aboutsummaryrefslogtreecommitdiffstats
path: root/pkg
Commit message (Collapse)AuthorAgeFilesLines
* pkg/fuzzer: ProbCover initialization was missing in testactualGrigory Bazilevich5 hours1-2/+3
|
* pkg/corpus: increase the priority of programs that were rarely selectedGrigory Bazilevich5 hours2-1/+31
|
* syz-manager: information about probability-only inputs in dbGrigory Bazilevich5 hours3-4/+13
|
* pkg/corpus: upgrade corpus minimization algorithmGrigory Bazilevich5 hours3-4/+49
|
* pkg/fuzzer,pkg/corpus: detection and preservation of programs with ↵Grigory Bazilevich5 hours4-40/+78
| | | | probability coverage
* pkg/signal: new utility methodsGrigory Bazilevich5 hours1-0/+39
|
* pkg/corpus: update Programs List priority storageGrigory Bazilevich5 hours5-17/+171
| | | | | | | | | | | Static prefix sums have been replaced with a Fenwick tree. In the current syzkaller, program priority was set based on a Signal received by a single system call. This commit allows priority to be changed dynamically, making it possible to maintain priority based on Signals from all system calls. Signed-off-by: Grigory Bazilevich <g.bazilevich@ispras.ru>
* pkg/csource: build tests without warningsGrigory Bazilevich5 hours3-5/+7
| | | | | | Otherwise syz-ci will fail to build the project. Signed-off-by: Denis Efremov <efremov@ispras.ru>
* syz-manager: save kernel commit tag in the crash metainfoGrigory Bazilevich5 hours2-0/+30
| | | | | | | Add hash of actual kernel commit to crash metainfo if available. Signed-off-by: Grigory Bazilevich <g.bazilevich@ispras.ru> Signed-off-by: Sergey Zotov <svzotov@ispras.ru>
* pkg/report: ignore timer-related and mark_buffer_dirty framesGrigory Bazilevich5 hours6-762/+328
| | | | | | | Fix corresponding test, remove incorrect tests Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru> Signed-off-by: Denis Efremov <efremov@ispras.ru>
* syz-ci: add syzkaller test timeout retrieval from configGrigory Bazilevich5 hours1-1/+24
| | | | | | | The timeout for "go test ..." can now be specified in the syz-ci settings in the `SyzkallerBuildParams` dictionary under `test_timeout`. Signed-off-by: Grigory Bazilevich <g.bazilevich@ispras.ru>
* dashboard/app: add kernel-mirror.intra.ispra.ru to cgit hostsDenis Efremov5 hours1-1/+1
| | | | Signed-off-by: Denis Efremov <efremov@ispras.ru>
* pkg/vcs: show proper link to LVC syzkallerDenis Efremov5 hours1-1/+12
| | | | Signed-off-by: Denis Efremov <efremov@ispras.ru>
* pkg/db: skip invalid corpus entries instead of failingGrigory Bazilevich5 hours1-1/+1
| | | | Signed-off-by: Vladimir Telezhnikov <vtelezhnikov@astralinux.ru>
* pkg/vcs/linux: use gcc-10.3.0 for kernels +v5.10Grigory Bazilevich5 hours1-0/+2
| | | | Signed-off-by: Denis Efremov <efremov@ispras.ru>
* pkg/mgrconfig: Make slowdown configurableGrigory Bazilevich5 hours2-0/+10
| | | | Signed-off-by: Denis Efremov <efremov@ispras.ru>
* syz-ci: make rebuild periods configurableGrigory Bazilevich5 hours1-35/+38
| | | | Signed-off-by: Denis Efremov <efremov@ispras.ru>
* pkg/build/linux: add build time loggingGrigory Bazilevich5 hours1-0/+3
| | | | Signed-off-by: Grigory Bazilevich <g.bazilevich@ispras.ru>
* pkg/build/linux: add timeout retrieval from configGrigory Bazilevich5 hours1-1/+23
| | | | | | | The build timeout can now be specified in the manager settings in the ‘build’ dictionary under ‘timeout’. Signed-off-by: Grigory Bazilevich <g.bazilevich@ispras.ru>
* syz-manager: always save crashes and repros locallyGrigory Bazilevich5 hours2-0/+64
| | | | | | | | | | | Save crashes and repros with corresponding kernel and syzkaller configs locally in syz-manager even when they are published to syz-dashboard, to be able to share the crashes with Linux Verification Center (linuxtesting.org). Signed-off-by: Grigory Bazilevich <g.bazilevich@ispras.ru> Signed-off-by: Sergey Zotov <svzotov@ispras.ru> Co-authored-by: Sergey Zotov <svzotov@ispras.ru>
