Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.37 as permitted sender) client-ip=23.128.96.37;
From:   Nick Terrell <terrelln@meta.com>
To:     Kees Cook <keescook@chromium.org>
CC:     Nick Terrell <terrelln@meta.com>,
        Eric Biggers <ebiggers@kernel.org>,
        syzbot <syzbot+1f2eb3e8cd123ffce499@syzkaller.appspotmail.com>,
        Chris Mason <clm@meta.com>,
        "dsterba@suse.com" <dsterba@suse.com>,
        "josef@toxicpanda.com" <josef@toxicpanda.com>,
        "linux-btrfs@vger.kernel.org" <linux-btrfs@vger.kernel.org>,
        "linux-fsdevel@vger.kernel.org" <linux-fsdevel@vger.kernel.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "syzkaller-bugs@googlegroups.com" <syzkaller-bugs@googlegroups.com>,
        "linux-hardening@vger.kernel.org" <linux-hardening@vger.kernel.org>
Subject: Re: [syzbot] [zstd] UBSAN: array-index-out-of-bounds in
 FSE_decompress_wksp_body_bmi2
Thread-Topic: [syzbot] [zstd] UBSAN: array-index-out-of-bounds in
 FSE_decompress_wksp_body_bmi2
Thread-Index: AQHZ+WIW2tZXKI1VfkS0RwXdr6keRLBBuYeAgATf4ACAAATqgIAAAuQA
Date:   Thu, 12 Oct 2023 20:23:51 +0000
Message-ID: <176F983D-1160-4163-93DE-553AE89E8D3E@meta.com>
References: <00000000000049964e06041f2cbf@google.com>
 <20231007210556.GA174883@sol.localdomain> <202310091025.4939AEBC9@keescook>
 <19E42116-8FE3-4C4B-8D26-E9B47B0B9AC5@meta.com>
 <202310121311.4B9DD96E51@keescook>
In-Reply-To: <202310121311.4B9DD96E51@keescook>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?REZEd3dKdktGNUgvYnRZUTl0elQybGZLT2ZDTXJUMkNsVnRiSmd1eW9hUVhz?=
 =?utf-8?B?MWxHR2J1Z1dwSmxyb2ZwMkZ1aWN5SHFWUWFsYzh2dVRLcHZTRjlzOFMxU2oz?=
 =?utf-8?B?T3pLZ0owYnAzWHRKSUVubUo2NGtOdWs3MDlMUDFhbUtiM0dMVitwMHBWdnBY?=
 =?utf-8?B?N2cvWThOMzVqaWw0TElSVitaaXN6RWZkemxSZFUrZFErcStFM244R2tIR1B5?=
 =?utf-8?B?YjNsQ0NEeXFrVjZjdlhPcUJXekM3UUdFaWhWWkZIRVAxZjE4S2F1U2w0dzlF?=
 =?utf-8?B?d1NuenFXUGQ4NjAyaVJKWUNFZk0yMU9jYmlZVUNGMmxCU3l3ci9sYkljcEFG?=
 =?utf-8?B?T1gwQndwNlowdlhVQ0FxTHRKSk1ZNkFlbk1mdWY4TGMxckZPNUc1YXFMRWVi?=
 =?utf-8?B?OEZvOGs4aG9KakJZdk9aVHJUR0pHaG1ycVNxL1dFVkhZelpDS3BzTlNVcUxj?=
 =?utf-8?B?OExDUDM0VE4vZlY1amhmUGVINHBlV1FaYzRiN2o1MUZkSG1VZUQ3cy91WUgr?=
 =?utf-8?B?azdQRSsrM1ZDN1RaVERreUcxREFkR25oKzVhYlZUdVBJMXVIQjczdUZnNnFR?=
 =?utf-8?B?QmtCTi9Bcm10cm5KbWZGVDZtU3FUdmZMc3ZmTjR0bUFXZGQ3d1AvTVVsdmhM?=
 =?utf-8?B?WXdEbHNxRjlKVE5CaFJQc3JRMHE2MGJNRGVaK1ZHeDdWeUY0K0JScXczTkRH?=
 =?utf-8?B?dGErMStFMTZINVVhSkRSYkxZZnhSVkFUS28zK2thckdYaDZ0Y2lXYm5RTm9S?=
 =?utf-8?B?SUIrUHhrcHNXZUpLL2lBUk5XUXhPYkVJUFF3WGg0Yzl6d2FaSW1PbUV3SnFF?=
 =?utf-8?B?dGg3NTh4RWVrU3I4Y2laMlZIc0dRR0JXb1UzMFJHTnBmbnF1bnd6ejlqenZF?=
 =?utf-8?B?eXNBRWtMN243SWhtV0FYTXM1YlBnVVNycXh1Mzk0VlNYUUlPYnJnZ01NVHdG?=
