>> +static void nf_flow_encap_push(struct sk_buff *skb, >> + struct flow_offload_tuple_rhash *tuplehash) >> +{ >> + int i; >> + >> + for (i = 0; i < tuplehash->tuple.encap_num; i++) { >> + switch (tuplehash->tuple.encap[i].proto) { >> + case htons(ETH_P_8021Q): >> + case htons(ETH_P_8021AD): >> + skb_vlan_push(skb, > >Nit: skb_vlan_push() might fail. > The packet maybe modified. So maybe only drop this packet if skb_vlan_push failed?