sched/core: Fix use-after-free bug in dup_user_cpus_ptr()