Bit find operations return past the end on failure.

kernel/pid.c

@@ -131,7 +131,7 @@ int alloc_pidmap(void)
 	 */
 scan_more:
 	offset = find_next_zero_bit(map->page, BITS_PER_PAGE, offset);
-	if (offset == BITS_PER_PAGE)
+	if (offset >= BITS_PER_PAGE)
 		goto next_map;
 	if (test_and_set_bit(offset, map->page))
 		goto scan_more;

kernel/sched.c

@@ -770,7 +770,7 @@ static void load_balance(runqueue_t *this_rq, int idle)
 		idx = sched_find_first_bit(array->bitmap);
 	else
 		idx = find_next_bit(array->bitmap, MAX_PRIO, idx);
-	if (idx == MAX_PRIO) {
+	if (idx >= MAX_PRIO) {
 		if (array == busiest->expired) {
 			array = busiest->active;
 			goto new_array;