r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0)