Re: [PATCH] Bluetooth: hci_sync: Drop the command's sk reference

[patchwork-bot+bluetooth@kernel.org]

Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Thu, 12 Nov 2026 03:34:28 +0000 you wrote:
> hci_cmd_sync_alloc() takes a reference on the sk a command is sent for
> (sock_hold()), and hci_cmd_sync_complete() means to drop it, but looks
> for the sk in the response skb, which never carries one. The reference
> is never dropped: every command sent with an sk leaks it, and with it
> the sk and a reference on the bluetooth module.
> 
> The commands sent with an sk are LE Remove Advertising Set and LE
> Clear Advertising Sets, for MGMT's Remove Advertising and the instance
> removals, and Read Local OOB (Extended) Data. After each, the module's
> refcnt stays one higher with no socket left open, and the module can't
> be unloaded until a reboot.
> 
> [...]

Here is the summary with links:
  - Bluetooth: hci_sync: Drop the command's sk reference
    https://git.kernel.org/bluetooth/bluetooth-next/c/f3183d7ad101

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html