Commit 6bad2e38fe7f for kernel

commit 6bad2e38fe7f2da7dc982b2b80814e632832e568
Merge: 0e35b9b6ec0f b6eb022890c7
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Jul 8 08:43:44 2026 -0700

    Merge tag 'hid-for-linus-2026070801' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid

    Pull HID fixes from Jiri Kosina:

     - OOB, UAF, NULL-deref fixes in core and picolcd, logitech, letsketch,
       appleir and multitouch drivers (Georgiy Osokin, HyeongJun An, Lee
       Jones, Manish Khadka, Maoyi Xie and Trung Nguyen)

     - fix for integer wraparound (and corresponding regression selftest) in
       hid-bpf (Yiyang Chen)

    * tag 'hid-for-linus-2026070801' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:
      selftests/hid: multitouch: test a large ContactCountMaximum
      HID: multitouch: fix out-of-bounds bit access on mt_io_flags
      selftests/hid: Cover hid_bpf_get_data() size overflow
      selftests/hid: Load only requested struct_ops maps
      HID: bpf: Fix hid_bpf_get_data() range check
      HID: lg-g15: cancel pending work on remove to fix a use-after-free
      HID: logitech-dj: Fix maxfield check in DJ short report validation
      HID: core: Fix OOB read in hid_get_report for numbered reports
      HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
      HID: appleir: fix UAF on pending key_up_timer in remove()
      HID: letsketch: fix UAF on inrange_timer at driver unbind