r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000))