r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78)
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(0x0, 0x54)
syz_emit_vhci(0x0, 0x17)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd)
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc8, 0x4}, {0xc8, 0x8000}, {0xe09d3307dc06c866, 0x20}, {0xc8, 0x7}, {0xc9, 0x8}]}}}, 0x18)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)