io_uring fixes for 6.18-stable

Hi Greg,

Here are io_uring fixes for 6.18-stable.

They apply on top of v6.18.60 with the current queue-6.18 applied (stable-queue 6575ff04f2fd). They don't depend on anything in the queue, and apply to v6.18.60 alone as well.

"io_uring/io-wq: save worker type before dropping its reference" is already in queue-6.18, so it's not included here.

Patches 5, 6, 7 and 9 needed changes to apply to 6.18, the [axboe: ...] note in each says what was changed.

Cheng Yongkang (2):
io_uring/timeout: count cancelled timeouts in cq_timeouts io_uring/net: fix multishot recv length limit accounting

Chris Mason (4):
io_uring/rsrc: charge buffer arrays and nodes to memcg
io_uring: charge tctx nodes and personalities
io_uring: free XArray nodes left by a failed store io_uring/sqpoll: don't wait for the thread to exit

Daan De Meyer (1):
io_uring/net: don't retry a non-blocking connect() that fails with
-EAGAIN

Josef Bacik (1):
io_uring/io-wq: no new workers once the exit has begun

Kyle Zeng (1):
io_uring: defer foreign io-wq enqueues to task_work

Yichong Chen (2):
io_uring/kbuf: advance head when a pickup empties the buffer ring io_uring/net: keep recvmsg buffer select length within MAX_RW_COUNT

 io_uring/io-wq.c    |  6 ++++++
 io_uring/io_uring.c | 30 +++++++++++++++++++++++++++---
 io_uring/kbuf.c     |  4 +++-
 io_uring/net.c      | 23 +++++++++++++++++++----
 io_uring/rsrc.c     |  6 +++---
 io_uring/sqpoll.c   | 28 +++++++++++++++++++++++-----
 io_uring/sqpoll.h   |  3 ++-
 io_uring/tctx.c     |  6 ++++--
 io_uring/timeout.c  |  3 +++
 9 files changed, 90 insertions(+), 19 deletions(-)

2.56.0