Optimizing Input Minimization in Kernel Fuzzing
summary
Introduces SyzMini, a Syzkaller patch that implements influence-guided call removal and type-informed argument simplification to cut minimization executions. Evaluation shows SyzMini reduces minimization cost by 60.7%, raises branch coverage ~12.5%, and finds 1.7–2× more unique bugs; on upstream Linux it finds 13 previously unknown bugs (four already fixed). Implementation and code are available at https://github.com/ecnusse/SyzMini.
AI-written summary · about
chapters (7)
- 0:00Kernel fuzzing introduction
- 5:17Minimization cost in fuzzers
- 7:12Optimization strategies
- 12:20Implementation analysis
- 13:01Linux kernel evaluation
- 15:35Applicability across fuzzers
- 17:44Open source conclusion
related talks
19mSYZOS: Practical KVM fuzzing
21msyzbot ci: continuous patch series fuzzing
43mSyzbot and the Tale of Thousand Kernel Bugs
18mOptimization-Directed Compiler Fuzzing for Continuous Translation Validation
52mStructure aware fuzzing
20mKSG: Augmenting Kernel Fuzzing with System Call Specification Generation
46mBypass Kernel Barriers: Fuzzing Linux Kernel in Userspace With LKL
16mELFuzz: Efficient Input Generation via LLM-driven Synthesis Over Fuzzer Space