r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0))
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, 0x0)