* syz-agent: systematically show verbose error messagesDmitry Vyukov27 hours5-5/+24
| | | | | | | | | | | | | Currently we added custom code to kernel build action, and few others to expose verbose errors from executed binaries (notably make). But lots of other binary executions missing this logic, e.g. for git failure we currently see unuseful: failed to run ["git" "fetch" "--force" "--tags" exit status 128 Instead of adding more and more custom code to do the same, remove the custom code and always add verbose output in syz-agent and tools/syz-aflow.
* pkg/gce, vm/gce: create InstanceConfig struct used by CreateInstance methodPimyn Girgis27 hours1-14/+23
|
* pkg/aflow/tool/grepper: disable tests on non-linuxDmitry Vyukov32 hours1-0/+3
| | | | | | | | | The tests fail on OpenBSD with: expected: "bad expression: fatal: command line, 'bad expression (': Unmatched ( or \\(" actual : "bad expression: fatal: command line, 'bad expression (': parentheses not balanced" Disable the tests on non-linux for now.
* pkg/aflow: return syzkaller program as outputAlexander Potapenko46 hours1-3/+1
| | | | | Requesting to return the program as one of the agent's outputs enforces its structure and prevents LLM from using garbage formatting.
* pkg/aflow: ensure we don't register MCP tools with duplicate namesDmitry Vyukov46 hours5-4/+40
| | | | | | | If we have duplicate names, then only one of the duplicates will be used at random. Add a check that we don't have duplicate names. Currently it's only "crash-reproducer" (both action and a tool). Also ignore "set-results" tool, and all tools created in tests.
* pkg/aflow: handle more genai errorsDmitry Vyukov47 hours2-6/+41
| | | | Fixes #6897
* pkg/aflow: add Flow.Consts instead of ProvideDmitry Vyukov3 days12-64/+133
| | | | | | | | | There is no point in using Provide more than once, and anywhere besides the first action of a flow. So it's not really an action, but more of a flow property. Add Flow.Consts field to handle this case better. Also provide slightly less verbose syntax by using a map instead of a struct, and add tests.
* pkg/aflow/flow/repro: give agent relevant docsDmitry Vyukov3 days1-2/+17
| | | | | | | LLM seems to have some knowledge about syzkaller program syntax, but presumably it's still useful to give it all details about syntax. Update #6878
* pkg/aflow/flow/repro: give agent codesearch toolsDmitry Vyukov3 days1-5/+12
| | | | | | | | | | It's useful to be able to look at the kernel source code when creating a reproducer for a bug. So give the agent codesearch tools. Also slightly refine prompt wording. Update #6878
* pkg/aflow: instructions for implementing tools in GEMINI.mdAlexander Potapenko3 days1-0/+5
| | | | | | | Provide some instructions on how tools should be named, implemented and registered. Update #6878
* pkg/aflow/flow/repro: add `read-description` to the flowAlexander Potapenko3 days1-1/+4
| | | | | | Teach the repro flow about the `read-description` tool. Update #6878
* pkg/aflow/tool/syzlang: add the `read-description` toolAlexander Potapenko3 days2-0/+34
| | | | | | | | | | | Adds a tool that allows an agent to read the content of syzlang description files (e.g., `sys.txt`, `socket.txt`). Providing the ability to fetch exact system call definitions helps reasoning models generate correct and compiling programs from crash reports. Update #6878
* pkg/aflow: add Reproduce toolTaras Madan3 days3-0/+88
|
* pkg/aflow/action/crash: collect test coverageDmitry Vyukov3 days7-83/+194
| | | | | | | Collect code coverage for test programs. This is likley to be needed for #6878 and seed generation workflow. For now it's not wired into any workflow/tool and is not tested. But this should provide most of the plumbing to wire it up.
