=====================================
WARNING: bad unlock balance detected!
syzkaller #0 Tainted: G             L      
-------------------------------------
syz-executor/5649 is trying to release lock (&ni->ni_lock) at:
[<ffffffff833f3e28>] ni_unlock fs/ntfs3/ntfs_fs.h:1266 [inline]
[<ffffffff833f3e28>] ntfs_readdir+0xac8/0xf00 fs/ntfs3/dir.c:625
but there are no more locks to release!

other info that might help us debug this:
locks held by syz-executor/5649: 2, last CPU#1:
 #0: ffff88802d9d30b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 fs/file.c:1409
 #1: ffff888076f65f60 (&type->i_mutex_dir_key#14){++++}-{4:4}, at: iterate_dir+0x287/0x880 fs/readdir.c:106

stack backtrace:
CPU: 1 UID: 0 PID: 5649 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_unlock_imbalance_bug+0xdc/0xf0 kernel/locking/lockdep.c:5349
 __lock_release kernel/locking/lockdep.c:5590 [inline]
 lock_release+0x252/0x3c0 kernel/locking/lockdep.c:5964
 __mutex_unlock_slowpath+0x88/0x900 kernel/locking/mutex.c:989
 ni_unlock fs/ntfs3/ntfs_fs.h:1266 [inline]
 ntfs_readdir+0xac8/0xf00 fs/ntfs3/dir.c:625
 iterate_dir+0x3db/0x880 fs/readdir.c:114
 __do_sys_getdents64 fs/readdir.c:404 [inline]
 __se_sys_getdents64+0xf1/0x280 fs/readdir.c:389
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2424fc7ef3
Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
RSP: 002b:00007fff10ee3818 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 000055558bb56a50 RCX: 00007f2424fc7ef3
RDX: 0000000000008000 RSI: 000055558bb56a80 RDI: 0000000000000005
RBP: 000055558bb56a80 R08: 00007f24251f9e20 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000293 R12: 000055558bb56a54
R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff10ee5ac0
 </TASK>
ntfs3(loop1): ino=5, "/" ntfs_readdir