Restructure the loop a little bit to make it a little more clear how it really operates: we never allocate any domains at the beginning of the first iteration, and it will run until we've satisfied the amount we need or we encounter an error.
The lock is now taken outside of the loop to make stuff inside the loop easier to evaluate w.r.t. locking.
This fixes it to not try and allocate any domains for the freelist under the spinlock, which would have happened before if we needed any new domains.
Reported-by: syzbot+6743fa07b9b7528dc561@syzkaller.appspotmail.com