diff --git a/[refs] b/[refs]
index 535dbbc18e94..f7d43c65e69a 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: f54c142725ad2ba33c3ee627873cb6966bf05447
+refs/heads/master: 8ef86c7bfac5b44529b73b84bc50d3cf574bfb4b
diff --git a/trunk/net/mac80211/tx.c b/trunk/net/mac80211/tx.c
index d238a8939a09..3a8922cd1038 100644
--- a/trunk/net/mac80211/tx.c
+++ b/trunk/net/mac80211/tx.c
@@ -1455,7 +1455,7 @@ int ieee80211_master_start_xmit(struct sk_buff *skb, struct net_device *dev)
 		monitor_iface = UNKNOWN_ADDRESS;
 
 		len_rthdr = ieee80211_get_radiotap_len(skb->data);
-		hdr = (struct ieee80211_hdr *)skb->data + len_rthdr;
+		hdr = (struct ieee80211_hdr *)(skb->data + len_rthdr);
 		hdrlen = ieee80211_hdrlen(hdr->frame_control);
 
 		/* check the header is complete in the frame */