Trying to force one of my device to crash or at least badly behave in order to open a bug for one of my cases. :-) Now that I had a deeper look Frag_off does more than filling the 13 bits of fragments offset. It fills as well the 3 more significant bits Reserved - More - DF. So basically I can achieve what I want now:-).