skbuff: skb_over_panic: text:ffff80008629bbfc len:428 put:172 head:ffff0000db3e63c0 data:ffff0000db3e63c0 tail:0x1ac end:0x180 dev: ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:212! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 1 UID: 0 PID: 6245 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : skb_panic+0x140/0x144 net/core/skbuff.c:208 lr : skb_panic+0x140/0x144 net/core/skbuff.c:208 sp : ffff8000a1b76c00 x29: ffff8000a1b76c10 x28: dfff800000000000 x27: ffff0000c7cda510 x26: 00000000000001ac x25: ffff0000db3e63c0 x24: ffff0000db3e63c0 x23: 00000000000001ac x22: 0000000000000180 x21: 00000000000000ac x20: ffff80008eb3b411 x19: ffff80008629bbfc x18: 00000000ffffffff x17: ffff800093303000 x16: ffff800082debf80 x15: 0000000000000001 x14: 1ffff0001436ecfc x13: 0000000000000000 x12: 0000000000000000 x11: ffff70001436ecfd x10: 0000000000ff0100 x9 : d442ec079509bd00 x8 : d442ec079509bd00 x7 : ffff800080565240 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807d6930 x2 : 0000000000000001 x1 : 0000000100000604 x0 : 0000000000000089 Call trace: skb_panic+0x140/0x144 net/core/skbuff.c:208 (P) skb_over_panic net/core/skbuff.c:217 [inline] skb_put+0x130/0x1c0 net/core/skbuff.c:2583 skb_put_zero include/linux/skbuff.h:2788 [inline] cdc_ncm_ndp16 drivers/net/usb/cdc_ncm.c:1139 [inline] cdc_ncm_fill_tx_frame+0xc38/0x2f60 drivers/net/usb/cdc_ncm.c:1314 cdc_ncm_tx_fixup+0xa8/0x114 drivers/net/usb/cdc_ncm.c:-1 usbnet_start_xmit+0x108/0x1af0 drivers/net/usb/usbnet.c:1402 __netdev_start_xmit include/linux/netdevice.h:5248 [inline] netdev_start_xmit include/linux/netdevice.h:5257 [inline] xmit_one net/core/dev.c:3845 [inline] dev_hard_start_xmit+0x2b0/0x890 net/core/dev.c:3861 sch_direct_xmit+0x1fc/0x468 net/sched/sch_generic.c:344 __dev_xmit_skb net/core/dev.c:4152 [inline] __dev_queue_xmit+0x1410/0x32a8 net/core/dev.c:4729 dev_queue_xmit include/linux/netdevice.h:3365 [inline] lapbeth_data_transmit+0x1fc/0x2a8 drivers/net/wan/lapbether.c:260 lapb_data_transmit+0x8c/0xb0 net/lapb/lapb_iface.c:447 lapb_transmit_buffer+0x160/0x208 net/lapb/lapb_out.c:149 lapb_send_control+0x21c/0x320 net/lapb/lapb_subr.c:251 lapb_establish_data_link+0x94/0xec net/lapb/lapb_out.c:-1 lapb_device_event+0x338/0x4d0 net/lapb/lapb_iface.c:-1 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 dev_change_flags+0x10c/0x204 net/core/dev_api.c:68 devinet_ioctl+0xa38/0x1720 net/ipv4/devinet.c:1199 inet_ioctl+0x2b0/0x3e0 net/ipv4/af_inet.c:1003 sock_do_ioctl+0xf4/0x2b4 net/socket.c:1254 sock_ioctl+0x57c/0x84c net/socket.c:1375 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:746 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:765 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: aa1903e6 aa1a03e7 a90023f6 97fc7c57 (d4210000) ---[ end trace 0000000000000000 ]---