Your message dated Sun, 24 May 2026 08:32:06 +0000
with message-id <[email protected]>
and subject line Bug#1136790: fixed in linux 6.12.90-1
has caused the Debian Bug report #1136790,
regarding Regression: MediaTek MT7925 Bluetooth fails to initialize on 7.0.7, 
works on 7.0.4
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1136790: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136790
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:linux
Version: 7.0.7-1~bpo13+1
Severity: important

# Bug report draft: MT7925 Bluetooth regression on linux-image-7.0.7+deb13-amd64

Package: linux-image-7.0.7+deb13-amd64

Severity: important

Summary:
MediaTek MT7925 / RZ717 Bluetooth fails to initialize on Debian backports kernel
7.0.7+deb13-amd64, while the same hardware and firmware works on
7.0.4+deb13-amd64.

System:
- Debian Trixie with trixie-backports kernel
- Motherboard: ASRock X870E Taichi Lite
- Kernel that fails: 7.0.7+deb13-amd64, package version 7.0.7-1~bpo13+1
- Kernel that works: 7.0.4+deb13-amd64, package version 7.0.4-1~bpo13+1
- bluez: 5.82-1.1
- firmware-mediatek: 20260410-1~bpo13+1

Hardware:

PCI Wi-Fi side:
```
0a:00.0 Network controller [0280]: MEDIATEK Corp. MT7925 (RZ717) Wi-Fi 7 160MHz 
[14c3:0717]
        Subsystem: MEDIATEK Corp. MT7925 (RZ717) Wi-Fi 7 160MHz [14c3:0717]
        Kernel driver in use: mt7925e
        Kernel modules: mt7925e
```

USB Bluetooth side:
```
Bus 003 Device 002: ID 0e8d:0717 MediaTek Inc. Wireless_Device
```

Failure on 7.0.7+deb13-amd64:

```
Linux version 7.0.7+deb13-amd64 ... Debian 7.0.7-1~bpo13+1 (2026-05-16)
usb 3-7: New USB device found, idVendor=0e8d, idProduct=0717, bcdDevice= 1.00
Bluetooth: hci0: HW/SW Version: 0x00000000, Build Time: 20260106153314
Bluetooth: hci0: Failed to send wmt func ctrl (-22)
Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is 
advertised, but not supported.
```

User-visible result:

```
$ bluetoothctl show
No default controller available

$ hciconfig -a hci0
hci0:   Type: Primary  Bus: USB
        BD Address: 00:00:00:00:00:00  ACL MTU: 0:0  SCO MTU: 0:0
        DOWN
        Features: 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
```

Working result on 7.0.4+deb13-amd64:

```
Linux version 7.0.4+deb13-amd64 ... Debian 7.0.4-1~bpo13+1 (2026-05-08)
usb 3-7: New USB device found, idVendor=0e8d, idProduct=0717, bcdDevice= 1.00
Bluetooth: hci0: HW/SW Version: 0x00000000, Build Time: 20260106153314
Bluetooth: hci0: Device setup in 1822197 usecs
Bluetooth: hci0: HCI Enhanced Setup Synchronous Connection command is 
advertised, but not supported.
```

Working controller state on 7.0.4:

```
Controller 3C:0A:F3:A0:4B:9C (public)
        Manufacturer: 0x0046 (70)
        Version: 0x0d (13)
        Powered: yes
        Roles: central
        Roles: peripheral
```

Additional notes:
- Updating firmware-mediatek from stable 20250410-2 to backports 
20260410-1~bpo13+1
  changed the firmware build time from 202503... to 202601..., but did not fix
  the failure on kernel 7.0.7.
- USB unbind/bind, btusb/btmtk module reload, bluetooth.service restart, and
  `usbreset 0e8d:0717` did not recover the device on 7.0.7.
- Booting the same system to 7.0.4 makes Bluetooth work immediately.

