program:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd4}}, 0x4001)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff")
[ 86.420231][ T4638] Bluetooth: hci0: command tx timeout
[ 86.472837][ C0]
[ 86.474074][ C0] =============================
[ 86.476442][ C0] [ BUG: Invalid wait context ]
[ 86.478829][ C0] syzkaller #0 Not tainted
[ 86.481019][ C0] -----------------------------
[ 86.483349][ C0] dhcpcd/4985 is trying to lock:
[ 86.485893][ C0] ffff888052439bb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 86.490471][ C0] other info that might help us debug this:
[ 86.493209][ C0] context-{2:2}
[ 86.494776][ C0] 2 locks held by dhcpcd/4985:
[ 86.496937][ C0] #0: ffff8880358be948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 86.501415][ C0] #1: ffff88805243a110 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 86.506178][ C0] stack backtrace:
[ 86.507894][ C0] CPU: 0 UID: 0 PID: 4985 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full)
[ 86.507909][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.507914][ C0] Call Trace:
[ 86.507920][ C0]
[ 86.507925][ C0] dump_stack_lvl+0xe8/0x150
[ 86.507946][ C0] __lock_acquire+0xe39/0x2cf0
[ 86.507962][ C0] ? __lock_acquire+0x683/0x2cf0
[ 86.507977][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 86.507989][ C0] lock_acquire+0x106/0x350
[ 86.508001][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 86.508014][ C0] ? xa_load+0x1db/0x210
[ 86.508092][ C0] _raw_read_lock_irqsave+0x48/0x60
[ 86.508108][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 86.508115][ C0] kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 86.508122][ C0] ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 86.508130][ C0] xen_timer_callback+0x109/0x220
[ 86.508138][ C0] ? __pfx_xen_timer_callback+0x10/0x10
[ 86.508145][ C0] __hrtimer_run_queues+0x371/0xa10
[ 86.508154][ C0] hrtimer_interrupt+0x448/0x910
[ 86.508168][ C0] __sysvec_apic_timer_interrupt+0x102/0x430
[ 86.508178][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0
[ 86.508195][ C0]
[ 86.508198][ C0]
[ 86.508202][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 86.508213][ C0] RIP: 0010:memset_orig+0x33/0xb0
[ 86.508230][ C0] Code: 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[ 86.508239][ C0] RSP: 0000:ffffc90007f775f8 EFLAGS: 00010202
[ 86.508249][ C0] RAX: 0000000000000000 RBX: ffff88800e7f4000 RCX: 0000000000000007
[ 86.508256][ C0] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffed1001cfe800
[ 86.508262][ C0] RBP: 0000000000140cca R08: ffffffff9057b437 R09: 0000000000000000
[ 86.508267][ C0] R10: ffffed1001cfe800 R11: fffffbfff20af687 R12: dffffc0000000000
[ 86.508274][ C0] R13: 0000000000000001 R14: 0000000000001000 R15: dffffc0000000000
[ 86.508285][ C0] ? bad_range+0x8e/0x2a0
[ 86.508298][ C0] kasan_unpoison+0x48/0x70
[ 86.508309][ C0] __kasan_unpoison_pages+0x25/0x30
[ 86.508320][ C0] post_alloc_hook+0x8f/0x250
[ 86.508330][ C0] get_page_from_freelist+0x21fa/0x2270
[ 86.508342][ C0] ? prepare_alloc_pages+0x230/0x650
[ 86.508349][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 86.508357][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 86.508365][ C0] ? __pfx_policy_nodemask+0x10/0x10
[ 86.508374][ C0] ? __lock_acquire+0x683/0x2cf0
[ 86.508387][ C0] alloc_pages_mpol+0x212/0x380
[ 86.508399][ C0] folio_alloc_mpol_noprof+0x39/0x160
[ 86.508412][ C0] vma_alloc_folio_noprof+0xe1/0x1e0
[ 86.508425][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 86.508438][ C0] do_wp_page+0x1163/0x4c70
[ 86.508455][ C0] ? __pfx_do_wp_page+0x10/0x10
[ 86.508467][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 86.508478][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 86.508490][ C0] handle_mm_fault+0x1490/0x3080
[ 86.508507][ C0] ? handle_mm_fault+0xec/0x3080
[ 86.508521][ C0] ? __pfx_handle_mm_fault+0x10/0x10
[ 86.508530][ C0] ? lock_vma_under_rcu+0x45a/0x500
[ 86.508539][ C0] do_user_addr_fault+0xa4d/0x1340
[ 86.508549][ C0] ? trace_page_fault_user+0x84/0x1e0
[ 86.508557][ C0] exc_page_fault+0x6a/0xc0
[ 86.508564][ C0] asm_exc_page_fault+0x26/0x30
[ 86.508570][ C0] RIP: 0033:0x7fbf9c833140
[ 86.508578][ C0] Code: f8 ff 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 49 89 d4 53 89 fb 48 81 ec f8 04 00 00 48 8b 05 98 1c 0d 00 <48> 89 b5 20 fb ff ff 89 8d 1c fb ff ff 64 44 8b 30 81 ff ff 03 00
[ 86.508583][ C0] RSP: 002b:00007ffd4c20bcd0 EFLAGS: 00010202
[ 86.508588][ C0] RAX: ffffffffffffff88 RBX: 0000000000000007 RCX: 0000000000000000
[ 86.508592][ C0] RDX: 00007ffd4c20c640 RSI: 00005636e2be49df RDI: 0000000000000007
[ 86.508596][ C0] RBP: 00007ffd4c20c1f0 R08: 0000000000000000 R09: 0000000000000000
[ 86.508601][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd4c20c640
[ 86.508607][ C0] R13: 00007ffd4c21c8f0 R14: 00007ffd4c21c910 R15: 00007ffd4c21c8b0
[ 86.508616][ C0]