Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4161 Comm: syz.3.4 Not tainted 5.15.189-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
pc : get_futex_value_locked kernel/futex/core.c:793 [inline]
pc : futex_requeue+0x5ac/0x1838 kernel/futex/core.c:2226
lr : __uaccess_mask_ptr arch/arm64/include/asm/uaccess.h:239 [inline]
lr : get_futex_value_locked kernel/futex/core.c:790 [inline]
lr : futex_requeue+0x588/0x1838 kernel/futex/core.c:2226
sp : ffff80001feb76e0
x29: ffff80001feb7840 x28: 1fffe00019d3dce1 x27: ffff0000ce9ee708
x26: dfff800000000000 x25: ffff0000ce9ed1e4 x24: 0000000000000000
x23: 1fffe00019d3da3c x22: ffff0000ce9ed1c0 x21: 0000000000000058
x20: ffff0000c0d30000 x19: 00000000fffffff2 x18: 0000000000000000
x17: 0000000000000000 x16: ffff8000083c25fc x15: 000000003f65bfc5
x14: 00000000c9d68ac1 x13: 1ffff0000282e06b x12: 0000000000080000
x11: 0000ffffffffffff x10: 0000000000000000 x9 : 0000000000000000
x8 : 0000000000000000 x7 : ffff8000083c24d8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d608c
x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 get_futex_value_locked kernel/futex/core.c:790 [inline]
 futex_requeue+0x5ac/0x1838 kernel/futex/core.c:2226
 do_futex+0xb88/0x257c kernel/futex/core.c:-1
 __do_sys_futex kernel/futex/core.c:4059 [inline]
 __se_sys_futex kernel/futex/core.c:4040 [inline]
 __arm64_sys_futex+0x388/0x400 kernel/futex/core.c:4040
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: d503229f b94083e0 2a0003f3 b8400918 (2a1303e1) 
---[ end trace 575cc98ea55b6bca ]---
----------------
Code disassembly (best guess):
   0:	d503229f 	csdb
   4:	b94083e0 	ldr	w0, [sp, #128]
   8:	2a0003f3 	mov	w19, w0
   c:	b8400918 	ldtr	w24, [x8]
* 10:	2a1303e1 	mov	w1, w19 <-- trapping instruction