Comment 4 for bug 1692836

Yes it looks like it was refactored as a result of f2f6ecabe, but following the refactor here is where it would go in a newer kernel.

diff --git a/drivers/net/wireless/ath/ath10k/mac.c b/drivers/net/wireless/ath/ath10k/mac.c
index 3029f25..8441b33 100644
--- a/drivers/net/wireless/ath/ath10k/mac.c
+++ b/drivers/net/wireless/ath/ath10k/mac.c
@@ -4138,6 +4138,8 @@ static void ath10k_mac_op_tx(struct ieee80211_hw *hw,
        bool is_presp;
        int ret;

+ skb_orphan(skb);
+
        ath10k_mac_tx_h_fill_cb(ar, vif, txq, skb);

        txmode = ath10k_mac_tx_h_get_txmode(ar, vif, sta, skb);

Can you please check if on 4.11 the problem exists and that still fixes it in 4.11? If so, it makes sense to me to try to submit upstream this fix.