Bug 2222414

Additional info:
reporter:       libreport-2.17.11
BUG: kernel NULL pointer dereference, address: 00000000000003a2
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 13 PID: 699 Comm: kworker/u32:11 Not tainted 6.3.11-200.fc38.x86_64 #1
Hardware name: AZW SER/SER, BIOS 5800H502 02/15/2023
Workqueue: netns cleanup_net
RIP: 0010:count_subheaders.part.0+0x33/0x230
Code: 0f 84 18 02 00 00 41 57 41 56 41 55 45 31 ed 41 54 45 31 e4 55 48 89 fd 53 48 83 ec 30 48 8b 5d 18 48 85 db 0f 84 b8 01 00 00 <48> 83 3b 00 0f 84 df 01 00 00 45 31 f6 45 31 c0 44 89 6c 24 08 49
RSP: 0018:ffffc38ec0db7d78 EFLAGS: 00010202
RAX: 0000000000000000 RBX: 00000000000003a2 RCX: 0000000000001388
RDX: 0000000080000000 RSI: ffffc38ec0db7e48 RDI: ffff9f2e8a943f80
RBP: ffff9f2e8a943f80 R08: 0000000000000000 R09: 00000000802a0024
R10: ffff9f2e8b09e800 R11: 0000000000003bd2 R12: 0000000000000000
R13: 0000000000000000 R14: ffffc38ec0db7e48 R15: ffff9f2eaf583660
FS:  0000000000000000(0000) GS:ffff9f34d1140000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000000003a2 CR3: 00000005a6022000 CR4: 0000000000750ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? find_entry.isra.0+0x61/0x90
 ? exc_page_fault+0x7c/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? count_subheaders.part.0+0x33/0x230
 ? krc_this_cpu_lock+0x2e/0x40
 ? kvfree_call_rcu+0x1ea/0x340
 unregister_sysctl_table.part.0+0x22/0x90
 xfrm6_net_exit+0x23/0x50
 ops_exit_list+0x33/0x70
 cleanup_net+0x221/0x3b0
 process_one_work+0x1c7/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xde/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x2c/0x50
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_ctl_led sunrpc vfat fat iwlmvm mac80211 snd_acp3x_pdm_dma snd_soc_dmic snd_acp3x_rn snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_hda_codec_realtek snd_sof snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi libarc4 snd_sof_utils snd_hda_intel snd_soc_core snd_usb_audio snd_intel_dspcfg intel_rapl_msr snd_intel_sdw_acpi snd_compress snd_usbmidi_lib intel_rapl_common snd_hda_codec ac97_bus snd_pcm_dmaengine snd_rawmidi edac_mce_amd snd_pci_ps snd_rpl_pci_acp6x snd_hda_core btusb mc snd_pci_acp6x snd_hwdep iwlwifi btrtl kvm_amd btbcm snd_seq snd_seq_device btintel btmtk snd_pci_acp5x snd_pcm kvm cfg80211 bluetooth snd_timer snd_rn_pci_acp3x
 snd_acp_config irqbypass snd snd_soc_acpi wmi_bmof rapl k10temp pcspkr i2c_piix4 rfkill snd_pci_acp3x soundcore joydev cm32181 industrialio acpi_cpufreq loop zram amdgpu i2c_algo_bit drm_ttm_helper ttm iommu_v2 drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel gpu_sched nvme polyval_clmulni polyval_generic drm_display_helper nvme_core ghash_clmulni_intel ccp sha512_ssse3 r8169 cec serio_raw sp5100_tco video nvme_common wmi i2c_hid_acpi i2c_hid fuse
CR2: 00000000000003a2