r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, 0xffffffffffffffff)