r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x43, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="563527fbb965f6c3a116cada0c2522a26e2f865877dfa2ade8c6e1bb4b97057865358633043f8f94f054c76248132b1bd78c2af433090d867336bb954fd0c04151a1f8", &(0x7f0000000200)=""/127, 0x3, 0x2, 0x0, &(0x7f0000000140)}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0)