Unlocked memcmp of lp_marker before LACP_LOCK: torn-read data race with lacp_xmit_marker

Summary

lacp_marker_input(:1934) memcmp(&mdu->mdu_info,&lp->lp_marker,...) BEFORE acquiring LACP_LOCK(:1938). lacp_xmit_marker(:434) mutates lp_marker.mi_rq_xid under lock. Torn read: false match clears LACP_PORT_MARK prematurely(:1953) -> distribution resumes before TX queues flushed. No memory corruption, transient L2 reordering. Tiny race window.