diff --git a/sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap_raw.c b/sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap_raw.c
--- a/sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap_raw.c
+++ b/sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap_raw.c
@@ -634,6 +634,8 @@
 	so->so_pcb = (caddr_t) pcb;
 	pcb->so = so;
 
+	/* Raw L2CAP socket creation itself is permitted for any local process;
+	 * privileged operations are gated on the PRIVILEGED flag below. */
 	if (curproc == NULL ||
 	    caps_priv_check_self(SYSCAP_NONET_BT_RAW) == 0)
 	{