======================================
| [ 1131.274696] #PF: supervisor read access in kernel mode
| [ 1131.274728] #PF: error_code(0x0000) - not-present page
| [ 1131.274759] PGD 4860067 P4D 4860067 PUD 79a3067 PMD 0
| [ 1131.274800] Oops: 0000 [#1] PREEMPT SMP NOPTI
[ 1131.274884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1131.274946] Workqueue: mld mld_ifc_work
[ 1131.274984] RIP: 0010:xfrm_tmpl_resolve (net/xfrm/xfrm_policy.c:2492 net/xfrm/xfrm_policy.c:2541) 
[ 1131.275021] Code: 4c 8b 6c 24 08 41 8b 47 6c 4d 89 f8 48 89 ea 4c 89 f6 4c 89 ef 50 8b 44 24 08 50 4c 8d 4c 24 6c e8 09 ce 00 00 49 89 c0 58 5a <41> f6 80 e8 02 00 00 fd 0f 85 29 03 00 00 4d 85 c0 0f 84 a7 00 00
All code
========
   0:	4c 8b 6c 24 08       	mov    0x8(%rsp),%r13
   5:	41 8b 47 6c          	mov    0x6c(%r15),%eax
   9:	4d 89 f8             	mov    %r15,%r8
   c:	48 89 ea             	mov    %rbp,%rdx
   f:	4c 89 f6             	mov    %r14,%rsi
  12:	4c 89 ef             	mov    %r13,%rdi
  15:	50                   	push   %rax
  16:	8b 44 24 08          	mov    0x8(%rsp),%eax
  1a:	50                   	push   %rax
  1b:	4c 8d 4c 24 6c       	lea    0x6c(%rsp),%r9
  20:	e8 09 ce 00 00       	call   0xce2e
  25:	49 89 c0             	mov    %rax,%r8
  28:	58                   	pop    %rax
  29:	5a                   	pop    %rdx
  2a:*	41 f6 80 e8 02 00 00 	testb  $0xfd,0x2e8(%r8)		<-- trapping instruction
  31:	fd 
  32:	0f 85 29 03 00 00    	jne    0x361
  38:	4d 85 c0             	test   %r8,%r8
  3b:	0f                   	.byte 0xf
  3c:	84                   	.byte 0x84
  3d:	a7                   	cmpsl  %es:(%rdi),%ds:(%rsi)
	...

Code starting with the faulting instruction
===========================================
   0:	41 f6 80 e8 02 00 00 	testb  $0xfd,0x2e8(%r8)
   7:	fd 
   8:	0f 85 29 03 00 00    	jne    0x337
   e:	4d 85 c0             	test   %r8,%r8
  11:	0f                   	.byte 0xf
  12:	84                   	.byte 0x84
  13:	a7                   	cmpsl  %es:(%rdi),%ds:(%rsi)
	...
[ 1131.275114] RSP: 0018:ffffb3f1001b7770 EFLAGS: 00010246
[ 1131.275149] RAX: 000000000000000a RBX: 0000000000000000 RCX: 000000004f1ad545
[ 1131.275195] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8e7541964500
[ 1131.275238] RBP: ffffb3f1001b7ab0 R08: 0000000000000000 R09: 00000000ae37d549
[ 1131.275285] R10: ffff8e75479b2d80 R11: 000000000000000a R12: ffff8e75479b2d98
[ 1131.275328] R13: ffffb3f1001b7ad8 R14: ffffb3f1001b7ae8 R15: ffff8e75479b2c00
[ 1131.275373] FS:  0000000000000000(0000) GS:ffff8e757ed80000(0000) knlGS:0000000000000000
[ 1131.275419] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1131.275457] CR2: 00000000000002e8 CR3: 00000000082ba006 CR4: 0000000000770ef0
[ 1131.275502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1131.275547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1131.275590] PKRU: 55555554
[ 1131.275608] Call Trace:
[ 1131.275635]  <TASK>
[ 1131.275656] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) 
