bug fixed by Usama Chaudhry: raw_send_inchdr attempted to skb_put the packet length while actually the packet is in skb fragment