r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300))
getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"])
syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf)
clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0)