program:
io_uring_setup(0x664b, &(0x7f0000000500))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x6)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd4}}, 0x4001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl(r3, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff")
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
[ 93.371495][ T5271] Bluetooth: hci0: command tx timeout
[ 93.393258][ T891] cfg80211: failed to load regulatory.db
[ 93.687328][ C0]
[ 93.688450][ C0] =============================
[ 93.690658][ C0] [ BUG: Invalid wait context ]
[ 93.692796][ C0] syzkaller #0 Not tainted
[ 93.694861][ C0] -----------------------------
[ 93.696887][ C0] syz-executor/5270 is trying to lock:
[ 93.699176][ C0] ffff888051b31bb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 93.702998][ C0] other info that might help us debug this:
[ 93.705754][ C0] context-{2:2}
[ 93.707647][ C0] 1 lock held by syz-executor/5270:
[ 93.710359][ C0] #0: ffff888051b32110 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 93.715601][ C0] stack backtrace:
[ 93.717603][ C0] CPU: 0 UID: 0 PID: 5270 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
[ 93.717617][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.717623][ C0] Call Trace:
[ 93.717629][ C0]
[ 93.717635][ C0] dump_stack_lvl+0xe8/0x150
[ 93.717655][ C0] __lock_acquire+0xe39/0x2cf0
[ 93.717670][ C0] ? __lock_acquire+0x683/0x2cf0
[ 93.717684][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 93.717697][ C0] lock_acquire+0x106/0x350
[ 93.717709][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 93.717721][ C0] ? xa_load+0x1db/0x210
[ 93.717791][ C0] _raw_read_lock_irqsave+0x48/0x60
[ 93.717804][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 93.717815][ C0] kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 93.717829][ C0] ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 93.717840][ C0] xen_timer_callback+0x109/0x220
[ 93.717852][ C0] ? __pfx_xen_timer_callback+0x10/0x10
[ 93.717865][ C0] __hrtimer_run_queues+0x371/0xa10
[ 93.717879][ C0] hrtimer_interrupt+0x448/0x910
[ 93.717894][ C0] __sysvec_apic_timer_interrupt+0x102/0x430
[ 93.717910][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0
[ 93.717923][ C0]
[ 93.717927][ C0]
[ 93.717931][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 93.717944][ C0] RIP: 0010:finish_task_switch+0x417/0xc60
[ 93.717956][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 53 dc 3f 0a e8 2e bb 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 93.717964][ C0] RSP: 0018:ffffc9000db47980 EFLAGS: 00000206
[ 93.717975][ C0] RAX: 0000000000026c41 RBX: ffff88801fc3bf20 RCX: 0000000080000001
[ 93.717982][ C0] RDX: 0000000000000000 RSI: ffffffff8e22b661 RDI: ffffffff8c4bce80
[ 93.717989][ C0] RBP: ffffc9000db479d0 R08: ffffffff90576b37 R09: 1ffffffff20aed66
[ 93.717995][ C0] R10: dffffc0000000000 R11: fffffbfff20aed67 R12: ffff888030b72540
[ 93.718002][ C0] R13: ffff88801fc3bee8 R14: dffffc0000000000 R15: 1ffff11003f877e4
[ 93.718013][ C0] __schedule+0x17e1/0x56c0
[ 93.718024][ C0] ? __lock_acquire+0x683/0x2cf0
[ 93.718039][ C0] ? do_raw_spin_unlock+0x4d/0x210
[ 93.718052][ C0] ? __pfx___schedule+0x10/0x10
[ 93.718063][ C0] ? schedule+0x90/0x2b0
[ 93.718074][ C0] schedule+0x164/0x2b0
[ 93.718084][ C0] do_nanosleep+0x21e/0x6a0
[ 93.718095][ C0] ? do_nanosleep+0x7e/0x6a0
[ 93.718104][ C0] ? __pfx_do_nanosleep+0x10/0x10
[ 93.718150][ C0] ? __asan_memset+0x22/0x50
[ 93.718158][ C0] ? __hrtimer_setup+0x1b7/0x260
[ 93.718168][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10
[ 93.718179][ C0] hrtimer_nanosleep+0x18f/0x3a0
[ 93.718189][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10
[ 93.718200][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10
[ 93.718213][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0
[ 93.718224][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[ 93.718236][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.718246][ C0] do_syscall_64+0x174/0x580
[ 93.718259][ C0] ? trace_irq_disable+0x3b/0x140
[ 93.718270][ C0] ? clear_bhb_loop+0x70/0xc0
[ 93.718281][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.718291][ C0] RIP: 0033:0x7fa0b875e90e
[ 93.718301][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 93.718309][ C0] RSP: 002b:00007ffe7d456c98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 93.718319][ C0] RAX: ffffffffffffffda RBX: 000055557731d540 RCX: 00007fa0b875e90e
[ 93.718325][ C0] RDX: 00007ffe7d456cf0 RSI: 0000000000000000 RDI: 0000000000000000
[ 93.718330][ C0] RBP: 00007ffe7d456d5c R08: 0000000000000000 R09: 0000000000000000
[ 93.718336][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 93.718341][ C0] R13: 00000000000927c0 R14: 0000000000016d37 R15: 00007ffe7d456db0
[ 93.718350][ C0]