r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x87) write$binfmt_aout(r0, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x1000000}, "", ['\x00']}, 0x120)