------------[ cut here ]------------
WARNING: CPU: 0 PID: 5109 at kernel/kthread.c:83 to_kthread kernel/kthread.c:83 [inline]
WARNING: CPU: 0 PID: 5109 at kernel/kthread.c:83 kthread_is_per_cpu+0xc4/0xf0 kernel/kthread.c:519
Modules linked in:
CPU: 0 PID: 5109 Comm: syz-executor.3 Not tainted 5.10.56 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:to_kthread kernel/kthread.c:83 [inline]
RIP: 0010:kthread_is_per_cpu+0xc4/0xf0 kernel/kthread.c:519
Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 2e 4c 8b 23 41 83 e4 01 e8 69 8e 23 00 44 89 e0 5b 5d 41 5c c3 e8 5c 8e 23 00 <0f> 0b eb 88 e8 f3 bf 4e 00 e9 68 ff ff ff e8 f9 bf 4e 00 eb 9a 48
RSP: 0018:ffff88806ce09c20 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff888044d5b280 RCX: ffffffff811bf77c
RDX: ffff888044d5cbc0 RSI: ffffffff811bf7f4 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000001 R09: ffff888044d5b280
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044d5b328
R13: ffff88806ce09da8 R14: ffff88806ce09da8 R15: ffff888044d5b280
FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe520c1d60 CR3: 0000000041af4000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 can_migrate_task+0x90/0xa00 kernel/sched/fair.c:7572
 detach_tasks kernel/sched/fair.c:7720 [inline]
 load_balance+0xa0e/0x2990 kernel/sched/fair.c:9644
 rebalance_domains+0x668/0xe20 kernel/sched/fair.c:10038
 __do_softirq+0x1b8/0x867 kernel/softirq.c:298
 asm_call_irq_on_stack+0x12/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:393 [inline]
 __irq_exit_rcu kernel/softirq.c:423 [inline]
 irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435
 sysvec_apic_timer_interrupt+0x43/0xa0 arch/x86/kernel/apic/apic.c:1095
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:lock_is_held_type+0xd0/0x100 kernel/locking/lockdep.c:5604
Code: 74 12 41 0f b6 47 22 45 31 c0 83 e0 03 44 39 f0 41 0f 94 c0 b8 ff ff ff ff 65 0f c1 05 69 aa 3d 7c 83 f8 01 75 1f ff 34 24 9d <48> 83 c4 08 44 89 c0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 44 89 c0 c3
RSP: 0018:ffff888044d1f5b8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff84df65a0 RDI: ffff888044d5d470
RBP: ffffffff84df65a0 R08: 0000000000000000 R09: ffffffff8544fb4f
R10: fffffbfff0a89f69 R11: 0000000000000001 R12: ffff888044d5cbc0
R13: ffff888044d5d470 R14: 00000000ffffffff R15: ffff888044d5d470
 lock_is_held include/linux/lockdep.h:271 [inline]
 rcu_read_lock_sched_held+0x3a/0x70 kernel/rcu/update.c:123
 trace_lock_acquire include/trace/events/lock.h:13 [inline]
 lock_acquire+0x3f9/0x490 kernel/locking/lockdep.c:5531
 rcu_lock_acquire include/linux/rcupdate.h:256 [inline]
 rcu_read_lock include/linux/rcupdate.h:649 [inline]
 lock_page_memcg+0x65/0x260 mm/memcontrol.c:2140
 page_remove_rmap+0x21/0x7c0 mm/rmap.c:1325
 zap_pte_range mm/memory.c:1265 [inline]
 zap_pmd_range mm/memory.c:1380 [inline]
 zap_pud_range mm/memory.c:1409 [inline]
 zap_p4d_range mm/memory.c:1430 [inline]
 unmap_page_range+0xe3c/0x1e30 mm/memory.c:1451
 unmap_single_vma+0x198/0x300 mm/memory.c:1496
 unmap_vmas+0x16d/0x2f0 mm/memory.c:1528
 exit_mmap+0x27f/0x4e0 mm/mmap.c:3220
 __mmput kernel/fork.c:1088 [inline]
 mmput+0xca/0x340 kernel/fork.c:1109
 exit_mm kernel/exit.c:487 [inline]
 do_exit+0xb42/0x2770 kernel/exit.c:798
 do_group_exit+0x125/0x310 kernel/exit.c:908
 get_signal+0x469/0x2200 kernel/signal.c:2758
 arch_do_signal+0x88/0x1b70 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop kernel/entry/common.c:161 [inline]
 exit_to_user_mode_prepare+0xf7/0x160 kernel/entry/common.c:191
 syscall_exit_to_user_mode+0x38/0x230 kernel/entry/common.c:266
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x466609
Code: Unable to access opcode bytes at RIP 0x4665df.
RSP: 002b:00007fa07ddc6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000056c040 RCX: 0000000000466609
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056c040
RBP: 000000000056c038 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c044
R13: 00007ffe2f19503f R14: 00007fa07ddc6300 R15: 0000000000022000
irq event stamp: 323
hardirqs last  enabled at (322): [<ffffffff83e00ce2>] asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:643
hardirqs last disabled at (323): [<ffffffff83c5e25b>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (323): [<ffffffff83c5e25b>] _raw_spin_lock_irqsave+0x4b/0x50 kernel/locking/spinlock.c:159
softirqs last  enabled at (298): [<ffffffff83e00f92>] asm_call_irq_on_stack+0x12/0x20
softirqs last disabled at (315): [<ffffffff83e00f92>] asm_call_irq_on_stack+0x12/0x20
---[ end trace a4319a7e319d6927 ]---

======================================================