From: Maxim Mikityanskiy <maxi...@mellanox.com> All GRO flows except one call skb->destructor, however, GRO_MERGED_FREE doesn't do it in case of NAPI_GRO_FREE_STOLEN_HEAD. For better consistency and to add resiliency against the drivers that may pass SKBs with a destructor, this patch changes napi_skb_free_stolen_head to use skb_release_head_state, which should perform all the needed cleanups, including a call to the destructor. This way the code of GRO_MERGED_FREE becomes similar to kfree_skb_partial.
Fixes: e44699d2c280 ("net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish()") Fixes: d7e8883cfcf4 ("net: make GRO aware of skb->head_frag") Signed-off-by: Maxim Mikityanskiy <maxi...@mellanox.com> Reviewed-by: Tariq Toukan <tar...@nvidia.com> Signed-off-by: Saeed Mahameed <sae...@nvidia.com> --- For -stable: 5.4 net/core/dev.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/net/core/dev.c b/net/core/dev.c index 82dc6b48e45f..85dcc7f19902 100644 --- a/net/core/dev.c +++ b/net/core/dev.c @@ -6048,8 +6048,7 @@ EXPORT_SYMBOL(gro_find_complete_by_type); static void napi_skb_free_stolen_head(struct sk_buff *skb) { - skb_dst_drop(skb); - skb_ext_put(skb); + skb_release_head_state(skb); kmem_cache_free(skbuff_head_cache, skb); } -- 2.26.2