do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151
 el0_svc+0x30/0xe0 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762
 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:600
------------[ cut here ]------------
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 __ll_sc_atomic_fetch_sub_release arch/arm64/include/asm/atomic_ll_sc.h:96 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 raw_atomic_fetch_sub_release include/linux/atomic/atomic-arch-fallback.h:944 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:401 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 __refcount_sub_and_test include/linux/refcount.h:389 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 __refcount_dec_and_test include/linux/refcount.h:432 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 refcount_dec_and_test include/linux/refcount.h:450 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 landlock_put_hierarchy security/landlock/domain.h:164 [inline]
WARNING: CPU: 0 PID: 25752 at security/landlock/domain.h:133 free_ruleset+0x144/0x174 security/landlock/ruleset.c:490
Modules linked in:
CPU: 0 UID: 0 PID: 25752 Comm: syz.1.7541 Not tainted 6.15.0-rc1-syzkaller-00338-g004a365eb8b9 #0 PREEMPT 
Hardware name: linux,dummy-virt (DT)
pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : landlock_free_hierarchy_details security/landlock/domain.h:133 [inline]
pc : landlock_put_hierarchy security/landlock/domain.h:168 [inline]
pc : free_ruleset+0x144/0x174 security/landlock/ruleset.c:490
lr : landlock_put_hierarchy security/landlock/domain.h:167 [inline]
lr : free_ruleset+0xdc/0x174 security/landlock/ruleset.c:490
sp : ffff80008358bd30
x29: ffff80008358bd30 x28: f4f00000076e1240 x27: 0000000000000000
x26: 0000000000000000 x25: f7f00000051c4a80 x24: f8f0000003cd9b58
x23: 00000000ffffffff x22: 0000000000000001 x21: f8f0000003cd9b40
x20: f8f0000003cd9b40 x19: fcf000000993cf80 x18: 00000000fffffffd
x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008358b270
x14: 00000000ffffffea x13: ffff80008358b808 x12: ffff8000829a0b88
x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8
x8 : f4f00000076e1240 x7 : ffff80008358bfd8 x6 : 00000000000affa8
x5 : fff000007f8ca588 x4 : ffff80008358c000 x3 : 0000000000000000
x2 : f8f0000003cd9b78 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 __ll_sc_atomic_fetch_sub_release arch/arm64/include/asm/atomic_ll_sc.h:96 [inline] (P)
 arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline] (P)
 raw_atomic_fetch_sub_release include/linux/atomic/atomic-arch-fallback.h:944 [inline] (P)
 atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:401 [inline] (P)
 __refcount_sub_and_test include/linux/refcount.h:389 [inline] (P)
 __refcount_dec_and_test include/linux/refcount.h:432 [inline] (P)
 refcount_dec_and_test include/linux/refcount.h:450 [inline] (P)
 landlock_put_hierarchy security/landlock/domain.h:164 [inline] (P)
 free_ruleset+0x144/0x174 security/landlock/ruleset.c:490 (P)
 landlock_put_ruleset security/landlock/ruleset.c:498 [inline]
 landlock_put_ruleset security/landlock/ruleset.c:494 [inline]
 __free_landlock_put_ruleset security/landlock/ruleset.h:200 [inline]
 landlock_merge_ruleset+0x210/0x440 security/landlock/ruleset.c:534
 __do_sys_landlock_restrict_self security/landlock/syscalls.c:549 [inline]
 __se_sys_landlock_restrict_self security/landlock/syscalls.c:479 [inline]
 __arm64_sys_landlock_restrict_self+0xb0/0x250 security/landlock/syscalls.c:479
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49
 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151
 el0_svc+0x30/0xe0 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762
 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:600
---[ end trace 0000000000000000 ]---