Regression range:
- Works: 7.0.4-1~bpo13+1
- Fails: 7.0.7-1~bpo13+1



-- System Information:
Debian Release: 13.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 7.0.4+deb13-amd64 (SMP w/32 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set 
to C.UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages linux-image-7.0.7+deb13-amd64 depends on:
ii  initramfs-tools [linux-initramfs-tool]  0.148.4
ii  linux-base                              4.12.1
ii  linux-base-7.0.7+deb13-amd64            7.0.7-1~bpo13+1
ii  linux-binary-7.0.7+deb13-amd64          7.0.7-1~bpo13+1
ii  linux-modules-7.0.7+deb13-amd64         7.0.7-1~bpo13+1

Versions of packages linux-image-7.0.7+deb13-amd64 recommends:
ii  apparmor  4.1.0-1

Versions of packages linux-image-7.0.7+deb13-amd64 suggests:
pn  debian-kernel-handbook  <none>
pn  firmware-linux-free     <none>
ii  grub-efi-amd64          2.12-9+deb13u2
pn  linux-doc-7.0           <none>

Versions of packages linux-image-7.0.7+deb13-amd64 is related to:
ii  firmware-amd-graphics      20260410-1~bpo13+1
pn  firmware-atheros           <none>
pn  firmware-bnx2              <none>
pn  firmware-bnx2x             <none>
pn  firmware-brcm80211         <none>
pn  firmware-cavium            <none>
pn  firmware-cirrus            <none>
pn  firmware-intel-graphics    <none>
pn  firmware-intel-misc        <none>
pn  firmware-intel-sound       <none>
pn  firmware-ipw2x00           <none>
pn  firmware-ivtv              <none>
pn  firmware-iwlwifi           <none>
pn  firmware-libertas          <none>
pn  firmware-marvell-prestera  <none>
ii  firmware-mediatek          20260410-1~bpo13+1
pn  firmware-misc-nonfree      <none>
pn  firmware-myricom           <none>
pn  firmware-netronome         <none>
pn  firmware-netxen            <none>
ii  firmware-nvidia-graphics   20260410-1~bpo13+1
pn  firmware-qcom-soc          <none>
pn  firmware-qlogic            <none>
ii  firmware-realtek           20260410-1~bpo13+1
pn  firmware-samsung           <none>
pn  firmware-siano             <none>
pn  firmware-ti-connectivity   <none>
pn  xen-hypervisor             <none>

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: linux
Source-Version: 6.12.90-1
Done: Salvatore Bonaccorso <[email protected]>

