[GIT PULL] Ceph fixes for 7.0-rc4

[Ilya Dryomov]

Hi Linus,

The following changes since commit 1f318b96cc84d7c2ab792fcc0bfd42a7ca890681:

  Linux 7.0-rc3 (2026-03-08 16:56:54 -0700)

are available in the Git repository at:

  https://github.com/ceph/ceph-client.git tags/ceph-for-7.0-rc4

for you to fetch changes up to b282c43ed156ae15ea76748fc15cd5c39dc9ab72:

  libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (2026-03-11 10:18:56 +0100)

----------------------------------------------------------------
A small pile of CephFS and messenger bug fixes, all marked for stable.

----------------------------------------------------------------
Dongsheng Yang (1):
      MAINTAINERS: update email address of Dongsheng Yang

Hristo Venev (1):
      ceph: do not skip the first folio of the next object in writeback

Ilya Dryomov (3):
      libceph: prevent potential out-of-bounds reads in process_message_header()
      libceph: admit message frames only in CEPH_CON_S_OPEN state
      libceph: reject preamble if control segment is empty

Max Kellermann (3):
      ceph: fix i_nlink underrun during async unlink
      ceph: add a bunch of missing ceph_path_info initializers
      ceph: fix memory leaks in ceph_mdsc_build_path()

Raphael Zimmer (2):
      libceph: Use u32 for non-negative values in ceph_monmap_decode()
      libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()

 MAINTAINERS             |  2 +-
 fs/ceph/addr.c          |  1 -
 fs/ceph/debugfs.c       |  4 ++--
 fs/ceph/dir.c           | 17 +++++++++++++++--
 fs/ceph/file.c          |  4 ++--
 fs/ceph/inode.c         |  2 +-
 fs/ceph/mds_client.c    |  3 +++
 net/ceph/auth.c         |  6 ++++--
 net/ceph/messenger_v2.c | 31 +++++++++++++++++++++----------
 net/ceph/mon_client.c   |  6 +++---
 10 files changed, 52 insertions(+), 24 deletions(-)