BUG: memory leak
unreferenced object 0xffff88810ad8f900 (size 224):
  comm "syz-executor264", pid 7302, jiffies 4294955797 (age 26.220s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f600 (size 224):
  comm "syz-executor264", pid 7306, jiffies 4294955815 (age 26.040s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f300 (size 224):
  comm "syz-executor264", pid 7310, jiffies 4294955823 (age 25.960s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f200 (size 224):
  comm "syz-executor264", pid 7314, jiffies 4294955834 (age 25.850s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f900 (size 224):
  comm "syz-executor264", pid 7302, jiffies 4294955797 (age 27.190s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f600 (size 224):
  comm "syz-executor264", pid 7306, jiffies 4294955815 (age 27.010s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f300 (size 224):
  comm "syz-executor264", pid 7310, jiffies 4294955823 (age 26.930s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f200 (size 224):
  comm "syz-executor264", pid 7314, jiffies 4294955834 (age 26.820s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f900 (size 224):
  comm "syz-executor264", pid 7302, jiffies 4294955797 (age 28.150s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f600 (size 224):
  comm "syz-executor264", pid 7306, jiffies 4294955815 (age 27.970s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f300 (size 224):
  comm "syz-executor264", pid 7310, jiffies 4294955823 (age 27.890s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f200 (size 224):
  comm "syz-executor264", pid 7314, jiffies 4294955834 (age 27.780s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f900 (size 224):
  comm "syz-executor264", pid 7302, jiffies 4294955797 (age 29.160s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f600 (size 224):
  comm "syz-executor264", pid 7306, jiffies 4294955815 (age 28.980s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f300 (size 224):
  comm "syz-executor264", pid 7310, jiffies 4294955823 (age 28.900s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f200 (size 224):
  comm "syz-executor264", pid 7314, jiffies 4294955834 (age 28.790s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f900 (size 224):
  comm "syz-executor264", pid 7302, jiffies 4294955797 (age 30.200s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f600 (size 224):
  comm "syz-executor264", pid 7306, jiffies 4294955815 (age 30.020s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f300 (size 224):
  comm "syz-executor264", pid 7310, jiffies 4294955823 (age 29.940s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f200 (size 224):
  comm "syz-executor264", pid 7314, jiffies 4294955834 (age 29.830s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f900 (size 224):
  comm "syz-executor264", pid 7302, jiffies 4294955797 (age 31.240s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f600 (size 224):
  comm "syz-executor264", pid 7306, jiffies 4294955815 (age 31.060s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f300 (size 224):
  comm "syz-executor264", pid 7310, jiffies 4294955823 (age 30.980s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810ad8f200 (size 224):
  comm "syz-executor264", pid 7314, jiffies 4294955834 (age 30.870s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000cf17bf4f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000cf17bf4f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000cf17bf4f>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000cf17bf4f>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<0000000042f45d7b>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b7f3ddfc>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<00000000b7f3ddfc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b7f3ddfc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<00000000fb96c783>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<000000002233780a>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<0000000085634b0a>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<0000000085634b0a>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<0000000045c8a678>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<0000000045c8a678>] file_ioctl fs/ioctl.c:545 [inline]
    [<0000000045c8a678>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<00000000a6c5550c>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<00000000be91b47e>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<00000000be91b47e>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<00000000be91b47e>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<000000008c2fe8cf>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000f4ec1e7a>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

executing program
executing program