Since skb is a copy of the ingress skb, ->dev still points to the device the packet was received on. For sending, set it to the outgoing device, taken from the dst object. Change-Id: Ia27b4318925dec4396e485a389d818dd46bcac78