This SyzScope stuff could be good in theory and it could be something useful with more work. But in real life terms do you know anyone who looked at "use-after-free Read in hci_chan_del" and thought, "Oh that sounds totally harmless." regards, dan carpenter