--- zzzz-none-000/linux-4.4.60/net/xfrm/xfrm_output.c	2017-04-08 07:53:53.000000000 +0000
+++ wasp-540e-714/linux-4.4.60/net/xfrm/xfrm_output.c	2019-07-03 09:21:34.000000000 +0000
@@ -134,7 +134,7 @@
 	struct net *net = xs_net(skb_dst(skb)->xfrm);
 
 	while (likely((err = xfrm_output_one(skb, err)) == 0)) {
-		nf_reset(skb);
+		nf_reset_no_generic_ct(skb);
 
 		err = skb_dst(skb)->ops->local_out(net, skb->sk, skb);
 		if (unlikely(err != 1))