[google/syzkaller] 685f11: syz-cluster: support multiple campaigns per fuzz t...

[Aleksandr Nogikh]

Branch: refs/heads/gh-readonly-queue/master/pr-6353-8ef35d49f95e518c7667e9c650d97ac4332d9cfe
Home: https://github.com/google/syzkaller
Commit: 685f11d0e806c0d613da4372a60e0a933d1b1422
https://github.com/google/syzkaller/commit/685f11d0e806c0d613da4372a60e0a933d1b1422
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2025-10-07 (Tue, 07 Oct 2025)

Changed paths:
M syz-cluster/pkg/api/api.go
M syz-cluster/pkg/api/client.go
M syz-cluster/pkg/controller/api.go
R syz-cluster/pkg/triage/fuzz_config.go
R syz-cluster/pkg/triage/fuzz_config_test.go
A syz-cluster/pkg/triage/fuzz_target.go
A syz-cluster/pkg/triage/fuzz_target_test.go
M syz-cluster/workflow/build-step/Dockerfile
M syz-cluster/workflow/rebuild-kernels-cron.yaml
M syz-cluster/workflow/triage-step/main.go

Log Message:
-----------
syz-cluster: support multiple campaigns per fuzz target

During triage, process each fuzzing campaign separately as they may have
different base kernel revisions (e.g. if the newest revisions of the
kernel no longer build/boot under the specific kernel configuration).

Refactor the representation of the fuzzing targets in api.go.


Commit: 63798508d625f2bb1bb3b48885ff4b736e22c24d
https://github.com/google/syzkaller/commit/63798508d625f2bb1bb3b48885ff4b736e22c24d
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2025-10-07 (Tue, 07 Oct 2025)

Changed paths:
M syz-cluster/pkg/workflow/template.yaml

Log Message:
-----------
syz-cluster: run KMSAN fuzzing in parallel to KASAN

There's no reason to do first one and then another.


Commit: 1e8a0755dc813b98c3cbfa9ad416affa1216c451
https://github.com/google/syzkaller/commit/1e8a0755dc813b98c3cbfa9ad416affa1216c451
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2025-10-07 (Tue, 07 Oct 2025)

Changed paths:
M syz-cluster/workflow/boot-step/workflow-template.yaml
M syz-cluster/workflow/configs/all/base.cfg
M syz-cluster/workflow/configs/all/patched.cfg
M syz-cluster/workflow/configs/bpf/base.cfg
M syz-cluster/workflow/configs/bpf/patched.cfg
M syz-cluster/workflow/configs/fs/base.cfg
M syz-cluster/workflow/configs/fs/patched.cfg
M syz-cluster/workflow/configs/io-uring/base.cfg
M syz-cluster/workflow/configs/io-uring/patched.cfg
M syz-cluster/workflow/configs/kvm/base.cfg
M syz-cluster/workflow/configs/kvm/patched.cfg
M syz-cluster/workflow/configs/net/base.cfg
M syz-cluster/workflow/configs/net/patched.cfg
M syz-cluster/workflow/fuzz-step/workflow-template.yaml

Log Message:
-----------
syz-cluster: switch to 7G qemu VMs

3G is not enough for kernels with KMSAN.
Slightly decrease the number of used VMs to fit into the available
CPUs/RAM.


Commit: 790f0ffe2224829b20e4dc6556c090c503e1d161
https://github.com/google/syzkaller/commit/790f0ffe2224829b20e4dc6556c090c503e1d161
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2025-10-07 (Tue, 07 Oct 2025)

Changed paths:
M syz-cluster/workflow/configs/all/base.cfg
M syz-cluster/workflow/configs/bpf/base.cfg
M syz-cluster/workflow/configs/fs/base.cfg
M syz-cluster/workflow/configs/io-uring/base.cfg
M syz-cluster/workflow/configs/net/base.cfg

Log Message:
-----------
syz-cluster: switch qemus to q35

KMSAN fails to boot when a specific q35 version is specified.


