syzkaller

module
v0.0.0-...-a4ed0f4 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jul 15, 2026 License: Apache-2.0

README

syzkaller - kernel fuzzer

CI Status OSS-Fuzz Go Report Card Coverage Status GoDoc License

syzkaller ([siːzˈkɔːlə]) is an unsupervised coverage-guided kernel fuzzer.
Supported OSes: FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows.

Mailing list: syzkaller@googlegroups.com (join on web or by email).

Found bugs: Darwin/XNU, FreeBSD, Linux, NetBSD, OpenBSD, Windows.

Documentation

Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it's being extended to support other OS kernels as well. Most of the documentation at this moment is related to the Linux kernel. For other OS kernels check: Darwin/XNU, FreeBSD, Fuchsia, NetBSD, OpenBSD, Starnix, Windows, gVisor, Akaros.

Disclaimer

This is not an official Google product.

Directories

Path Synopsis
dashboard
api
Package api provides data structures and helper methods to work with the dashboard JSON API.
 Package api provides data structures and helper methods to work with the dashboard JSON API.
app command
app/aidb
Package aidb provides database storage and operations for AI agent data.
 Package aidb provides database storage and operations for AI agent data.
dashapi
Package dashapi defines data structures used in dashboard communication and provides client interface.
 Package dashapi defines data structures used in dashboard communication and provides client interface.
Package docs exports some of the docs for LLM agents in pkg/aflow.
 Package docs exports some of the docs for LLM agents in pkg/aflow.
Package executor embeds C/C++ executor sources and prebuilt binaries.
 Package executor embeds C/C++ executor sources and prebuilt binaries.
pkg
aflow
Package aflow provides an execution engine and domain-specific language for constructing AI workflows to debug, triage, and patch crashes.
 Package aflow provides an execution engine and domain-specific language for constructing AI workflows to debug, triage, and patch crashes.
aflow/action/actionsyzlang
Package actionsyzlang provides actions for generating and formatting syzlang programs and C reproducers.
 Package actionsyzlang provides actions for generating and formatting syzlang programs and C reproducers.
aflow/action/crash
Package crash provides actions for reproducing kernel crashes and executing test cases.
 Package crash provides actions for reproducing kernel crashes and executing test cases.
aflow/action/kernel
Package kernel provides actions for checking out and building target kernel trees.
 Package kernel provides actions for checking out and building target kernel trees.
aflow/ai
Package ai contains common workflow definitions.
 Package ai contains common workflow definitions.
aflow/backend
Package backend defines abstractions and interfaces for AI model backends.
 Package backend defines abstractions and interfaces for AI model backends.
aflow/backend/gemini
Package gemini implements an AI backend interfacing with the Gemini API.
 Package gemini implements an AI backend interfacing with the Gemini API.
aflow/flow
Package flow registers and exports predefined workflows for crash analysis, patch triage, and reproduction.
 Package flow registers and exports predefined workflows for crash analysis, patch triage, and reproduction.
aflow/flow/assessment
Package assessment provides workflows for evaluating security implications, moderation, and KCSAN bug reports.
 Package assessment provides workflows for evaluating security implications, moderation, and KCSAN bug reports.
aflow/flow/common
Package common provides helpers used across multiple workflows.
 Package common provides helpers used across multiple workflows.
aflow/flow/fuzzing
Package fuzzing provides workflows for triaging fuzzing-related patches and bug reports.
 Package fuzzing provides workflows for triaging fuzzing-related patches and bug reports.
aflow/flow/patching
Package patching provides workflows for automated kernel patch generation and verification.
 Package patching provides workflows for automated kernel patch generation and verification.
aflow/flow/repro
Package repro provides workflows for reproducing kernel crashes from bug descriptions.
 Package repro provides workflows for reproducing kernel crashes from bug descriptions.
aflow/flow/reproc
Package reproc provides workflows to generate standalone C reproducers.
 Package reproc provides workflows to generate standalone C reproducers.
aflow/tool/codeeditor
Package codeeditor provides tools for viewing and editing code files.
