bridge0: port 2(team_slave) entered blocking state
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
------------[ cut here ]------------
CPU: 0 PID: 9545 Comm: syz-executor3 Not tainted 4.16.0+ #17
kernel BUG at drivers/vhost/vhost.c:1652!
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
invalid opcode: 0000 [#1] SMP KASAN
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
CPU: 1 PID: 9541 Comm: syz-executor4 Not tainted 4.16.0+ #17
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:set_bit_to_user drivers/vhost/vhost.c:1652 [inline]
RIP: 0010:log_write+0x42a/0x4d0 drivers/vhost/vhost.c:1676
RSP: 0018:ffff88018b057920 EFLAGS: 00010216
RAX: 0000000000040000 RBX: dffffc0000000000 RCX: ffffc900052da000
RDX: 0000000000000067 RSI: ffffffff85978eea RDI: 0000000000000005
RBP: ffff88018b057a58 R08: ffff8801b3a92040 R09: ffffed0030d68bb5
R10: ffff88018b057ad8 R11: ffff880186b45daf R12: 000200002000003f
 __should_failslab+0x124/0x180 mm/failslab.c:32
R13: ffffed003160af36 R14: 0000000000000000 R15: ffff88018b057a30
 should_failslab+0x9/0x14 mm/slab_common.c:1522
FS:  00007fc8b49f4700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc_trace+0x4b/0x780 mm/slab.c:3618
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020f82ffc CR3: 0000000187905000 CR4: 00000000001406e0
DR0: 0000000000000035 DR1: 0000000000000000 DR2: 000000000000fd85
 kmalloc include/linux/slab.h:512 [inline]
 switchdev_deferred_enqueue net/switchdev/switchdev.c:163 [inline]
 switchdev_port_attr_set_defer net/switchdev/switchdev.c:314 [inline]
 switchdev_port_attr_set+0x145/0x3e0 net/switchdev/switchdev.c:335
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __set_ageing_time+0x198/0x260 net/bridge/br_stp.c:576
 br_init_port+0x194/0x260 net/bridge/br_stp_if.c:47
 new_nbp net/bridge/br_if.c:367 [inline]
 br_add_if+0x6bb/0x19e0 net/bridge/br_if.c:532
 vhost_update_used_flags+0x3af/0x4a0 drivers/vhost/vhost.c:1723
 vhost_vq_init_access+0x117/0x590 drivers/vhost/vhost.c:1763
 vhost_vsock_start drivers/vhost/vsock.c:446 [inline]
 vhost_vsock_dev_ioctl+0x751/0x920 drivers/vhost/vsock.c:678
 add_del_if+0x10f/0x140 net/bridge/br_ioctl.c:101
 br_dev_ioctl+0xbf/0xe0 net/bridge/br_ioctl.c:396
 dev_ifsioc+0x43e/0xb90 net/core/dev_ioctl.c:334
 dev_ioctl+0x1b5/0xcc0 net/core/dev_ioctl.c:500
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x1cf/0x1650 fs/ioctl.c:684
 sock_do_ioctl+0x1d3/0x3e0 net/socket.c:980
 sock_ioctl+0x30d/0x680 net/socket.c:1081
 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701
 SYSC_ioctl fs/ioctl.c:708 [inline]
 SyS_ioctl+0x24/0x30 fs/ioctl.c:706
 do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x1cf/0x1650 fs/ioctl.c:684
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x455279
RSP: 002b:00007fc8b49f3c68 EFLAGS: 00000246
 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701
 ORIG_RAX: 0000000000000010
 SYSC_ioctl fs/ioctl.c:708 [inline]
 SyS_ioctl+0x24/0x30 fs/ioctl.c:706
RAX: ffffffffffffffda RBX: 00007fc8b49f46d4 RCX: 0000000000455279
RDX: 0000000020f82ffc RSI: 000000004004af61 RDI: 0000000000000013
 do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000351 R14: 00000000006f8038 R15: 0000000000000000
Code: 
e8 
6c 
ae 
df 
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
fb 
RIP: 0033:0x455279
4c 
RSP: 002b:00007f993cc1dc68 EFLAGS: 00000246
89 
 ORIG_RAX: 0000000000000010
ef 
RAX: ffffffffffffffda RBX: 00007f993cc1e6d4 RCX: 0000000000455279
e8 
RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013
14 
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
4f 
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
01 
R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000003
fc 
team_slave: failed to offload ageing time
48 8d 85 58 ff 
bridge0: port 2(team_slave) entered disabled state
ff ff 48 c1 
ntfs: (device loop6): ntfs_fill_super(): Unable to determine device size.
e8 03 c6 04 18 f8 
sctp: [Deprecated]: syz-executor2 (pid 9548) Use of struct sctp_assoc_value in delayed_ack socket option.
Use struct sctp_sack_info instead
e9 46 ff ff ff 45 31 f6 eb 91 e8 46 ae df fb <0f> 0b e8 3f ae df fb 48 c7 c6 a0 1f 25 88 4c 89 ef e8 c0 e3 0b 
RIP: set_bit_to_user drivers/vhost/vhost.c:1652 [inline] RSP: ffff88018b057920
RIP: log_write+0x42a/0x4d0 drivers/vhost/vhost.c:1676 RSP: ffff88018b057920
---[ end trace 089ad081070d3a44 ]---