Commit: 99ed12e158687b7aba55eac142d6bad3f147d029
https://github.com/google/syzkaller/commit/99ed12e158687b7aba55eac142d6bad3f147d029
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2025-10-07 (Tue, 07 Oct 2025)

Changed paths:
M pkg/db/db.go
M syz-cluster/pkg/api/api.go
A syz-cluster/pkg/fuzzconfig/base.cfg
A syz-cluster/pkg/fuzzconfig/generate.go
A syz-cluster/pkg/fuzzconfig/generate_test.go
A syz-cluster/pkg/fuzzconfig/patched.cfg
A syz-cluster/pkg/fuzzconfig/testdata/mixed/bpf_io_uring.base.cfg
A syz-cluster/pkg/fuzzconfig/testdata/mixed/bpf_io_uring.patched.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/bpf.base.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/bpf.patched.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/default.base.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/default.patched.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/fs.base.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/fs.patched.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/io_uring.base.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/io_uring.patched.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/kvm.base.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/kvm.patched.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/net.base.cfg
A syz-cluster/pkg/fuzzconfig/testdata/singular/net.patched.cfg
M syz-cluster/pkg/triage/fuzz_target.go
M syz-cluster/pkg/triage/fuzz_target_test.go
M syz-cluster/workflow/boot-step/Dockerfile
M syz-cluster/workflow/boot-step/main.go
R syz-cluster/workflow/configs/all/base.cfg
R syz-cluster/workflow/configs/all/patched.cfg
R syz-cluster/workflow/configs/bpf/base.cfg
R syz-cluster/workflow/configs/bpf/patched.cfg
R syz-cluster/workflow/configs/fs/base.cfg
R syz-cluster/workflow/configs/fs/patched.cfg
R syz-cluster/workflow/configs/io-uring/base.cfg
R syz-cluster/workflow/configs/io-uring/patched.cfg
R syz-cluster/workflow/configs/kvm/base.cfg
R syz-cluster/workflow/configs/kvm/patched.cfg
R syz-cluster/workflow/configs/net/base.cfg
R syz-cluster/workflow/configs/net/patched.cfg
M syz-cluster/workflow/fuzz-step/Dockerfile
M syz-cluster/workflow/fuzz-step/main.go
M syz-cluster/workflow/fuzz-step/main_test.go
M syz-cluster/workflow/triage-step/main.go
M tools/syz-db/syz-db.go

Log Message:
-----------
syz-cluster: rewrite fuzz config generation

Instead of a predefined set of manually written syz-manager configs,
construct it dynamically from different bits.

During triage, select not just one, but all matching fuzzer
configurations and then merge them together.


Commit: 9dbff6462c26ed70cd4fd9c51a42b946f09b2c83
https://github.com/google/syzkaller/commit/9dbff6462c26ed70cd4fd9c51a42b946f09b2c83
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2025-10-07 (Tue, 07 Oct 2025)

Changed paths:
M syz-cluster/pkg/fuzzconfig/patched.cfg
M syz-cluster/pkg/fuzzconfig/testdata/mixed/bpf_io_uring.patched.cfg
M syz-cluster/pkg/fuzzconfig/testdata/singular/bpf.patched.cfg
M syz-cluster/pkg/fuzzconfig/testdata/singular/default.patched.cfg
M syz-cluster/pkg/fuzzconfig/testdata/singular/fs.patched.cfg
M syz-cluster/pkg/fuzzconfig/testdata/singular/io_uring.patched.cfg
M syz-cluster/pkg/fuzzconfig/testdata/singular/kvm.patched.cfg
M syz-cluster/pkg/fuzzconfig/testdata/singular/net.patched.cfg

Log Message:
-----------
syz-cluster: set fuzzing_vms

Otherwise reproductions sometimes take almost all VMs.


Commit: 7e2882b32698b70f3149aee00c41e3d2d941dca3
https://github.com/google/syzkaller/commit/7e2882b32698b70f3149aee00c41e3d2d941dca3
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2025-10-07 (Tue, 07 Oct 2025)

Changed paths:
M syz-cluster/overlays/gke/staging/global-config.yaml

Log Message:
-----------
syz-cluster: do more runs in staging


Compare: https://github.com/google/syzkaller/compare/685f11d0e806%5E...7e2882b32698

To unsubscribe from these emails, change your notification settings at https://github.com/google/syzkaller/settings/notifications

[Aleksandr Nogikh]

Branch: refs/heads/master

Compare: https://github.com/google/syzkaller/compare/8ef35d49f95e...7e2882b32698