 =?utf-8?B?TVZBbHNDMzErRWJEUDZCdWZJOGZ0ZWJtT2RaZTkzc3I5WUY0cm52eFQyczhz?=
 =?utf-8?B?T0g5L1prUEhhakZ4cHFUY2JENU41cDh1THJrbXFvbEVQb01CK2d5RGNiUjkv?=
 =?utf-8?B?UkVFUVJma2ZjNWM1NHhkMml5ejZaSUc2RTUwMlZhTEQ3TEFtU0JRb0FUSEJo?=
 =?utf-8?B?ekV1cGs5YlhSdDFlcXFwVTk0clNEQUQ0bDdNNVB2WWp3bENoSldHUzFhTVA3?=
 =?utf-8?B?c25JSkZpelFNM3FkY1l0M1U3L01Wa1QrVEdDTDMvbmdnNnhrRFNETTBSdlBi?=
 =?utf-8?B?bGoxc0xMWWNSMkp2L25ab2k4K3dYZGRmYndnT2tHZVlCKzFEdnlqajdaVTRX?=
 =?utf-8?B?ZGZHMzMyL1BoVE9DNk5BRGJWWXZkd1NaTGRpdjlXMm5LTzgzM0YrRGxjbXF5?=
 =?utf-8?B?U0FSaEcvVDVDK3ppa2RpdzVuRFd6QXNNRVNYcjE0RmJQQ0RtdUJLUXRuTkFk?=
 =?utf-8?B?cnZwQXQxY0VTS1l2YllMRzlXZThFWFk4VlBCUkxKZWY4YWZod1pyVmlUR2cw?=
 =?utf-8?B?Z2VkZnNQUklvQkE1ZkJIV0FIK3BhbDVnNVEyNVZmSUt6RDVaU2ZUQlE4NHlV?=
 =?utf-8?B?cXdwVy9XczdqVG4rMWgxR1NkdjFBQnl2d1dSK1NRYWNXZ3I4dkJlUFUzQ1hR?=
 =?utf-8?B?cGFOSlpnSVNGWUZlNWlsUjhBVVFQdVQ4UVZnQi9jaXNpM2EvbjJZS2NlWG1D?=
 =?utf-8?B?c0hNNTc0VGRwd3psV0lqL2NHOGYzWVRwSndGbEo2NzBjNExpb2NXdEJrSjhi?=
 =?utf-8?B?cllqZHVzRG92QVZkbTVGNWYwRjlHa3VzaUhuTld5Z1I5SXdsM012d2tMY1BS?=
 =?utf-8?B?YjVOUHBQTUxqUlVjSVp2c05kclhrZlE0aTdnUXptL0k5SGZTN21IMTR1U253?=
 =?utf-8?B?OGkrdThkQmZiVUY1RHdmZERrYjRZQTVicFFqcTZuR2VqNXBnNmkrOTB5NkI3?=
 =?utf-8?B?cnV6eUZvUGpEdXM0Z1BjL3h3dElueFFOWnhyenRWU1V6TjkzOFIyR0hFa0JH?=
 =?utf-8?B?REVIZytFVlA1a3J0aWd1L2hGQXVJSExDbmlFR0tDNDB0dS9RaDNlZnoyTmdF?=
 =?utf-8?B?TzFWMW1RZnZXZ1hycThIcjA5OVZBMWo1NHptOXRiaFFSS0UwUitkd1VvbDNU?=
 =?utf-8?B?ck1ZZWVOY2czTE1IV2hkWjFDa01SQWVFeEVrRCs1c291a1JYcWlNSER2VExo?=
 =?utf-8?Q?FS1azLeeYUYJnky5CJnBOlA=3D?=
Content-ID: <CD2A50B0070B2A4D85AADD15DB652571@namprd15.prod.outlook.com>
X-OriginatorOrg: meta.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR15MB3667.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2a659a25-3d0f-4fa3-dc1b-08dbcb6125f9
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2023 20:23:51.1835
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: wPcUArgS0dolpQkmiQ734TJlIMyXZN983d1QILVOm9oKCIIYQMCW8Fi1bN8W8gprBbaydV6pIDjz4QeQn4O77w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR15MB3982
X-Proofpoint-GUID: i428Sl-G7adq8z4XnjpLG_-6kF3Q7fP8
X-Proofpoint-ORIG-GUID: i428Sl-G7adq8z4XnjpLG_-6kF3Q7fP8
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
X-Proofpoint-UnRewURL: 0 URL was un-rewritten
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.267,Aquarius:18.0.980,Hydra:6.0.619,FMLib:17.11.176.26
 definitions=2023-10-12_12,2023-10-12_01,2023-05-22_02
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE
        autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (snail.vger.email [0.0.0.0]); Thu, 12 Oct 2023 13:24:00 -0700 (PDT)
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