syzbot

(syz.1.250,5331,1):ocfs2_read_blocks:240 ERROR: status = -12
=====================================
WARNING: bad unlock balance detected!
5.15.167-syzkaller #0 Not tainted
-------------------------------------
syz.1.250/5331 is trying to release lock (&oi->ip_io_mutex) at:
[<ffff800009e04358>] ocfs2_inode_cache_io_unlock+0x20/0x30 fs/ocfs2/inode.c:1648
but there are no more locks to release!

other info that might help us debug this:
1 lock held by syz.1.250/5331:
 #0: ffff0000d48060e0 (&type->s_umount_key#58/1){+.+.}-{3:3}, at: alloc_super+0x1b8/0x844 fs/super.c:229

stack backtrace:
CPU: 1 PID: 5331 Comm: syz.1.250 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call trace:
 dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x58 lib/dump_stack.c:113
 print_unlock_imbalance_bug+0x250/0x2a4 kernel/locking/lockdep.c:5065
 lock_release+0x4b8/0xa1c kernel/locking/lockdep.c:5643
 __mutex_unlock_slowpath+0xe0/0x6d4 kernel/locking/mutex.c:851
 mutex_unlock+0x8c/0xe0 kernel/locking/mutex.c:536
 ocfs2_inode_cache_io_unlock+0x20/0x30 fs/ocfs2/inode.c:1648
 ocfs2_metadata_cache_io_unlock+0x6c/0x90 fs/ocfs2/uptodate.c:95
 ocfs2_read_blocks+0x1114/0x1628 fs/ocfs2/buffer_head_io.c:394
 ocfs2_map_slot_buffers fs/ocfs2/slot_map.c:385 [inline]
 ocfs2_init_slot_info+0x8d0/0x11d4 fs/ocfs2/slot_map.c:424
 ocfs2_initialize_super fs/ocfs2/super.c:2300 [inline]
 ocfs2_fill_super+0x3a54/0x498c fs/ocfs2/super.c:995
 mount_bdev+0x274/0x370 fs/super.c:1398
 ocfs2_mount+0x44/0x58 fs/ocfs2/super.c:1187
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:611
 vfs_get_tree+0x90/0x274 fs/super.c:1528
 do_new_mount+0x278/0x8fc fs/namespace.c:3005
 path_mount+0x594/0x101c fs/namespace.c:3335
 do_mount fs/namespace.c:3348 [inline]
 __do_sys_mount fs/namespace.c:3556 [inline]
 __se_sys_mount fs/namespace.c:3533 [inline]
 __arm64_sys_mount+0x510/0x5e0 fs/namespace.c:3533
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
(syz.1.250,5331,0):ocfs2_map_slot_buffers:388 ERROR: status = -12
(syz.1.250,5331,0):ocfs2_init_slot_info:426 ERROR: status = -12
(syz.1.250,5331,0):ocfs2_initialize_super:2302 ERROR: status = -12
(syz.1.250,5331,0):ocfs2_fill_super:1177 ERROR: status = -12