yes, the code is as follows in the broken veth:<p>if (skb-&gt;ip_summed == CHECKSUM_NONE &amp;&amp; rcv-&gt;features &amp; NETIF_F_RXCSUM)<p>checksum offloading is encapsulated in the rcv-features bitmap, so disabling it will hide this bug.<p>You can do something like this within your container to disable it (from memory, might be slightly off):
$ ethtool --offload  VETH_DEVICE_NAME  rx off  tx off
$ ethtool -K VETH_DEVICE_NAME gso off