Syzbot BoF: Open Discussion
summary
Syzbot reports 13,500+ kernel bugs since 2017 and already ~1,700 findings in 2025; dashboard moves to syzbot.org and coverage reports are now aggregated and stripped of bulky images. CI now auto-triages patch series, selects base commit, runs directed fuzzing against modified code, verifies regressions and aims to finish before a maintainer picks up the patch. Infrastructure adds Rust support (yielding 8 Rust findings in binder/ashmem), expanded KVM fuzzing with a small C runtime for guests, and pilots for on‑demand premerge fuzzing and AI-assisted reviews/patch gen.
AI-written summary · about
chapters (6)
- 0:00Introduction and overview
- 2:09New features in 2025
- 14:26Coverage reports and Rust fuzzing
- 16:32KVM and KasTest projects
- 27:23AI-based patch reviews and generation
- 40:25Q&A and future plans
related talks
37mSyzbot: 7 years of continuous kernel fuzzing
53mHow to make syzbot reports easier to debug?
39mMaking Fuzzing Part of Your Software Development Lifecycle
52mStructure aware fuzzing
19mAgents reported thousands of bugs, how many were real?
01h 00mClusterFuzz: Fuzzing at Google Scale
20mKSG: Augmenting Kernel Fuzzing with System Call Specification Generation
36mFuzzing the CNCF Landscape