--- i/net/bluetooth/l2cap_core.c
+++ l/net/bluetooth/l2cap_core.c
@@ -6826,6 +6826,7 @@ static void l2cap_recv_frame(struct l2ca
 		break;
 
 	case L2CAP_CID_CONN_LESS:
+		*((__le16 *) skb->data) = 0;
 		psm = get_unaligned((__le16 *) skb->data);
 		skb_pull(skb, L2CAP_PSMLEN_SIZE);
 		l2cap_conless_channel(conn, psm, skb);