--- 40fb5eefc72e63b884d6f69a2897ef9b0038f1cd +++ 6ffbfb7e79dce6a816e35b4a2e5fae34f7e27375 @@ -2692,6 +2692,10 @@ static int bond_arp_rcv(struct sk_buff * if (!slave || !slave_do_arp_validate(bond, slave)) goto out_unlock; + skb = skb_share_check(skb, GFP_ATOMIC); + if (!skb) + goto out_unlock; + if (!pskb_may_pull(skb, arp_hdr_len(dev))) goto out_unlock;