diff --git a/class/wireless/usbh_rndis.c b/class/wireless/usbh_rndis.c
index 5fb26cd9..92fd349f 100644
--- a/class/wireless/usbh_rndis.c
+++ b/class/wireless/usbh_rndis.c
@@ -492,7 +492,7 @@ find_class:
 #ifdef LWIP_TCPIP_CORE_LOCKING_INPUT
                         p->payload = src;
 #else
-                        memcpy(q->payload, src, pmsg->DataLength);
+                        memcpy(p->payload, src, pmsg->DataLength);
 #endif
                         err = netif->input(p, netif);
                         if (err != ERR_OK) {