------------[ cut here ]------------ WARNING: CPU: 1 PID: 6627 at include/linux/cpumask.h:144 cpu_max_bits_warn include/linux/cpumask.h:144 [inline] WARNING: CPU: 1 PID: 6627 at include/linux/cpumask.h:144 cpumask_check include/linux/cpumask.h:151 [inline] WARNING: CPU: 1 PID: 6627 at include/linux/cpumask.h:144 cpumask_clear_cpu include/linux/cpumask.h:538 [inline] WARNING: CPU: 1 PID: 6627 at include/linux/cpumask.h:144 __mm_cid_put kernel/sched/sched.h:3256 [inline] WARNING: CPU: 1 PID: 6627 at include/linux/cpumask.h:144 sched_mm_cid_remote_clear+0x374/0x4f0 kernel/sched/core.c:11874 Modules linked in: CPU: 1 PID: 6627 Comm: syz-executor.0 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:cpu_max_bits_warn include/linux/cpumask.h:144 [inline] RIP: 0010:cpumask_check include/linux/cpumask.h:151 [inline] RIP: 0010:cpumask_clear_cpu include/linux/cpumask.h:538 [inline] RIP: 0010:__mm_cid_put kernel/sched/sched.h:3256 [inline] RIP: 0010:sched_mm_cid_remote_clear+0x374/0x4f0 kernel/sched/core.c:11874 Code: 00 e9 48 fe ff ff 4d 85 ed 89 44 24 48 0f 84 52 ff ff ff e8 6e d6 36 00 9c 58 f6 c4 02 0f 85 41 01 00 00 fb e9 47 ff ff ff 90 <0f> 0b 90 e9 0b ff ff ff e8 af 03 16 00 84 c0 0f 85 d6 fd ff ff e8 RSP: 0000:ffffc9000388fcf8 EFLAGS: 00010006 RAX: 000000000000000c RBX: ffffe8ffad353548 RCX: ffffffff815f0578 RDX: 00000000ffffffff RSI: 0000000000000004 RDI: ffffc9000388fd40 RBP: ffff888020d208c8 R08: 0000000000000001 R09: fffff52000711fa8 R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92000711fa0 R13: 0000000000000200 R14: ffffc9000388fd40 R15: ffff88802c33ec00 FS: 0000000000000000(0000) GS:ffff88802c100000(0063) knlGS:00000000f5ec0b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00000000ee1d4000 CR3: 0000000054aae000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: sched_mm_cid_remote_clear_old kernel/sched/core.c:11907 [inline] task_mm_cid_work+0x39a/0x920 kernel/sched/core.c:11957 task_work_run+0x14e/0x250 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] irqentry_exit_to_user_mode+0x259/0x280 kernel/entry/common.c:231 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0023:0xf72e06de Code: 24 0c 8d 14 07 39 56 04 72 60 8d 57 ff 85 ff 74 3a 89 5c 24 14 8d b4 26 00 00 00 00 39 c8 72 1c 8b 1e 89 c7 29 cf 89 5c 24 0c <0f> b6 1c 3b 84 db 74 0a 8b 7c 24 0c 88 1c 07 8b 46 08 83 c0 01 89 RSP: 002b:00000000f5ebfb10 EFLAGS: 00010206 RAX: 0000000000734001 RBX: 00000000edaa0000 RCX: 0000000000000001 RDX: 000000000000007f RSI: 00000000f5ebfc10 RDI: 0000000000734000 RBP: 00000000f5ebfb84 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 24 0c and $0xc,%al 2: 8d 14 07 lea (%rdi,%rax,1),%edx 5: 39 56 04 cmp %edx,0x4(%rsi) 8: 72 60 jb 0x6a a: 8d 57 ff lea -0x1(%rdi),%edx d: 85 ff test %edi,%edi f: 74 3a je 0x4b 11: 89 5c 24 14 mov %ebx,0x14(%rsp) 15: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi 1c: 39 c8 cmp %ecx,%eax 1e: 72 1c jb 0x3c 20: 8b 1e mov (%rsi),%ebx 22: 89 c7 mov %eax,%edi 24: 29 cf sub %ecx,%edi 26: 89 5c 24 0c mov %ebx,0xc(%rsp) * 2a: 0f b6 1c 3b movzbl (%rbx,%rdi,1),%ebx <-- trapping instruction 2e: 84 db test %bl,%bl 30: 74 0a je 0x3c 32: 8b 7c 24 0c mov 0xc(%rsp),%edi 36: 88 1c 07 mov %bl,(%rdi,%rax,1) 39: 8b 46 08 mov 0x8(%rsi),%eax 3c: 83 c0 01 add $0x1,%eax 3f: 89 .byte 0x89