NULL reference crash.
It is possible for nullptr to be returned from:
IBoundUDPSocket *CSharedSocket::AddRemoteHost( const netadr_t &adrRemote, CRecvPacketCallback callback )
This nullptr will get assigned to pRequest->m_pSocket at least in:
CSteamNetworkingSocketsSTUNRequest *CSteamNetworkingSocketsSTUNRequest::SendBindRequest CSteamNetworkingSocketsSTUNRequest *CSteamNetworkingSocketsSTUNRequest::CreatePeerConnectivityCheckRequest
Subsequent dereferences of m_pSocket will naturally crash.
Spotted same bug when tried master branch month ago. Just tried to connect 2 users with networking messages. Reverted back to 8 month old version.
Fixed by d5f855967440eeb5b4d5798bebe179ef868ac6af