 Package codeeditor provides tools for viewing and editing code files.
aflow/tool/codeexpert
Package codeexpert provides LLM-driven tools for analyzing codebase context.
 Package codeexpert provides LLM-driven tools for analyzing codebase context.
aflow/tool/codesearcher
Package codesearcher provides tools for indexing and searching source code.
 Package codesearcher provides tools for indexing and searching source code.
aflow/tool/gitlog
Package gitlog provides tools for inspecting git commit history and blamelists.
 Package gitlog provides tools for inspecting git commit history and blamelists.
aflow/tool/grepper
Package grepper provides tools for regex searching across repository files.
 Package grepper provides tools for regex searching across repository files.
aflow/tool/patchdiff
Package patchdiff provides tools for computing diffs and applying patches.
 Package patchdiff provides tools for computing diffs and applying patches.
aflow/tool/syzlang
Package syzlang provides tools for analyzing syzlang coverage, descriptions, and reproduction.
 Package syzlang provides tools for analyzing syzlang coverage, descriptions, and reproduction.
aflow/tool/toolkit
Package toolkit provides tools for retrieving specialized C helper macros and snippets.
 Package toolkit provides tools for retrieving specialized C helper macros and snippets.
aflow/trajectory
Package trajectory provides data structures for tracking and recording execution steps and spans.
 Package trajectory provides data structures for tracking and recording execution steps and spans.
aflow/trajectory/html
Package html renders execution trajectories as interactive HTML pages.
 Package html renders execution trajectories as interactive HTML pages.
asset
Package asset manages storage and upload of build assets and artifacts.
 Package asset manages storage and upload of build assets and artifacts.
ast
Package ast parses and formats sys files.
 Package ast parses and formats sys files.
auth
Package auth contains authentication related code supporting secret passwords and oauth2 tokens on GCE.
 Package auth contains authentication related code supporting secret passwords and oauth2 tokens on GCE.
bisect
Package bisect automates bisection of kernel commit histories to identify bug-introducing commits.
 Package bisect automates bisection of kernel commit histories to identify bug-introducing commits.
bisect/minimize
Package minimize provides algorithms for minimizing data structures during bisection.
 Package minimize provides algorithms for minimizing data structures during bisection.
build
Package build contains helper functions for building kernels/images.
 Package build contains helper functions for building kernels/images.
clangtool
Package clangtool provides utilities for building and invoking clang-based code analysis tools.
 Package clangtool provides utilities for building and invoking clang-based code analysis tools.
clangtool/tooltest
Package tooltest provides testing helpers for validating clang tool functionality.
 Package tooltest provides testing helpers for validating clang tool functionality.
codesearch
Package codesearch provides C-level symbol indexing and fast regex-based code search capabilities.
 Package codesearch provides C-level symbol indexing and fast regex-based code search capabilities.
compiler
Package compiler generates sys descriptions of syscalls, types and resources from textual descriptions.
 Package compiler generates sys descriptions of syscalls, types and resources from textual descriptions.
config
Package config handles reading, parsing, and merging JSON configuration files.
 Package config handles reading, parsing, and merging JSON configuration files.
corpus
Package corpus manages syzkaller test program corpora, signal tracking, and corpus minimization.
 Package corpus manages syzkaller test program corpora, signal tracking, and corpus minimization.
cover
Package cover provides types for working with coverage information (arrays of covered PCs).
 Package cover provides types for working with coverage information (arrays of covered PCs).
cover/backend
Package backend provides coverage symbolization backends for DWARF, ELF, Mach-O, and gVisor executables.
 Package backend provides coverage symbolization backends for DWARF, ELF, Mach-O, and gVisor executables.
coveragedb
Package coveragedb provides database storage and querying for historical coverage records.
 Package coveragedb provides database storage and querying for historical coverage records.
coveragedb/testutil
Package testutil provides test helpers and database setup utilities for coveragedb.
 Package testutil provides test helpers and database setup utilities for coveragedb.
covermerger
Package covermerger merges line-level coverage metrics across kernel revisions and source files.
 Package covermerger merges line-level coverage metrics across kernel revisions and source files.
covermerger/mocks
csource
Package csource generates [almost] equivalent C programs from syzkaller programs.
