aboutsummaryrefslogtreecommitdiffstats
path: root/syz-cluster/workflow
diff options
context:
space:
mode:
authorAleksandr Nogikh <nogikh@google.com>2025-07-30 15:43:58 +0200
committerAleksandr Nogikh <nogikh@google.com>2025-07-31 12:54:40 +0000
commit0c075d67fcfde8d048cca2f751a82db97ebc3754 (patch)
tree6055d4942a49feea8e23522e2e44e73a17d0734f /syz-cluster/workflow
parenta9814992554d3a157c61716e82aace97ad7860af (diff)
syz-cluster: add a kvm config
Add a config to fuzz kvm patches. Listen on the kvm mailing list.
Diffstat (limited to 'syz-cluster/workflow')
-rw-r--r--syz-cluster/workflow/configs/kvm/base.cfg34
-rw-r--r--syz-cluster/workflow/configs/kvm/patched.cfg10
2 files changed, 44 insertions, 0 deletions
diff --git a/syz-cluster/workflow/configs/kvm/base.cfg b/syz-cluster/workflow/configs/kvm/base.cfg
new file mode 100644
index 000000000..e0bf135b1
--- /dev/null
+++ b/syz-cluster/workflow/configs/kvm/base.cfg
@@ -0,0 +1,34 @@
+{
+ "name": "base",
+ "target": "linux/amd64",
+ "kernel_obj": "/base/obj",
+ "kernel_build_src": "/workdir",
+ "image": "/base/image",
+ "syzkaller": "/syzkaller",
+ "workdir": "/workdir",
+ "type": "qemu",
+ "enable_syscalls": [
+ "openat$kvm",
+ "openat$sev",
+ "close",
+ "ioctl$KVM*",
+ "syz_kvm*",
+ "mmap$KVM_VCPU",
+ "munmap",
+ "syz_memcpy_off$KVM_EXIT_MMIO",
+ "syz_memcpy_off$KVM_EXIT_HYPERCALL",
+ "eventfd2",
+ "write$eventfd"
+ ],
+ "procs": 3,
+ "sandbox": "none",
+ "experimental": {"cover_edges": false},
+ "vm": {
+ "count": 4,
+ "cmdline": "root=/dev/sda1 kvm-intel.nested=1",
+ "kernel": "/base/kernel",
+ "cpu": 2,
+ "mem": 3072,
+ "qemu_args": "-machine q35,nvdimm=on,accel=kvm,kernel-irqchip=split -cpu max,migratable=off -enable-kvm -smp 2,sockets=2,cores=1"
+ }
+}
diff --git a/syz-cluster/workflow/configs/kvm/patched.cfg b/syz-cluster/workflow/configs/kvm/patched.cfg
new file mode 100644
index 000000000..9c2efd8ba
--- /dev/null
+++ b/syz-cluster/workflow/configs/kvm/patched.cfg
@@ -0,0 +1,10 @@
+{
+ "name": "patched",
+ "target": "linux/amd64",
+ "kernel_obj": "/patched/obj",
+ "image": "/patched/image",
+ "vm": {
+ "count": 10,
+ "kernel": "/patched/kernel"
+ }
+}