======================================
| [  335.720899][  T531] br1: port 2(vxlan1) entered forwarding state
| [  336.782968][    C2] ------------[ cut here ]------------
| [  336.783392][    C2] UBSAN: invalid-load in ./include/linux/skbuff.h:4267:9
| [  336.783761][    C2] load of value 107 is not a valid value for type '_Bool'
[  336.784539][    C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  336.785271][    C2] Workqueue: ipv6_addrconf addrconf_dad_work
[  336.785616][    C2] Call Trace:
[  336.785811][    C2]  <IRQ>
[ 336.785964][ C2] dump_stack_lvl (lib/dump_stack.c:107) 
[ 336.786253][ C2] __ubsan_handle_load_invalid_value (lib/ubsan.c:218 lib/ubsan.c:419) 
[ 336.786589][ C2] br_forward_finish.cold (./include/linux/skbuff.h:4267 net/bridge/br_forward.c:65) 
[ 336.786871][ C2] deliver_clone (net/bridge/br_forward.c:132) 
[ 336.787120][ C2] br_handle_frame_finish (net/bridge/br_input.c:215) 
[ 336.787426][ C2] ? __pfx_br_handle_frame_finish (net/bridge/br_input.c:75) 
[ 336.787805][ C2] br_handle_frame (net/bridge/br_input.c:417) 
[  336.788090][    C2]  ? __pfx_br_
DETECTED CRASH, lowering timeout
handle_frame+0x10/0x10 
[ 336.788383][ C2] __netif_receive_skb_core.constprop.0 (net/core/dev.c:5448) 
[ 336.788780][ C2] ? mark_lock (kernel/locking/lockdep.c:4656 (discriminator 3)) 
[ 336.789053][ C2] ? __lock_acquire (kernel/locking/lockdep.c:5137) 
[ 336.789329][ C2] ? __pfx___netif_receive_skb_core.constprop.0 (net/core/dev.c:5341) 
[ 336.789723][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) 
[ 336.790022][ C2] ? process_backlog (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/dev.c:5995) 
[ 336.790297][ C2] __netif_receive_skb_one_core (net/core/dev.c:5553) 
[ 336.790612][ C2] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5547) 
[ 336.790973][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 336.791217][ C2] ? process_backlog (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/dev.c:5995) 
[ 336.791487][ C2] process_backlog (./include/linux/rcupdate.h:779 net/core/dev.c:5997) 
[ 336.791744][ C2] __napi_poll.constprop.0 (net/core/dev.c:6625) 
[ 336.792030][ C2] net_rx_action (net/core/dev.c:6694 net/core/dev.c:6827) 
[ 336.792285][ C2] ? __pfx_net_rx_action (net/core/dev.c:6791) 
[ 336.792555][ C2] ? lockdep_unlock (kernel/locking/lockdep.c:152 kernel/locking/lockdep.c:148) 
[ 336.792819][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 336.793077][ C2] __do_softirq (kernel/softirq.c:553) 
[ 336.793321][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:308 ./include/linux/rcupdate.h:818 net/core/dev.c:4364) 
[ 336.793591][ C2] do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) 
[  336.793813][    C2]  </IRQ>
[  336.793968][    C2]  <TASK>
[ 336.794127][ C2] __local_bh_enable_ip (kernel/softirq.c:381) 
[ 336.794394][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:308 ./include/linux/rcupdate.h:818 net/core/dev.c:4364) 
[ 336.794661][ C2] __dev_queue_xmit (net/core/dev.c:4365) 
[ 336.794919][ C2] ? mark_lock (kernel/locking/lockdep.c:4656 (discriminator 3)) 
[ 336.795151][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 336.795409][ C2] ? eth_header (net/ethernet/eth.c:100) 
[ 336.795678][ C2] ? __pfx___dev_queue_xmit (net/core/dev.c:4246) 
[ 336.796010][ C2] ip6_finish_output2 (./include/net/neighbour.h:542 net/ipv6/ip6_output.c:137) 
[ 336.796343][ C2] ip6_finish_output (net/ipv6/ip6_output.c:211 net/ipv6/ip6_output.c:222) 
[ 336.796612][ C2] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:243) 
[ 336.796875][ C2] ? __pfx_ip6_output (net/ipv6/ip6_output.c:230) 
[ 336.797144][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) 
[ 336.797463][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 336.797720][ C2] ? __lock_release (kernel/locking/lockdep.c:353 kernel/locking/lockdep.c:5436) 
[ 336.797980][ C2] NF_HOOK.constprop.0 (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 ./include/linux/netfilter.h:238 ./include/linux/netfilter.h:312) 
[ 336.798290][ C2] ? __pfx_NF_HOOK.constprop.0 (./include/linux/netfilter.h:308) 
[ 336.798597][ C2] ? __pfx_xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3133) 
