syzkaller

syzkaller is an unsupervised, coverage-guided kernel fuzzer. It was initially developed for the Linux kernel and now also supports FreeBSD, Fuchsia, gVisor, NetBSD, OpenBSD and Windows.

System call descriptions written in a dedicated language are used to generate programs that exercise the kernel inside virtual machines or on physical devices. Kernel coverage guides the generation, and crashes are detected, reproduced and minimised automatically. A manager process controls the test machines and exposes a web interface with statistics. The syzbot system runs syzkaller continuously and reports the bugs it finds to kernel developers.

syzkaller is developed at Google and is free and open source under the Apache 2.0 licence.