Your message dated Fri, 22 May 2026 06:18:56 +0000
with message-id <[email protected]>
and subject line Bug#1136790: fixed in linux 7.1~rc4-1~exp2
has caused the Debian Bug report #1136790,
regarding mt7921e: bluetooth is broken with "Bluetooth: hci0: Failed to send
wmt func ctrl (-22)"
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1136790: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136790
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:linux
Version: 6.12.88-1
Severity: normal
X-Debbugs-Cc: [email protected]
Dear Maintainer,
Updating to the recently available 6.12.88+deb13-amd64 I've noticed that
bluetooth is no longer working. It previously used to work on
6.12.86+deb13-amd64 and earlier. The logs say "hci0: Failed to send wmt func
ctrl (-22)", and it looks like a regression in the bluetooth driver for
Mediatek MT7921:
https://lore.kernel.org/linux-bluetooth/5i35wmc4z7sz54jo5uj6ywext2enh4ik3oxmfmperqk2v5kc27@ppvm6oodzipn/
likely caused by:
Bluetooth: btmtk: validate WMT event SKB length before struct access
(which can indeed be seen in the changelog for 6.12.88+deb13-amd64)
-- Package-specific info:
** Version:
Linux version 6.12.88+deb13-amd64 ([email protected])
(x86_64-linux-gnu-gcc-14 (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for
Debian) 2.44) #1 SMP PREEMPT_DYNAMIC Debian 6.12.88-1 (2026-05-15)
** Command line:
BOOT_IMAGE=/vmlinuz-6.12.88+deb13-amd64 root=/dev/mapper/e14vg1-root ro
rootflags=subvol=@rootfs quiet
** Not tainted
** Kernel log:
(I've selected the relevant bits with grep -Ei 'bluetooth|hci0|mt79')
2026-05-15T18:10:18.770926-03:00 e14 kernel: thinkpad_acpi: rfkill switch
tpacpi_bluetooth_sw: radio is unblocked
2026-05-15T18:10:18.770992-03:00 e14 kernel: Bluetooth: Core ver 2.22
2026-05-15T18:10:18.770998-03:00 e14 kernel: NET: Registered PF_BLUETOOTH
protocol family
2026-05-15T18:10:18.770998-03:00 e14 kernel: Bluetooth: HCI device and
connection manager initialized
2026-05-15T18:10:18.770999-03:00 e14 kernel: Bluetooth: HCI socket layer
initialized
2026-05-15T18:10:18.770999-03:00 e14 kernel: Bluetooth: L2CAP socket layer
initialized
2026-05-15T18:10:18.771000-03:00 e14 kernel: Bluetooth: SCO socket layer
initialized
2026-05-15T18:10:18.771004-03:00 e14 kernel: mt7921e 0000:03:00.0: enabling
device (0000 -> 0002)
2026-05-15T18:10:18.771005-03:00 e14 kernel: Bluetooth: hci0: HW/SW Version:
0x008a008a, Build Time: 20241106151414
2026-05-15T18:10:18.771005-03:00 e14 kernel: mt7921e 0000:03:00.0: ASIC
revision: 79610010
2026-05-15T18:10:18.771006-03:00 e14 kernel: mt7921e 0000:03:00.0: HW/SW
Version: 0x8a108a10, Build Time: 20241106151007a
2026-05-15T18:10:18.771008-03:00 e14 kernel: mt7921e 0000:03:00.0: WM Firmware
Version: ____010000, Build Time: 20241106151045
2026-05-15T18:10:18.771008-03:00 e14 kernel: Bluetooth: hci0: Failed to send
wmt func ctrl (-22)
2026-05-15T18:10:18.771008-03:00 e14 kernel: Bluetooth: hci0: HCI Enhanced
Setup Synchronous Connection command is advertised, but not supported.
