/lib/modules/4.10.0-20-generic/kernel/net/xfrm/ is in linux-image-extra-4.10.0-20-generic 4.10.0-20.22~16.04.1.
This file is owned by root:root, with mode 0o755.