r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
r2 = dup2(r1, r0)
write$binfmt_aout(r2, &(0x7f0000000080)={{}, "16d34093c36411e89aa4f98fa099"}, 0x2e)
ioctl$SG_IO(r2, 0x2285, 0x0)