r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x8b) write$binfmt_aout(r0, &(0x7f0000002780)=ANY=[], 0x725) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000680)=""/4091, 0xffb}], 0x1)