[GIT PULL] block fixes for 7.4-rc2

[Jens Axboe <axboe@kernel.dk>]

Hi Linus,

Block fixes for this week. Mostly NVMe via Keith, with a handful of
core and driver fixes. This pull request contains:

- NVMe fixes via Keith:
  - nvme-tcp use-after-free in nvme_tcp_free_ctrl() on a failed
    connect, and the nvme-rdma counterpart of the NULL queue->ctrl on
    reconnect
  - nvmet-rdma iWARP disconnect and device removal fixes
  - nvmet-tcp: ask for the TLS record type on every receive, and
    bound the connections accepted per work run so a connect flood
    can't hold up port removal; nvmet-auth keep the old keys if the
    new ones fail to decode; nvme-loop delete the controller if a
    reset fails
  - nvmet-auth reject incomplete DHCHAP messages, and a keep-alive
    timeout overflow
  - nvmet locking and bounds fixes for tbkas reconnects and the
    traddr/trsvcid configfs writes, don't leak stale memory in the
    ANA log page, and cache the passthru reference across
    queue_response
  - Wait for SRCU readers before splicing the namespace list, with a
    new list_splice_init_srcu() helper, and drop an extra grace
    period in nvmet_ns_disable()
  - Unregister when pr_register() is given a zero new key, and don't
    drop the cdev reference twice on cdev_device_add() failure
  - Quirks for the ADATA XPG GAMMIX S70 BLADE and KIOXIA XG10d
  - Various smaller fixes and cleanups

- blk-mq: end the request if getting a keyslot fails, which left the
  in-flight count and zone write plug stuck, reset the queue state on
  scheduler teardown so requests don't stall in software queues, and
  fix an out-of-bounds read in blk_mq_free_rqs() after a failed
  nr_hw_queues update

- Only serialize elevator switches of the same queue

- dma-buf bio fixes: don't use the bvec fast path for them, and only
  fail the ones that need block layer PI

- Reject GPT entries with starting_lba > ending_lba

- Return the soft block size for compat BLKBSZGET, report the correct
  discard alignment in sysfs, and account the flush sequence latency
  only once in iocost

- virtio_blk fixes: synchronous quiesce in freeze, freeze the virtqueue
  layout at probe time, clamp max_segments to the ring size, and fix
  zone append sector reporting in batched completion

- null_blk zone fixes and a cache state reset

- zloop fixes

- ublk DEL_DEV_ASYNC permission check, and 32-bit selftest build

Please pull!


The following changes since commit 6628e7d4c6b25c8d18f1345e3a20d21829aae7e4:

  Linux 7.4-rc1 (2026-11-01 13:26:31 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux tags/block-7.4-20261106

for you to fetch changes up to 28f7d31c2aeb350df9a0116093fade0a840fb4ce:

  Merge tag 'nvme-7.4-2026-11-05' of git://git.infradead.org/nvme into block-7.4 (2026-11-05 13:47:13 -0700)

----------------------------------------------------------------
block-7.4-20261106

----------------------------------------------------------------
Anuj Gupta (1):
      block: don't use the bvec fast path for dma-buf bios

Avi Weiss (1):
      block: report the correct discard alignment in sysfs

Baek Kyu, Kim (1):
      null_blk: reset cache state before device setup

Chris Mason (4):
      nvmet-rdma: disconnect only established queues
      nvmet-rdma: take a device off the list last
      nvmet-rdma: queue the release work under the mutex
      nvmet-rdma: disconnect a queue on device removal

Christian Aurich Zanettini Martins (2):
      nvme-tcp: fix use-after-free in nvme_tcp_free_ctrl()
      nvme-rdma: fix NULL queue->ctrl dereference on reconnect

Christoph Hellwig (1):
      zloop: fix block size query

Christophe JAILLET (1):
      nvmet: pci-epf: Constify struct pci_epf_ops

Cong Zhang (1):
      virtio_blk: use synchronous quiesce in virtblk_freeze_priv()

Daejun Park (1):
      nvme: unregister when pr_register() is given a zero new key

Ewan D. Milne (1):
      nvmet: don't return memory contents beyond valid data when reading ANA log page

Guixin Liu (1):
      nvmet-rdma: remove dead allocated field in nvmet_rdma_rsp

Hugo Deco (1):
      nvme-pci: add NO_FUA quirk for ADATA XPG GAMMIX S70 BLADE

Hungyu Lin (1):
      block: Return the soft block size for compat BLKBSZGET

James Fantin-Hardesty (1):
      nvmet: fix arbitration burst field mask

Jarkko Sakkinen (1):
      nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()

Jens Axboe (1):
      Merge tag 'nvme-7.4-2026-11-05' of git://git.infradead.org/nvme into block-7.4

