struct flow_dissector_key_ports *key_ports;
        struct flow_dissector_key_tags *key_tags;
        struct flow_dissector_key_keyid *key_keyid;
+       bool skip_vlan = false;
        u8 ip_proto = 0;
        bool ret = false;
 
        if (!data) {
                data = skb->data;
-               proto = skb->protocol;
+               proto = skb_vlan_tag_present(skb) ?
+                        skb->vlan_proto : skb->protocol;
                nhoff = skb_network_offset(skb);
                hlen = skb_headlen(skb);
        }
        case htons(ETH_P_8021AD):
        case htons(ETH_P_8021Q): {
                const struct vlan_hdr *vlan;
-               struct vlan_hdr _vlan;
 
-               vlan = __skb_header_pointer(skb, nhoff, sizeof(_vlan), data, hlen, &_vlan);
-               if (!vlan)
-                       goto out_bad;
+               if (skb_vlan_tag_present(skb))
+                       proto = skb->protocol;
+
+               if (!skb_vlan_tag_present(skb) ||
+                   proto == cpu_to_be16(ETH_P_8021Q) ||
+                   proto == cpu_to_be16(ETH_P_8021AD)) {
+                       struct vlan_hdr _vlan;
+
+                       vlan = __skb_header_pointer(skb, nhoff, sizeof(_vlan),
+                                                   data, hlen, &_vlan);
+                       if (!vlan)
+                               goto out_bad;
+                       proto = vlan->h_vlan_encapsulated_proto;
+                       nhoff += sizeof(*vlan);
+                       if (skip_vlan)
+                               goto again;
+               }
 
+               skip_vlan = true;
                if (dissector_uses_key(flow_dissector,
                                       FLOW_DISSECTOR_KEY_VLANID)) {
                        key_tags = skb_flow_dissector_target(flow_dissector,
                                                             FLOW_DISSECTOR_KEY_VLANID,
                                                             target_container);
 
-                       key_tags->vlan_id = skb_vlan_tag_get_id(skb);
+                       if (skb_vlan_tag_present(skb))
+                               key_tags->vlan_id = skb_vlan_tag_get_id(skb);
+                       else
+                               key_tags->vlan_id = ntohs(vlan->h_vlan_TCI) &
+                                       VLAN_VID_MASK;
                }
 
-               proto = vlan->h_vlan_encapsulated_proto;
-               nhoff += sizeof(*vlan);
                goto again;
        }
        case htons(ETH_P_PPP_SES): {