program syz-executor0 not setting count and/or reply_len properly ================================================================== BUG: KASAN: use-after-free in __read_once_size include/linux/compiler.h:243 [inline] at addr ffff8801a63f62c0 BUG: KASAN: use-after-free in list_empty include/linux/list.h:189 [inline] at addr ffff8801a63f62c0 BUG: KASAN: use-after-free in sg_remove_request+0x103/0x120 drivers/scsi/sg.c:2120 at addr ffff8801a63f62c0