======================================
| [   25.148878][   T70] br0: port 4(s2) entered blocking state
| [   25.149208][   T70] br0: port 4(s2) entered forwarding state
| [   25.797009][  T303] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI
| [   25.797484][  T303] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[   25.798027][  T303] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 25.798234][ T303] RIP: 0010:xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3181) 
[ 25.798481][ T303] Code: f1 f1 f1 c7 40 04 00 00 f2 f2 c7 40 08 00 00 f3 f3 65 48 8b 05 9a 32 e3 02 48 89 84 24 a8 00 00 00 31 c0 48 89 f8 48 c1 e8 03 <80> 3c 10 00 0f 85 cb 08 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b
All code
========
   0:	f1                   	int1
   1:	f1                   	int1
   2:	f1                   	int1
   3:	c7 40 04 00 00 f2 f2 	movl   $0xf2f20000,0x4(%rax)
   a:	c7 40 08 00 00 f3 f3 	movl   $0xf3f30000,0x8(%rax)
  11:	65 48 8b 05 9a 32 e3 	mov    %gs:0x2e3329a(%rip),%rax        # 0x2e332b3
  18:	02 
  19:	48 89 84 24 a8 00 00 	mov    %rax,0xa8(%rsp)
  20:	00 
  21:	31 c0                	xor    %eax,%eax
  23:	48 89 f8             	mov    %rdi,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)		<-- trapping instruction
  2e:	0f 85 cb 08 00 00    	jne    0x8ff
  34:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  3b:	fc ff df 
  3e:	48                   	rex.W
  3f:	8b                   	.byte 0x8b

Code starting with the faulting instruction
===========================================
   0:	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)
   4:	0f 85 cb 08 00 00    	jne    0x8d5
   a:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  11:	fc ff df 
  14:	48                   	rex.W
  15:	8b                   	.byte 0x8b
[   25.799070][  T303] RSP: 0018:ffffc90000cd79d8 EFLAGS: 00010202
[   25.799289][  T303] RAX: 0000000000000001 RBX: 1ffff9200019af41 RCX: ffff888005f18040
[   25.799538][  T303] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000008
[   25.799794][  T303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   25.800041][  T303] R10: 0000000000000000 R11: ffffffffa55796a0 R12: 0000000000000006
[   25.800301][  T303] R13: ffff888005f18040 R14: ffffc90000cd7be0 R15: ffff888008bd1880
[   25.800556][  T303] FS:  00007fc8a3361300(0000) GS:ffff88808f144000(0000) knlGS:0000000000000000
[   25.800849][  T303] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   25.801056][  T303] CR2: 000000000041aae8 CR3: 000000000b888005 CR4: 0000000000772ef0
[   25.801338][  T303] PKRU: 55555554
[   25.801465][  T303] Call Trace:
[   25.801592][  T303]  <TASK>
[ 25.801679][ T303] ? find_held_lock (kernel/locking/lockdep.c:5353) 
[ 25.801862][ T303] ? __pfx_xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3177) 
[ 25.802067][ T303] ? dst_release (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcuref.h:174 net/core/dst.c:167) 
[ 25.802248][ T303] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1231) 
[ 25.802460][ T303] xfrm_lookup_route (net/xfrm/xfrm_policy.c:3351) 
[ 25.802625][ T303] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1271) 
[ 25.802789][ T303] ? __pfx_ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1271) 
[ 25.802977][ T303] ? ip6_datagram_dst_update (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv6/datagram.c:94) 
[ 25.803150][ T303] ? __lock_release (kernel/locking/lockdep.c:5539) 
[ 25.803322][ T303] ip6_datagram_dst_update (net/ipv6/datagram.c:96) 
[ 25.803483][ T303] ? __pfx_ip6_datagram_dst_update (net/ipv6/datagram.c:73) 
[ 25.803682][ T303] ? lockdep_unlock (kernel/locking/lockdep.c:159) 
[ 25.803848][ T303] ? validate_chain (kernel/locking/lockdep.c:3922) 
[ 25.804012][ T303] ? __lock_acquire (kernel/locking/lockdep.c:5240) 
[ 25.804173][ T303] ? __ip6_datagram_connect (net/ipv6/datagram.c:256) 
[ 25.804339][ T303] __ip6_datagram_connect (net/ipv6/datagram.c:256) 
[ 25.804502][ T303] ? __pfx___ip6_datagram_connect (net/ipv6/datagram.c:143) 
[ 25.804703][ T303] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) 
[ 25.804872][ T303] ? __pfx_inet_dgram_connect (net/ipv4/af_inet.c:570) 
[ 25.805040][ T303] udpv6_connect (net/ipv6/udp.c:1310) 
[ 25.805210][ T303] ? inet_dgram_connect (net/ipv4/af_inet.c:590 (discriminator 1)) 
[ 25.805387][ T303] __sys_connect (./include/linux/file.h:62 ./include/linux/file.h:83 net/socket.c:2095) 
[ 25.805558][ T303] ? __pfx___sys_connect (net/socket.c:2093) 
[ 25.805718][ T303] ? fd_install (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 fs/file.c:661) 
[ 25.805888][ T303] ? fd_install (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcupdate.h:955 fs/file.c:661) 
[ 25.806107][ T303] ? __sys_socket (net/socket.c:503 net/socket.c:1740) 
[ 25.806310][ T303] ? __pfx___sys_socket (net/socket.c:1727) 
[ 25.806489][ T303] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:142 ./include/linux/mmap_lock.h:237 arch/x86/mm/fault.c:1338) 
[ 25.806674][ T303] __x64_sys_connect (net/socket.c:2108) 
[ 25.806854][ T303] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) 
[ 25.807041][ T303] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 25.807220][ T303] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[   25.807454][  T303] RIP: 0033:0x7fc8a35f7d77
[ 25.807645][ T303] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89
All code
========
   0:	64 89 01             	mov    %eax,%fs:(%rcx)
   3:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
   7:	c3                   	ret
   8:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   f:	00 00 00 
  12:	90                   	nop
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2a 00 00 00       	mov    $0x2a,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 18          	sub    $0x18,%rsp
  37:	89 54 24 0c          	mov    %edx,0xc(%rsp)
  3b:	48 89 34 24          	mov    %rsi,(%rsp)
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 18          	sub    $0x18,%rsp
   d:	89 54 24 0c          	mov    %edx,0xc(%rsp)
  11:	48 89 34 24          	mov    %rsi,(%rsp)
  15:	89                   	.byte 0x89
[   25.808298][  T303] RSP: 002b:00007ffcbd04ddf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   25.808569][  T303] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007fc8a35f7d77
[   25.808838][  T303] RDX: 000000000000001c RSI: 000000000041861c RDI: 0000000000000006
[   25.809107][  T303] RBP: 00007ffcbd04e0e0 R08: 00007ffcbd04e118 R09: 0000000000000002
[   25.809385][  T303] R10: 00007fc8a34ef5a0 R11: 0000000000000246 R12: 00007ffcbd04e438


Finger prints:
xfrm_lookup_with_ifid:xfrm_lookup_route:ip6_dst_lookup_flow:ip6_datagram_dst_update:__ip6_datagram_connect