--- zzzz-none-000/linux-3.10.107/net/xfrm/xfrm_output.c 2017-06-27 09:49:32.000000000 +0000 +++ vr9-7490-729/linux-3.10.107/net/xfrm/xfrm_output.c 2021-11-10 11:53:56.000000000 +0000 @@ -121,7 +121,7 @@ int xfrm_output_resume(struct sk_buff *skb, int err) { while (likely((err = xfrm_output_one(skb, err)) == 0)) { - nf_reset(skb); + nf_reset_no_generic_ct(skb); err = skb_dst(skb)->ops->local_out(skb); if (unlikely(err != 1))