======================================
| [   21.042174][   T37] br0: port 2(s1) entered blocking state
| [   21.042521][   T37] br0: port 2(s1) entered forwarding state
| [   21.751499][  T293] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI
| [   21.751978][  T293] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[   21.752572][  T293] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 21.752801][ T293] RIP: 0010:xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3181) 
[ 21.753046][ T293] Code: f1 f1 f1 c7 40 04 00 00 f2 f2 c7 40 08 00 00 f3 f3 65 48 8b 05 9a 32 e3 02 48 89 84 24 a8 00 00 00 31 c0 48 89 f8 48 c1 e8 03 <80> 3c 10 00 0f 85 cb 08 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b
All code
========
   0:	f1                   	int1
   1:	f1                   	int1
   2:	f1                   	int1
   3:	c7 40 04 00 00 f2 f2 	movl   $0xf2f20000,0x4(%rax)
   a:	c7 40 08 00 00 f3 f3 	movl   $0xf3f30000,0x8(%rax)
  11:	65 48 8b 05 9a 32 e3 	mov    %gs:0x2e3329a(%rip),%rax        # 0x2e332b3
  18:	02 
  19:	48 89 84 24 a8 00 00 	mov    %rax,0xa8(%rsp)
  20:	00 
  21:	31 c0                	xor    %eax,%eax
  23:	48 89 f8             	mov    %rdi,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)		<-- trapping instruction
  2e:	0f 85 cb 08 00 00    	jne    0x8ff
  34:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  3b:	fc ff df 
  3e:	48                   	rex.W
  3f:	8b                   	.byte 0x8b

Code starting with the faulting instruction
===========================================
   0:	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)
   4:	0f 85 cb 08 00 00    	jne    0x8d5
   a:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  11:	fc ff df 
  14:	48                   	rex.W
  15:	8b                   	.byte 0x8b
[   21.753700][  T293] RSP: 0018:ffffc90000dd79d8 EFLAGS: 00010202
[   21.753928][  T293] RAX: 0000000000000001 RBX: 1ffff920001baf41 RCX: ffff8880130f8040
[   21.754205][  T293] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000008
[   21.754487][  T293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   21.754769][  T293] R10: 0000000000000000 R11: ffffffff95d796a0 R12: 0000000000000006
[   21.755037][  T293] R13: ffff8880130f8040 R14: ffffc90000dd7be0 R15: ffff888004f69880
[   21.755320][  T293] FS:  00007f480809e300(0000) GS:ffff88809e844000(0000) knlGS:0000000000000000
[   21.755646][  T293] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   21.755882][  T293] CR2: 000000000041aae8 CR3: 0000000009c8b005 CR4: 0000000000772ef0
[   21.756153][  T293] PKRU: 55555554
[   21.756298][  T293] Call Trace:
[   21.756435][  T293]  <TASK>
[ 21.756529][ T293] ? find_held_lock (kernel/locking/lockdep.c:5353) 
[ 21.756713][ T293] ? __pfx_xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3177) 
[ 21.756937][ T293] ? dst_release (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcuref.h:174 net/core/dst.c:167) 
[ 21.757118][ T293] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1231) 
[ 21.757347][ T293] xfrm_lookup_route (net/xfrm/xfrm_policy.c:3351) 
[ 21.757528][ T293] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1271) 
[ 21.757735][ T293] ? __pfx_ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1271) 
[ 21.757919][ T293] ? ip6_datagram_dst_update (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv6/datagram.c:94) 
[ 21.758105][ T293] ? __lock_release (kernel/locking/lockdep.c:5539) 
[ 21.758287][ T293] ip6_datagram_dst_update (net/ipv6/datagram.c:96) 
[ 21.758466][ T293] ? __pfx_ip6_datagram_dst_update (net/ipv6/datagram.c:73) 
[ 21.758719][ T293] ? lockdep_unlock (kernel/locking/lockdep.c:159) 
[ 21.758897][ T293] ? validate_chain (kernel/locking/lockdep.c:3922) 
[ 21.759090][ T293] ? __lock_acquire (kernel/locking/lockdep.c:5240) 
[ 21.759271][ T293] ? __ip6_datagram_connect (net/ipv6/datagram.c:256) 
[ 21.759469][ T293] __ip6_datagram_connect (net/ipv6/datagram.c:256) 
[ 21.759661][ T293] ? __pfx___ip6_datagram_connect (net/ipv6/datagram.c:143) 
[ 21.759887][ T293] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) 
[ 21.760071][ T293] ? __pfx_inet_dgram_connect (net/ipv4/af_inet.c:570) 
[ 21.760251][ T293] udpv6_connect (net/ipv6/udp.c:1310) 
[ 21.760463][ T293] ? inet_dgram_connect (net/ipv4/af_inet.c:590 (discriminator 1)) 
[ 21.760645][ T293] __sys_connect (./include/linux/file.h:62 ./include/linux/file.h:83 net/socket.c:2095) 
[ 21.760826][ T293] ? __pfx___sys_connect (net/socket.c:2093) 
[ 21.761004][ T293] ? fd_install (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 fs/file.c:661) 
[ 21.761185][ T293] ? fd_install (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcupdate.h:955 fs/file.c:661) 
[ 21.761366][ T293] ? __sys_socket (net/socket.c:503 net/socket.c:1740) 
[ 21.761568][ T293] ? __pfx___sys_socket (net/socket.c:1727) 
[ 21.761765][ T293] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:142 ./include/linux/mmap_lock.h:237 arch/x86/mm/fault.c:1338) 
[ 21.761957][ T293] __x64_sys_connect (net/socket.c:2108) 
[ 21.762142][ T293] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) 
[ 21.762327][ T293] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 21.762540][ T293] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[   21.762772][  T293] RIP: 0033:0x7f4808334d77
[ 21.762978][ T293] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89
All code
========
   0:	64 89 01             	mov    %eax,%fs:(%rcx)
   3:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
   7:	c3                   	ret
   8:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   f:	00 00 00 
  12:	90                   	nop
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2a 00 00 00       	mov    $0x2a,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 18          	sub    $0x18,%rsp
  37:	89 54 24 0c          	mov    %edx,0xc(%rsp)
  3b:	48 89 34 24          	mov    %rsi,(%rsp)
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 18          	sub    $0x18,%rsp
   d:	89 54 24 0c          	mov    %edx,0xc(%rsp)
  11:	48 89 34 24          	mov    %rsi,(%rsp)
  15:	89                   	.byte 0x89
[   21.763636][  T293] RSP: 002b:00007ffcb7d0bbe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   21.763914][  T293] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007f4808334d77
[   21.764204][  T293] RDX: 000000000000001c RSI: 000000000041861c RDI: 0000000000000006
[   21.764477][  T293] RBP: 00007ffcb7d0bed0 R08: 00007ffcb7d0bf08 R09: 0000000000000002
[   21.764795][  T293] R10: 00007f480822c5a0 R11: 0000000000000246 R12: 00007ffcb7d0c228


Finger prints:
xfrm_lookup_with_ifid:xfrm_lookup_route:ip6_dst_lookup_flow:ip6_datagram_dst_update:__ip6_datagram_connect