diff --git a/net/netfilter/nf_flow_table_ip.c b/net/netfilter/nf_flow_table_ip.c
index 0b78decce8a9bdc3ed404f9913384335408b00d3..c9e332fafcb5c22559f68858b36f3207822c4423 100644
--- a/net/netfilter/nf_flow_table_ip.c
+++ b/net/netfilter/nf_flow_table_ip.c
@@ -310,6 +310,7 @@ static unsigned int nf_flow_xmit_xfrm(struct sk_buff *skb,
                                      struct dst_entry *dst)
 {
        skb_orphan(skb);
+       skb_dst_drop(skb);
        skb_dst_set_noref(skb, dst);
        dst_output(state->net, state->sk, skb);
        return NF_STOLEN;
@@ -861,6 +862,7 @@ nf_flow_offload_ip_hook(void *priv, struct sk_buff *skb,
                        return NF_DROP;
                }
                xmit.dest = neigh->ha;
+               skb_dst_drop(skb);
                skb_dst_set_noref(skb, &rt->dst);
                break;
        case FLOW_OFFLOAD_XMIT_DIRECT:
@@ -1178,6 +1180,7 @@ nf_flow_offload_ipv6_hook(void *priv, struct sk_buff *skb,
                        return NF_DROP;
                }
                xmit.dest = neigh->ha;
+               skb_dst_drop(skb);
                skb_dst_set_noref(skb, &rt->dst);
                break;
        case FLOW_OFFLOAD_XMIT_DIRECT: