================================================
WARNING: lock held when returning to user space!
6.18.0-rc7-next-20251128 #1 Not tainted
------------------------------------------------
syz-executor.0/15448 is leaving the kernel with locks still held!
1 lock held by syz-executor.0/15448:
 #0: ffff88800b120848 (&sb->s_type->i_mutex_key#20/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
loop1: detected capacity change from 0 to 596
EXT4-fs (loop1): revision level too high, forcing read-only mode
EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
mac80211_hwsim hwsim17 wlan1: left promiscuous mode
loop2: detected capacity change from 0 to 10
EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
FAT-fs (loop2): Directory bread(block 10) failed
FAT-fs (loop2): Directory bread(block 11) failed
FAT-fs (loop2): Directory bread(block 10) failed
FAT-fs (loop2): Directory bread(block 11) failed
FAT-fs (loop2): Directory bread(block 10) failed
FAT-fs (loop2): Directory bread(block 11) failed
mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
mac80211_hwsim hwsim17 wlan1: left promiscuous mode
loop1: detected capacity change from 0 to 596
EXT4-fs (loop1): revision level too high, forcing read-only mode
EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.