r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001)
write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xb92)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000))