Commit 6ce4d44fb0ca for kernel

commit 6ce4d44fb0ca00644756c7e857166d12ffb4b833
Merge: 3d35fa1190a1 fcd431a9627f
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Jan 2 12:25:47 2026 -0800

    Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma

    Pull rdma fixes from Jason Gunthorpe:

     - Fix several syzkaller found bugs:
        - Poor parsing of the RDMA_NL_LS_OP_IP_RESOLVE netlink
        - GID entry refcount leaking when CM destruction races with
          multicast establishment
        - Missing refcount put in ib_del_sub_device_and_put()

     - Fixup recently introduced uABI padding for 32 bit consistency

     - Avoid user triggered math overflow in MANA and AFA

     - Reading invalid netdev data during an event

     - kdoc fixes

     - Fix never-working gid copying in ib_get_gids_from_rdma_hdr

     - Typo in bnxt when validating the BAR

     - bnxt mis-parsed IB_SEND_IP_CSUM so it didn't work always

     - bnxt out of bounds access in bnxt related to the counters on new
       devices

     - Allocate the bnxt PDE table with the right sizing

     - Use dma_free_coherent() correctly in bnxt

     - Allow rxe to be unloadable when CONFIG_PROVE_LOCKING by adjusting the
       tracking of the global sockets it uses

     - Missing unlocking on error path in rxe

     - Compute the right number of pages in a MR in rtrs

    * tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma:
      RDMA/bnxt_re: fix dma_free_coherent() pointer
      RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
      IB/rxe: Fix missing umem_odp->umem_mutex unlock on error path
      RDMA/bnxt_re: Fix to use correct page size for PDE table
      RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats()
      RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
      RDMA/core: always drop device refcount in ib_del_sub_device_and_put()
      RDMA/rxe: let rxe_reclassify_recv_socket() call sk_owner_put()
      RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
      RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
      RDMA/efa: Remove possible negative shift
      RTRS/rtrs: clean up rtrs headers kernel-doc
      RDMA/irdma: avoid invalid read in irdma_net_event
      RDMA/mana_ib: check cqe length for kernel CQs
      RDMA/irdma: Fix irdma_alloc_ucontext_resp padding
      RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding
      RDMA/cm: Fix leaking the multicast GID table reference
      RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly