r0 = eventfd2(0x0, 0x0) fgetxattr(r0, &(0x7f0000001580)=@known='security.apparmor\x00', 0x0, 0x0)