Good catch. However, we'll leak skb in that case, so how about:
 
	if (WARN_ON(tx.skb != skb))
-		return NULL;
+		res = TX_DROP;

johannes