======================================
| [   20.659756][  T157] br0: port 2(s1) entered blocking state
| [   20.660061][  T157] br0: port 2(s1) entered forwarding state
| [   21.323646][  T295] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI
| [   21.324086][  T295] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[   21.324636][  T295] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 21.324848][ T295] RIP: 0010:xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3181) 
[ 21.325085][ T295] Code: f1 f1 f1 c7 40 04 00 00 f2 f2 c7 40 08 00 00 f3 f3 65 48 8b 05 9a 32 e3 02 48 89 84 24 a8 00 00 00 31 c0 48 89 f8 48 c1 e8 03 <80> 3c 10 00 0f 85 cb 08 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b
All code
========
   0:	f1                   	int1
   1:	f1                   	int1
   2:	f1                   	int1
   3:	c7 40 04 00 00 f2 f2 	movl   $0xf2f20000,0x4(%rax)
   a:	c7 40 08 00 00 f3 f3 	movl   $0xf3f30000,0x8(%rax)
  11:	65 48 8b 05 9a 32 e3 	mov    %gs:0x2e3329a(%rip),%rax        # 0x2e332b3
  18:	02 
  19:	48 89 84 24 a8 00 00 	mov    %rax,0xa8(%rsp)
  20:	00 
  21:	31 c0                	xor    %eax,%eax
  23:	48 89 f8             	mov    %rdi,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)		<-- trapping instruction
  2e:	0f 85 cb 08 00 00    	jne    0x8ff
  34:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  3b:	fc ff df 
  3e:	48                   	rex.W
  3f:	8b                   	.byte 0x8b

Code starting with the faulting instruction
===========================================
   0:	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)
   4:	0f 85 cb 08 00 00    	jne    0x8d5
   a:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  11:	fc ff df 
  14:	48                   	rex.W
  15:	8b                   	.byte 0x8b
[   21.325669][  T295] RSP: 0018:ffffc90000b679d8 EFLAGS: 00010202
[   21.325882][  T295] RAX: 0000000000000001 RBX: 1ffff9200016cf41 RCX: ffff88800de68040
[   21.326132][  T295] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000008
[   21.326380][  T295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   21.326627][  T295] R10: 0000000000000000 R11: ffffffff863796a0 R12: 0000000000000006
[   21.326871][  T295] R13: ffff88800de68040 R14: ffffc90000b67be0 R15: ffff8880050b1880
[   21.327136][  T295] FS:  00007f2c3a303300(0000) GS:ffff8880ae3c4000(0000) knlGS:0000000000000000
[   21.327432][  T295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   21.327640][  T295] CR2: 000000000041aae8 CR3: 000000000de4b006 CR4: 0000000000772ef0
[   21.327890][  T295] PKRU: 55555554
[   21.328020][  T295] Call Trace:
[   21.328144][  T295]  <TASK>
[ 21.328233][ T295] ? find_held_lock (kernel/locking/lockdep.c:5353) 
[ 21.328407][ T295] ? __pfx_xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3177) 
[ 21.328615][ T295] ? dst_release (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcuref.h:174 net/core/dst.c:167) 
[ 21.328780][ T295] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1231) 
[ 21.328987][ T295] xfrm_lookup_route (net/xfrm/xfrm_policy.c:3351) 
[ 21.329157][ T295] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1271) 
[ 21.329321][ T295] ? __pfx_ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1271) 
[ 21.329484][ T295] ? ip6_datagram_dst_update (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv6/datagram.c:94) 
[ 21.329651][ T295] ? __lock_release (kernel/locking/lockdep.c:5539) 
[ 21.329817][ T295] ip6_datagram_dst_update (net/ipv6/datagram.c:96) 
[ 21.329980][ T295] ? __pfx_ip6_datagram_dst_update (net/ipv6/datagram.c:73) 
[ 21.330189][ T295] ? lockdep_unlock (kernel/locking/lockdep.c:159) 
[ 21.330357][ T295] ? validate_chain (kernel/locking/lockdep.c:3922) 
[ 21.330528][ T295] ? __lock_acquire (kernel/locking/lockdep.c:5240) 
[ 21.330695][ T295] ? __ip6_datagram_connect (net/ipv6/datagram.c:256) 
[ 21.330860][ T295] __ip6_datagram_connect (net/ipv6/datagram.c:256) 
[ 21.331025][ T295] ? __pfx___ip6_datagram_connect (net/ipv6/datagram.c:143) 
[ 21.331233][ T295] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) 
[ 21.331401][ T295] ? __pfx_inet_dgram_connect (net/ipv4/af_inet.c:570) 
[ 21.331571][ T295] udpv6_connect (net/ipv6/udp.c:1310) 
[ 21.331742][ T295] ? inet_dgram_connect (net/ipv4/af_inet.c:590 (discriminator 1)) 
[ 21.331916][ T295] __sys_connect (./include/linux/file.h:62 ./include/linux/file.h:83 net/socket.c:2095) 
[ 21.332087][ T295] ? __pfx___sys_connect (net/socket.c:2093) 
[ 21.332255][ T295] ? fd_install (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 fs/file.c:661) 
[ 21.332427][ T295] ? fd_install (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcupdate.h:955 fs/file.c:661) 
[ 21.332608][ T295] ? __sys_socket (net/socket.c:503 net/socket.c:1740) 
[ 21.332772][ T295] ? __pfx___sys_socket (net/socket.c:1727) 
[ 21.332934][ T295] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:142 ./include/linux/mmap_lock.h:237 arch/x86/mm/fault.c:1338) 
[ 21.333102][ T295] __x64_sys_connect (net/socket.c:2108) 
[ 21.333267][ T295] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) 
[ 21.333443][ T295] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 21.333610][ T295] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[   21.333818][  T295] RIP: 0033:0x7f2c3a599d77
[ 21.333992][ T295] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89
All code
========
   0:	64 89 01             	mov    %eax,%fs:(%rcx)
   3:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
   7:	c3                   	ret
   8:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   f:	00 00 00 
  12:	90                   	nop
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2a 00 00 00       	mov    $0x2a,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 18          	sub    $0x18,%rsp
  37:	89 54 24 0c          	mov    %edx,0xc(%rsp)
  3b:	48 89 34 24          	mov    %rsi,(%rsp)
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 18          	sub    $0x18,%rsp
   d:	89 54 24 0c          	mov    %edx,0xc(%rsp)
  11:	48 89 34 24          	mov    %rsi,(%rsp)
  15:	89                   	.byte 0x89
[   21.334583][  T295] RSP: 002b:00007fffee521168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   21.334834][  T295] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007f2c3a599d77
[   21.335080][  T295] RDX: 000000000000001c RSI: 000000000041861c RDI: 0000000000000006
[   21.335330][  T295] RBP: 00007fffee521450 R08: 00007fffee521488 R09: 0000000000000002
[   21.335596][  T295] R10: 00007f2c3a4915a0 R11: 0000000000000246 R12: 00007fffee5217a8


Finger prints:
xfrm_lookup_with_ifid:xfrm_lookup_route:ip6_dst_lookup_flow:ip6_datagram_dst_update:__ip6_datagram_connect