)]}'
{
  "commit": "296e7f3c5071cc02dc22e1566e759179fa1792ae",
  "tree": "3849b9b2e79d0a09da2d237fc933427e39668efb",
  "parents": [
    "ca18ee413a7cb6f09885778039225e58bae0d607"
  ],
  "author": {
    "name": "Luiz Augusto von Dentz",
    "email": "luiz.von.dentz@intel.com",
    "time": "Thu Sep 10 14:07:24 2026 -0400"
  },
  "committer": {
    "name": "Luiz Augusto von Dentz",
    "email": "luiz.von.dentz@intel.com",
    "time": "Tue Sep 15 14:53:12 2026 -0400"
  },
  "message": "Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync\n\nA BIS connection is matched to its parent socket by looking for a\nsocket in BT_LISTEN state with the same BIG handle:\n\n  iso_conn_ready()\n    if (test_bit(HCI_CONN_BIG_SYNC, \u0026hcon-\u003eflags))\n            parent \u003d iso_get_sock(hdev, \u0026hcon-\u003esrc, \u0026hcon-\u003edst,\n                                  BT_LISTEN, iso_match_big_hcon, hcon);\n\nThe socket was only moved to BT_LISTEN after iso_conn_big_sync()\nreturned, while the LE BIG Create Sync command has already been queued\nby then. If the BIG sync is established before the state is updated,\nwhich is easy to hit with an emulated controller as the command may\ncomplete in a few hundred microseconds, no parent is found and the BIS\nconnections are never notified to the listening socket.\n\nThe user space is then left waiting for connections that never arrive,\ne.g. bluetoothd never completes a MediaTransport1.Acquire of a\nBroadcast Sink transport.\n\nMove the socket to BT_LISTEN before requesting the BIG sync, so the\nstate is visible by the time the command is queued, and restore the\nprevious state if the request could not be started. Since the socket is\nbriefly visible as a listening socket, child sockets may have been\nqueued in the meantime, so drain the accept queue before restoring the\nstate: the cleanup paths of BT_CONNECT2/BT_CONNECTED don\u0027t do it and the\nchildren would be left with a dangling parent pointer.\n\nFixes: fbdc4bc47268 (\"Bluetooth: ISO: Use defer setup to separate PA sync and BIG sync\")\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4de332b8901f25e37eec46e7b7a109440dfac099",
      "old_mode": 33188,
      "old_path": "net/bluetooth/iso.c",
      "new_id": "eb99653f33f91962218397d0d946f2303e069d9e",
      "new_mode": 33188,
      "new_path": "net/bluetooth/iso.c"
    }
  ]
}