syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0600282000"], 0x16) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x9, 0xc8, {0x6, 0x3, 0x4, 0x2, 0x6}}}}, 0x17) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000000000)=0x1) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041c050008080000"], 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x97a, 0x4}}}}, 0x11) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1e1, 0x1900) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000880)=ANY=[@ANYRES16=r1, @ANYBLOB="1f1aee7208429e1333c32fd271ddfb37568904731a29d983da472957ff0abbeb900a4dbf87808af00602f1647f1963c5df3a018c05ae55bf83c9def7cf31edd18c77792798da6907bc2e92efbfe1c3ef20252690817082a8e9ac0dca9badb523d7e59d81fd523a73ee598bf0e5b987a133e1d717fb05b2d927753d31408e8086792473914778c3334f0994c9ecb58f86ea229f256475237b30af20162000344a1a9cb152ad1c6d12ac6fa95cafa6483d7c405f4edbde4c2d4cb8d05ca806f26547ea4b8df8e93a3c7ea482fc44c529a0133186efcdf0", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES16, @ANYBLOB="a60c200e02cc5e7c88e2ce3495ac13ca0150d7084c72dbd5c180d08b4b169df735ade586"]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7f}}}, 0xa) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES64], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)