r0 = open_tree(0xffffffffffffffff, 0x0, 0x80980) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYBLOB="ff0f00000000000002000000000000000600697ff03ef834d7daf1fbf3e016e30000000000000500000000000000a39f000000000000f804000000000000040000000900000000000000ff7f0000ffffff7f0000000006000000000000000600000000000000fffffffffeffffff5000000000000000000000000000000000000000000000000000000000000000000000000000a50500"/184]) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x80, 0x2, 0x0, 0x0, 0x5, "77004a6efdff00", 0x2, 0x8}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) lseek(0xffffffffffffffff, 0x7fffffff, 0x3) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x7d1, 0xffffffffffffffff, &(0x7f0000000540)="645ad091f322d9290e4a14bf560f17fe371727a13300037775f95a28b48a91225992b307bc724a77c3f1b8cafad13a0e96b458e725e0eab5cf64c5a58118a49fdb4f669299af700f527e736efe9b30e613784a43b36186aeecc5b34412b2c33e770b2e7927708ad7cb4528e2254c7b7a914ebc4336e9bc36b70ce6aca4e1e3ddc340f46232983c5808a1a8361b", 0x8d, 0x7, 0x0, 0x3}, &(0x7f0000000480)) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000002a40)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4090) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x4000, &(0x7f0000000540)=ANY=[]) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0)