From: Toshiaki Makita <makita.toshi...@lab.ntt.co.jp>
Date: Tue, 17 Apr 2018 18:46:14 +0900
> Syzkaller spotted an old bug which leads to reading skb beyond tail by 4
> bytes on vlan tagged packets.
> This is caused because skb_vlan_tagged_multi() did not check
> skb_headlen.
...
> Fixes: 58e998c6d239 ("offloading: Force software GSO for multiple vlan tags.")
> Reported-and-tested-by: syzbot+0bbe42c764feafa82...@syzkaller.appspotmail.com
> Signed-off-by: Toshiaki Makita <makita.toshi...@lab.ntt.co.jp>
Applied and queued up for -stable, thank you.
