r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc}]}, 0x70}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)={[{0x2d, 'io'}, {0x0, 'freezer'}, {0x2d, 'hugetlb'}]}, 0x16)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x101e40, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r2, 0x0, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r3, 0x5608)