8fcd8f95e1
won't work when kernfs is a module. But then again, kernfs as a module (i.e. current situation) doesn't contain IPSEC support, so it's not really any worse either.