2026-05-15T18:10:18.975048-03:00 e14 bluetoothd[5633]: Bluetooth daemon 5.82
2026-05-15T18:10:18.977689-03:00 e14 bluetoothd[5633]: Starting SDP server
2026-05-15T18:10:18.996029-03:00 e14 bluetoothd[5633]: Bluetooth management
interface 1.23 initialized
2026-05-15T18:10:18.996282-03:00 e14 kernel: Bluetooth: BNEP (Ethernet
Emulation) ver 1.3
2026-05-15T18:10:18.996296-03:00 e14 kernel: Bluetooth: BNEP filters: protocol
multicast
2026-05-15T18:10:18.996298-03:00 e14 kernel: Bluetooth: BNEP socket layer
initialized
** Model information
sys_vendor: LENOVO
product_name: 21JR0009RT
product_version: ThinkPad E14 Gen 5
chassis_vendor: LENOVO
chassis_version: None
bios_vendor: LENOVO
bios_version: R2CET37W(1.19 )
board_vendor: LENOVO
board_name: 21JR0009RT
board_version: ThinkPad
** Configuration for modprobe:
blacklist microcode
blacklist arkfb
blacklist aty128fb
blacklist atyfb
blacklist radeonfb
blacklist cirrusfb
blacklist cyber2000fb
blacklist kyrofb
blacklist matroxfb_base
blacklist mb862xxfb
blacklist neofb
blacklist pm2fb
blacklist pm3fb
blacklist s3fb
blacklist savagefb
blacklist sisfb
blacklist tdfxfb
blacklist tridentfb
blacklist vt8623fb
blacklist pcspkr
options snd_pcsp index=-2
options cx88_alsa index=-2
options snd_atiixp_modem index=-2
options snd_intel8x0m index=-2
options snd_via82xx_modem index=-2
options hid_apple fnmode=2
options snd_hda_intel index=1,0
** Loaded modules:
ccm
snd_seq_dummy
snd_hrtimer
snd_seq
snd_seq_device
wireguard
libchacha20poly1305
chacha_x86_64
poly1305_x86_64
curve25519_x86_64
libcurve25519_generic
libchacha
ip6_udp_tunnel
udp_tunnel
xt_CHECKSUM
nft_chain_nat
xt_MASQUERADE
nf_nat
bridge
stp
llc
vhost_vsock
vmw_vsock_virtio_transport_common
vhost
vhost_iotlb
vsock
bnep
binfmt_misc
tun
uinput
ip6t_REJECT
nf_reject_ipv6
xt_hl
ip6t_rt
ipt_REJECT
nf_reject_ipv4
xt_LOG
nf_log_syslog
xt_comment
nft_limit
xt_limit
xt_addrtype
xt_tcpudp
xt_conntrack
nf_conntrack
nf_defrag_ipv6
nf_defrag_ipv4
nft_compat
x_tables
nf_tables
zram
nfnetlink
lz4hc_compress
lz4_compress
nls_ascii
nls_cp437
vfat
fat
ext4
mbcache
jbd2
msr
amdgpu
snd_acp_legacy_mach
snd_acp_mach
snd_soc_nau8821
uvcvideo
snd_acp3x_rn
snd_acp3x_pdm_dma
snd_soc_dmic
btusb
mt7921e
snd_sof_amd_rembrandt
videobuf2_vmalloc
btrtl
uvc
mt7921_common
snd_sof_amd_acp
videobuf2_memops
btintel
intel_rapl_msr
snd_sof_pci
videobuf2_v4l2
amd_atl
mt792x_lib
btbcm
snd_sof_xtensa_dsp
intel_rapl_common
videodev
btmtk
mt76_connac_lib
snd_sof
mt76
videobuf2_common
snd_hda_codec_conexant
snd_sof_utils
mc
snd_hda_codec_generic
mac80211
snd_hda_codec_hdmi
amdxcp
snd_soc_core
drm_exec
bluetooth
gpu_sched
snd_hda_intel
edac_mce_amd
drm_buddy
snd_intel_dspcfg
snd_compress
drm_suballoc_helper
snd_intel_sdw_acpi
kvm_amd
snd_pcm_dmaengine
drm_display_helper
snd_hda_codec
snd_pci_ps
snd_rpl_pci_acp6x
libarc4
snd_ctl_led
kvm
cpufreq_powersave
ecdh_generic
snd_hda_core
cec
snd_acp_pci
snd_acp_legacy_common
cfg80211
rc_core
thinkpad_acpi
snd_pci_acp6x
snd_hwdep
drm_ttm_helper
snd_pcm
nvram
ttm
irqbypass
sparse_keymap
snd_pci_acp5x
snd_timer
rapl
platform_profile
snd_rn_pci_acp3x
efi_pstore
drm_kms_helper
joydev
think_lmi
snd_acp_config
snd
firmware_attributes_class
ccp
snd_soc_acpi
i2c_algo_bit
rfkill
k10temp
soundcore
wmi_bmof
crc16
ee1004
snd_pci_acp3x
evdev
ac
amd_pmc
button
efivarfs
btrfs
blake2b_generic
xor
raid6_pq
libcrc32c
crc32c_generic
dm_crypt
dm_mod
hid_multitouch
hid_generic
crct10dif_pclmul
crc32_pclmul
i2c_hid_acpi
crc32c_intel
i2c_hid
ghash_clmulni_intel
sha512_ssse3
hid
sha256_ssse3
xhci_pci
sha1_ssse3
sp5100_tco
xhci_hcd
r8169
drm
watchdog
nvme
ucsi_acpi
aesni_intel
typec_ucsi
realtek
psmouse
usbcore
gf128mul
nvme_core
mdio_devres
crypto_simd
typec
libphy
cryptd
i2c_piix4
video
serio_raw
roles
nvme_auth
i2c_smbus
battery
usb_common
wmi
** PCI devices:
03:00.0 Network controller [0280]: MEDIATEK Corp. MT7921 802.11ax PCI Express