We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <[email protected]> (supplier of updated linux package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 22 May 2026 21:01:16 +0200
Source: linux
Architecture: source
Version: 6.12.90-1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Kernel Team <[email protected]>
Changed-By: Salvatore Bonaccorso <[email protected]>
Closes: 1136790
Changes:
 linux (6.12.90-1) trixie-security; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.89
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.90
     - HID: playstation: Clamp num_touch_reports
     - media: uvcvideo: Enable VB2_DMABUF for metadata stream
     - [arm64] dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux
     - [arm64] regulator: mt6357: fix OF node reference imbalance
     - [arm64,armhf] regulator: rk808: fix OF node reference imbalance
     - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
     - [amd64] media: intel/ipu6: fix error pointer dereference
     - media: saa7164: add ioremap return checks and cleanups
     - spi: aspeed-smc: fix controller deregistration
     - [amd64] platform/x86: hp-wmi: Ignore backlight and FnLock events
     - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to
       copy
     - [arm64] drm/msm/gem: fix error handling in
       msm_ioctl_gem_info_get_metadata()
     - [amd64] drm/i915/psr: Init variable to avoid early exit from et alignment
       loop
     - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
     - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count.
     - drm/amdgpu: gate VM CPU HDP flush on reset lock
     - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
     - drm/amdkfd: Add upper bound check for num_of_nodes
     - drm/amdgpu: Add bounds checking to ib_{get,set}_value
     - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
     - drm/amdgpu/vce: Prevent partial address patches
     - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
     - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
     - drm/amd/display: Change dither policy for 10 bpc output back to dithering
     - drm/gem: Fix inconsistent plane dimension calculation in
       drm_gem_fb_init_with_funcs()
     - drm/amdkfd: validate SVM ioctl nattr against buffer size
     - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked()
     - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
     - drm/xe/bo: Fix bo leak on unaligned size validation in 
xe_bo_init_locked()
     - drm/radeon: add missing revision check for CI
     - drm/amdgpu: zero-initialize GART table on allocation
     - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds
     - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
     - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds
     - drm/amdkfd: Make all TLB-flushes heavy-weight
     - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
     - drm/amdgpu/pm: add missing revision check for CI
     - drm/amdgpu/pm: align Hawaii mclk workaround with radeon
     - [arm64] dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22
     - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
     - batman-adv: fix integer overflow on buff_pos
     - batman-adv: reject new tp_meter sessions during teardown
     - batman-adv: stop caching unowned originator pointers in BAT IV
     - batman-adv: bla: prevent use-after-free when deleting claims
     - batman-adv: bla: only purge non-released claims
     - batman-adv: bla: put backbone reference on failed claim hash insert
     - usb: typec: tcpm: reset internal port states on soft reset AMS
     - usb: dwc3: Move GUID programming after PHY initialization
     - ALSA: hda: cs35l56: Propagate ASP TX source control errors
     - ALSA: misc: Use guard() for spin locks
     - ALSA: core: Serialize deferred fasync state checks
     - ALSA: seq: Notify client and port info changes
     - ALSA: seq: Fix UMP group 16 filtering
     - Bluetooth: hci_conn: fix potential UAF in create_big_sync
     - [arm64,armhf] spi: tegra20-sflash: fix controller deregistration
     - [arm64,armhf] spi: tegra114: fix controller deregistration
     - mm/hugetlb_cma: round up per_node before logging it
     - block: cleanup blkdev_report_zones()
     - block: reorganize struct blk_zone_wplug
     - block: fix zone write plug removal
     - tracefs: Fix default permissions not being applied on initial mount
     - fbcon: Avoid OOB font access if console rotation fails
     - mm/damon/core: disallow time-quota setting zero esz
     - mm/damon/core: implement damon_kdamond_pid()
     - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
     - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
     - bonding: fix use-after-free due to enslave fail after slave array update
       (CVE-2026-23171)
     - io_uring/kbuf: support min length left for incremental buffers
     - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
     - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type()
     - btrfs: fix double free in create_space_info_sub_group() error path
     - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to
       info-leak
     - tracing/probes: Limit size of event probe to 3K
     - batman-adv: stop tp_meter sessions during mesh teardown
     - batman-adv: tp_meter: fix tp_num leak on kmalloc failure
     - vsock: fix buffer size clamping order
     - vsock/virtio: fix length and offset in tap skb for split packets
     - vsock/virtio: fix empty payload in tap skb for non-linear buffers
     - vsock/virtio: fix accept queue count leak on transport mismatch
     - drm/amdgpu/vcn3: Avoid overflow on msg bound check
     - drm/amdgpu/vcn4: Avoid overflow on msg bound check
 .
   [ Salvatore Bonaccorso ]
   * Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Closes: #1136790)
   * net: skbuff: preserve shared-frag marker during coalescing (CVE-2026-46300)
   * net: skbuff: propagate shared-frag marker through frag-transfer helpers
Checksums-Sha1:
 7f597a2ca6fb396f9ed85d5f7034654c6970fbb8 288306 linux_6.12.90-1.dsc
 0659536149f0573d10892259fa0f41392806b71e 151267988 linux_6.12.90.orig.tar.xz
 15bd28f2ead8e8497d8ef1ca06f6f73eb7e55551 1817660 linux_6.12.90-1.debian.tar.xz
 cdbeb30b5a83d28d7888c7b546400593392a741e 6854 linux_6.12.90-1_source.buildinfo
Checksums-Sha256:
 59fe14b7688e3f2c1a2f68c7179e58ce9f22f15acd3c99fd8c963ab1b8a17428 288306 
linux_6.12.90-1.dsc
 6e7fc837feac9d07b96e60c4a97f616d33ef694f67703228f027f816117fb82b 151267988 
linux_6.12.90.orig.tar.xz
 b4f57ceae5a2895c3a6767d98a6a682e5a2ae35a1a27ed087d0a8297b36ba7d2 1817660 
linux_6.12.90-1.debian.tar.xz
 e97902052dae76d7f1f5782de9672f45d813b146a1b797fd6f4ca9b590290e05 6854 
linux_6.12.90-1_source.buildinfo
Files:
 13acea0f8de34f5efab8ecc6365f180c 288306 kernel optional linux_6.12.90-1.dsc
 acfae91a9d3a378012c874008a5a7945 151267988 kernel optional 
linux_6.12.90.orig.tar.xz
 bb2df52a7876f8c8e51bf1d892b4ed6c 1817660 kernel optional 
linux_6.12.90-1.debian.tar.xz
 7caafe454797414d2c31582e64088646 6854 kernel optional 
linux_6.12.90-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=JU2c
-----END PGP SIGNATURE-----

Attachment: pgp2Tqjs8fSRZ.pgp
Description: PGP signature


--- End Message ---

Reply via email to