 Package csource generates [almost] equivalent C programs from syzkaller programs.
db
Package db implements a simple key-value database.
 Package db implements a simple key-value database.
debugtracer
Package debugtracer provides interfaces and implementations for logging debug traces and artifacts.
 Package debugtracer provides interfaces and implementations for logging debug traces and artifacts.
declextract
Package declextract extracts C struct definitions, constants, and netlink interface metadata from kernel sources.
 Package declextract extracts C struct definitions, constants, and netlink interface metadata from kernel sources.
dungeon
Package dungeon calculates gamified developer stats, XP, and badges from bug triage activity.
 Package dungeon calculates gamified developer stats, XP, and badges from bug triage activity.
email
Package email parses and structures incoming bug emails, reply threads, and patches.
 Package email parses and structures incoming bug emails, reply threads, and patches.
email/lore
Package lore provides polling and thread resolution utilities for mailing list archives.
 Package lore provides polling and thread resolution utilities for mailing list archives.
email/sender
Package sender provides email dispatch implementations supporting SMTP and syz-dashboard APIs.
 Package sender provides email dispatch implementations supporting SMTP and syz-dashboard APIs.
execbackend
Package execbackend manages process execution, RPC, and VM pools for running test programs locally.
 Package execbackend manages process execution, RPC, and VM pools for running test programs locally.
flatrpc
Package flatrpc provides high-performance RPC server and client transport connection utilities.
 Package flatrpc provides high-performance RPC server and client transport connection utilities.
fuzzer
Package fuzzer orchestrates syzkaller fuzzing logic, corpus distribution, and signal updates.
 Package fuzzer orchestrates syzkaller fuzzing logic, corpus distribution, and signal updates.
fuzzer/queue
Package queue manages prioritized execution queues and request distribution for fuzzing targets.
 Package queue manages prioritized execution queues and request distribution for fuzzing targets.
gce
Package gce provides wrappers around Google Compute Engine (GCE) APIs.
 Package gce provides wrappers around Google Compute Engine (GCE) APIs.
gcpsecret
Package gcpsecret provides utilities for retrieving secrets from GCP Secret Manager.
 Package gcpsecret provides utilities for retrieving secrets from GCP Secret Manager.
gcs
Package gcs provides wrappers around Google Cloud Storage (GCS) APIs.
 Package gcs provides wrappers around Google Cloud Storage (GCS) APIs.
gcs/mocks
gerrit
Package gerrit provides gerrit client for: https://linux.googlesource.com/Documentation/#gerrit-code-reviews-for-the-linux-kernel For documentation on the API see: https://gerrit-review.googlesource.com/Documentation/rest-api-changes.html
 Package gerrit provides gerrit client for: https://linux.googlesource.com/Documentation/#gerrit-code-reviews-for-the-linux-kernel For documentation on the API see: https://gerrit-review.googlesource.com/Documentation/rest-api-changes.html
hash
Package hash provides hashing utilities for calculating signatures of objects and data.
 Package hash provides hashing utilities for calculating signatures of objects and data.
html
Package html provides HTML formatting and template execution helpers for the dashboard UI.
 Package html provides HTML formatting and template execution helpers for the dashboard UI.
html/pages
Package pages provides embedded HTML, CSS, and JavaScript assets and template helpers for dashboard pages.
 Package pages provides embedded HTML, CSS, and JavaScript assets and template helpers for dashboard pages.
html/urlutil
Package urlutil provides utilities for manipulating URL query parameters.
 Package urlutil provides utilities for manipulating URL query parameters.
ifaceprobe
Package ifaceprobe implements dynamic component of automatic kernel interface extraction.
 Package ifaceprobe implements dynamic component of automatic kernel interface extraction.
ifuzz
Package ifuzz generates and mutates random instruction streams for target CPU architectures.
 Package ifuzz generates and mutates random instruction streams for target CPU architectures.
ifuzz/arm64
Package arm64 allows to generate and mutate arm64 machine code.