Jianan Huang (1):
      blk-mq: reset queue state on scheduler teardown

Josef Bacik (5):
      blk-mq: end the request if getting a keyslot fails
      nvme-loop: delete the controller if a reset fails
      nvmet-tcp: ask for the TLS record type on every receive
      nvmet-auth: keep the old keys if the new ones fail
      nvmet-tcp: limit the connections accepted per work run

J?r?my Jean (1):
      nvmet-auth: reject incomplete DHCHAP messages

Krystian Kaniewski (1):
      blk-mq: fix out-of-bounds read in blk_mq_free_rqs

Kyle Bader (1):
      block: only fail dma-buf bios that need block layer PI

Laveesh Bansal (1):
      block: only serialize elevator switches of the same queue

Niklas Cassel (3):
      null_blk: fix opening closed zones at the active zone limit
      null_blk: don't finish zones to set them read-only or offline
      null_blk: clean up setting zones read-only or offline

Nilay Shroff (1):
      nvmet: cache passthru reference in __nvmet_req_complete()

Qiliang Yuan (3):
      nvmet: drop the extra RCU grace period in nvmet_ns_disable()
      srcu: Add list_splice_init_srcu()
      nvme: wait for SRCU readers before splicing the namespace list

Sasha Levin (2):
      selftests: ublk: fix the build and file offsets on 32-bit
      nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for KIOXIA XG10d

Sergii Ushakov (1):
      virtio-blk: clamp max_segments to virtqueue ring size

Shao Mingyin (6):
      virtio-blk: Fix zone append sector reporting in batched completion
      zloop: fix the error code in the blk_mq_alloc_disk message
      zloop: reject mismatched conventional zone files on restore
      nvmet: take subsys->lock when forcing reconnects for tbkas
      nvmet: bound the traddr and trsvcid configfs writes
      nvmet: drop the redundant auth check in nvmet_parse_io_cmd()

Sreeraj S Kurup (1):
      nvmet: use appropriate types for authentication payload lengths

Yingjie Wang (1):
      nvmet: reject keep-alive timeouts that would overflow

Yitang Yang (1):
      ublk: add missing DEL_DEV_ASYNC to unprivileged permission check

Yunye Zhao (1):
      virtio_blk: freeze the virtqueue layout at probe time

Yuqiang Sun (1):
      nvme: Do not drop the cdev reference twice when cdev_device_add() fails

Zhe Liu (1):
      blk-iocost: account flush sequence latency only once

Zizhi Wo (1):
      block: partitions: reject GPT entries with starting_lba > ending_lba

 block/blk-iocost.c                     |   3 +
 block/blk-mq-sched.c                   |   6 +-
 block/blk-mq.c                         |  26 ++++---
 block/blk.h                            |   2 +
 block/elevator.c                       |  32 ++++----
 block/fops.c                           |   2 -
 block/genhd.c                          |   2 +-
 block/ioctl.c                          |   4 +-
 block/partitions/efi.c                 |   1 +
 drivers/block/null_blk/main.c          |   1 +
 drivers/block/null_blk/zoned.c         |  63 ++++++++++-----
 drivers/block/ublk_drv.c               |   1 +
 drivers/block/virtio_blk.c             | 101 ++++++++++++++++++++-----
 drivers/block/zloop.c                  |   7 +-
 drivers/nvme/common/keyring.c          |   1 +
 drivers/nvme/host/core.c               |  23 ++++--
 drivers/nvme/host/multipath.c          |   2 -
 drivers/nvme/host/nvme.h               |   8 ++
 drivers/nvme/host/pci.c                |   4 +
 drivers/nvme/host/pr.c                 |   8 +-
 drivers/nvme/host/rdma.c               |   7 +-
 drivers/nvme/host/tcp.c                |  10 +--
 drivers/nvme/target/admin-cmd.c        |  20 ++++-
 drivers/nvme/target/auth.c             |  69 +++++++----------
 drivers/nvme/target/configfs.c         |   6 +-
 drivers/nvme/target/core.c             |  27 ++++---
 drivers/nvme/target/fabrics-cmd-auth.c |  10 +--
 drivers/nvme/target/loop.c             |   5 +-
 drivers/nvme/target/nvmet.h            |  32 ++++++--
 drivers/nvme/target/pci-epf.c          |   2 +-
 drivers/nvme/target/rdma.c             |  56 +++++++++-----
 drivers/nvme/target/tcp.c              |  13 +++-
 include/linux/blkdev.h                 |   4 +-
 include/linux/srcu.h                   |  36 +++++++++
 tools/testing/selftests/ublk/Makefile  |   1 +
 tools/testing/selftests/ublk/batch.c   |   6 +-
 tools/testing/selftests/ublk/ctrl.c    |   2 +-
 tools/testing/selftests/ublk/kublk.c   |   2 +-
 38 files changed, 420 insertions(+), 185 deletions(-)

-- 
Jens Axboe