Commit 36aad21d50d1 for kernel

commit 36aad21d50d1af3f6954bb0c988257a908202477
Merge: dd384658c738 206fc30f71b0
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Oct 30 22:01:54 2026 -0700

    Merge tag 'ksmbd-for-7.4-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb

    Pull smb server fixes from Namjae Jeon:

     - Fix compound CREATE response buffer sizing and reserve space for
       final response padding to prevent buffer overflows and out-of-bounds
       reads

     - Allocate sufficient space for UTF-16 directory-name conversion,
       including the terminating NUL

     - Fix an RDMA transfer length underflow that can cause out-of-bounds
       reads or writes when processing multiple remote buffer descriptors

     - Fix use-after-free bugs during failed durable reconnect cleanup and
       AppInstanceId supersede racing with session teardown

     - Keep retry timeout clamp bounds constant to fix a MIPS build failure
       with CONFIG_HZ=1024

     - Fix a session reference leak in compounded SESSION_SETUP and reject
       compounded session binding to avoid mixing session and tree state
       after a failed binding

     - Serialize operations on each named pipe and preserve unread RPC reply
       data for subsequent READ requests when the client's output buffer is
       too small

     - Return complete, eight-byte-aligned stream information entries and
       report insufficient output space correctly

     - Use the resolved share root path so shares rooted at mount points
       list their contents correctly with crossmnt disabled

     - Ignore network-device events outside the initial network namespace,
       preventing container interfaces from affecting ksmbd listeners

    * tag 'ksmbd-for-7.4-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb:
      ksmbd: return complete and aligned stream information
      ksmbd: fix session reference leak on compounded SESSION_SETUP
      ksmbd: fix named-pipe reply loss with small output buffers
      ksmbd: avoid races between named-pipe operations
      ksmbd: fix use-after-free after a failed durable reconnect
      ksmbd: fix out-of-bounds read when padding the final compound response
      ksmbd: fix SMB2 CREATE response buffer overflow in compound requests
      ksmbd: use the resolved share path for the share root
      ksmbd: keep retry timeout clamp bounds constant
      smb: server: size directory name conversion buffer correctly
      ksmbd: prevent session binding in compound requests
      ksmbd: ignore network devices of other namespaces
      ksmbd: fix app-instance non-durable supersede session UAF
      smb: smbdirect: fix buffer length underflow in RDMA transfers