BUG: memory leak
unreferenced object 0xffff888111268500 (size 224):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 28.020s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d896ddb4>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d896ddb4>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000d896ddb4>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000d896ddb4>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<00000000799a9eeb>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888112dc8800 (size 2048):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 28.020s)
  hex dump (first 32 bytes):
    00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<000000005bb10ffa>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000005bb10ffa>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000005bb10ffa>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000005bb10ffa>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000a194882f>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000a194882f>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<000000007f0553b8>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<00000000ae33240d>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888111268500 (size 224):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 29.900s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d896ddb4>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d896ddb4>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000d896ddb4>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000d896ddb4>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<00000000799a9eeb>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888112dc8800 (size 2048):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 29.910s)
  hex dump (first 32 bytes):
    00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<000000005bb10ffa>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000005bb10ffa>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000005bb10ffa>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000005bb10ffa>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000a194882f>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000a194882f>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<000000007f0553b8>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<00000000ae33240d>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888111268500 (size 224):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 29.960s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d896ddb4>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d896ddb4>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000d896ddb4>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000d896ddb4>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<00000000799a9eeb>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888112dc8800 (size 2048):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 29.960s)
  hex dump (first 32 bytes):
    00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<000000005bb10ffa>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000005bb10ffa>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000005bb10ffa>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000005bb10ffa>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000a194882f>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000a194882f>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<000000007f0553b8>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<00000000ae33240d>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888111268500 (size 224):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 30.920s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d896ddb4>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d896ddb4>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000d896ddb4>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000d896ddb4>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<00000000799a9eeb>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888112dc8800 (size 2048):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 30.930s)
  hex dump (first 32 bytes):
    00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<000000005bb10ffa>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000005bb10ffa>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000005bb10ffa>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000005bb10ffa>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000a194882f>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000a194882f>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<000000007f0553b8>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<00000000ae33240d>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888111268500 (size 224):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 30.980s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d896ddb4>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d896ddb4>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000d896ddb4>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000d896ddb4>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<00000000799a9eeb>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888112dc8800 (size 2048):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 30.980s)
  hex dump (first 32 bytes):
    00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<000000005bb10ffa>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000005bb10ffa>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000005bb10ffa>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000005bb10ffa>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000a194882f>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000a194882f>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<000000007f0553b8>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<00000000ae33240d>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888111268500 (size 224):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 31.970s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d896ddb4>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d896ddb4>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000d896ddb4>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000d896ddb4>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<00000000799a9eeb>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888112dc8800 (size 2048):
  comm "syz-executor949", pid 7038, jiffies 4294956516 (age 31.970s)
  hex dump (first 32 bytes):
    00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<000000005bb10ffa>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000005bb10ffa>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000005bb10ffa>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000005bb10ffa>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000a194882f>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000a194882f>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<000000007f0553b8>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<00000000ae33240d>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b87047cc>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b87047cc>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<00000000b87047cc>] h4_recv_buf+0x26d/0x450 drivers/bluetooth/hci_h4.c:182
    [<000000001d726612>] h4_recv+0x51/0xb0 drivers/bluetooth/hci_h4.c:116
    [<0000000072041957>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<00000000ab64141e>] tiocsti drivers/tty/tty_io.c:2197 [inline]
    [<00000000ab64141e>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2573
    [<0000000051e2582f>] vfs_ioctl fs/ioctl.c:46 [inline]
    [<0000000051e2582f>] file_ioctl fs/ioctl.c:509 [inline]
    [<0000000051e2582f>] do_vfs_ioctl+0x62a/0x810 fs/ioctl.c:696
    [<000000001f889116>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:713
    [<00000000ef0a045c>] __do_sys_ioctl fs/ioctl.c:720 [inline]
    [<00000000ef0a045c>] __se_sys_ioctl fs/ioctl.c:718 [inline]
    [<00000000ef0a045c>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:718
    [<000000001bd62c38>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000574e4082>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

executing program
executing program