* pkg/aflow: add GEMINI.mdTaras Madan6 days1-0/+64
|
* pkg/aflow: add Tools functionDmitry Vyukov6 days4-5/+22
| | | | | | When we combine tool sets for agents, there is always a protential problem with aliasing existing slices and introducing subtle bugs. Add Tools function that can append tool/tool sets w/o aliasing problem.
* syz-agent: revert SyzkallerCommit logicDmitry Vyukov7 days1-6/+6
| | | | | | | This commit won't be used by workflows b/c dashboard always send SyzkallerCommit associated with the job crash. Update #6878
* pkg/aflow/flow/repro: provide proper syzkaller commitDmitry Vyukov7 days1-5/+10
| | | | Update #6878
* pkg/aflow/tool/syzlang: provide list of description filesDmitry Vyukov7 days4-0/+49
| | | | Update #6878
* pkg/aflow: repro workflow skeletonTaras Madan7 days4-6/+71
|
* pkg/aflow: delete SyzkallerCommitTaras Madan8 days3-30/+26
| | | | It is not used.
* pkg/vcs: fix repetitive change handling in BaseForDiffAleksandr Nogikh13 days2-6/+31
| | | | | | | | The current implementation runs into problems if we modify the same file several times in the patch series since the sequential blob hashes will not be found in the reproducer. Fix it by moving the check for already processed files up.
* pkg/aflow: add the repro workflow constAleksandr Nogikh14 days1-0/+1
| | | | | There's no workflow implementation, but having the const there will let us implement the dashboard side in parallel.
* dashboard/app: fix namespace coverage retrievalTaras Madan2026-02-253-14/+15
| | | | Use current namespace instead of the hardcoded one.
* executor, sys/linux, pkg: enable syzos for riscv646eanut2026-02-251-1/+3
| | | | | | | | | | | | | | | | | | | | This patch enables syzos for riscv64 and implements the corresponding pseudo syscalls. Pseudo syscalls: - syz_kvm_setup_syzos_vm - syz_kvm_add_vcpu - syz_kvm_assert_syzos_uexit Syzos guest support: - guest_uexit - guest_execute_code - guest_handle_csrr and guest_handle_csrw Test seeds: - riscv64-syz_kvm_setup_syzos_vm - riscv64-syz_kvm_setup_syzos_vm-csrr - riscv64-syz_kvm_setup_syzos_vm-csrw
* dashboard/app: apply actionable label after AI moderationDmitry Vyukov2026-02-242-7/+7
| | | | | | This allows auto-upstreamming of actionable bugs. Fixes #6779
* pkg/instance: export test result aggregation functionalityAleksandr Nogikh2026-02-202-0/+169
| | | | | | This will prevent duplication of the same logic later. Specifically, it will be needed when rerunning reproducers in syz-cluster and potentially when aggregating the results of multiple reproducer runs in syz-agent.
* pkg/aflow: fix handling of optional tool argumentsDmitry Vyukov2026-02-194-1/+227
| | | | | | | Currently we crash on nil deref, if LLM specifies explicit 'nil' for an optional (pointer) argument. Handle such cases properly. Fixes #6811
* pkg/aflow/tool/codesearcher: add end-to-end testsDmitry Vyukov2026-02-195-24/+83
| | | | Update #6811
* syz-agent: add MCP serverDmitry Vyukov2026-02-183-3/+79
| | | | | | The MCP server exports all aflow tools (and actions as tools) we have. Fixes #6763