[GIT PULL] bluetooth 2025-11-10

The following changes since commit 96a9178a29a6b84bb632ebeb4e84cf61191c73d5:

  net: phy: micrel: lan8814 fix reset of the QSGMII interface (2025-11-07 19:00:38 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2025-11-10

for you to fetch changes up to 6ea7b3104fc22ecd720de91b2b3e9ddeb5953c31:

  Bluetooth: btrtl: Avoid loading the config file on security chips (2025-11-10 16:09:50 -0500)

----------------------------------------------------------------
bluetooth pull request for net:

 - hci_conn: Fix not cleaning up PA_LINK connections
 - hci_event: Fix not handling PA Sync Lost event
 - MGMT: cancel mesh send timer when hdev removed
 - 6lowpan: reset link-local header on ipv6 recv path
 - 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
 - L2CAP: export l2cap_chan_hold for modules
 - 6lowpan: Don't hold spin lock over sleeping functions
 - 6lowpan: add missing l2cap_chan_lock()
 - btusb: reorder cleanup in btusb_disconnect to avoid UAF
 - btrtl: Avoid loading the config file on security chips

----------------------------------------------------------------
Luiz Augusto von Dentz (2):
      Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections
      Bluetooth: hci_event: Fix not handling PA Sync Lost event

Max Chou (1):
      Bluetooth: btrtl: Avoid loading the config file on security chips

Pauli Virtanen (6):
      Bluetooth: MGMT: cancel mesh send timer when hdev removed
      Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
      Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
      Bluetooth: L2CAP: export l2cap_chan_hold for modules
      Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
      Bluetooth: 6lowpan: add missing l2cap_chan_lock()

Raphael Pinsonneault-Thibeault (1):
      Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF

 drivers/bluetooth/btrtl.c   |  24 +++++-----
 drivers/bluetooth/btusb.c   |  13 +++---
 include/net/bluetooth/hci.h |   5 +++
 net/bluetooth/6lowpan.c     | 105 ++++++++++++++++++++++++++++++++------------
 net/bluetooth/hci_conn.c    |  33 ++++++++------
 net/bluetooth/hci_event.c   |  56 ++++++++++++++---------
 net/bluetooth/hci_sync.c    |   2 +-
 net/bluetooth/l2cap_core.c  |   1 +
 net/bluetooth/mgmt.c        |   1 +
 9 files changed, 158 insertions(+), 82 deletions(-)

On Mon, 10 Nov 2025 16:44:53 -0500 Luiz Augusto von Dentz wrote:

      Bluetooth: hci_event: Fix not handling PA Sync Lost event

nit: sparse says:

net/bluetooth/hci_event.c:5850:22: warning: cast to restricted __le16

(I haven't looked if the cast is correct but if so it needs a __force)

Hi Jakub,

On Mon, Nov 10, 2025 at 7:43 PM Jakub Kicinski [off-list ref] wrote:

On Mon, 10 Nov 2025 16:44:53 -0500 Luiz Augusto von Dentz wrote:

quoted

      Bluetooth: hci_event: Fix not handling PA Sync Lost event

nit: sparse says:

net/bluetooth/hci_event.c:5850:22: warning: cast to restricted __le16

(I haven't looked if the cast is correct but if so it needs a __force)

Ouch, not sure how I missed it, it should be using __le HCI is little
endian, will fix it and send another PR shortly.

-- 
Luiz Augusto von Dentz