Re: [PATCH net v2] net: skbuff: fix missing zerocopy reference in pskb_carve helpers

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:

On Tue, 26 May 2026 11:12:39 +0700 you wrote:
> From: Minh Nguyen <minhnguyen.080505@xxxxxxxxx>
> 
> pskb_carve_inside_header() and pskb_carve_inside_nonlinear() both copy
> the old skb_shared_info header into a new buffer via memcpy(), which
> includes the destructor_arg pointer (uarg) for MSG_ZEROCOPY skbs.
> Neither function calls net_zcopy_get() for the new shinfo, creating an
> unaccounted holder: every skb_shared_info with destructor_arg set will
> call skb_zcopy_clear() once when freed, but the corresponding
> net_zcopy_get() was never called for the new copy. Repeated calls
> drive uarg->refcnt to zero prematurely, freeing ubuf_info_msgzc while
> TX skbs still hold live destructor_arg pointers.
> 
> [...]

Here is the summary with links:
  - [net,v2] net: skbuff: fix missing zerocopy reference in pskb_carve helpers
    https://git.kernel.org/netdev/net/c/98d0912e9f84

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html