bpf: Reject %p% format string in bprintf-like helpers

smb: client: fix use-after-free in cifs_oplock_break

ice: add NULL check in eswitch lag check

rxrpc: Fix recv-recv race of completed call

drm/amdkfd: Don't call mmput from MMU notifier callback

pinctrl: qcom: msm: mark certain pins as invalid for interrupts

drm/sched: Increment job count before swapping tail spsc queue

rxrpc: Fix oops due to non-existence of prealloc backlog struct

wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()

wifi: prevent A-MSDU attacks in mesh networks

kasan: remove kasan_find_vm_area() to prevent possible deadlock

btrfs: fix assertion when building free space tree

bpf: Fix oob access in cgroup local storage

ksmbd: limit repeated connections from clients with the same IP

xfrm: interface: fix use-after-free after changing collect_md xfrm interface

clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

do_change_type(): refuse to operate on unmounted/not ours mounts

usb: gadget: configfs: Fix OOB read on empty string write

dm-bufio: fix sched in atomic context

HID: core: ensure the allocated report buffer can contain the reserved report ID