Commit 4edcdefd4083 for kernel

commit 4edcdefd4083ae04b1a5656f4be6cd83ae919ef4
Merge: 8c04c1292dca 12091470c6b4
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Jun 25 14:09:26 2026 -0700

    Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf

    Pull bpf fixes from Alexei Starovoitov:

     - Fix effective prog array index with BPF_F_PREORDER (Amery Hung)

     - Zero-initialize the fib lookup flow struct (Avinash Duduskar)

     - Disable xfrm_decode_session hook attachment (Bradley Morgan)

     - Allow type tag BTF records to succeed other modifier records (Emil
       Tsalapatis)

     - Fix build_id caching in stack_map_get_build_id_offset() (Ihor
       Solodrai)

     - Add missing access_ok call to copy_user_syms (Jiri Olsa)

     - Fix stack slot index in nospec checks (Nuoqi Gui)

     - Preserve pointer spill metadata during half-slot cleanup (Nuoqi Gui)

     - Fix partial copy of non-linear test_run output (Sun Jian)

     - Fix BPF_PROG_ASSOC_STRUCT_OPS last field check (Thiébaud Weksteen)

     - Reset register bounds before narrowing retval range (Tristan Madani)

     - Fix vmlinux BTF leak in bpftool cgroup commands (Yichong Chen)

     - Guard error writes in conntrack kfuncs (Yiyang Chen)

    * tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf:
      bpf: Disable xfrm_decode_session hook attachment
      selftests/bpf: Add test for stale bounds on LSM retval context load
      bpf: Reset register bounds before narrowing retval range in check_mem_access()
      selftests/bpf: Cover small conntrack opts error writes
      bpf: Guard conntrack opts error writes
      selftests/bpf: Cover half-slot cleanup of pointer spills
      bpf: Preserve pointer spill metadata during half-slot cleanup
      selftests/bpf: Test cgroup link replace with BPF_F_PREORDER
      bpf: Fix effective prog array index with BPF_F_PREORDER
      bpf: Fix BPF_PROG_ASSOC_STRUCT_OPS last field check
      bpf: zero-initialize the fib lookup flow struct
      bpftool: Fix vmlinux BTF leak in cgroup commands
      bpf: Add missing access_ok call to copy_user_syms
      bpf: Allow type tag BTF records to succeed other modifier records
      bpf: Emit verbose message when prog-specific btf_struct_access rejects a write
      bpf: Fix build_id caching in stack_map_get_build_id_offset()
      bpf: Fix partial copy of non-linear test_run output
      selftests/bpf: Cover stack nospec slot indexing
      bpf: Fix stack slot index in nospec checks