Re: [Bug Report] fortify false-positive + real overread in skb_metadata_dst_cmp (geneve, gro_cell_poll)

Same disease as the
tun_dst_unclone fix 4c6d43db2a4d ("net: dst_metadata: fix
false-positive memcpy overflow in tun_dst_unclone"), on the RX/GRO
sibling path; that fix carries Fixes: 69050f8d6d07 for the same
reason.

I've queued that one for 6.18: 6.18 has the counted_by annotation it trips on.

For your skb_metadata_dst_cmp() patch, the Fixes: tag should be ce87fc6ce3f9
("gro: Make GRO aware of lightweight tunnels."), not 69050f8d6d07 ("treewide:
Replace kmalloc with kmalloc_obj for non-scalar types"). The overread predates
kmalloc_flex, and 6.18 has no kmalloc_flex at all, so with the current tag the
fix would miss 6.18, which is the tree that panics for you, and the older
trees, where the overread is silent.

-- 
Thanks,
Sasha