[ 336.798982][ C2] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:4300 kernel/locking/lockdep.c:4359) 
[ 336.799360][ C2] ? icmp6_dst_alloc (net/ipv6/route.c:3292) 
[ 336.799665][ C2] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:77 kernel/softirq.c:386) 
[ 336.799969][ C2] mld_sendpack (net/ipv6/mcast.c:1822) 
[ 336.800216][ C2] ? ipv6_mc_dad_complete (net/ipv6/mcast.c:2242) 
[ 336.800509][ C2] ? __pfx_mld_sendpack (net/ipv6/mcast.c:1779) 
[ 336.800833][ C2] ipv6_mc_dad_complete (./include/linux/refcount.h:190 net/ipv6/mcast.c:2244) 
[ 336.801142][ C2] addrconf_dad_completed (net/ipv6/addrconf.c:4343) 
[ 336.801448][ C2] ? __pfx_addrconf_dad_completed (net/ipv6/addrconf.c:4309) 
[ 336.801789][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 336.802083][ C2] ? addrconf_dad_work (net/ipv6/addrconf.c:4270) 
[ 336.802375][ C2] addrconf_dad_work (net/ipv6/addrconf.c:4270) 
[ 336.802665][ C2] ? __pfx_addrconf_dad_work (net/ipv6/addrconf.c:4180) 
[ 336.802988][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 336.803237][ C2] ? process_one_work (kernel/workqueue.c:2609) 
[ 336.803555][ C2] process_one_work (kernel/workqueue.c:2633) 
[ 336.803852][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 336.804103][ C2] ? __pfx_process_one_work (kernel/workqueue.c:2542) 
[ 336.804435][ C2] ? assign_work (kernel/workqueue.c:1101) 
[ 336.804716][ C2] worker_thread (kernel/workqueue.c:2700 kernel/workqueue.c:2787) 
[ 336.804977][ C2] ? __pfx_worker_thread (kernel/workqueue.c:2733) 
[ 336.805285][ C2] kthread (kernel/kthread.c:388) 
[ 336.805511][ C2] ? __pfx_kthread (kernel/kthread.c:341) 
[ 336.805786][ C2] ret_from_fork (arch/x86/kernel/process.c:147) 
[ 336.806018][ C2] ? __pfx_kthread (kernel/kthread.c:341) 
[ 336.806306][ C2] ret_from_fork_asm (arch/x86/entry/entry_64.S:250) 
| [  336.806780][    C2] ---[ end trace ]---
| [  336.808199][    C2] ------------[ cut here ]------------
| [  336.808580][    C2] UBSAN: invalid-load in ./include/linux/skbuff.h:4267:9
| [  336.808990][    C2] load of value 107 is not a valid value for type '_Bool'
[  336.809858][    C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  336.810530][    C2] Workqueue: ipv6_addrconf addrconf_dad_work
[  336.810881][    C2] Call Trace:
[  336.811067][    C2]  <IRQ>
[ 336.811223][ C2] dump_stack_lvl (lib/dump_stack.c:107) 
[ 336.811465][ C2] __ubsan_handle_load_invalid_value (lib/ubsan.c:218 lib/ubsan.c:419) 
[ 336.811796][ C2] skb_scrub_packet.cold (./include/linux/skbuff.h:4267 net/core/skbuff.c:6030) 
[ 336.812072][ C2] __dev_forward_skb2 (./include/linux/netdevice.h:4115 net/core/dev.c:2135) 
[ 336.812345][ C2] veth_xmit (drivers/net/veth.c:319 drivers/net/veth.c:374) 
[ 336.812579][ C2] dev_hard_start_xmit (./include/linux/netdevice.h:4991 ./include/linux/netdevice.h:5005 net/core/dev.c:3530 net/core/dev.c:3546) 
[ 336.812857][ C2] __dev_queue_xmit (./include/linux/netdevice.h:3369 net/core/dev.c:4338) 
[ 336.813123][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 336.813378][ C2] ? eth_header (net/ethernet/eth.c:100) 
[ 336.813622][ C2] ? __pfx___dev_queue_xmit (net/core/dev.c:4246) 
[ 336.813903][ C2] ? neigh_resolve_output (./include/linux/netdevice.h:3226 net/core/neighbour.c:1558 net/core/neighbour.c:1543) 
[ 336.814192][ C2] ? __neigh_update (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/neighbour.c:1446) 
[ 336.814458][ C2] __neigh_update (net/core/neighbour.c:1461) 
[ 336.814727][ C2] arp_process (./include/linux/instrumented.h:96 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:400 (discriminator 4) ./include/linux/refcount.h:261 (discriminator 4) ./include/linux/refcount.h:304 (discriminator 4) ./include/linux/refcount.h:322 (discriminator 4) ./include/net/neighbour.h:444 (discriminator 4) net/ipv4/arp.c:934 (discriminator 4)) 
[ 336.814977][ C2] ? __pfx_arp_process (net/ipv4/arp.c:699) 
[ 336.815252][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) 
[ 336.815529][ C2] ? __pfx_arp_rcv (net/ipv4/arp.c:965) 
[ 336.815774][ C2] __netif_receive_skb_one_core (net/core/dev.c:5554 (discriminator 5)) 
[ 336.816081][ C2] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5547) 
[ 336.816421][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 336.816666][ C2] ? process_backlog (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/dev.c:5995) 
