program:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd4}}, 0x4001)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff")
[ 109.232423][ C0]
[ 109.233531][ C0] =============================
[ 109.235507][ C0] [ BUG: Invalid wait context ]
[ 109.237583][ C0] syzkaller #0 Not tainted
[ 109.239515][ C0] -----------------------------
[ 109.241618][ C0] dhcpcd/5315 is trying to lock:
[ 109.243613][ C0] ffff888012b81bb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 109.247731][ C0] other info that might help us debug this:
[ 109.250184][ C0] context-{2:2}
[ 109.251698][ C0] 3 locks held by dhcpcd/5315:
[ 109.253793][ C0] #0: ffff888012267678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0
[ 109.257593][ C0] #1: ffffffff8f36d280 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_object_activate+0x364/0x420
[ 109.262507][ C0] #2: ffff888012b82110 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 109.266548][ C0] stack backtrace:
[ 109.268245][ C0] CPU: 0 UID: 0 PID: 5315 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full)
[ 109.268259][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 109.268266][ C0] Call Trace:
[ 109.268272][ C0]
[ 109.268277][ C0] dump_stack_lvl+0xe8/0x150
[ 109.268296][ C0] __lock_acquire+0xe39/0x2cf0
[ 109.268309][ C0] ? __lock_acquire+0x683/0x2cf0
[ 109.268324][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 109.268335][ C0] lock_acquire+0x106/0x350
[ 109.268347][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 109.268360][ C0] ? xa_load+0x1db/0x210
[ 109.268420][ C0] _raw_read_lock_irqsave+0x48/0x60
[ 109.268432][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 109.268443][ C0] kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 109.268456][ C0] ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 109.268467][ C0] xen_timer_callback+0x109/0x220
[ 109.268479][ C0] ? __pfx_xen_timer_callback+0x10/0x10
[ 109.268491][ C0] __hrtimer_run_queues+0x371/0xa10
[ 109.268504][ C0] hrtimer_interrupt+0x448/0x910
[ 109.268517][ C0] __sysvec_apic_timer_interrupt+0x102/0x430
[ 109.268528][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0
[ 109.268541][ C0]
[ 109.268545][ C0]
[ 109.268548][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 109.268562][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 109.268574][ C0] Code: f7 e8 2d cd cd f5 f7 c3 00 02 00 00 74 05 e8 e0 bd f9 f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c4 e0 be f5 65 8b 05 bd 00 98 07 85 c0 74 18 5b 41 5e c3 cc cc
[ 109.268583][ C0] RSP: 0018:ffffc9000db17628 EFLAGS: 00000206
[ 109.268593][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001
[ 109.268599][ C0] RDX: 0000000000000006 RSI: ffffffff8e22c768 RDI: 0000000000000001
[ 109.268606][ C0] RBP: ffffc9000db176d0 R08: ffffffff90577037 R09: 1ffffffff20aee06
[ 109.268613][ C0] R10: dffffc0000000000 R11: fffffbfff20aee07 R12: ffff8880423b5d20
[ 109.268619][ C0] R13: ffffea000108ed50 R14: ffff8880304029c0 R15: 0000000000000246
[ 109.268630][ C0] get_from_partial_node+0x451/0x4c0
[ 109.268647][ C0] ___slab_alloc+0x258/0x950
[ 109.268662][ C0] kmem_cache_alloc_noprof+0x135/0x5f0
[ 109.268677][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0
[ 109.268692][ C0] ? fill_pool+0x165/0x610
[ 109.268702][ C0] ? fill_pool+0x165/0x610
[ 109.268713][ C0] fill_pool+0x165/0x610
[ 109.268724][ C0] ? __pfx_fill_pool+0x10/0x10
[ 109.268736][ C0] ? debug_object_activate+0x364/0x420
[ 109.268746][ C0] debug_object_activate+0x38d/0x420
[ 109.268758][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[ 109.268770][ C0] ? tear_down_vmas+0x312/0x520
[ 109.268779][ C0] call_rcu+0x43/0x8b0
[ 109.268795][ C0] ? tear_down_vmas+0x312/0x520
[ 109.268803][ C0] kmem_cache_free+0x462/0x650
[ 109.268814][ C0] tear_down_vmas+0x312/0x520
[ 109.268825][ C0] exit_mmap+0x4ca/0x9f0
[ 109.268834][ C0] ? __pfx_exit_mmap+0x10/0x10
[ 109.268847][ C0] ? __pfx_exit_aio+0x10/0x10
[ 109.268860][ C0] ? arch_uprobe_clear_state+0x1c8/0x240
[ 109.268874][ C0] ? uprobe_clear_state+0x2ac/0x3e0
[ 109.268888][ C0] __mmput+0x118/0x420
[ 109.268898][ C0] exit_mm+0x221/0x2d0
[ 109.268912][ C0] do_exit+0x6cd/0x2360
[ 109.268926][ C0] ? __pfx_do_exit+0x10/0x10
[ 109.268938][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 109.268950][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 109.268961][ C0] do_group_exit+0x22d/0x2f0
[ 109.268975][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.268985][ C0] __x64_sys_exit_group+0x3f/0x40
[ 109.268998][ C0] x64_sys_call+0x221a/0x2240
[ 109.269012][ C0] do_syscall_64+0x174/0x580
[ 109.269025][ C0] ? trace_irq_disable+0x3b/0x140
[ 109.269036][ C0] ? clear_bhb_loop+0x70/0xc0
[ 109.269047][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.269056][ C0] RIP: 0033:0x7f7fbb1286c5
[ 109.269064][ C0] Code: Unable to access opcode bytes at 0x7f7fbb12869b.
[ 109.269069][ C0] RSP: 002b:00007ffd54ca1b68 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
[ 109.269078][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7fbb1286c5
[ 109.269084][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001
[ 109.269091][ C0] RBP: 00007ffd54ca2178 R08: 000055fd8c2f72c0 R09: 0000000000000002
[ 109.269097][ C0] R10: 00000000000000e0 R11: 0000000000000206 R12: 00007ffd54ca1bb0
[ 109.269103][ C0] R13: 000055fd8c2f88a0 R14: 00007ffd54ca1df0 R15: 00007ffd54ca1ba0
[ 109.269113][ C0]