Hi Christian,

Can you pick up these miscellaneous AFS fixes, please?  Note that most of
these are derived from Sashiko review of some rxrpc patches[1][2].

 (1) Fix afs_fs_fetch_data() to set call->async.

 (2) Fix afs_fs_fetch_data() to subtract transferred from len instead of
     adding it.

 (3) Fix a UAF when sending a message if the call is completed so quickly
     that the sending code hasn't finished with it when it gets freed.

The patches can be found here:

	https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/log/?h=afs-fixes

Thanks,
David

[1] https://sashiko.dev/#/patchset/20260702144919.172295-1-dhowells%40redh
[2] https://sashiko.dev/#/patchset/20260713081022.2186481-1-dhowells%40red

David Howells (3):
  afs: Fix afs_fs_fetch_data() to set call->async
  afs: Fix afs_fs_fetch_data() to subtract transferred from len
  afs: Fix UAF when sending a message

 fs/afs/fsclient.c | 5 ++++-
 fs/afs/internal.h | 3 ++-
 2 files changed, 6 insertions(+), 2 deletions(-)