[ 336.816932][ C2] process_backlog (./include/linux/rcupdate.h:779 net/core/dev.c:5997) 
[ 336.817190][ C2] __napi_poll.constprop.0 (net/core/dev.c:6625) 
[ 336.817477][ C2] net_rx_action (net/core/dev.c:6694 net/core/dev.c:6827) 
[ 336.817734][ C2] ? __pfx_net_rx_action (net/core/dev.c:6791) 
[ 336.818004][ C2] ? lockdep_unlock (kernel/locking/lockdep.c:152 kernel/locking/lockdep.c:148) 
[ 336.818267][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 336.818526][ C2] __do_softirq (kernel/softirq.c:553) 
[ 336.818779][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:308 ./include/linux/rcupdate.h:818 net/core/dev.c:4364) 
[ 336.819049][ C2] do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) 
[  336.819270][    C2]  </IRQ>
[  336.819426][    C2]  <TASK>
[ 336.819581][ C2] __local_bh_enable_ip (kernel/softirq.c:381) 
[ 336.819848][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:308 ./include/linux/rcupdate.h:818 net/core/dev.c:4364) 
[ 336.820115][ C2] __dev_queue_xmit (net/core/dev.c:4365) 
[ 336.820374][ C2] ? mark_lock (kernel/locking/lockdep.c:4656 (discriminator 3)) 
[ 336.820607][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 336.820861][ C2] ? eth_header (net/ethernet/eth.c:100) 
[ 336.821099][ C2] ? __pfx___dev_queue_xmit (net/core/dev.c:4246) 
[ 336.821457][ C2] ip6_finish_output2 (./include/net/neighbour.h:542 net/ipv6/ip6_output.c:137) 
[ 336.821761][ C2] ip6_finish_output (net/ipv6/ip6_output.c:211 net/ipv6/ip6_output.c:222) 
[ 336.822046][ C2] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:243) 
[ 336.822305][ C2] ? __pfx_ip6_output (net/ipv6/ip6_output.c:230) 
[ 336.822575][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) 
[ 336.822891][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 336.823131][ C2] ? __lock_release (kernel/locking/lockdep.c:353 kernel/locking/lockdep.c:5436) 
[ 336.823435][ C2] NF_HOOK.constprop.0 (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 ./include/linux/netfilter.h:238 ./include/linux/netfilter.h:312) 
[ 336.823728][ C2] ? __pfx_NF_HOOK.constprop.0 (./include/linux/netfilter.h:308) 
[ 336.824035][ C2] ? __pfx_xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3133) 
[ 336.824362][ C2] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:4300 kernel/locking/lockdep.c:4359) 
[ 336.824751][ C2] ? icmp6_dst_alloc (net/ipv6/route.c:3292) 
[ 336.825012][ C2] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:77 kernel/softirq.c:386) 
[ 336.825328][ C2] mld_sendpack (net/ipv6/mcast.c:1822) 
[ 336.825580][ C2] ? ipv6_mc_dad_complete (net/ipv6/mcast.c:2242) 
[ 336.825898][ C2] ? __pfx_mld_sendpack (net/ipv6/mcast.c:1779) 
[ 336.826199][ C2] ipv6_mc_dad_complete (./include/linux/refcount.h:190 net/ipv6/mcast.c:2244) 
[ 336.826486][ C2] addrconf_dad_completed (net/ipv6/addrconf.c:4343) 
[ 336.826798][ C2] ? __pfx_addrconf_dad_completed (net/ipv6/addrconf.c:4309) 
[ 336.827121][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 336.827407][ C2] ? addrconf_dad_work (net/ipv6/addrconf.c:4270) 
[ 336.827712][ C2] addrconf_dad_work (net/ipv6/addrconf.c:4270) 
[ 336.828000][ C2] ? __pfx_addrconf_dad_work (net/ipv6/addrconf.c:4180) 
[ 336.828300][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 336.828556][ C2] ? process_one_work (kernel/workqueue.c:2609) 
[ 336.828852][ C2] process_one_work (kernel/workqueue.c:2633) 
[ 336.829153][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 336.829432][ C2] ? __pfx_process_one_work (kernel/workqueue.c:2542) 
[ 336.829734][ C2] ? assign_work (kernel/workqueue.c:1101) 
[ 336.829992][ C2] worker_thread (kernel/workqueue.c:2700 kernel/workqueue.c:2787) 
[ 336.830257][ C2] ? __pfx_worker_thread (kernel/workqueue.c:2733) 
[ 336.830575][ C2] kthread (kernel/kthread.c:388) 
[ 336.830790][ C2] ? __pfx_kthread (kernel/kthread.c:341) 
[ 336.831058][ C2] ret_from_fork (arch/x86/kernel/process.c:147) 
[ 336.831310][ C2] ? __pfx_kthread (kernel/kthread.c:341) 


Finger prints:
dump_stack_lvl:__ubsan_handle_load_invalid_value:deliver_clone:br_handle_frame_finish
dump_stack_lvl:__ubsan_handle_load_invalid_value:__dev_forward_skb2:veth_xmit