usb: gadget: f_ncm: Refactor bind path to use __free()

ksmbd: fix recursive locking in RPC handle list access

hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()

NFSD: Define a proc_layoutcommit for the FlexFiles layout type

ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card

ksmbd: transport_ipc: validate payload size before reading handle

net/sched: sch_qfq: Fix null-deref in agg_dequeue

perf: arm_spe: Prevent overflow in PERF_IDX2OFF()

nbd: restrict sockets to TCP and UDP

riscv, bpf: Sign extend struct ops return values properly

bpf: Explicitly check accesses to bpf_sock_addr

f2fs: fix to avoid overflow while left shift operation

tcp_metrics: use dst_dev_net_rcu()

ipv4: start using dst_dev_rcu()

tty: n_gsm: Don't block input queue by waiting MSC

fs: ntfs3: Fix integer overflow in run_unpack()

RISC-V: KVM: Write hgatp register with valid mode bits

smc: Fix use-after-free in __pnet_find_base_ndev().

RDMA/rxe: Fix race in do_task() when draining

coresight: trbe: Return NULL pointer for allocation failures