r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x47e2, 0x68)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x80000000, {0x0, r1}, 0xf6f, 0x1, 0x1}, 0x4)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, 0x0, 0xb8)
ftruncate(r0, 0x1000003)
getpgrp(0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp\x00')
pidfd_open(r4, 0x0)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r5, 0x1278, &(0x7f00000011c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(r0, r2)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x7ffffc, 0x61b80e33, 0x80009})
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x2001, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@noextend}, {@access_uid}, {@debug={'debug', 0x3d, 0x80000000}}], [{@smackfshat={'smackfshat', 0x3d, 'syztnl2\x00'}}, {@subj_user={'subj_user', 0x3d, '|\xb1\x0e\xed\xc9\xaf}'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}})