INFO: task syz-executor.3:9858 can't die for more than 145 seconds.
task:syz-executor.3  state:R  running task     stack:27024 pid: 9858 ppid: 16015 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4965 [inline]
 __schedule+0xa9a/0x4940 kernel/sched/core.c:6246
 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6412
 __cond_resched+0x13/0x20 kernel/sched/core.c:8125
 _cond_resched include/linux/sched.h:2027 [inline]
 __vunmap+0x799/0xb70 mm/vmalloc.c:2633
 __vfree+0x3c/0xd0 mm/vmalloc.c:2680
 vfree+0x5a/0x90 mm/vmalloc.c:2711
 kvfree+0x2e/0x50 mm/util.c:618
 translate_table+0x8b0/0x1a30 net/ipv4/netfilter/arp_tables.c:596
 do_replace net/ipv4/netfilter/arp_tables.c:981 [inline]
 do_arpt_set_ctl+0x596/0xee0 net/ipv4/netfilter/arp_tables.c:1421
 nf_setsockopt+0x83/0xe0 net/netfilter/nf_sockopt.c:101
 ip_setsockopt+0x3c3/0x3a60 net/ipv4/ip_sockglue.c:1435
 sctp_setsockopt+0x14c/0xa890 net/sctp/socket.c:4576
 __sys_setsockopt+0x2db/0x610 net/socket.c:2176
 __do_sys_setsockopt net/socket.c:2187 [inline]
 __se_sys_setsockopt net/socket.c:2184 [inline]
 __x64_sys_setsockopt+0xba/0x150 net/socket.c:2184
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f70d1464a39
RSP: 002b:00007f70ce9da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f70d1567f60 RCX: 00007f70d1464a39
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007f70d14bec5f R08: 0000000000000450 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcb901b55f R14: 00007f70ce9da300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.1:9861 can't die for more than 148 seconds.
task:syz-executor.1  state:R  running task     stack:27064 pid: 9861 ppid:  6560 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4965 [inline]
 __schedule+0xa9a/0x4940 kernel/sched/core.c:6246
 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6412
 __cond_resched+0x13/0x20 kernel/sched/core.c:8125
 _cond_resched include/linux/sched.h:2027 [inline]
 __vunmap+0x799/0xb70 mm/vmalloc.c:2633
 __vfree+0x3c/0xd0 mm/vmalloc.c:2680
 vfree+0x5a/0x90 mm/vmalloc.c:2711
 kvfree+0x2e/0x50 mm/util.c:618
 translate_table+0x8b0/0x1a30 net/ipv4/netfilter/arp_tables.c:596
 do_replace net/ipv4/netfilter/arp_tables.c:981 [inline]
 do_arpt_set_ctl+0x596/0xee0 net/ipv4/netfilter/arp_tables.c:1421
 nf_setsockopt+0x83/0xe0 net/netfilter/nf_sockopt.c:101
 ip_setsockopt+0x3c3/0x3a60 net/ipv4/ip_sockglue.c:1435
 sctp_setsockopt+0x14c/0xa890 net/sctp/socket.c:4576
 __sys_setsockopt+0x2db/0x610 net/socket.c:2176
 __do_sys_setsockopt net/socket.c:2187 [inline]
 __se_sys_setsockopt net/socket.c:2184 [inline]
 __x64_sys_setsockopt+0xba/0x150 net/socket.c:2184
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd6a9398a39
RSP: 002b:00007fd6a68ed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007fd6a949c020 RCX: 00007fd6a9398a39
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 00007fd6a93f2c5f R08: 0000000000000450 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffec501d47f R14: 00007fd6a68ed300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.3:9864 can't die for more than 152 seconds.
task:syz-executor.3  state:R  running task     stack:27064 pid: 9864 ppid:  9858 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4965 [inline]
 __schedule+0xa9a/0x4940 kernel/sched/core.c:6246
 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6412
 __cond_resched+0x13/0x20 kernel/sched/core.c:8125
 _cond_resched include/linux/sched.h:2027 [inline]
 __vunmap+0x799/0xb70 mm/vmalloc.c:2633
 __vfree+0x3c/0xd0 mm/vmalloc.c:2680
 vfree+0x5a/0x90 mm/vmalloc.c:2711
 kvfree+0x2e/0x50 mm/util.c:618
 translate_table+0x8b0/0x1a30 net/ipv4/netfilter/arp_tables.c:596
 do_replace net/ipv4/netfilter/arp_tables.c:981 [inline]
 do_arpt_set_ctl+0x596/0xee0 net/ipv4/netfilter/arp_tables.c:1421
 nf_setsockopt+0x83/0xe0 net/netfilter/nf_sockopt.c:101
 ip_setsockopt+0x3c3/0x3a60 net/ipv4/ip_sockglue.c:1435
 sctp_setsockopt+0x14c/0xa890 net/sctp/socket.c:4576
 __sys_setsockopt+0x2db/0x610 net/socket.c:2176
 __do_sys_setsockopt net/socket.c:2187 [inline]
 __se_sys_setsockopt net/socket.c:2184 [inline]
 __x64_sys_setsockopt+0xba/0x150 net/socket.c:2184
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f70d1464a39
RSP: 002b:00007f70ce9da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f70d1567f60 RCX: 00007f70d1464a39
RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006
RBP: 00007f70d14bec5f R08: 0000000000000450 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcb901b55f R14: 00007f70ce9da300 R15: 0000000000022000
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/u4:1/10:
1 lock held by khungtaskd/27:
 #0: ffffffff8bb835e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
1 lock held by in:imklog/6245:
1 lock held by syz-executor.3/9858:
 #0: ffffffff8d2fbe28 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:684 [inline]
 #0: ffffffff8d2fbe28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x180 drivers/net/tun.c:3397
2 locks held by kworker/1:44/10144:
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:634 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:661 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 kernel/workqueue.c:2268
 #1: ffffc90002e6fdb0 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 kernel/workqueue.c:2272
3 locks held by kworker/1:48/10148:

=============================================