diff --git linux-libre-6.12.86-gnu/Makefile linux-libre-6.12.87-gnu/Makefile
index d8e686e979a5..4291f58e384b 100644
--- linux-libre-6.12.86-gnu/Makefile
+++ linux-libre-6.12.87-gnu/Makefile
@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: GPL-2.0
 VERSION = 6
 PATCHLEVEL = 12
-SUBLEVEL = 86
+SUBLEVEL = 87
 EXTRAVERSION = -gnu
 NAME = Baby Opossum Posse
 
diff --git linux-libre-6.12.86-gnu/net/ipv4/esp4.c linux-libre-6.12.87-gnu/net/ipv4/esp4.c
index deea0b934d91..2f548900e238 100644
--- linux-libre-6.12.86-gnu/net/ipv4/esp4.c
+++ linux-libre-6.12.87-gnu/net/ipv4/esp4.c
@@ -872,7 +872,8 @@ static int esp_input(struct xfrm_state *x, struct sk_buff *skb)
 			nfrags = 1;
 
 			goto skip_cow;
-		} else if (!skb_has_frag_list(skb)) {
+		} else if (!skb_has_frag_list(skb) &&
+			   !skb_has_shared_frag(skb)) {
 			nfrags = skb_shinfo(skb)->nr_frags;
 			nfrags++;
 
diff --git linux-libre-6.12.86-gnu/net/ipv4/ip_output.c linux-libre-6.12.87-gnu/net/ipv4/ip_output.c
index 0bda561aa8a8..ba51fc42531c 100644
--- linux-libre-6.12.86-gnu/net/ipv4/ip_output.c
+++ linux-libre-6.12.87-gnu/net/ipv4/ip_output.c
@@ -1231,6 +1231,8 @@ alloc_new_skb:
 			if (err < 0)
 				goto error;
 			copy = err;
+			if (!(flags & MSG_NO_SHARED_FRAGS))
+				skb_shinfo(skb)->flags |= SKBFL_SHARED_FRAG;
 			wmem_alloc_delta += copy;
 		} else if (!zc) {
 			int i = skb_shinfo(skb)->nr_frags;
diff --git linux-libre-6.12.86-gnu/net/ipv6/esp6.c linux-libre-6.12.87-gnu/net/ipv6/esp6.c
index 20c1149f0f0a..a797d5740d9b 100644
--- linux-libre-6.12.86-gnu/net/ipv6/esp6.c
+++ linux-libre-6.12.87-gnu/net/ipv6/esp6.c
@@ -914,7 +914,8 @@ static int esp6_input(struct xfrm_state *x, struct sk_buff *skb)
 			nfrags = 1;
 
 			goto skip_cow;
-		} else if (!skb_has_frag_list(skb)) {
+		} else if (!skb_has_frag_list(skb) &&
+			   !skb_has_shared_frag(skb)) {
 			nfrags = skb_shinfo(skb)->nr_frags;
 			nfrags++;
 
diff --git linux-libre-6.12.86-gnu/net/ipv6/ip6_output.c linux-libre-6.12.87-gnu/net/ipv6/ip6_output.c
index 0aedb20072ac..31021dc40e52 100644
--- linux-libre-6.12.86-gnu/net/ipv6/ip6_output.c
+++ linux-libre-6.12.87-gnu/net/ipv6/ip6_output.c
@@ -1761,6 +1761,8 @@ alloc_new_skb:
 			if (err < 0)
 				goto error;
 			copy = err;
+			if (!(flags & MSG_NO_SHARED_FRAGS))
+				skb_shinfo(skb)->flags |= SKBFL_SHARED_FRAG;
 			wmem_alloc_delta += copy;
 		} else if (!zc) {
 			int i = skb_shinfo(skb)->nr_frags;
