Restructure the loop a little bit to make it a little more clear how it really operates: we never allocate any domains at the beginning of the first iteration, and it will run until we've satisfied the amount we need or we encounter an error.
The lock is now taken outside of the loop to make stuff inside the loop easier to evaluate w.r.t. locking.
This fixes it to not try and allocate any domains for the freelist under the spinlock, which would have happened before if we needed any new domains.
Reported-by: syzbot+6743fa07b9b7528dc561@syzkaller.appspotmail.com
Add context to the diff. Even without the context, I am sure that you put the symbols into the wrong namespace.