------------[ cut here ]------------
WARNING: CPU: 0 PID: 5322 at arch/x86/mm/tlb.c:515 switch_mm_irqs_off+0x890/0xbc0 arch/x86/mm/tlb.c:515
Modules linked in:
CPU: 0 PID: 5322 Comm: syz-executor.1 Not tainted 6.9.0-rc2-syzkaller-00042-g3e92c1e6cd87 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:switch_mm_irqs_off+0x890/0xbc0 arch/x86/mm/tlb.c:515
Code: ff 44 8d 6b 02 48 63 d3 49 8d 8e 18 06 00 00 4d 63 ed 49 c1 e5 04 4d 8d 8d c0 d8 03 00 49 81 c5 c8 d8 03 00 e9 75 fd ff ff 90 <0f> 0b 90 e9 e3 f7 ff ff 90 0f 0b 90 e8 df f5 ff ff e9 20 f8 ff ff
RSP: 0000:ffffc90004007838 EFLAGS: 00010202
RAX: 0000000000000286 RBX: ffff888019810000 RCX: ffff8880253cd580
RDX: 1ffff11004a79b8a RSI: ffffffff8b6f0fa0 RDI: ffffffff8b6f0fe0
RBP: ffff8880253caf80 R08: 0000000000000000 R09: ffffed1004a79ac9
R10: ffff8880253cd64b R11: 0000000000000001 R12: ffff88802c23f500
R13: ffff88801ef32440 R14: ffff8880253cd580 R15: ffff88802c23ea80
FS:  0000000000000000(0000) GS:ffff88802c200000(0063) knlGS:000000005740b400
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f73e0b24 CR3: 000000005df9a000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5393 [inline]
 __schedule+0xd2b/0x5d00 kernel/sched/core.c:6746
 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6925
 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:12
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock_irqrestore+0x61/0x80 kernel/locking/spinlock.c:194
 copy_process+0x450e/0x6f00 kernel/fork.c:2498
 kernel_clone+0xfd/0x980 kernel/fork.c:2796
 __do_sys_clone3+0x1f5/0x270 kernel/fork.c:3097
 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]
 int80_emulation+0x10b/0x200 arch/x86/entry/common.c:253
 asm_int80_emulation+0x1a/0x20 arch/x86/include/asm/idtentry.h:626
RIP: 0023:0xf739e090
Code: 4c 24 04 85 c9 0f 84 df 0d fe ff 8b 54 24 0c 85 d2 0f 84 d3 0d fe ff 53 56 8b 74 24 18 89 cb 8b 4c 24 10 b8 b3 01 00 00 cd 80 <85> c0 74 09 5e 5b 0f 8c b4 0d fe ff c3 31 ed 83 e4 f0 83 ec 0c 56
RSP: 002b:00000000ffb0ac24 EFLAGS: 00000282 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 00000000ffb0ac90 RCX: 0000000000000058
RDX: 00000000f734eee0 RSI: 00000000f5f0eb40 RDI: 00000000ffffffd8
RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	4c 24 04             	rex.WR and $0x4,%al
   3:	85 c9                	test   %ecx,%ecx
   5:	0f 84 df 0d fe ff    	je     0xfffe0dea
   b:	8b 54 24 0c          	mov    0xc(%rsp),%edx
   f:	85 d2                	test   %edx,%edx
  11:	0f 84 d3 0d fe ff    	je     0xfffe0dea
  17:	53                   	push   %rbx
  18:	56                   	push   %rsi
  19:	8b 74 24 18          	mov    0x18(%rsp),%esi
  1d:	89 cb                	mov    %ecx,%ebx
  1f:	8b 4c 24 10          	mov    0x10(%rsp),%ecx
  23:	b8 b3 01 00 00       	mov    $0x1b3,%eax
  28:	cd 80                	int    $0x80
* 2a:	85 c0                	test   %eax,%eax <-- trapping instruction
  2c:	74 09                	je     0x37
  2e:	5e                   	pop    %rsi
  2f:	5b                   	pop    %rbx
  30:	0f 8c b4 0d fe ff    	jl     0xfffe0dea
  36:	c3                   	ret
  37:	31 ed                	xor    %ebp,%ebp
  39:	83 e4 f0             	and    $0xfffffff0,%esp
  3c:	83 ec 0c             	sub    $0xc,%esp
  3f:	56                   	push   %rsi