r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78)
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(0x0, 0x54)
syz_emit_vhci(0x0, 0x17)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd)
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_req={{0xe, 0x80, 0x3}, {0x9, 0x6}}, @l2cap_info_rsp={{0xb, 0x6, 0x48}, {0x101, 0x51b8, "38e7fb6660ad9cac6f1b44c7b13f1d9d2bcf896763edcd4739e429fd2a4242a24a1955e5263db651ec3213ffcb8fb2aaf0b769bcfd7809e33a302011f731368ae04d9f51"}}, @l2cap_conf_rsp={{0x5, 0x1, 0x28}, {0x0, 0x5, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x80}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8, 0x7, 0x7, 0x6, 0x4}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_ews={0x7, 0x2, 0xd39}, @l2cap_conf_flushto={0x2, 0x2, 0xfc00}]}}]}}, 0x88)
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc8, 0x4}, {0xc8, 0x8000}, {0xe09d3307dc06c866, 0x20}, {0xc8, 0x7}, {0xc9, 0x8}]}}}, 0x18)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)