From 8d44fabfbe2f97f34feeb33d3a882e18dc19830e Mon Sep 17 00:00:00 2001
From: Aleksandr Nogikh <nogikh@google.com>
Date: Wed, 6 Aug 2025 15:02:49 +0200
Subject: syz-cluster: fuzz io-uring patch series

Use a custom set of enabled syscalls.
---
 syz-cluster/overlays/gke/prod/global-config.yaml  |  1 +
 syz-cluster/pkg/api/api.go                        |  6 +++++
 syz-cluster/workflow/configs/io-uring/base.cfg    | 27 +++++++++++++++++++++++
 syz-cluster/workflow/configs/io-uring/patched.cfg | 10 +++++++++
 4 files changed, 44 insertions(+)
 create mode 100644 syz-cluster/workflow/configs/io-uring/base.cfg
 create mode 100644 syz-cluster/workflow/configs/io-uring/patched.cfg

diff --git a/syz-cluster/overlays/gke/prod/global-config.yaml b/syz-cluster/overlays/gke/prod/global-config.yaml
index 9918cb105..889a0d86a 100644
--- a/syz-cluster/overlays/gke/prod/global-config.yaml
+++ b/syz-cluster/overlays/gke/prod/global-config.yaml
@@ -15,6 +15,7 @@ data:
       - linux-ext4
       - netfilter-devel
       - kvm
+      - io-uring
     emailReporting:
       name: "syzbot ci"
       sender: dashapi
diff --git a/syz-cluster/pkg/api/api.go b/syz-cluster/pkg/api/api.go
index 93ef0eae3..9ff7a02bc 100644
--- a/syz-cluster/pkg/api/api.go
+++ b/syz-cluster/pkg/api/api.go
@@ -215,6 +215,12 @@ var FuzzConfigs = []*FuzzConfig{
 		KernelConfig: `upstream-apparmor-kasan.config`,
 		CorpusURL:    allCorpusURL,
 	},
+	{
+		Name:         `io-uring`,
+		EmailLists:   []string{`io-uring@vger.kernel.org`},
+		KernelConfig: `upstream-apparmor-kasan.config`,
+		CorpusURL:    allCorpusURL,
+	},
 	{
 		Name:         `bpf`,
 		EmailLists:   []string{`bpf@vger.kernel.org`},
diff --git a/syz-cluster/workflow/configs/io-uring/base.cfg b/syz-cluster/workflow/configs/io-uring/base.cfg
new file mode 100644
index 000000000..c69cde368
--- /dev/null
+++ b/syz-cluster/workflow/configs/io-uring/base.cfg
@@ -0,0 +1,27 @@
+{
+    "name": "base",
+    "target": "linux/amd64",
+    "kernel_obj": "/base/obj",
+    "kernel_build_src": "/workdir",
+    "image": "/base/image",
+    "syzkaller": "/syzkaller",
+    "workdir": "/workdir",
+    "type": "qemu",
+    "enable_syscalls": [
+        "io_uring_*", "syz_io_uring_*", "syz_memcpy_off", "mmap", "madvise",
+        "mprotect", "eventfd", "socket", "setsockopt", "accept", "open", "close",
+        "clock_gettime", "ioctl$sock_SIOCGIFINDEX", "ioctl$IOCTL_GET_NCIDEV_IDX",
+        "openat", "epoll_create"
+    ],
+    "procs": 3,
+    "sandbox": "none",
+    "experimental": {"cover_edges": false},
+    "vm": {    
+      "count": 4,
+      "cmdline": "root=/dev/sda1",
+      "kernel": "/base/kernel",
+      "cpu": 2,
+      "mem": 3072,
+      "qemu_args": "-machine pc-q35-7.1 -enable-kvm -smp 2,sockets=2,cores=1"
+    }
+}
diff --git a/syz-cluster/workflow/configs/io-uring/patched.cfg b/syz-cluster/workflow/configs/io-uring/patched.cfg
new file mode 100644
index 000000000..9c2efd8ba
--- /dev/null
+++ b/syz-cluster/workflow/configs/io-uring/patched.cfg
@@ -0,0 +1,10 @@
+{
+    "name": "patched",
+    "target": "linux/amd64",
+    "kernel_obj": "/patched/obj",
+    "image": "/patched/image",
+    "vm": {
+      "count": 10,
+      "kernel": "/patched/kernel"
+    }
+}
-- 
cgit mrf-deployment