Okay, so here is the improved patch, which now performs NDP in addition to ARP. I tested everything locally with QEMU VMs running a minimal Debian system, and it all worked flawlessly. Moreover, the log messages are improved, and I added new log message "Guest MAC address: ..." as soon as we discover the guest's MAC address or notice a change of it.