)]}'
{
  "commit": "801fb950cae7048eb7d83b18857d1ca37b8cd5a4",
  "tree": "8d2780c739c3ddc9422303e688f41791f6f1dc2c",
  "parents": [
    "555cd2bd860e7c4bdc3f4e4405b05515b0d9bc87"
  ],
  "author": {
    "name": "Juan Perdomo",
    "email": "jcperdomo100@gmail.com",
    "time": "Sat Sep 12 23:09:45 2026 -0400"
  },
  "committer": {
    "name": "Luiz Augusto von Dentz",
    "email": "luiz.von.dentz@intel.com",
    "time": "Tue Sep 15 14:55:41 2026 -0400"
  },
  "message": "Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup\n\nrfcomm_sock_cleanup_listen() closes unaccepted child sockets through\nrfcomm_sock_close(), which takes the child socket lock before\nrfcomm_dlc_close() acquires rfcomm_mutex. The RFCOMM worker takes these\nlocks in reverse order while handling connections and DLC state changes,\nso lockdep reports a possible deadlock.\n\nClose dequeued children without taking their socket lock. The accept queue\nowns a reference to each child, and bt_accept_dequeue() locks the child\nwhile unlinking it and clearing its parent pointer.\n\nDropping the child lock makes it important to prevent a concurrent\nrfcomm_connect_ind() from enqueueing a new child after cleanup observes an\nempty queue. Set a listening socket to BT_CLOSED while its lock is still\nheld, before dropping the lock and draining the queue. The state check in\nrfcomm_connect_ind() then rejects new children once cleanup starts.\n\nReported-by: syzbot+0cece8fa7d83523f47a3@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003d0cece8fa7d83523f47a3\nFixes: b7ce436a5d79 (\"Bluetooth: switch to lock_sock in RFCOMM\")\nSigned-off-by: Juan Perdomo \u003cjcperdomo100@gmail.com\u003e\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "958081adb9b5cf08d8fbc9a0b9b3d8fa15d06cb7",
      "old_mode": 33188,
      "old_path": "net/bluetooth/rfcomm/sock.c",
      "new_id": "e2486bc11cbce0d38dd055c029d1dda75f813448",
      "new_mode": 33188,
      "new_path": "net/bluetooth/rfcomm/sock.c"
    }
  ]
}