Wireless Network Adapter [14c3:7961]
Subsystem: Lenovo Device [17aa:e0bc]
Physical Slot: 0
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 32 bytes
Interrupt: pin A routed to IRQ 78
IOMMU group: 11
Region 0: Memory at 470200000 (64-bit, prefetchable) [size=1M]
Region 2: Memory at 470300000 (64-bit, prefetchable) [size=16K]
Region 4: Memory at 470304000 (64-bit, prefetchable) [size=4K]
Capabilities: <access denied>
Kernel driver in use: mt7921e
Kernel modules: mt7921e
-- System Information:
Debian Release: 13.4
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.88+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages linux-image-6.12.88+deb13-amd64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.148.3
ii kmod 34.2-2
ii linux-base 4.12.1
Versions of packages linux-image-6.12.88+deb13-amd64 recommends:
ii apparmor 4.1.0-1
Versions of packages linux-image-6.12.88+deb13-amd64 suggests:
pn debian-kernel-handbook <none>
ii firmware-linux-free 20241210-2
ii grub-efi-amd64 2.12-9+deb13u1
pn linux-doc-6.12 <none>
Versions of packages linux-image-6.12.88+deb13-amd64 is related to:
ii firmware-amd-graphics 20250410-2
pn firmware-atheros <none>
pn firmware-bnx2 <none>
pn firmware-bnx2x <none>
pn firmware-brcm80211 <none>
pn firmware-cavium <none>
pn firmware-cirrus <none>
pn firmware-intel-graphics <none>
pn firmware-intel-misc <none>
pn firmware-intel-sound <none>
pn firmware-ipw2x00 <none>
pn firmware-ivtv <none>
pn firmware-iwlwifi <none>
pn firmware-libertas <none>
pn firmware-marvell-prestera <none>
ii firmware-mediatek 20250410-2
pn firmware-misc-nonfree <none>
pn firmware-myricom <none>
pn firmware-netronome <none>
pn firmware-netxen <none>
pn firmware-nvidia-graphics <none>
pn firmware-qcom-soc <none>
pn firmware-qlogic <none>
ii firmware-realtek 20250410-2
pn firmware-samsung <none>
pn firmware-siano <none>
pn firmware-ti-connectivity <none>
pn xen-hypervisor <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: linux
Source-Version: 7.1~rc4-1~exp2
Done: Salvatore Bonaccorso <[email protected]>
We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <[email protected]> (supplier of updated linux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 22 May 2026 08:02:48 +0200
Source: linux
Architecture: source
Version: 7.1~rc4-1~exp2
Distribution: experimental
Urgency: medium
Maintainer: Debian Kernel Team <[email protected]>
Changed-By: Salvatore Bonaccorso <[email protected]>
Closes: 1136790
Changes:
linux (7.1~rc4-1~exp2) experimental; urgency=medium
.
[ Johannes Schauer Marin Rodrigues ]
* [arm64] enable CONFIG_MEMTEST
.
[ Salvatore Bonaccorso ]
* Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Closes: #1136790)
* net: skbuff: preserve shared-frag marker during coalescing (CVE-2026-46300)
* net: skbuff: propagate shared-frag marker through frag-transfer helpers
Checksums-Sha1:
f278b9b15d39a69bd25d57a67c7dcd5d18e5453d 183288 linux_7.1~rc4-1~exp2.dsc
eb1989378ee0498321675e252edd6a3960c0a668 1458164
linux_7.1~rc4-1~exp2.debian.tar.xz
4ae36f66e93297d74b2b580e2266ed2955c27e67 6899
linux_7.1~rc4-1~exp2_source.buildinfo
Checksums-Sha256:
9a1bd58ded3e616c0f8ccc800dac9b87fa4bde13ef5c57497a27a65efb68f0ca 183288
linux_7.1~rc4-1~exp2.dsc
c3981a38449b6ff02bc75ec1dbc712c88b9041ba4f267e2a8845b696e2fea5d3 1458164
linux_7.1~rc4-1~exp2.debian.tar.xz
b39809738cb174b909427bc164ed155661a70b697bb15753fd329494e410fd94 6899
linux_7.1~rc4-1~exp2_source.buildinfo
Files:
0ba9a91214382e796e61a61f8ae8dcb9 183288 kernel optional
linux_7.1~rc4-1~exp2.dsc
7d97ed9e88529d399f87f165dc55fe8f 1458164 kernel optional
linux_7.1~rc4-1~exp2.debian.tar.xz
6bd14ddac432f1dee58040da39b02437 6899 kernel optional
linux_7.1~rc4-1~exp2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=zDYL
-----END PGP SIGNATURE-----
pgp2o0bzOorHp.pgp
Description: PGP signature
--- End Message ---