On Tue, 2016-11-01 at 10:39 -0700, Eric Dumazet wrote: > Thanks Neal. > > David please hold this patch, further tests show an issue I need to > track and fix.
The issue is that the right skb can be a FIN packet with no data, merged to a left skb with frag(s). Thus I need to call skb_copy_bits() only if there is something to copy, otherwise skb_put() can BUG_ON in SKB_LINEAR_ASSERT(), even if @len is 0.