Commit ee7226b2ae3b for kernel

commit ee7226b2ae3beff5d8feffa94e5fd06af6965e52
Merge: 78e8370033bf f44d38a31f18
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri May 15 12:34:02 2026 -0700

    Merge tag 'io_uring-7.1-20260515' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux

    Pull io_uring fixes from Jens Axboe:

     - Small series sanitizing the locking done for either modifying or
       reading a chain of requests

     - If the application has a pid namespace, ensure that the sqthread pid
       is correctly printed in fdinfo

     - Fix for a hashing issue in the io-wq thread pool, which could lead to
       a use-after-free

     - Kill dead argument from io_prep_rw_pi()

     - Fix for a missed validation of the CQ ring head, affecting CQE refill

    * tag 'io_uring-7.1-20260515' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:
      io_uring: validate user-controlled cq.head in io_cqe_cache_refill()
      io-wq: check that the predecessor is hashed in io_wq_remove_pending()
      io_uring/rw: drop unused attr_type_mask from io_prep_rw_pi()
      io_uring: hold uring_lock across io_kill_timeouts() in cancel path
      io_uring: defer linked-timeout chain splice out of hrtimer context
      io_uring: hold uring_lock when walking link chain in io_wq_free_work()
      io_uring/fdinfo: translate SqThread PID through caller's pid_ns