r0 = open_tree(0xffffffffffffffff, 0x0, 0x80980)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
r2 = socket$inet(0x2, 0xa, 0x0)
r3 = syz_io_uring_setup(0x4cc1, &(0x7f0000000080)={0x0, 0xed63, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000002a40))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000700)={0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x1)
syz_open_dev$vcsa(&(0x7f0000004700), 0x0, 0x400)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4090)
mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x4000, &(0x7f0000000540)=ANY=[])
pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x28, r4, 0x10, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x30}}}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="cdddb8d48e54235af4d8caa77f08310100005502005e36473eccb13ef6d7605cfcdd09cb2a6f0ffd69e37e2269f7c0d5cc05912b919b58d4881751721d9bfafa2e853e89928bf4a3b78443e4856aad71e18250a2c7e622649c1121562ae7aec7197f1a14c11b67", @ANYRES16=r4, @ANYBLOB="000328bd7000fcdbdf257c0000000c009900070000000f0000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x20028000}, 0x20040001)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, <r6=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYBLOB="c0ffffffffffffff090000000000000009000000000000000000361500000000000000000000000500000000000000040000007747000004000000e0ffffff0001000000000000050000000000000009000000000000000700000000000f002000000000000000000000000000000000000000000000000000000000000000000000000000000026ce72f95122e1e5718ab9767043cec498378c5f3a110bac716943ed974f09bb5c81356b79cad7187434ed0f03edd2bf35a3425198f760b623001e33a67fc36d60f172be312829f18654b38c76a337563e83668e2891c106e2c23fe48c3795a1c96a"])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r2, r1, 0x0)