r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x1000003)
getpgrp(0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=<r3=>0x0)
syz_open_procfs(r3, &(0x7f0000000040)='net/tcp\x00')
pidfd_open(r3, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r4, 0x1278, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000280)={'sit0\x00', 0x0})
dup2(r0, r1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x7ffffc, 0x61b80e33, 0x80009})
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x2001, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@noextend}, {@access_uid}, {@debug={'debug', 0x3d, 0x80000000}}], [{@smackfshat={'smackfshat', 0x3d, 'syztnl2\x00'}}, {@subj_user={'subj_user', 0x3d, '|\xb1\x0e\xed\xc9\xaf}'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}})