10gbe huge frames seen in captures

I'm capturing on a linux server using tcpdump

tcpdump -i eth2 -s 1600 -w file.out

When reviewing the file.out in Wireshark I see many frames that are huge (larger than 9K bytes). These ethernet frames aren't valid on the network. I'm not using jumbo frames either and they are larger than 9K.

Our theory is the huge ethernet frames are not "real" but are the OS transferring to the 10Gbe nic driver.

Any thoughts or experience with these ?

thanks Tim