 Package arm64 allows to generate and mutate arm64 machine code.
ifuzz/arm64/gen command
gen generates instruction tables (ifuzz_types/insns.go) from ARM64 JSON.
 gen generates instruction tables (ifuzz_types/insns.go) from ARM64 JSON.
ifuzz/arm64/generated
Package generated contains auto-generated instruction definitions for ifuzz.
 Package generated contains auto-generated instruction definitions for ifuzz.
ifuzz/iset
Package iset ("instruction set") provides base and helper types for ifuzz arch implementations.
 Package iset ("instruction set") provides base and helper types for ifuzz arch implementations.
ifuzz/powerpc
Package powerpc allows generating and mutating PPC64 PowerISA 3.0B machine code.
 Package powerpc allows generating and mutating PPC64 PowerISA 3.0B machine code.
ifuzz/powerpc/generated
Package generated contains auto-generated instruction definitions for ifuzz.
 Package generated contains auto-generated instruction definitions for ifuzz.
ifuzz/riscv64
Package riscv64 allows to generate and mutate riscv64 machine code.
 Package riscv64 allows to generate and mutate riscv64 machine code.
ifuzz/riscv64/gen command
gen generates riscv64 instruction tables from riscv-unified-db YAML.
 gen generates riscv64 instruction tables from riscv-unified-db YAML.
ifuzz/riscv64/generated
Package generated contains auto-generated instruction definitions for ifuzz.
 Package generated contains auto-generated instruction definitions for ifuzz.
ifuzz/x86
Package x86 allows to generate and mutate x86 machine code.
 Package x86 allows to generate and mutate x86 machine code.
ifuzz/x86/gen command
gen generates instruction tables (ifuzz_types/insns.go) from Intel XED tables.
 gen generates instruction tables (ifuzz_types/insns.go) from Intel XED tables.
ifuzz/x86/generated
Package generated contains auto-generated instruction definitions for ifuzz.
 Package generated contains auto-generated instruction definitions for ifuzz.
image
Package image provides image compression, decompression, and disk image utility functions.
 Package image provides image compression, decompression, and disk image utility functions.
instance
Package instance provides helper functions for creation of temporal instances used for testing of images, patches and bisection.
 Package instance provides helper functions for creation of temporal instances used for testing of images, patches and bisection.
kcidb
Package kcidb provides a client for reporting build and test results to KCIDB.
 Package kcidb provides a client for reporting build and test results to KCIDB.
kconfig
Package kconfig implements parsing of the Linux kernel Kconfig and .config files and provides some algorithms to work with these files.
 Package kconfig implements parsing of the Linux kernel Kconfig and .config files and provides some algorithms to work with these files.
kcov
Package kcov provides Go native code for collecting kernel coverage (KCOV) information.
 Package kcov provides Go native code for collecting kernel coverage (KCOV) information.
kd
Package kd provides a minimal KD protocol decoder.
 Package kd provides a minimal KD protocol decoder.
kfuzztest
Package kfuzztest exposes functions discovering KFuzzTest test cases from a vmlinux binary and parsing them into syzkaller-compatible formats.
 Package kfuzztest exposes functions discovering KFuzzTest test cases from a vmlinux binary and parsing them into syzkaller-compatible formats.
kfuzztest-executor
Package kfuzztestexecutor implements local execution (i.e., without the C++ executor program) for KFuzzTest targets.
 Package kfuzztestexecutor implements local execution (i.e., without the C++ executor program) for KFuzzTest targets.
kfuzztest-manager
Package kfuzztestmanager manages KFuzzTest execution and fuzzing loops.
 Package kfuzztestmanager manages KFuzzTest execution and fuzzing loops.
log
Package log provides functionality similar to standard log package with some extensions:
 Package log provides functionality similar to standard log package with some extensions:
lore-relay
Package lorerelay relays commands between lore mailing lists and syzkaller dashboard.
 Package lorerelay relays commands between lore mailing lists and syzkaller dashboard.
manager
Package manager implements the main fuzzing manager logic, crash processing, and report generation.
 Package manager implements the main fuzzing manager logic, crash processing, and report generation.
manager/diff
Package diff implements differential fuzzing between multiple kernel configurations or builds.
 Package diff implements differential fuzzing between multiple kernel configurations or builds.
mgrconfig
Package mgrconfig parses and validates configuration files for syz-manager.
