r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="2f812ad4bf80", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000700)={0x53, 0x8000000000000006, 0xa4, 0x7, @buffer={0x0, 0x30, &(0x7f0000000180)=""/48}, &(0x7f0000000440)="5bce2484f0032e8fbc7fea591fe85c70c1039d740c17b514c039ae8775eee31a16d62fe93e0485227bb3c29f4eda74ca46e1263db00aabc2eb839263085406a26fd4a7d0d43125e85c82227c56f132170c3fb01ae3c2c916f6a645a213b2b1f14dd832ee0a78c26db0751bffb76ed53fe25e704a0fd9d13a4da09dc7afbd7e254b808e98c622a7e223e51d4ee8b7ba6ca52dada59ca469833a92cae1da6a09f141ecb829", 0x0, 0x0, 0x10, 0x1, &(0x7f0000000280)}) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef)