diff --git a/net/ipv6/ip6_vti.c b/net/ipv6/ip6_vti.c
index 43c06ec202a093201e5d7a47507cbaebce875c95..94f16e82a4581a88466ee0ccb0413e2b01ad35c8 100644
--- a/net/ipv6/ip6_vti.c
+++ b/net/ipv6/ip6_vti.c
@@ -315,7 +315,7 @@ static int vti6_rcv(struct sk_buff *skb)
 
 		if (!xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb)) {
 			rcu_read_unlock();
-			return 0;
+			goto discard;
 		}
 
 		ipv6h = ipv6_hdr(skb);