 Package mgrconfig parses and validates configuration files for syz-manager.
osutil
Package osutil provides operating system utility functions for process execution, file system operations, and time tracking.
 Package osutil provides operating system utility functions for process execution, file system operations, and time tracking.
report
Package report contains functions that process kernel output, detect/extract crash messages, symbolize them, etc.
 Package report contains functions that process kernel output, detect/extract crash messages, symbolize them, etc.
report/crash
Package crash defines crash categories, types, and parsing rules for kernel crash titles.
 Package crash defines crash categories, types, and parsing rules for kernel crash titles.
repro
Package repro extracts, minimizes, and simplifies crash reproducers from execution logs.
 Package repro extracts, minimizes, and simplifies crash reproducers from execution logs.
rpcserver
Package rpcserver provides the RPC server for communication between manager and executor instances.
 Package rpcserver provides the RPC server for communication between manager and executor instances.
rpcserver/mocks
rpctype
Package rpctype contains types of message passed via net/rpc connections between syz-manager and syz-hub.
 Package rpctype contains types of message passed via net/rpc connections between syz-manager and syz-hub.
runtest
Package runtest is a driver for end-to-end testing of syzkaller programs.
 Package runtest is a driver for end-to-end testing of syzkaller programs.
serializer
Package serializer provides formatting and serialization of Go data structures.
 Package serializer provides formatting and serialization of Go data structures.
signal
Package signal provides types for working with feedback signal.
 Package signal provides types for working with feedback signal.
spanner
Package spanner provides database access, schema migration, and emulator utilities.
 Package spanner provides database access, schema migration, and emulator utilities.
stat
Package stat provides statistics collection, metric tracking, and aggregation utilities for syzkaller instrumentation.
 Package stat provides statistics collection, metric tracking, and aggregation utilities for syzkaller instrumentation.
stat/sample
Package sample provides various statistical operations and algorithms.
 Package sample provides various statistical operations and algorithms.
stat/syzbotstats
Package syzbotstats defines types and data structures for tracking bug statistics and lifecycle summaries in syzbot.
 Package syzbotstats defines types and data structures for tracking bug statistics and lifecycle summaries in syzbot.
subsystem
Package subsystem provides abstractions and services for defining, matching, and extracting kernel subsystems and maintainers.
 Package subsystem provides abstractions and services for defining, matching, and extracting kernel subsystems and maintainers.
subsystem/linux
Package linux provides Linux kernel-specific subsystem extraction, maintainer mapping, and subsystem relationships.
 Package linux provides Linux kernel-specific subsystem extraction, maintainer mapping, and subsystem relationships.
subsystem/lists
symbolizer
Package symbolizer provides binary symbolization utilities for mapping program counter addresses to source frames.
 Package symbolizer provides binary symbolization utilities for mapping program counter addresses to source frames.
testutil
Package testutil provides helper functions, seed generation, and random data utilities for unit tests.
 Package testutil provides helper functions, seed generation, and random data utilities for unit tests.
tool
Package tool contains various helper utilitites useful for implementation of command line tools.
 Package tool contains various helper utilitites useful for implementation of command line tools.
updater
Package updater manages syzkaller source code updates, binary compilation, and executable restarts.
 Package updater manages syzkaller source code updates, binary compilation, and executable restarts.
validator
Package validator provides input validation, pattern matching, and access control validation functions.
 Package validator provides input validation, pattern matching, and access control validation functions.
vcs
Package vcs provides helper functions for working with various repositories (e.g.
 Package vcs provides helper functions for working with various repositories (e.g.
vminfo
Package vminfo extracts information about the target VM.
 Package vminfo extracts information about the target VM.
vminfo/features
Package features provides definitions for various fuzzing features.
 Package features provides definitions for various fuzzing features.
Package prog implements syzkaller test program representation, parsing, mutation, generation, and serialization.
 Package prog implements syzkaller test program representation, parsing, mutation, generation, and serialization.
test
Package test provides fuzzing targets and helpers for testing the prog package.
 Package test provides fuzzing targets and helpers for testing the prog package.
sys
Package sys registers target descriptions and embeds system call descriptions for all supported operating systems.
