Hi Larry, > What setting or lack of, would cause ieee80211_rx_napi() to leak the skb that it > is given? The documentation states that once this call is made, mac80211 owns > this buffer. Does this mean that it will also be freed? Eventually, yes. But it might go onto a NAPI GRO list, etc. Perhaps it might even look like it's leaked if it's on such a list if you didn't implement NAPI properly as polling, but just call ieee80211_rx_napi() with a non-NULL napi struct pointer. That said, of course there might be bugs in mac80211 where it actually leaks the skb. How are you determining that it's being leaked? johannes