1 --- a/net/netfilter/nf_nat_core.c
2 +++ b/net/netfilter/nf_nat_core.c
3 @@ -95,6 +95,9 @@ int nf_xfrm_me_harder(struct net *net, s
7 + if (skb->dev && !dev_net(skb->dev)->xfrm.policy_count[XFRM_POLICY_OUT])
10 err = xfrm_decode_session(skb, &fl, family);