From: Dave Jones <redacted>
Date: Fri, 28 Sep 2018 16:26:08 -0400

The bonding driver lacks the rcu lock when it calls down into
netdev_lower_get_next_private_rcu from bond_poll_controller, which
results in a trace like:

 ...

We're also doing rcu dereferences a layer up in netpoll_send_skb_on_dev
before we call down into netpoll_poll_dev, so just take the lock there.

Suggested-by: Cong Wang <redacted>
Signed-off-by: Dave Jones <redacted>

Applied and queued up for -stable.