aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAleksandr Nogikh <nogikh@google.com>2025-08-06 15:02:49 +0200
committerAleksandr Nogikh <nogikh@google.com>2025-08-06 13:43:20 +0000
commit8d44fabfbe2f97f34feeb33d3a882e18dc19830e (patch)
tree9b8a22938098c3372a29f7943153490d6eb90b44
parent4bd24a3ebf2c0a11349dbd8b6830c5cdf98d2c7d (diff)
syz-cluster: fuzz io-uring patch series
Use a custom set of enabled syscalls.
-rw-r--r--syz-cluster/overlays/gke/prod/global-config.yaml1
-rw-r--r--syz-cluster/pkg/api/api.go6
-rw-r--r--syz-cluster/workflow/configs/io-uring/base.cfg27
-rw-r--r--syz-cluster/workflow/configs/io-uring/patched.cfg10
4 files changed, 44 insertions, 0 deletions
diff --git a/syz-cluster/overlays/gke/prod/global-config.yaml b/syz-cluster/overlays/gke/prod/global-config.yaml
index 9918cb105..889a0d86a 100644
--- a/syz-cluster/overlays/gke/prod/global-config.yaml
+++ b/syz-cluster/overlays/gke/prod/global-config.yaml
@@ -15,6 +15,7 @@ data:
- linux-ext4
- netfilter-devel
- kvm
+ - io-uring
emailReporting:
name: "syzbot ci"
sender: dashapi
diff --git a/syz-cluster/pkg/api/api.go b/syz-cluster/pkg/api/api.go
index 93ef0eae3..9ff7a02bc 100644
--- a/syz-cluster/pkg/api/api.go
+++ b/syz-cluster/pkg/api/api.go
@@ -216,6 +216,12 @@ var FuzzConfigs = []*FuzzConfig{
CorpusURL: allCorpusURL,
},
{
+ Name: `io-uring`,
+ EmailLists: []string{`io-uring@vger.kernel.org`},
+ KernelConfig: `upstream-apparmor-kasan.config`,
+ CorpusURL: allCorpusURL,
+ },
+ {
Name: `bpf`,
EmailLists: []string{`bpf@vger.kernel.org`},
KernelConfig: `upstream-apparmor-kasan.config`,
diff --git a/syz-cluster/workflow/configs/io-uring/base.cfg b/syz-cluster/workflow/configs/io-uring/base.cfg
new file mode 100644
index 000000000..c69cde368
--- /dev/null
+++ b/syz-cluster/workflow/configs/io-uring/base.cfg
@@ -0,0 +1,27 @@
+{
+ "name": "base",
+ "target": "linux/amd64",
+ "kernel_obj": "/base/obj",
+ "kernel_build_src": "/workdir",
+ "image": "/base/image",
+ "syzkaller": "/syzkaller",
+ "workdir": "/workdir",
+ "type": "qemu",
+ "enable_syscalls": [
+ "io_uring_*", "syz_io_uring_*", "syz_memcpy_off", "mmap", "madvise",
+ "mprotect", "eventfd", "socket", "setsockopt", "accept", "open", "close",
+ "clock_gettime", "ioctl$sock_SIOCGIFINDEX", "ioctl$IOCTL_GET_NCIDEV_IDX",
+ "openat", "epoll_create"
+ ],
+ "procs": 3,
+ "sandbox": "none",
+ "experimental": {"cover_edges": false},
+ "vm": {
+ "count": 4,
+ "cmdline": "root=/dev/sda1",
+ "kernel": "/base/kernel",
+ "cpu": 2,
+ "mem": 3072,
+ "qemu_args": "-machine pc-q35-7.1 -enable-kvm -smp 2,sockets=2,cores=1"
+ }
+}
diff --git a/syz-cluster/workflow/configs/io-uring/patched.cfg b/syz-cluster/workflow/configs/io-uring/patched.cfg
new file mode 100644
index 000000000..9c2efd8ba
--- /dev/null
+++ b/syz-cluster/workflow/configs/io-uring/patched.cfg
@@ -0,0 +1,10 @@
+{
+ "name": "patched",
+ "target": "linux/amd64",
+ "kernel_obj": "/patched/obj",
+ "image": "/patched/image",
+ "vm": {
+ "count": 10,
+ "kernel": "/patched/kernel"
+ }
+}