BUG: memory leak
unreferenced object 0xffff888114b0cc00 (size 224):
  comm "syz-executor787", pid 7209, jiffies 4294948642 (age 15.770s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 40 c3 28 81 88 ff ff 00 00 00 00 00 00 00 00  .@.(............
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

executing program
executing program
BUG: memory leak
unreferenced object 0xffff888124c6a900 (size 224):
  comm "syz-executor787", pid 7217, jiffies 4294948642 (age 19.820s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 b6 17 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a100 (size 224):
  comm "syz-executor787", pid 7207, jiffies 4294948642 (age 19.820s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 79 10 81 88 ff ff 00 00 00 00 00 00 00 00  ..y.............
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a900 (size 224):
  comm "syz-executor787", pid 7217, jiffies 4294948642 (age 20.710s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 b6 17 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a100 (size 224):
  comm "syz-executor787", pid 7207, jiffies 4294948642 (age 20.710s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 79 10 81 88 ff ff 00 00 00 00 00 00 00 00  ..y.............
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a900 (size 224):
  comm "syz-executor787", pid 7217, jiffies 4294948642 (age 21.620s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 b6 17 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a100 (size 224):
  comm "syz-executor787", pid 7207, jiffies 4294948642 (age 21.620s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 79 10 81 88 ff ff 00 00 00 00 00 00 00 00  ..y.............
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a900 (size 224):
  comm "syz-executor787", pid 7217, jiffies 4294948642 (age 24.190s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 b6 17 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a100 (size 224):
  comm "syz-executor787", pid 7207, jiffies 4294948642 (age 24.190s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 79 10 81 88 ff ff 00 00 00 00 00 00 00 00  ..y.............
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a900 (size 224):
  comm "syz-executor787", pid 7217, jiffies 4294948642 (age 24.240s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 b6 17 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124c6a100 (size 224):
  comm "syz-executor787", pid 7207, jiffies 4294948642 (age 24.240s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 79 10 81 88 ff ff 00 00 00 00 00 00 00 00  ..y.............
  backtrace:
    [<00000000a75598be>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a75598be>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<00000000a75598be>] slab_alloc_node mm/slab.c:3263 [inline]
    [<00000000a75598be>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3575
    [<00000000d8ca0c72>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<000000002c8ea802>] alloc_skb include/linux/skbuff.h:1049 [inline]
    [<000000002c8ea802>] bt_skb_alloc include/net/bluetooth/bluetooth.h:339 [inline]
    [<000000002c8ea802>] h5_rx_pkt_start+0x57/0xd0 drivers/bluetooth/hci_h5.c:474
    [<000000005d745e7f>] h5_recv+0x13f/0x1d0 drivers/bluetooth/hci_h5.c:563
    [<0000000092709d6c>] hci_uart_tty_receive+0xba/0x200 drivers/bluetooth/hci_ldisc.c:613
    [<000000008e6eb930>] tiocsti drivers/tty/tty_io.c:2200 [inline]
    [<000000008e6eb930>] tty_ioctl+0x81c/0xa30 drivers/tty/tty_io.c:2576
    [<000000001229e7ec>] vfs_ioctl fs/ioctl.c:47 [inline]
    [<000000001229e7ec>] file_ioctl fs/ioctl.c:545 [inline]
    [<000000001229e7ec>] do_vfs_ioctl+0x551/0x890 fs/ioctl.c:732
    [<000000002e9d3c89>] ksys_ioctl+0x86/0xb0 fs/ioctl.c:749
    [<000000004a8c8208>] __do_sys_ioctl fs/ioctl.c:756 [inline]
    [<000000004a8c8208>] __se_sys_ioctl fs/ioctl.c:754 [inline]
    [<000000004a8c8208>] __x64_sys_ioctl+0x1e/0x30 fs/ioctl.c:754
    [<00000000e4645d49>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000fc6319b3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9