The offending mainline commit was indeed backported into 6.12.88, as commit c411cf1bfde9.
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.12.y&id=c411cf1bfde951cfa821809cf4020ba177f76e0c A patch titled "Bluetooth: btmtk: accept too short WMT FUNC_CTRL events" was submitted and discussed about three weeks ago: https://lore.kernel.org/linux-bluetooth/770d36b07311bf88210c187923f243fb9f126f04.1777058551.git....@iki.fi/ That patch was committed to bluetooth-next.git by Luiz Augusto von Dentz (linux bluetooth drivers maintainer) early this week: https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=162b1adeb057 I applied that patch to debian's linux-image-6.12.88 using the debian/bin/test-patches script, and bluetooth appears to be restored in the resulting build. Any chance we could get this applied in the official trixie kernel?
