ovs-dp0: entered promiscuous mode ------------[ cut here ]------------ !skb_transport_header_was_set(skb) WARNING: ./include/linux/skbuff.h:3088 at skb_transport_header include/linux/skbuff.h:3088 [inline], CPU#0: syz.0.17/6589 WARNING: ./include/linux/skbuff.h:3088 at skb_transport_offset include/linux/skbuff.h:3239 [inline], CPU#0: syz.0.17/6589 WARNING: ./include/linux/skbuff.h:3088 at update_ipv6_checksum net/openvswitch/actions.c:361 [inline], CPU#0: syz.0.17/6589 WARNING: ./include/linux/skbuff.h:3088 at set_ipv6_addr+0x24c/0x2d0 net/openvswitch/actions.c:399, CPU#0: syz.0.17/6589 Modules linked in: CPU: 0 UID: 0 PID: 6589 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(lazy) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:skb_transport_header include/linux/skbuff.h:3088 [inline] RIP: 0010:skb_transport_offset include/linux/skbuff.h:3239 [inline] RIP: 0010:update_ipv6_checksum net/openvswitch/actions.c:361 [inline] RIP: 0010:set_ipv6_addr+0x24c/0x2d0 net/openvswitch/actions.c:399 Code: 02 00 49 8b 06 49 8b 4e 08 48 89 03 48 89 4b 08 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a5 2c 77 fb 90 <0f> 0b 90 45 0f b7 a7 b6 00 00 00 e9 f6 fd ff ff e8 8f 2c 77 fb eb RSP: 0018:ffffc900031ef720 EFLAGS: 00010293 RAX: ffffffff85f9246b RBX: ffff8881032b0316 RCX: ffff88810f961d40 RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff RBP: 000000000000004c R08: 0000000000000001 R09: 0000000000000011 R10: 000000000000001f R11: 0000000000000000 R12: 000000000000ffff R13: 000000000000002c R14: ffffc900031ef820 R15: ffff88811083a200 FS: 00007f1138f4b6c0(0000) GS:ffff8881b0edb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1138f4aff8 CR3: 00000001159c0000 CR4: 00000000003526f0 Call Trace: set_ipv6 net/openvswitch/actions.c:531 [inline] execute_masked_set_action net/openvswitch/actions.c:1077 [inline] do_execute_actions+0x2b36/0x3050 net/openvswitch/actions.c:1363 ovs_execute_actions+0x83/0x1f0 net/openvswitch/actions.c:1589 ovs_packet_cmd_execute+0x3b7/0x420 net/openvswitch/datapath.c:700 genl_family_rcv_msg_doit+0x117/0x180 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x3a4/0x3f0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x16d/0x240 net/netlink/af_netlink.c:2555 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x533/0x610 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x488/0x590 net/netlink/af_netlink.c:1899 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] ____sys_sendmsg+0x41b/0x460 net/socket.c:2698 ___sys_sendmsg+0x2de/0x320 net/socket.c:2752 __sys_sendmsg net/socket.c:2784 [inline] __do_sys_sendmsg net/socket.c:2789 [inline] __se_sys_sendmsg net/socket.c:2787 [inline] __x64_sys_sendmsg+0x110/0x1a0 net/socket.c:2787 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x159/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1137f9e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f1138f4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f1138225fa0 RCX: 00007f1137f9e159 RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 RBP: 00007f113803506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1138226038 R14: 00007f1138225fa0 R15: 00007fffd9e5fe68