Commit 0d9ff90a5422 for kernel

commit 0d9ff90a5422cc7509258aaaba1e7481df4d332a
Merge: d0fc310b4dfd af8c27375733
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 5 09:25:50 2026 -0700

    Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

    Pull SCSI fixes from James Bottomley:
     "Two enhancements to add support and MCQ for additional Intel 4.0
      controller types.

      The rest are all driver fixes, the largest of which is the mpi3mr
      target use after free fix, follwed by a similar TOCTOU fix for
      io_uring passthrough in bsg"

    * tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
      scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
      scsi: bsg: Fix TOCTOU in io_uring passthrough command setup
      scsi: bsg: Cap io_uring sense copy to max_response_len
      scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()
      scsi: mpi3mr: Fix use-after-free on tgt_dev->starget during target device refresh/update
      scsi: target: iscsi: Reserve a terminator byte for the login payload
      scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands
      scsi: ufs: ufs-pci: Add MCQ support for Intel UFS 4.0 controllers
      scsi: ufs: ufs-pci: Add support for Intel UFS 4.0 HS-Gear5
      scsi: sg: Report request-table problems when any status is set
      scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()
      scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
      scsi: ufs: ufs-qcom: Fix sequential read variance
      scsi: ufs: ufs-qcom: Restore HS/LS link startup mode for Qualcomm UFS controller v6.2+
      scsi: ibmvfc: Document protocol parameter of ibmvfc_alloc_target()
      scsi: ibmvfc: Fix kernel-doc name for ibmvfc_scsi_relogin()
      scsi: pm8001: Use rollback index when freeing MSI-X vectors
      scsi: fnic: Initialize the NVMe local port info before registering