From: Willem de Bruijn <will...@google.com> The removal of UFO hardware offload support exposed a bug in segmentation of zerocopy skbs.
The reference counting mechanism for msg_zerocopy was incorrectly applied to vhost_net zerocopy packets. The other issue observed through analysis. We do not cook skbs with skb_zcopy(skb) but no frags, but this is possible in principle. Correctly call skb_zcopy_clear on those. Willem de Bruijn (2): skbuff: orphan frags before zerocopy clone skbuff: skb_copy_ubufs must release uarg even without user frags net/core/skbuff.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) -- 2.15.1.620.gb9897f4670-goog