Kernel Fuzzing Harnesses (syzkaller, KCOV, sanitizer feedback)

When to use

• Writing syzkaller syscall descriptions (syzlang) for a new driver or subsystem, or setting up syzkaller against a kernel.
• Building a libFuzzer/AFL++ harness for a kernel-adjacent target (file systems, parsers, ioctl emulation) where KCOV or sanitizer coverage is the feedback channel.
• Triaging a fuzzer crash: reproducing it, minimizing the reproducer, and deciding whether it is a real bug or a harness bug.
• Setting up CI fuzzing with KASAN/KCSAN/UBSAN reports as the verdict.

When not to use