 Package sys registers target descriptions and embeds system call descriptions for all supported operating systems.
darwin
Package darwin contains target initialization and syscall neutralization logic.
 Package darwin contains target initialization and syscall neutralization logic.
freebsd
Package freebsd contains target initialization and syscall neutralization logic.
 Package freebsd contains target initialization and syscall neutralization logic.
fuchsia
Package fuchsia contains target initialization logic.
 Package fuchsia contains target initialization logic.
fuchsia/fidlgen command
fuchsia/layout
Package layout provides FIDL library definitions and path mappings for Fuchsia targets.
 Package layout provides FIDL library definitions and path mappings for Fuchsia targets.
generated
Package generated manages loading and deserializing compiled syscall descriptions.
 Package generated manages loading and deserializing compiled syscall descriptions.
linux
Package linux contains target initialization, argument generation, and syscall neutralization logic.
 Package linux contains target initialization, argument generation, and syscall neutralization logic.
netbsd
Package netbsd contains target initialization and syscall neutralization logic.
 Package netbsd contains target initialization and syscall neutralization logic.
openbsd
Package openbsd contains target initialization, argument generation, and syscall neutralization logic.
 Package openbsd contains target initialization, argument generation, and syscall neutralization logic.
syz-extract command
syz-sysgen command
targets
Package targets defines architecture and OS target descriptions and helpers.
 Package targets defines architecture and OS target descriptions and helpers.
test
Package test provides synthetic target initialization logic for tests.
 Package test provides synthetic target initialization logic for tests.
trusty
Package trusty contains target initialization logic.
 Package trusty contains target initialization logic.
windows
Package windows contains target initialization logic.
 Package windows contains target initialization logic.
syz-agent
agent command
lore-relay command
syz-ci is a continuous fuzzing system for syzkaller.
 syz-ci is a continuous fuzzing system for syzkaller.
syz-cluster
controller command
dashboard command
email-reporter command
pkg/api
Package api defines the core data types, client interfaces, and request/response structures used for communication between components and workflow steps.
 Package api defines the core data types, client interfaces, and request/response structures used for communication between components and workflow steps.
pkg/app
Package app provides application-level configuration loading, environment initialization, and logging helpers.
 Package app provides application-level configuration loading, environment initialization, and logging helpers.
pkg/blob
Package blob provides storage abstractions and cloud storage implementations for storing and retrieving testing artifacts such as logs and test data.
 Package blob provides storage abstractions and cloud storage implementations for storing and retrieving testing artifacts such as logs and test data.
pkg/controller
Package controller provides the server part of the *api.Client interface.
 Package controller provides the server part of the *api.Client interface.
pkg/db
Package db manages database persistence, entity models, and repository implementations for patch testing.
 Package db manages database persistence, entity models, and repository implementations for patch testing.
pkg/emailclient
Package emailclient provides abstractions and helper functions for configuring and initializing email senders.
 Package emailclient provides abstractions and helper functions for configuring and initializing email senders.
pkg/fuzzconfig
Package fuzzconfig generates syz-manager configuration files customized for base and patched kernel fuzzing targets.
 Package fuzzconfig generates syz-manager configuration files customized for base and patched kernel fuzzing targets.
pkg/report
Package report handles text template rendering for email reports and testing replies.
 Package report handles text template rendering for email reports and testing replies.
pkg/reporter
Package reporter implements API handlers and background report generation processes for managing and dispatching session reports and replies.
 Package reporter implements API handlers and background report generation processes for managing and dispatching session reports and replies.
pkg/retest
Package retest provides execution logic for re-testing reproducers on base and patched kernel environments to detect bugs and regressions.
 Package retest provides execution logic for re-testing reproducers on base and patched kernel environments to detect bugs and regressions.
pkg/service
Package service implements high-level business logic services, including patch series processing, build management, testing sessions, job execution, and reporting.
 Package service implements high-level business logic services, including patch series processing, build management, testing sessions, job execution, and reporting.
pkg/stats
Package stats provides background workers for aggregating and maintaining statistics for patch series.
