Commit eb0d6d97c27c for kernel

commit eb0d6d97c27c29cd7392c8fd74f46edf7dff7ec2
Merge: 12bffaef2882 e1d486445af3
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Apr 17 15:58:22 2026 -0700

    Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf

    Pull bpf fixes from Alexei Starovoitov:
     "Most of the diff stat comes from Xu Kuohai's fix to emit ENDBR/BTI,
      since all JITs had to be touched to move constant blinding out and
      pass bpf_verifier_env in.

       - Fix use-after-free in arena_vm_close on fork (Alexei Starovoitov)

       - Dissociate struct_ops program with map if map_update fails (Amery
         Hung)

       - Fix out-of-range and off-by-one bugs in arm64 JIT (Daniel Borkmann)

       - Fix precedence bug in convert_bpf_ld_abs alignment check (Daniel
         Borkmann)

       - Fix arg tracking for imprecise/multi-offset in BPF_ST/STX insns
         (Eduard Zingerman)

       - Copy token from main to subprogs to fix missing kallsyms (Eduard
         Zingerman)

       - Prevent double close and leak of btf objects in libbpf (Jiri Olsa)

       - Fix af_unix null-ptr-deref in sockmap (Michal Luczaj)

       - Fix NULL deref in map_kptr_match_type for scalar regs (Mykyta
         Yatsenko)

       - Avoid unnecessary IPIs. Remove redundant bpf_flush_icache() in
         arm64 and riscv JITs (Puranjay Mohan)

       - Fix out of bounds access. Validate node_id in arena_alloc_pages()
         (Puranjay Mohan)

       - Reject BPF-to-BPF calls and callbacks in arm32 JIT (Puranjay Mohan)

       - Refactor all JITs to pass bpf_verifier_env to emit ENDBR/BTI for
         indirect jump targets on x86-64, arm64 JITs (Xu Kuohai)

       - Allow UTF-8 literals in bpf_bprintf_prepare() (Yihan Ding)"

    * tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf: (32 commits)
      bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
      bpf: Dissociate struct_ops program with map if map_update fails
      bpf: Validate node_id in arena_alloc_pages()
      libbpf: Prevent double close and leak of btf objects
      selftests/bpf: cover UTF-8 trace_printk output
      bpf: allow UTF-8 literals in bpf_bprintf_prepare()
      selftests/bpf: Reject scalar store into kptr slot
      bpf: Fix NULL deref in map_kptr_match_type for scalar regs
      bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
      bpf, arm64: Emit BTI for indirect jump target
      bpf, x86: Emit ENDBR for indirect jump targets
      bpf: Add helper to detect indirect jump targets
      bpf: Pass bpf_verifier_env to JIT
      bpf: Move constants blinding out of arch-specific JITs
      bpf, sockmap: Take state lock for af_unix iter
      bpf, sockmap: Fix af_unix null-ptr-deref in proto update
      selftests/bpf: Extend bpf_iter_unix to attempt deadlocking
      bpf, sockmap: Fix af_unix iter deadlock
      bpf, sockmap: Annotate af_unix sock:: Sk_state data-races
      selftests/bpf: verify kallsyms entries for token-loaded subprograms
      ...