skbuff: skb_over_panic: text:ffff800082f607dc len:428 put:172 head:ffff0000da71ad80 data:ffff0000da71ad80 tail:0x1ac end:0x180 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:214!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 4396 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : skb_panic+0x140/0x144 net/core/skbuff.c:210
lr : skb_panic+0x140/0x144 net/core/skbuff.c:210
sp : ffff800098c56c20
x29: ffff800098c56c30 x28: dfff800000000000 x27: ffff0000d08d6dd0
x26: 00000000000001ac x25: ffff0000da71ad80 x24: ffff0000da71ad80
x23: 00000000000001ac x22: 0000000000000180 x21: 00000000000000ac
x20: ffff8000882f6b89 x19: ffff800082f607dc x18: 0000000000000007
x17: ffff80008a17dc80 x16: ffff80008a499998 x15: 3a61746164203038
x14: 6461313761643030 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000ff0100 x9 : cc62d308e8e2cf00
x8 : cc62d308e8e2cf00 x7 : ffff80008047d308 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080487f48
x2 : 0000000100000604 x1 : ffff0000c8808000 x0 : 0000000000000089
Call trace:
 skb_panic+0x140/0x144 net/core/skbuff.c:210 (P)
 skb_over_panic net/core/skbuff.c:219 [inline]
 skb_put+0x130/0x1c0 net/core/skbuff.c:2629
 skb_put_zero include/linux/skbuff.h:2803 [inline]
 cdc_ncm_ndp16 drivers/net/usb/cdc_ncm.c:1139 [inline]
 cdc_ncm_fill_tx_frame+0xba0/0x2768 drivers/net/usb/cdc_ncm.c:1314
 cdc_ncm_tx_fixup+0x9c/0x108 drivers/net/usb/cdc_ncm.c:-1
 usbnet_start_xmit+0x108/0x1bd8 drivers/net/usb/usbnet.c:1418
 __netdev_start_xmit include/linux/netdevice.h:5368 [inline]
 netdev_start_xmit include/linux/netdevice.h:5377 [inline]
 xmit_one net/core/dev.c:3888 [inline]
 dev_hard_start_xmit+0x1e8/0x9ec net/core/dev.c:3904
 sch_direct_xmit+0x1a8/0x39c net/sched/sch_generic.c:372
 __dev_xmit_skb net/core/dev.c:4209 [inline]
 __dev_queue_xmit+0x139c/0x2c18 net/core/dev.c:4831
 dev_queue_xmit include/linux/netdevice.h:3418 [inline]
 lapbeth_data_transmit+0x1fc/0x2a8 drivers/net/wan/lapbether.c:260
 lapb_data_transmit+0x8c/0xb0 net/lapb/lapb_iface.c:447
 lapb_transmit_buffer+0x15c/0x204 net/lapb/lapb_out.c:149
 lapb_send_control+0x228/0x328 net/lapb/lapb_subr.c:251
 lapb_establish_data_link+0x94/0xec net/lapb/lapb_out.c:-1
 lapb_device_event+0x350/0x4e4 net/lapb/lapb_iface.c:-1
 notifier_call_chain+0x194/0x60c kernel/notifier.c:85
 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2249
 call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
 call_netdevice_notifiers net/core/dev.c:2301 [inline]
 __dev_notify_flags+0x160/0x27c net/core/dev.c:9797
 netif_change_flags+0xd0/0x15c net/core/dev.c:9826
 dev_change_flags+0x10c/0x204 net/core/dev_api.c:68
 devinet_ioctl+0x7d0/0x15bc net/ipv4/devinet.c:1199
 inet_ioctl+0x334/0x460 net/ipv4/af_inet.c:1011
 sock_do_ioctl+0x100/0x254 net/socket.c:1313
 sock_ioctl+0x558/0x7e8 net/socket.c:1434
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:140
 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736
 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594
Code: aa1903e6 aa1a03e7 a90023f6 97fdf218 (d4210000) 
---[ end trace 0000000000000000 ]---