[GIT PULL] io_uring fixes for 7.1-rc4

Hi Linus,

Set of fixes for io_uring that should get applied to the 7.1 kernel
release. This pull request contains:

- Small series sanitizing the locking done for either modifying or
  reading a chain of requests.

- If the application has a pid namespace, ensure that the sqthread pid
  is correctly printed in fdinfo.

- Fix for a hashing issue in the io-wq thread pool, which could lead to
  a use-after-free.

- Kill dead argument from io_prep_rw_pi().

- Fix for a missed validation of the CQ ring head, affecting CQE refill.

Please pull!


The following changes since commit 45d2b37a37ab98484693533496395c610a2cab96:

  io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER (2026-05-06 04:58:56 -0600)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux.git tags/io_uring-7.1-20260515

for you to fetch changes up to f44d38a31f1802b7222adaea9ee69f9d280f698a:

  io_uring: validate user-controlled cq.head in io_cqe_cache_refill() (2026-05-13 21:44:57 -0600)

----------------------------------------------------------------
io_uring-7.1-20260515

----------------------------------------------------------------
Jens Axboe (3):
      io_uring: hold uring_lock when walking link chain in io_wq_free_work()
      io_uring: defer linked-timeout chain splice out of hrtimer context
      io_uring: hold uring_lock across io_kill_timeouts() in cancel path

Maoyi Xie (1):
      io_uring/fdinfo: translate SqThread PID through caller's pid_ns

Nicholas Carlini (1):
      io-wq: check that the predecessor is hashed in io_wq_remove_pending()

Yang Xiuwei (1):
      io_uring/rw: drop unused attr_type_mask from io_prep_rw_pi()

Zizhi Wo (1):
      io_uring: validate user-controlled cq.head in io_cqe_cache_refill()

 io_uring/cancel.c   |  2 +-
 io_uring/fdinfo.c   |  3 ++-
 io_uring/io-wq.c    |  3 ++-
 io_uring/io_uring.c | 29 +++++++++++++++++++++++------
 io_uring/rw.c       |  4 ++--
 io_uring/timeout.c  | 16 ++++++++++++++--
 6 files changed, 44 insertions(+), 13 deletions(-)

-- 
Jens Axboe