Hi Greg, Would you consider to take the following patches for -stable? e75b3e1c9bc5 netfilter: nf_flow_table: ignore DF bit setting 8437a6209f76 netfilter: nft_flow_offload: set liberal tracking mode for tcp 91a9048f2380 netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment 69aeb538587e netfilter: nft_flow_offload: IPCB is only valid for ipv4 family Users report this is fixing a connection stall in: https://bugzilla.kernel.org/show_bug.cgi?id=203671 Thanks.