do_el0_svc_compat+0x40/0x68 arch/arm64/kernel/syscall.c:157 el0_svc_compat+0x4c/0x17c arch/arm64/kernel/entry-common.c:887 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:897 el0t_32_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:605 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 __ll_sc_atomic_fetch_sub_release arch/arm64/include/asm/atomic_ll_sc.h:96 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 raw_atomic_fetch_sub_release include/linux/atomic/atomic-arch-fallback.h:944 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:401 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 __refcount_sub_and_test include/linux/refcount.h:389 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 __refcount_dec_and_test include/linux/refcount.h:432 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 refcount_dec_and_test include/linux/refcount.h:450 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 landlock_put_hierarchy security/landlock/domain.h:164 [inline] WARNING: CPU: 1 PID: 11580 at security/landlock/domain.h:133 free_ruleset+0x208/0x250 security/landlock/ruleset.c:490 Modules linked in: CPU: 1 UID: 0 PID: 11580 Comm: syz.3.2775 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : landlock_free_hierarchy_details security/landlock/domain.h:133 [inline] pc : landlock_put_hierarchy security/landlock/domain.h:168 [inline] pc : free_ruleset+0x208/0x250 security/landlock/ruleset.c:490 lr : landlock_put_hierarchy security/landlock/domain.h:167 [inline] lr : free_ruleset+0x190/0x250 security/landlock/ruleset.c:490 sp : ffff80008fc57c90 x29: ffff80008fc57c90 x28: 0000000000000000 x27: ffff000017706d80 x26: 0000000000000000 x25: ffff000017706c20 x24: 00000000ffffffff x23: 0000000000000001 x22: 1fffe00002ee0d84 x21: dfff800000000000 x20: ffff000016e33500 x19: ffff000017706c00 x18: 0000000000000000 x17: 70202c31206c6176 x16: 7265746e69202c62 x15: 0000000000000002 x14: 0000000000000000 x13: 0000000000008000 x12: ffff600002ee0d82 x11: 1fffe00002ee0d81 x10: ffff600002ee0d81 x9 : dfff800000000000 x8 : ffff000017706c0b x7 : 0000000000000001 x6 : ffff600002ee0d81 x5 : ffff000017706c08 x4 : ffff600002ee0d82 x3 : 1ffff00011a1fbe8 x2 : 0000000000000004 x1 : 0000000000000003 x0 : 0000000000000000 Call trace: __ll_sc_atomic_fetch_sub_release arch/arm64/include/asm/atomic_ll_sc.h:96 [inline] (P) arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline] (P) raw_atomic_fetch_sub_release include/linux/atomic/atomic-arch-fallback.h:944 [inline] (P) atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:401 [inline] (P) __refcount_sub_and_test include/linux/refcount.h:389 [inline] (P) __refcount_dec_and_test include/linux/refcount.h:432 [inline] (P) refcount_dec_and_test include/linux/refcount.h:450 [inline] (P) landlock_put_hierarchy security/landlock/domain.h:164 [inline] (P) free_ruleset+0x208/0x250 security/landlock/ruleset.c:490 (P) landlock_put_ruleset security/landlock/ruleset.c:498 [inline] landlock_put_ruleset security/landlock/ruleset.c:494 [inline] __free_landlock_put_ruleset security/landlock/ruleset.h:200 [inline] landlock_merge_ruleset+0x54c/0x674 security/landlock/ruleset.c:534 __do_sys_landlock_restrict_self security/landlock/syscalls.c:549 [inline] __se_sys_landlock_restrict_self security/landlock/syscalls.c:479 [inline] __arm64_sys_landlock_restrict_self+0x1d8/0x6ac security/landlock/syscalls.c:479 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc_compat+0x40/0x68 arch/arm64/kernel/syscall.c:157 el0_svc_compat+0x4c/0x17c arch/arm64/kernel/entry-common.c:887 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:897 el0t_32_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:605 irq event stamp: 242 hardirqs last enabled at (241): [] dump_stack_lvl+0xe4/0xf4 lib/dump_stack.c:123 hardirqs last disabled at (242): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (194): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (194): [] handle_softirqs+0x88c/0xdb4 kernel/softirq.c:607 softirqs last disabled at (179): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]---