David, can you queue commit a8a572a for stable please? It fixes commit d7c7544c3d from 2010, and without it anyone using multiple ipsec net namespaces can find one (or more) of their netns incorrectly reach the ipsec dst limit and are no longer usable.
Thanks!