 Package stats provides background workers for aggregating and maintaining statistics for patch series.
pkg/triage
Package triage analyzes incoming patch series, repositories, and kernel trees to evaluate patch relevance and generate test target configurations.
 Package triage analyzes incoming patch series, repositories, and kernel trees to evaluate patch relevance and generate test target configurations.
pkg/workflow
Package workflow manages workflow orchestration, tracking session execution, status, and logs for patch series testing.
 Package workflow manages workflow orchestration, tracking session execution, status, and logs for patch series testing.
reporter-server command
series-tracker command
tools/db-mgmt command
tools/send-test-email command
workflow/boot command
workflow/build command
workflow/fuzz command
workflow/retest command
workflow/triage command
state
Package state manages persistent state for syz-hub including corpus, reproducers, and connected managers.
 Package state manages persistent state for syz-hub including corpus, reproducers, and connected managers.
package main starts the syz-verifier tool.
 package main starts the syz-verifier tool.
tools
arm64 command
Generate KVM ARM64 register IDs for dev_kvm.txt Usage:
 Generate KVM ARM64 register IDs for dev_kvm.txt Usage:
clang
clang/codesearch
Package clangtoolimpl provides codesearch capabilities.
 Package clangtoolimpl provides codesearch capabilities.
clang/declextract
Package clangtoolimpl provides declaration extraction capabilities.
 Package clangtoolimpl provides declaration extraction capabilities.
kfuzztest-gen command
Small tool for systematically outputting syzlang descriptions of KFuzzTest of a vmlinux binary.
 Small tool for systematically outputting syzlang descriptions of KFuzzTest of a vmlinux binary.
syz-aflow command
syz-aflow tool can be used to invoke any agentic workflow registered with pkg/aflow.
 syz-aflow tool can be used to invoke any agentic workflow registered with pkg/aflow.
syz-base-commit command
syz-benchcmp command
syz-benchcmp visualizes syz-manager benchmarking results.
 syz-benchcmp visualizes syz-manager benchmarking results.
syz-bisect command
syz-bisect runs bisection to find cause/fix commit for a crash.
 syz-bisect runs bisection to find cause/fix commit for a crash.
syz-build command
syz-build is a wrapper around pkg/build for testing purposes.
 syz-build is a wrapper around pkg/build for testing purposes.
syz-check command
syz-check does best-effort static correctness checking of the syscall descriptions in sys/os/*.txt.
 syz-check does best-effort static correctness checking of the syscall descriptions in sys/os/*.txt.
syz-codesearch command
syz-cover command
syz-cover generates coverage HTML report from raw coverage files.
 syz-cover generates coverage HTML report from raw coverage files.
syz-covermerger command
syz-crush command
syz-crush replays crash log on multiple VMs.
 syz-crush replays crash log on multiple VMs.
syz-db command
syz-db-export command
syz-declextract command
syz-diff command
syz-execprog command
execprog executes a single program or a set of programs and optionally prints information about execution.
 execprog executes a single program or a set of programs and optionally prints information about execution.
syz-expand command
syz-fillreports command
syz-fix-analyzer command
syz-fix-analyzer analyzes fixed bugs on the dashboard for automatic fixability and prints statistics.
 syz-fix-analyzer analyzes fixed bugs on the dashboard for automatic fixability and prints statistics.
syz-fmt command
syz-fmt re-formats sys files into standard form.
 syz-fmt re-formats sys files into standard form.
syz-hubtool command
syz-hubtool uploads local reproducers to syz-hub.
 syz-hubtool uploads local reproducers to syz-hub.
syz-imagegen command
syz-imagegen generates sys/linux/test/syz_mount_image_* test files.
 syz-imagegen generates sys/linux/test/syz_mount_image_* test files.
syz-kcidb command
syz-kconf command
syz-kconf generates Linux kernel configs in dashboard/config/linux.
 syz-kconf generates Linux kernel configs in dashboard/config/linux.
syz-linter command
This is our linter with custom checks for the project.
