Commit c5096fec0c58 for kernel

commit c5096fec0c58a4f4d2475d4d88697c505800e50e
Merge: 0d8395707651 9c1cc4a7f792
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Aug 5 13:40:11 2026 -0700

    Merge tag 'selinux-pr-20260805' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux

    Pull selinux fixes from Paul Moore:

     - Continue to improve the validation of SELinux policies during load

     - Fix a SELinux regression caused by bpffs changes in v7.2-rc1

     - Fix a SELinux preformance regression caused by SELinux changes in
       v7.2-rc1

    * tag 'selinux-pr-20260805' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux:
      selinux: check level category sets once at load time
      selinux: require every boolean value to be defined
      selinux: reject an unclaimed class value in security_get_classes()
      selinux: require a class's permission values to cover its permission count
      selinux: do not cancel a policy conversion that never started
      selinux: bpf: check SBLABEL_MNT before isec init
      selinux: reject a class permission count below its inherited common
      selinux: reject a permission value exceeding the class permission count