I think I found the cause. The issue is that bond is virtual interface which is attached_to ''. When physical interface identifier changes we modify all virtual interfaces of host that has attached_to set to previous identifier value. Since bond is usually imported (and persisted) before primary interface, when primary interface identifier is set for the first time (after provisioning) its identifier changes from '' to 'ens7f0' and we change bond's attached_to from '' to 'ens7f0' and then we even change the identifier (that is required for vlans and aliases). So we have to skip changes where original identifier was not set. Not sure if this also solves the duplication issue (could be) but I'll look at that in #10607

Applied in changeset db6d6b8b7d0d2e90e27d4c23308e5db26abd3820.