 This is our linter with custom checks for the project.
syz-lore command
syz-make command
syz-make provides information required to build native code for the Makefile.
 syz-make provides information required to build native code for the Makefile.
syz-minconfig command
syz-minconfig is a tool for manual checking of config minimization functionality in pkg/kconfig/minimize.go.
 syz-minconfig is a tool for manual checking of config minimization functionality in pkg/kconfig/minimize.go.
syz-mutate command
mutates mutates a given program and prints result.
 mutates mutates a given program and prints result.
syz-prog2c command
syz-query-subsystems command
syz-reporter command
syz-reporter creates table information from crashes.
 syz-reporter creates table information from crashes.
syz-repro command
syz-showprio command
syz-showprio visualizes the call to call priorities from the prog package.
 syz-showprio visualizes the call to call priorities from the prog package.
syz-symbolize command
syz-testbed command
syz-testbuild command
syz-testbuild tests kernel build/boot on releases as it will be done by pkg/bisect.
 syz-testbuild tests kernel build/boot on releases as it will be done by pkg/bisect.
syz-trace2syz command
syz-trace2syz converts strace traces to syzkaller programs.
 syz-trace2syz converts strace traces to syzkaller programs.
syz-trace2syz/parser
Package parser parses execution traces into intermediate representations for trace conversion.
 Package parser parses execution traces into intermediate representations for trace conversion.
syz-trace2syz/proggen
Package proggen generates syzkaller programs from parsed execution traces.
 Package proggen generates syzkaller programs from parsed execution traces.
syz-tty command
syz-tty is utility for testing of usb console reading code.
 syz-tty is utility for testing of usb console reading code.
syz-upgrade command
upgrade upgrades corpus from an old format to a new format.
 upgrade upgrades corpus from an old format to a new format.
syz-usbgen command
vm
Package vm provides an abstract test machine (VM, physical machine, etc) interface for the rest of the system.
 Package vm provides an abstract test machine (VM, physical machine, etc) interface for the rest of the system.
adb
Package adb implements Android device and instance management.
 Package adb implements Android device and instance management.
bhyve
Package bhyve implements Bhyve virtual machine management for FreeBSD targets.
 Package bhyve implements Bhyve virtual machine management for FreeBSD targets.
cuttlefish
Package cuttlefish allows to use Cuttlefish Android emulators hosted on Google Compute Engine (GCE) virtual machines as VMs.
 Package cuttlefish allows to use Cuttlefish Android emulators hosted on Google Compute Engine (GCE) virtual machines as VMs.
dispatcher
Package dispatcher provides generic VM instance pooling and lifecycle dispatching.
 Package dispatcher provides generic VM instance pooling and lifecycle dispatching.
gce
Package gce allows to use Google Compute Engine (GCE) virtual machines as VMs.
 Package gce allows to use Google Compute Engine (GCE) virtual machines as VMs.
gvisor
Package gvisor provides support for gVisor, user-space kernel, testing.
 Package gvisor provides support for gVisor, user-space kernel, testing.
isolated
Package isolated implements host management for target machines accessed directly.
 Package isolated implements host management for target machines accessed directly.
proxyapp
Package proxyapp implements experimental plugin support.
 Package proxyapp implements experimental plugin support.
proxyapp/mocks
proxyapp/proxyrpc
Package proxyrpc defines RPC interfaces and data structures for external proxy applications.
 Package proxyrpc defines RPC interfaces and data structures for external proxy applications.
qemu
Package qemu implements QEMU virtual machine pool management and interaction.
 Package qemu implements QEMU virtual machine pool management and interaction.
starnix
Package starnix implements container instance management on Fuchsia.
 Package starnix implements container instance management on Fuchsia.
virtualbox
Package virtualbox implements VirtualBox virtual machine pool management.
 Package virtualbox implements VirtualBox virtual machine pool management.
vmimpl
Package vmimpl provides an abstract test machine (VM, physical machine, etc) interface for the rest of the system.
 Package vmimpl provides an abstract test machine (VM, physical machine, etc) interface for the rest of the system.
vmm
Package vmm provides VMs based on OpenBSD vmm virtualization.
 Package vmm provides VMs based on OpenBSD vmm virtualization.
vmware
Package vmware implements VMware virtual machine pool management.
 Package vmware implements VMware virtual machine pool management.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.