Ordinary users are not allowed to use raw L2CAP sockets.

net/bluetooth/l2cap.c

@@ -381,6 +381,9 @@ static int l2cap_sock_create(struct socket *sock, int protocol)
 	if (sock->type != SOCK_SEQPACKET && sock->type != SOCK_DGRAM && sock->type != SOCK_RAW)
 		return -ESOCKTNOSUPPORT;
 	
+	if (sock->type == SOCK_RAW && !capable(CAP_NET_RAW))
+		return -EPERM;
+	
 	sock->ops = &l2cap_sock_ops;
 
 	sk = l2cap_sock_alloc(sock, protocol, GFP_KERNEL);