Hi Patrick,
I was working on the same problem for one of my customers.
Basically we were presenting 2 VFs (each from separate PF) to guest VM. Within guest VM intention was to use bonding to make networking resilient. Based on the test I did, only single configuration worked for me.
I used the following options (active/standby bonding mode):
BONDING_OPTS=”mode=1 miimon=200 fail_over_mac=1”
The important option is: fail_over_mac=1. Failover works perfectly OK. No "spoofed packets detected" are anymore generated.
Regards,
Greg Wojcieszczuk