for stable: xfrm: dst_entries_init() per-net dst_ops

David, can you queue commit a8a572a for stable please?  It fixes
commit d7c7544c3d from 2010, and without it anyone using multiple
ipsec net namespaces can find one (or more) of their netns incorrectly
reach the ipsec dst limit and are no longer usable.

Thanks!