Applied (at least tentatively, haven't run all the tests yet), but > @@ -3933,6 +3933,7 @@ void __ieee80211_subif_start_xmit(struct sk_buff *skb, > struct ieee80211_local *local = sdata->local; > struct sta_info *sta; > struct sk_buff *next; > + u32 ctrl_flags_adapted; I removed this - the loop can only process fragments of the same frame that should all be handled the same. > - if (proto == sdata->control_port_protocol) > - ctrl_flags |= IEEE80211_TX_CTRL_PORT_CTRL_PROTO; > + if (proto == sdata->control_port_protocol) { > + ctrl_flags |= IEEE80211_TX_CTRL_PORT_CTRL_PROTO | > + IEEE80211_TX_CTRL_SKIP_MPATH_LOOKUP; > + } And this doesn't need braces. johannes