BUG: memory leak unreferenced object 0xffff888107fef000 (size 2048): comm "syz-executor.0", pid 5075, jiffies 4294970561 (age 24.070s) hex dump (first 32 bytes): 00 10 6d 1a 81 88 ff ff 22 01 00 00 00 00 ad de ..m....."....... 00 00 00 00 aa aa aa aa aa 00 00 aa aa aa aa aa ................ backtrace: [] kmalloc_trace+0x25/0x90 mm/slab_common.c:1114 [] kmalloc include/linux/slab.h:599 [inline] [] kzalloc include/linux/slab.h:720 [inline] [] hci_conn_add+0x4f/0x5e0 net/bluetooth/hci_conn.c:957 [] hci_connect_acl+0x198/0x1b0 net/bluetooth/hci_conn.c:1632 [] l2cap_chan_connect+0x3a4/0xf50 net/bluetooth/l2cap_core.c:8044 [] l2cap_sock_connect+0x29d/0x460 net/bluetooth/l2cap_sock.c:256 [] __sys_connect_file+0x91/0xb0 net/socket.c:2032 [] __sys_connect+0xe6/0x110 net/socket.c:2049 [] __do_sys_connect net/socket.c:2059 [inline] [] __se_sys_connect net/socket.c:2056 [inline] [] __x64_sys_connect+0x1c/0x20 net/socket.c:2056 [] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 [] entry_SYSCALL_64_after_hwframe+0x63/0xcd BUG: memory leak unreferenced object 0xffff88810bc3fe00 (size 512): comm "syz-executor.0", pid 5075, jiffies 4294970561 (age 24.070s) hex dump (first 32 bytes): 00 f0 fe 07 81 88 ff ff 00 88 4c 1a 81 88 ff ff ..........L..... fd 03 00 00 00 00 00 00 00 06 0c 00 00 00 00 00 ................ backtrace: [] kmalloc_trace+0x25/0x90 mm/slab_common.c:1114 [] kmalloc include/linux/slab.h:599 [inline] [] kzalloc include/linux/slab.h:720 [inline] [] l2cap_conn_add.part.0+0x3d/0x340 net/bluetooth/l2cap_core.c:7845 [] l2cap_conn_add net/bluetooth/l2cap_core.c:8032 [inline] [] l2cap_chan_connect+0xab8/0xf50 net/bluetooth/l2cap_core.c:8053 [] l2cap_sock_connect+0x29d/0x460 net/bluetooth/l2cap_sock.c:256 [] __sys_connect_file+0x91/0xb0 net/socket.c:2032 [] __sys_connect+0xe6/0x110 net/socket.c:2049 [] __do_sys_connect net/socket.c:2059 [inline] [] __se_sys_connect net/socket.c:2056 [inline] [] __x64_sys_connect+0x1c/0x20 net/socket.c:2056 [] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 [] entry_SYSCALL_64_after_hwframe+0x63/0xcd