--- x/net/core/filter.c +++ y/net/core/filter.c @@ -2161,6 +2161,10 @@ static int __bpf_redirect_no_mac(struct } skb_pop_mac_header(skb); skb_reset_mac_len(skb); + + if (skb->data[0] < 2) + flags = 0; + return flags & BPF_F_INGRESS ? __bpf_rx_skb_no_mac(dev, skb) : __bpf_tx_skb(dev, skb); }