1 files changed, 12 insertions, 11 deletions

diff --git a/drivers/net/tun.c b/drivers/net/tun.c
index e26cbea1ce68..dd1bd7aedc3c 100644
--- a/drivers/net/tun.c
+++ b/drivers/net/tun.c
@@ -1183,7 +1183,11 @@ static ssize_t tun_put_user(struct tun_struct *tun,
                             const struct iovec *iv, int len)
 {
         struct tun_pi pi = { 0, skb->protocol };
-        ssize_t total = 0;
+        struct {
+                __be16 h_vlan_proto;
+                __be16 h_vlan_TCI;
+        } veth;
+        ssize_t total = 0, off = 0;
         int vlan_offset = 0;
 
         if (!(tun->flags & TUN_NO_PI)) {
@@ -1248,14 +1252,11 @@ static ssize_t tun_put_user(struct tun_struct *tun,
                 total += tun->vnet_hdr_sz;
         }
 
+        off = total;
         if (!vlan_tx_tag_present(skb)) {
                 len = min_t(int, skb->len, len);
         } else {
                 int copy, ret;
-                struct {
-                        __be16 h_vlan_proto;
-                        __be16 h_vlan_TCI;
-                } veth;
 
                 veth.h_vlan_proto = skb->vlan_proto;
                 veth.h_vlan_TCI = htons(vlan_tx_tag_get(skb));
@@ -1264,22 +1265,22 @@ static ssize_t tun_put_user(struct tun_struct *tun,
                 len = min_t(int, skb->len + VLAN_HLEN, len);
 
                 copy = min_t(int, vlan_offset, len);
-                ret = skb_copy_datagram_const_iovec(skb, 0, iv, total, copy);
+                ret = skb_copy_datagram_const_iovec(skb, 0, iv, off, copy);
                 len -= copy;
-                total += copy;
+                off += copy;
                 if (ret || !len)
                         goto done;
 
                 copy = min_t(int, sizeof(veth), len);
-                ret = memcpy_toiovecend(iv, (void *)&veth, total, copy);
+                ret = memcpy_toiovecend(iv, (void *)&veth, off, copy);
                 len -= copy;
-                total += copy;
+                off += copy;
                 if (ret || !len)
                         goto done;
         }
 
-        skb_copy_datagram_const_iovec(skb, vlan_offset, iv, total, len);
-        total += len;
+        skb_copy_datagram_const_iovec(skb, vlan_offset, iv, off, len);
+        total += skb->len + (vlan_offset ? sizeof(veth) : 0);
 
 done:
         tun->dev->stats.tx_packets++;