Or disable algif_aead module as in https://news.ycombinator.com/item?id=47957409

That's not enough in this case. The suggested mitigation according to the Dirty.Frag github page is to blacklist esp4, esp6 and rxrpc