[ 1131.275688] ? page_fault_oops (arch/x86/mm/fault.c:713) 
[ 1131.275719] ? ip6_finish_output (net/ipv6/ip6_output.c:211 net/ipv6/ip6_output.c:222) 
[ 1131.275752] ? netlink_has_listeners (net/netlink/af_netlink.c:1396) 
[ 1131.275786] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:72 arch/x86/mm/fault.c:1513 arch/x86/mm/fault.c:1563) 
[ 1131.275814] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) 
[ 1131.275843] ? xfrm_tmpl_resolve (net/xfrm/xfrm_policy.c:2492 net/xfrm/xfrm_policy.c:2541) 
[ 1131.275878] ? fib6_table_lookup (net/ipv6/route.c:858 net/ipv6/route.c:896 net/ipv6/route.c:2193) 
[ 1131.275914] xfrm_resolve_and_create_bundle (net/xfrm/xfrm_policy.c:2836) 
[ 1131.275948] ? ip6_pol_route (net/ipv6/route.c:2236) 
[ 1131.275974] ? ip6_pol_route (net/ipv6/route.c:2276) 
[ 1131.276001] ? xfrm_policy_inexact_lookup_rcu (./include/linux/rhashtable.h:133 ./include/linux/rhashtable.h:159 ./include/linux/rhashtable.h:604 ./include/linux/rhashtable.h:646 net/xfrm/xfrm_policy.c:2088) 
[ 1131.276035] ? xfrm_policy_lookup_bytype.constprop.0 (net/xfrm/xfrm_policy.c:2235) 
[ 1131.276075] xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3073 net/xfrm/xfrm_policy.c:3202) 
[ 1131.276111] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1147) 
[ 1131.276146] xfrm_lookup_route (net/xfrm/xfrm_policy.c:3314) 
[ 1131.276173] inet6_csk_route_socket (net/ipv6/inet6_connection_sock.c:106) 
[ 1131.276211] inet6_csk_xmit (net/ipv6/inet6_connection_sock.c:121) 
[ 1131.276240] l2tp_xmit_skb (net/l2tp/l2tp_core.c:1004 net/l2tp/l2tp_core.c:1093 net/l2tp/l2tp_core.c:1109) l2tp_core
[ 1131.276283] l2tp_eth_dev_xmit (net/l2tp/l2tp_eth.c:75) l2tp_eth
[ 1131.276319] dev_hard_start_xmit (./include/linux/netdevice.h:4878 ./include/linux/netdevice.h:4892 net/core/dev.c:3564 net/core/dev.c:3580) 
[ 1131.276353] sch_direct_xmit (net/sched/sch_generic.c:343) 
[ 1131.276384] __dev_queue_xmit (net/core/dev.c:3793 net/core/dev.c:4339) 
[ 1131.276411] ? xfrm_policy_lookup_bytype.constprop.0 (net/xfrm/xfrm_policy.c:2235) 
[ 1131.276451] ip6_finish_output2 (./include/net/neighbour.h:526 ./include/net/neighbour.h:540 net/ipv6/ip6_output.c:137) 
[ 1131.276481] ? kmem_cache_alloc (mm/slub.c:3610 mm/slub.c:3663 mm/slub.c:3835 mm/slub.c:3852) 
[ 1131.276512] ip6_finish_output (net/ipv6/ip6_output.c:211 net/ipv6/ip6_output.c:222) 
[ 1131.276535] mld_sendpack (net/ipv6/mcast.c:1822) 
[ 1131.276569] mld_ifc_work (net/ipv6/mcast.c:2652) 
[ 1131.276596] process_one_work (kernel/workqueue.c:3254) 
[ 1131.276628] ? __pfx_worker_thread (kernel/workqueue.c:3362) 
[ 1131.276659] worker_thread (kernel/workqueue.c:3329 kernel/workqueue.c:3416) 
[ 1131.276684] ? __pfx_worker_thread (kernel/workqueue.c:3362) 
[ 1131.276717] kthread (kernel/kthread.c:388) 
[ 1131.276745] ? __pfx_kthread (kernel/kthread.c:341) 
[ 1131.276769] ret_from_fork (arch/x86/kernel/process.c:147) 
[ 1131.276802] ? __pfx_kthread (kernel/kthread.c:341) 


Finger prints:
xfrm_tmpl_resolve:xfrm_resolve_and_create_bundle:xfrm_lookup_with_ifid:xfrm_lookup_route