From: Cong Wang <xiyou.wangc...@gmail.com>
Date: Mon, 1 Jul 2019 20:40:24 -0700
> bond_xmit_roundrobin() checks for IGMP packets but it parses
> the IP header even before checking skb->protocol.
>
> We should validate the IP header with pskb_may_pull() before
> using iph->protocol.
>
> Reported-and-tested-by: syzbot+e5be16aa39ad6e755...@syzkaller.appspotmail.com
> Fixes: a2fd940f4cff ("bonding: fix broken multicast with round-robin mode")
> Cc: Jay Vosburgh <j.vosbu...@gmail.com>
> Cc: Veaceslav Falico <vfal...@gmail.com>
> Cc: Andy Gospodarek <a...@greyhouse.net>
> Signed-off-by: Cong Wang <xiyou.wangc...@gmail.com>
Applied and queued up for -stable, thanks.
