r0 = syz_open_dev$sg(&(0x7f00000057c0), 0x0, 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000005800))