write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7}, 0x7) fallocate(r0, 0x20, 0x0, 0x8000) BUG: memory leak unreferenced object 0xffff888020604400 (size 512): comm "syz-executor.4", pid 4764, jiffies 4295163855 (age 43.060s) hex dump (first 32 bytes): 40 41 22 44 80 88 ff ff 03 0c 00 00 96 01 60 ae @A"D..........`. aa aa aa aa aa aa 86 dd 60 00 b1 5c 00 08 11 01 ........`..\.... backtrace: [<000000008b8cd834>] __kmalloc_reserve net/core/skbuff.c:142 [inline] [<000000008b8cd834>] __alloc_skb+0xb1/0x5b0 net/core/skbuff.c:210 [<0000000063d64d2a>] alloc_skb include/linux/skbuff.h:1102 [inline] [<0000000063d64d2a>] bt_skb_alloc include/net/bluetooth/bluetooth.h:391 [inline] [<0000000063d64d2a>] hci_prepare_cmd+0x2a/0x220 net/bluetooth/hci_request.c:296 [<00000000df19fae4>] hci_req_add_ev net/bluetooth/hci_request.c:330 [inline] [<00000000df19fae4>] hci_req_add+0x99/0x200 net/bluetooth/hci_request.c:349 [<00000000dc8ee2b9>] hci_reset_req+0x4f/0x70 net/bluetooth/hci_core.c:193 [<00000000f9ad8b78>] __hci_req_sync+0x121/0x850 net/bluetooth/hci_request.c:205 [<000000008f085b28>] hci_dev_do_reset net/bluetooth/hci_core.c:1900 [inline] [<000000008f085b28>] hci_dev_reset+0x561/0x6b0 net/bluetooth/hci_core.c:1930 [<0000000004b495a0>] hci_sock_ioctl+0x3b2/0x980 net/bluetooth/hci_sock.c:1071 [<000000007ab91ce7>] sock_do_ioctl+0xd3/0x300 net/socket.c:1047 [<00000000ac190147>] sock_ioctl+0x3ea/0x700 net/socket.c:1187 [<0000000034db68b8>] vfs_ioctl fs/ioctl.c:48 [inline] [<0000000034db68b8>] __do_sys_ioctl fs/ioctl.c:753 [inline] [<0000000034db68b8>] __se_sys_ioctl fs/ioctl.c:739 [inline] [<0000000034db68b8>] __x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:739 [<000000007261c0ae>] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 [<0000000077d916bb>] entry_SYSCALL_64_after_hwframe+0x67/0xcc BUG: memory leak unreferenced object 0xffff888044dd9b40 (size 232): comm "kworker/u5:0", pid 52, jiffies 4295163855 (age 43.060s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000190a48b1>] skb_clone+0x14f/0x3d0 net/core/skbuff.c:1456 [<000000009ca30fee>] hci_cmd_work+0xdc/0x2d0 net/bluetooth/hci_core.c:4998 [<0000000013a3e45b>] process_one_work+0x9a9/0x14b0 kernel/workqueue.c:2282 [<0000000043dee618>] worker_thread+0x61d/0x1310 kernel/workqueue.c:2428 [<00000000b8c1d306>] kthread+0x38f/0x470 kernel/kthread.c:313 [<00000000cf44c861>] ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:299 BUG: leak checking failed