock for active state owners
      sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
      NFS/localio: issue commit inline when not in a memory-reclaim context
      NFS/localio: remove dead FLUSH_SYNC handling from nfs_local_commit
      NFS/localio: issue IO inline when not in a memory-reclaim context
      NFS: Fix delayed delegation return list handling
      NFS: Verify symlink inode before caching target
      NFS: fix folio dereference before NULL check in nfs_inode_remove_request()
      ...