Subject: [PATCH ipsec 0/6] xfrm: misc fixes

From: Sabrina Dubroca <[email-masked]>
Date: Thu, 16 Oct 2025 12:39:11 +0200

These are mostly independent fixes for small issues for state
creation/modification/deletion (except for the 2 migrate patches).

Sabrina Dubroca (6):
  xfrm: drop SA reference in xfrm_state_update if dir doesn't match
  xfrm: also call xfrm_state_delete_tunnel at destroy time for states
    that were never added
  xfrm: make state as DEAD before final put when migrate fails
  xfrm: call xfrm_dev_state_delete when xfrm_state_migrate fails to add
    the state
  xfrm: set err and extack on failure to create pcpu SA
  xfrm: check all hash buckets for leftover states during netns deletion

 net/xfrm/xfrm_state.c | 30 ++++++++++++++++++++++--------
 net/xfrm/xfrm_user.c  |  5 ++++-
 2 files changed, 26 insertions(+), 9 deletions(-)

-- 
2.51.0