skbuff: skb_over_panic: text:ffff800086396248 len:428 put:172 head:ffff0000c9c5f740 data:ffff0000c9c5f740 tail:0x1ac end:0x180 dev: ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:213! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 1 UID: 0 PID: 6265 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : skb_panic+0x140/0x144 net/core/skbuff.c:209 lr : skb_panic+0x140/0x144 net/core/skbuff.c:209 sp : ffff80009ee46c40 x29: ffff80009ee46c50 x28: dfff800000000000 x27: ffff0000c6346510 x26: 00000000000001ac x25: ffff0000c9c5f740 x24: ffff0000c9c5f740 x23: 00000000000001ac x22: 0000000000000180 x21: 00000000000000ac x20: ffff80008edff2d3 x19: ffff800086396248 x18: 00000000ffffffff x17: ffff800093599000 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1ffff00013dc8d04 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700013dc8d05 x10: 0000000000ff0100 x9 : e5e5a195c8c3ce00 x8 : e5e5a195c8c3ce00 x7 : ffff8000805761f8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807f1260 x2 : 0000000000000001 x1 : 0000000100000604 x0 : 0000000000000089 Call trace: skb_panic+0x140/0x144 net/core/skbuff.c:209 (P) skb_over_panic net/core/skbuff.c:218 [inline] skb_put+0x130/0x1c0 net/core/skbuff.c:2622 skb_put_zero include/linux/skbuff.h:2788 [inline] cdc_ncm_ndp16 drivers/net/usb/cdc_ncm.c:1139 [inline] cdc_ncm_fill_tx_frame+0xc38/0x2f60 drivers/net/usb/cdc_ncm.c:1314 cdc_ncm_tx_fixup+0xa8/0x114 drivers/net/usb/cdc_ncm.c:-1 usbnet_start_xmit+0x108/0x217c drivers/net/usb/usbnet.c:1410 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3853 [inline] dev_hard_start_xmit+0x298/0x890 net/core/dev.c:3869 sch_direct_xmit+0x1fc/0x468 net/sched/sch_generic.c:347 __dev_xmit_skb net/core/dev.c:4169 [inline] __dev_queue_xmit+0xf94/0x2a78 net/core/dev.c:4785 dev_queue_xmit include/linux/netdevice.h:3381 [inline] lapbeth_data_transmit+0x1fc/0x2a8 drivers/net/wan/lapbether.c:260 lapb_data_transmit+0x8c/0xb0 net/lapb/lapb_iface.c:447 lapb_transmit_buffer+0x160/0x208 net/lapb/lapb_out.c:149 lapb_send_control+0x21c/0x320 net/lapb/lapb_subr.c:251 lapb_establish_data_link+0x94/0xec net/lapb/lapb_out.c:-1 lapb_device_event+0x338/0x4d0 net/lapb/lapb_iface.c:-1 notifier_call_chain+0x190/0x4cc kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2230 [inline] call_netdevice_notifiers_extack net/core/dev.c:2268 [inline] call_netdevice_notifiers net/core/dev.c:2282 [inline] __dev_notify_flags+0x218/0x464 net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9804 dev_change_flags+0x10c/0x204 net/core/dev_api.c:68 devinet_ioctl+0x8f0/0x1724 net/ipv4/devinet.c:1199 inet_ioctl+0x2b0/0x3e0 net/ipv4/af_inet.c:1009 sock_do_ioctl+0xf4/0x2b4 net/socket.c:1254 sock_ioctl+0x57c/0x84c net/socket.c:1375 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: aa1903e6 aa1a03e7 a90023f6 97fc7589 (d4210000) ---[ end trace 0000000000000000 ]---