--- a/net/ipv6/ip6_tunnel.c
+++ b/net/ipv6/ip6_tunnel.c
@@ -1234,7 +1234,7 @@ static inline int
 ip4ip6_tnl_xmit(struct sk_buff *skb, struct net_device *dev)
 {
  struct ip6_tnl *t = netdev_priv(dev);
- const struct iphdr  *iph = ip_hdr(skb);
+ const struct iphdr  *iph;
  int encap_limit = -1;
  struct flowi6 fl6;
  __u8 dsfield;
@@ -1242,6 +1242,11 @@ ip4ip6_tnl_xmit(struct sk_buff *skb, struct
net_device *dev)
  u8 tproto;
  int err;