From: William Tu <u9012...@gmail.com>
Date: Tue, 23 Jan 2018 17:01:29 -0800
> When building the erspan header for either v1 or v2, the eth_hdr()
> does not point to the right inner packet's eth_hdr,
> causing kasan report use-after-free and slab-out-of-bouds read.
...
> Fixes: f551c91de262 ("net: erspan: introduce erspan v2 for ip_gre")
> Fixes: 84e54fe0a5ea ("gre: introduce native tunnel support for ERSPAN")
> Reported-by: syzbot+9723f2d288e49b492...@syzkaller.appspotmail.com
> Reported-by: syzbot+f0ddeb2b032a8e1d9...@syzkaller.appspotmail.com
> Reported-by: syzbot+f14b3703cd8d76702...@syzkaller.appspotmail.com
> Reported-by: syzbot+eefa384efad8d7997...@syzkaller.appspotmail.com
> Signed-off-by: William Tu <u9012...@gmail.com>
Applied to net-next.
