Commit c75597caada0 for kernel

commit c75597caada080effbfbc0a7fb10dc2a3bb543ad
Merge: a142da0b2d32 098e32cba334
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Jun 25 10:21:13 2026 -0700

    Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

    Pull kvm fixes from Paolo Bonzini:
     "s390:

       - Fix S390_USER_OPEREXEC so it can now be enabled regardless of other
         unrelated capabilities

       - Fix handling of the _PAGE_UNUSED pte bit that could lead to guest
         memory corruption in some scenarios

       - A bunch of misc gmap fixes (locking, behaviour under memory
         pressure)

       - Fix CMMA dirty tracking

      x86:

       - Tidy up some WARN_ON() and BUG_ON(), replacing them with
         WARN_ON_ONCE() or KVM_BUG_ON(). All of these have obviously never
         triggered, or somebody would have been annoyed earlier, but still...

       - Fix missing interrupt due to stale CR8 intercept

       - Add a statistic that can come in handy to debug leaks as well as
         the vulnerability to a class of recently-discovered issues

       - Do not ask arch/x86/kernel to export
         default_cpu_present_to_apicid() just for KVM"

    * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm: (22 commits)
      x86/apic: KVM: Use cpu_physical_id() to get APIC ID of running vCPU for AVIC
      KVM: x86/mmu: Expose number of shadow MMU shadow pages as a stat
      KVM: x86: Unconditionally recompute CR8 intercept on PPR update
      KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
      KVM: x86: WARN (once) if RTC pending EOI tracking goes off the rails
      KVM: x86: WARN and fail kvm_set_irq() if a PIC or I/O APIC vector is invalid
      KVM: x86: Bug the VM, not the kernel, if the ISR count {under,over}flows
      KVM: x86/mmu: Bug the VM, not the host kernel, if KVM write-protects upper SPTEs
      KVM: x86: Replace BUG_ON() with WARN_ON_ONCE() on "bad" nested GPA translation
      KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
      KVM: s390: Return failure in case of failure in kvm_s390_set_cmma_bits()
      KVM: s390: selftests: Fix cmma selftest
      KVM: s390: Fix cmma dirty tracking
      KVM: s390: Fix locking in kvm_s390_set_mem_control()
      KVM: s390: Fix handle_{sske,pfmf} under memory pressure
      KVM: s390: Fix code typo in gmap_protect_asce_top_level()
      KVM: s390: Do not set special large pages dirty
      KVM: s390: Fix dat_peek_cmma() overflow
      s390/mm: Fix handling of _PAGE_UNUSED pte bit
      KVM: s390: Fix typo in UCONTROL documentation
      ...