==================================================================
BUG: KCSAN: data-race in vlan_dev_get_stats64 / vlan_dev_hard_start_xmit

read-write to 0xffffe8ffffdf90b0 of 8 bytes by task 25558 on cpu 1:
 vlan_dev_hard_start_xmit+0x2ad/0x320 net/8021q/vlan_dev.c:132
 __netdev_start_xmit include/linux/netdevice.h:4805 [inline]
 netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3588
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3604
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4253
 dev_queue_xmit include/linux/netdevice.h:2994 [inline]
 alb_send_lp_vid drivers/net/bonding/bond_alb.c:939 [inline]
 alb_send_learning_packets+0x19f/0x1f0 drivers/net/bonding/bond_alb.c:1001
 bond_alb_monitor+0x1d7/0x9f0 drivers/net/bonding/bond_alb.c:1553
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read to 0xffffe8ffffdf90b0 of 8 bytes by task 27005 on cpu 0:
 vlan_dev_get_stats64+0x17b/0x2a0 net/8021q/vlan_dev.c:720
 dev_get_stats+0x6a/0x2b0 net/core/dev.c:10424
 bond_get_stats+0xf6/0x250 drivers/net/bonding/bond_main.c:4291
 dev_get_stats+0x6a/0x2b0 net/core/dev.c:10424
 bond_get_stats+0xf6/0x250 drivers/net/bonding/bond_main.c:4291
 dev_get_stats+0x6a/0x2b0 net/core/dev.c:10424
 rtnl_fill_stats+0x45/0x320 net/core/rtnetlink.c:1242
 rtnl_fill_ifinfo+0xbff/0xfe0 net/core/rtnetlink.c:1819
 rtmsg_ifinfo_build_skb+0xa2/0x130 net/core/rtnetlink.c:3908
 rtmsg_ifinfo_event net/core/rtnetlink.c:3940 [inline]
 rtnetlink_event+0xaf/0x120 net/core/rtnetlink.c:6140
 notifier_call_chain kernel/notifier.c:87 [inline]
 raw_notifier_call_chain+0x53/0xb0 kernel/notifier.c:455
 call_netdevice_notifiers_info net/core/dev.c:1943 [inline]
 call_netdevice_notifiers_extack net/core/dev.c:1981 [inline]
 call_netdevice_notifiers net/core/dev.c:1995 [inline]
 netdev_features_change net/core/dev.c:1313 [inline]
 netdev_change_features+0xbd/0x120 net/core/dev.c:9799
 bond_compute_features+0x436/0x460 drivers/net/bonding/bond_main.c:1474
 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3847 [inline]
 bond_netdev_event+0x207/0x6b0 drivers/net/bonding/bond_main.c:3887
 notifier_call_chain kernel/notifier.c:87 [inline]
 raw_notifier_call_chain+0x53/0xb0 kernel/notifier.c:455
 call_netdevice_notifiers_info net/core/dev.c:1943 [inline]
 call_netdevice_notifiers_extack net/core/dev.c:1981 [inline]
 call_netdevice_notifiers net/core/dev.c:1995 [inline]
 netdev_features_change net/core/dev.c:1313 [inline]
 netdev_change_features+0xbd/0x120 net/core/dev.c:9799
 bond_compute_features+0x436/0x460 drivers/net/bonding/bond_main.c:1474
 bond_enslave+0x17fa/0x21a0 drivers/net/bonding/bond_main.c:2154
 do_set_master net/core/rtnetlink.c:2577 [inline]
 rtnl_newlink_create net/core/rtnetlink.c:3380 [inline]
 __rtnl_newlink net/core/rtnetlink.c:3580 [inline]
 rtnl_newlink+0x149a/0x16a0 net/core/rtnetlink.c:3593
 rtnetlink_rcv_msg+0x811/0x8c0 net/core/rtnetlink.c:6089
 netlink_rcv_skb+0x13e/0x240 net/netlink/af_netlink.c:2501
 rtnetlink_rcv+0x18/0x20 net/core/rtnetlink.c:6107
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x58a/0x660 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x661/0x750 net/netlink/af_netlink.c:1921
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0x38f/0x500 net/socket.c:2492
 ___sys_sendmsg net/socket.c:2546 [inline]
 __sys_sendmsg+0x197/0x230 net/socket.c:2575
 __do_sys_sendmsg net/socket.c:2584 [inline]
 __se_sys_sendmsg net/socket.c:2582 [inline]
 __x64_sys_sendmsg+0x42/0x50 net/socket.c:2582
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0

value changed: 0x0000000000005988 -> 0x00000000000059c4

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 27005 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-13710-g744983d87842-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
bond542: (slave vlan396): making interface the new active one
bond542: (slave vlan396): Enslaving as an active interface with an up link
syz-executor.0 (27005) used greatest stack depth: 8472 bytes left