r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2271, 0xfffffffffffffffc)